search

tweaselORG / TrackHAR

Library for detecting tracking data transmissions from traffic in HAR format.
Creative Commons Zero v1.0 Universal
5 stars 0 forks source link

`facebook/graph-activities-qs` requests don't necessarily _start_ with `format=json` #77

Closed baltpeter closed 2 weeks ago

baltpeter commented 1 month ago

format=json can also appear later in the content.

Instances: https://data.tweasel.org/data?sql=select+*+from+requests+where+endpointUrl+like+%27https%3A%2F%2Fgraph.facebook.com%2Fv%25%2F%25%2Factivities%27+and+content+like+%27access%25%27%3B

Example: monkey-april-2024,1395

access_token=518008856237709%7Ca268aad0c4e7dcd586827c9838186397&format=json&sdk=android&event=MOBILE_APP_INSTALL&anon_id=XZe2e0bbd3-1cd2-47a5-9190-3dd67e4b0f56&application_tracking_enabled=true&advertiser_id_collection_enabled=true&advertiser_id=830ec0b3-e94e-43e5-8722-a3a428af37bb&advertiser_tracking_enabled=true&extinfo=%5B%22a2%22%2C%22app.prematch%22%2C4845%2C%222.0.28%22%2C%2211%22%2C%22sdk_gphone_x86_64%22%2C%22en_US%22%2C%22%22%2C%22NoCarrier%22%2C1080%2C2148%2C%222.75%22%2C2%2C-1%2C-1%2C%22%22%5D&application_package_name=app.prematch&
baltpeter commented 1 month ago

Not exactly an earth-shattering improvement with 425 vs. 412 matched requests, but still…