Researchers found Meta (via Pixel) and Russia's Yandex (via Metrica) are exploiting Internet protocols to de-anonymize Android users. They bridge fleeting web identifiers directly to stable mobile app identities, completely bypassing core Android permission controls and Incognito Mode protections.

Commenters detail specific vectors of abuse. 'geneva_convenience' notes Meta Pixel and Yandex Metrica embed tracking code into millions of sites, affecting all major Android browsers. 'otter' points out the mechanism: unique identifiers are surreptitiously sent to native apps using legitimate protocols, bypassing sandboxing. Even 'Hotznplotzn' reports native apps like Facebook and Instagram silently listening on fixed local ports without user consent.

The core consensus is that major tech platforms are using systemic flaws to map browsing activity to permanent user profiles. The fault line is the protocol abuse itself; the consensus positions 'otter's' observation—that this converts ephemeral web data into persistent app data—as the critical failure point.