41
How does tiktok "know" my network, if I am always behind VPN and no account? (lemmy.dbzer0.com)
submitted 1 week ago by just_an_average_joe@lemmy.dbzer0.com to c/privacy@lemmy.dbzer0.com
18 comments fedilink hide all child comments

So I decided to use my really old pixel 3a as a test of sorts. It has calyxos, with always on VPN (surfshark). I have no accounts on it, google or anything else. I usually use it for streamio or tiktok.

But I have noticed that I am still getting video recommendations based on what my flatmate watches (we share an internet router). Or what I watch on my other non-VPNed devices.

So what gives?

I am looking for an explanation as to why its happening, not just how to fix it. Btw I also use private DNS so dns leaking is not the likely culprit.

Anyone knows how to debug this info leak?

you are viewing a single comment's thread
view the rest of the comments
[-] Sophocles@infosec.pub 8 points 6 days ago

I found that apps and browsers could fingerprint me with aspect ratio alone. For me it was DuckDuckGo giving me localized results; I'm pretty sure both apps and browsers can get this info very easily. I'm sure Tiktok can fingerprint your phone with very few information points, especially if it's an app running on your phone, if not a simple website on your browser.

You might be able to get around fingerprinting if you use a firefox fork like Iceraven or Fennec, install ublock origin and privacy badger, and browse via the website, but even there they may have enough information points to fingerprint you. Megacorps like TikTok and Meta bend over backwards to get your info

this post was submitted on 18 Aug 2025
41 points (100.0% liked)

Privacy

3615 readers
83 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

  1. Be civil and no prejudice
  2. Don't promote big-tech software
  3. No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
  4. No reposting of news that was already posted
  5. No crypto, blockchain, NFTs
  6. No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 9 months ago
MODERATORS
fxomt@lemmy.dbzer0.com
otter@lemmy.ca
shaytan@lemmy.dbzer0.com
fxomt@piefed.social