Fauxx is an open-source Android privacy tool that poisons data broker and ad-tech profiles by generating continuous, plausible, off-demographic synthetic activity from your device. The goal is simple: make your real behavioral signal statistically indistinguishable from noise.

Not my project, but though this is really cool and worth sharing.

  • leoj@piefed.zip
    link
    fedilink
    English
    arrow-up
    13
    ·
    20 days ago

    I wonder if you could set up a second phone that is logged in with all your accounts, then use it for FAUXX, currently concerned about battery usage / background usage of device.

    Like, does it need to be running continuously ALL DAY to effectively poison? Or is sometimes usage helpful? Second phone idea solid?

    Anyone understand the data collection better have thoughts?

    • Em Adespoton@lemmy.ca
      cake
      link
      fedilink
      arrow-up
      18
      ·
      20 days ago

      This method wouldn’t combat device fingerprinting, so it would be trivial for everyone but the aggregate data brokers to filter out as noise.

      For a strategy like this to work, your legitimate traffic needs to be indistinguishable from the random traffic.

      • leoj@piefed.zip
        link
        fedilink
        English
        arrow-up
        6
        ·
        20 days ago

        So basically it has to be running while you’re using it, and on the device your primarily use?

        • f3nyx@lemmy.ml
          link
          fedilink
          arrow-up
          4
          ·
          20 days ago

          not necessarily. if ‘you’ are sending traffic, i (someone interested in your data) don’t really care where it comes from. Em is correct that it’s trivial to filter out, but it’s also another data point that is interesting and potentially relevant for them, so in practice they won’t.

          tracking has gotten to the point where they can infer connections based off of users that have no interaction but otherwise share a location for a period of time (think coffee shop wifi, work). you have things in common with those people. maybe not a lot, but enough to be relevant in someone’s dataset somewhere.

          so no, it doesn’t have to be running on your primary device to be relevant. i’d argue that it simply being on your home network would be enough.

  • Runecrush376@lemmy.world
    link
    fedilink
    arrow-up
    9
    ·
    20 days ago

    I just found this app on droidify, really cool idea. Id love to see something similar on Linux. (imnotsure if something like that already exists)

  • acido@feddit.it
    link
    fedilink
    arrow-up
    8
    ·
    19 days ago

    started using it today, it still is in early stages of development and it’s pretty bugged, but it’s very cool.

    the main doubt I have now is if it would be more useful of you could fake activity coherent with your location, for example, because being in EU and faking visits to US gov sites doesn’t exactly sound as stealth.

    I could be wrong though.

  • racoon@lemmy.ml
    link
    fedilink
    arrow-up
    7
    ·
    19 days ago

    Isn’t it easier to browse with JavaScript off whenever possible and with uBlock origin?

    • hexagonwin@lemmy.today
      link
      fedilink
      arrow-up
      8
      ·
      19 days ago

      it’s a difference approach, OP maximizes the data being harvested to make it harder to tell what the real usage data is, turning off javascript minimizes the data being collected but potentially makes you unique and stand out among other vanilla users

    • acido@feddit.it
      link
      fedilink
      arrow-up
      6
      ·
      19 days ago

      just as an FYI, having JavaScript off potentially adds to your fingerprint.

      • racoon@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        18 days ago

        Everything adds to my fingerprint. Nothing minuses to it. No matter what i tried

  • MonkderVierte@lemmy.zip
    link
    fedilink
    arrow-up
    6
    ·
    edit-2
    18 days ago

    Ok, but how does it work? Not the faux data generation part detailed on the git (which OP didn’t link btw) but how it injects/intercepts the data.
    There are magisk modules for this kind of thing, because what can be faked is severely limited without the ability to mess with other apps or the system.

    Does it put a local VPN or what?

  • comrade_twisty@feddit.org
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    19 days ago

    This is great! I wanted something like this for a long time.

    Any suggestions for something similar that runs on a linux desktop?

    I used TrackMeNot extension for Firefox in the past, but it has been abandoned and not updated in close to 10 years.