A comprehensive guide to tracker protection on Android
summary
Claims a working system that blocks trackers from any app by combining a crawled tracker dataset and Android APIs, with a root certificate + MITM capture for analysis and a runtime VPN that uses netguard/native TCP interception to identify app UIDs and drop or surrogate requests. Finds surprising scale — ~90% of apps/sites track users and hundreds to thousands of tracker endpoints per app; implements surrogates to avoid breakage, cookie exceptions for Google login, and a closed beta showing practical limits (single VPN constraint, some preinstalled apps opaque).
AI-written summary · about
chapters (15)
- 0:00Tracker protection on Android
- 1:03What are trackers
- 3:10Tracker types and risks
- 5:58Web vs app trackers
- 8:09How trackers profile you
- 10:55Data collection dangers
- 11:58Finding trackers in data
- 13:53Blocking web trackers
- 16:44Managing cookies
- 19:15App tracker protection
- 20:59How it works
- 22:49Identifying calling apps
- 25:45Handling exceptions
- 28:10Protection signals overview
- 30:19Open source and future
related talks
34mSecuring Android: Tackling Advanced Threats and Enhancing App Security
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
27mRemoving Google from smartphones
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
39mAndroid App Security Fundamentals
56mThe Android Security Jungle: Pitfalls, Threats & Survival Tips
45mGoing Beyond Obfuscation: Advanced Techniques for Protecting Android Apps
36mRevisiting Stealthy Sensitive Information Collection from Android Apps