Hacker Newsnew | past | comments | ask | show | jobs | submit | ecabuk's commentslogin

Just using GMail could help Google to find your approx. location 7/24. Your phone checking emails all the time, so google knows your ip.


IPV4 geolocation is based on maintained databases (e.g. Ma Mind) that usually are city or street accurate.

The popular rhetoric that having an IP is having the location is most often wrong unless Your users have static IPs registered to them. The way law enforcement does it is by subpoening the owner of the IP of pointing to the user associated with the IP at specific time but that still is prone to errors because of NATs - many distinct clients behind a single address.

All in all fingerprinting is using IPs pretty rarely nowadays.


If other devices in your network send data to Google, the network is uniquely identifiable by Google, no matter what individual devices of guests etc. do.


CGNAT means sometimes an IP just identifies an entire ISP and nothing more.


The combination of occasional GPS/Wifi location data and continuous IP data is pretty powerful though.


There's a setting hidden away in android allowing apps to scan local wifi/bluetooth networks even when wifi is turned "off". Enabled by default of course.


What settings is that?


Settings > Location > Improve Accuracy

2 settings, one for Wi-Fi scanning and one for Bluetooth


Security & Location -> Privacy -> Location -> Scanning

(Supposedly; I don't own an up-to-date Android device.)


I bet Google can do better job than the MaxMind but even the city accuracy isn’t that enough? I think it is enough to effect your localized ads.


Phones actually use push services (Googles FCM and Apples APNS among others) to get notifications. They don't really "check email" like your desktop PC does with a cron job.

Having said that, both Apple APNS and Google FCM do send regular heartbeat to their respective servers which make your positional tracking possible by both companies.


Not just your current location, but where you've been and where you will be going. If you are traveling, moving, changing jobs, etc, you probably had some interaction via emails.

If you had access to a significant portion of a country/world's emails, imagine the power you truly have.


Behind a CGNAT, which most mobiles devices are, makes that point fairly moot. When I look up "my ip" on the phone it's always in a capital city 6 hours away.

Your mileage may vary of course.


There are only three mobile carriers in the US, which means at most three organizations controlling the CGNATs. I can assure you that they are selling the reverse port-to-user mapping to the highest bidders.


Don't know much about US carriers apart from brief interactions but I thought it was clear they were selling that data to 3rd parties for years and then got Government blessing to do it after being called out?

Seems insane to me, it's one of those thing you take for granted elsewhere, yeah of course my mobile ISP knows my location, as does the govt if they ask the ISP in an email, that's fine. (Quite sure most carriers have no qualms just handing it over on request)

But just selling that info for cents to any third party seems so utterly egregious and a massive betrayal of consumer trust.


Why would they sell to the highest bidder? The make more money from non-exclusive sales.


>I can assure you that they are selling the reverse port-to-user mapping to the highest bidders.

Based on what evidence?


> Your phone checking emails all the time

I turned off mail sync, I only trigger it manually, so there is a way to avoid the constant checking.


I have a similar story with Github. I filled the website field on the Github repo settings. The project was new and the end was not near and didn't register the domain. After a year or so decided to register but figured that the domain is already registered a month ago. I can't prove it but somebody in Github could have been checked website domains if it is already registered. (Or I was unlucky) The domain was never used and released after 2 years. The lesson here is: register your domain when you have a chance.


My builds are failing because it cannot download the chromium.

> Error: Download failed: server returned code 502. URL: https://storage.googleapis.com/chromium-browser-snapshots/Li...


I haven’t knew that Pro account is required to host static content for private repos. It’s better move to gitlab because my student pro account going to end soon.


> Why? Same exact reason, just on the software side. In both cases. Where did you find developers? You found them on Windows and on Linux, because that's what developers had access to. When those workloads grew up to be "real" workloads, they continued to be run on Windows and Linux, they weren't moved over to Unix platforms even if that would have been fairly easy in the Linux case.

There are lots of developers who developing on MacOS so why BSD server usage is very low than?


Nice idea but don’t email providers have hard limits on daily sent emails?


Never heard of such a thing. Do they?


Lava cannot melt ice? :D


He’s smart. If he doesn’t use computers, nobody can hack him.


Why microsoft developing an Iphone app?


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: