Covert Web-to-App Tracking via Localhost on Android(localmess.github.io)
437 points by sebastian_z | 290 comments
Disclosure site describing how Meta and Yandex apps on Android listened on localhost ports to link mobile web browsing to app user identities.