Fauxx
from ArchsageRamases@lemmy.world to privacy@lemmy.ml on 17 May 00:53
https://lemmy.world/post/46958370

Fauxx is an open-source Android privacy tool that poisons data broker and ad-tech profiles by generating continuous, plausible, off-demographic synthetic activity from your device. The goal is simple: make your real behavioral signal statistically indistinguishable from noise.

github.com/digital-grease/fauxx

#privacy

threaded - newest

FauxLiving@lemmy.world on 17 May 05:54 next collapse

Yes? Hello?

crandlecan@mander.xyz on 17 May 12:30 collapse

Who is this please?

FauxLiving@lemmy.world on 17 May 21:39 collapse

You called me, friend. Who is this?

crandlecan@mander.xyz on 17 May 21:50 collapse

May I have a moment to talk about your car insurance? We at Geico can change your life in less than a minute of your time 🙌

FauxLiving@lemmy.world on 17 May 22:01 collapse

<img alt="" src="https://lemmy.world/pictrs/image/0cd97997-619c-4ee4-87ff-abc7fa616aea.gif">

ScoffingLizard@lemmy.dbzer0.com on 17 May 07:40 next collapse

This sounds great.

crandlecan@mander.xyz on 17 May 10:01 next collapse

Oh wow!! You really went above and beyond! Any chance non coders get this on their phone? And does it need a local vpn connection? Or can I keep DuckDuckGo anti app tracking too?

Edit: thanks repliers

whosepoopisonmybuttocks@sh.itjust.works on 17 May 10:28 next collapse

It looks like you can download the most recent apk here

github.com/digital-grease/fauxx/…/v0.2.9

matelt@feddit.uk on 17 May 12:09 collapse

I just got it off F-Droid, dead easy to set up.

guymontag@lemmy.ml on 17 May 10:10 next collapse

Holy shit this tool does way to much. My god

crandlecan@mander.xyz on 17 May 12:30 collapse

Right??!

washington_irving@lemmy.ml on 17 May 10:53 next collapse

The concept is very interesting, I used the app for a while but I don’t get one thing. Why would you want to randomize fingerprints? If the goal is to pollute your profile with random data then it does the exact opposite thing and makes it harder to assosiate the noise with actual user activity.

crandlecan@mander.xyz on 17 May 12:29 collapse

So much noise, you’re just that: noise. It’s all about statistics

washington_irving@lemmy.ml on 17 May 13:46 collapse

yes, but when you spoof fingerprints the only thing connecting the noise generated by the app to the user is then the IP address and ironically the README recommends using it alongside a VPN to hide your IP, which means that the queries made by Fauxx are, like you said, “just noise”, not noise associated with your profile, the noise could as well be generated by any other device

also, I think that the extensive use of LLMs should be stated in the description, not burried in a closed issue, as it is an important matter especially when creating a privacy oriented project

sem@piefed.blahaj.zone on 17 May 13:52 next collapse

Maybe it is because the data brokers will still identify you buy your device fingerprint even when using the vpn

crandlecan@mander.xyz on 17 May 14:34 collapse

Yep. They look at way more than your IP. The one I can’t tackle yet is window sizes… I have asked a dev to see if he can slightly randomize new browser window sizes just for that. Otherwise I have a bunch of anti fingerprint extensions. And I often find myself unable to pass captchas or services because of it. But most of the time, that works. That and using a non-tracking search engine. I like presearch. And their browser on android supports extensions, just like Edge.

crandlecan@mander.xyz on 17 May 14:35 collapse

I like the way you think. That said… presearch.com/search?q=Browser+fingerprinting+too…

washington_irving@lemmy.ml on 17 May 15:33 collapse

Still, browser fingerprints are most commonly used and spoofing them seems counterproductive. If the goal is to maximize confusion about users interests and search history it should mimic actual users’ behavior as closely as possible.

crandlecan@mander.xyz on 17 May 18:49 collapse

You’ve lost me here I’m afraid. Care to elaborate?

washington_irving@lemmy.ml on 17 May 22:50 collapse

ahh, sorry what I meant is that the app shouldn’t randomize identifiers, such as browser fingerprints or even cookies, because the goal is to make the noise associated with the user’s profile, otherwise it’s just random requests and it becomes pointless.

Cherry@piefed.social on 17 May 11:01 next collapse

Where would this be ran at device level or can it be ran at server router level to generate activity at full property/users level?

MidnightMarauder@lemmy.dbzer0.com on 17 May 19:36 collapse

I would love to run this type of software in a container or on my router to spoof my entire home network data traffic. That would be awesome.

crandlecan@mander.xyz on 17 May 21:50 collapse

🫦

SocialistVibes01@lemmy.ml on 17 May 12:17 next collapse

The dev’s doing Che’s work

crandlecan@mander.xyz on 17 May 12:28 collapse

I hope not! But a proper Saint’s work? Absolutely!

SocialistVibes01@lemmy.ml on 17 May 12:35 collapse

Fuck religion. Go away, liberal.

crandlecan@mander.xyz on 17 May 14:30 next collapse

Fauxx isn’t responding for the last half hour when it started to query ad networks what they knew about me. I am using a vpn so maybe if it’s querying that public IP… It might get overloaded. I have a reasonably modern and beefy phone.

Update: and after closing it and starting it again the service starts as disabled, yet the app still crashes with a not responding warning. There is no time to even go into the settings.

BehavioralClam@lemmy.world on 17 May 19:14 next collapse

Any ELI5 on how to run this for someone that is a zero on Android code?

Edit: nvm found the app on F-droid and it just installed and now running it

WhyJiffie@sh.itjust.works on 17 May 22:25 collapse

It’s on fdroid

edit: oh you just edited it

WorldsDumbestMan@lemmy.today on 17 May 19:46 next collapse

Guess it’s almost time to make the jump to all FOSS.

WhyJiffie@sh.itjust.works on 17 May 22:46 next collapse

this seems to be a heavily vibecoded project, the readme has at least one contradiction and weird statements and formatting.

I mean now is it clicking ads or is it not? and what’s the reason for including the “tech stack”?

utjebe@reddthat.com on 17 May 23:48 collapse

It kind of looks good on paper, but this might single you on the other side of a spectrum. Say, now you are that weird user running Firefox on Android - you give out some data, but with adblock you don’t see majority of it. With this tools, you kind of poison the data, but you could still get singled out because the bad guys just have more money to spend.