Skip to main content


OK, what the actual fuck?

I’m not signed in and, to the best of my knowledge, I don’t even have a Guardian account. And this is within the web view in Mona.

CC @noybeu

#theGuardian #privacy #gdpr

in reply to Aral Balkan

the first picture shows you are indeed signed in ("My account", instead of "Sign in")
Somthing weird going on with cookies? (afaik the in app web views are supposed to be separate sessions from the main browser app but i'm no expert)
@noybeu
This entry was edited (1 day ago)
in reply to Malcontent Creator

@geist I think that's the case. I just opened a Guardian webpage, and the upper right corner shows “Sign in” instead of “My account.” In-app Safari view's data is separated from the main Safari app since iOS 12.

@aral My guess is that you signed in to Guardian a long time ago, and the sign-in info has already expired, so when you proceed to something like making a payment, you were asked to sign in again.

in reply to Aral Balkan

what browser are you on? Could you have possibly signed in a while back with your Google account?
in reply to donamasta

The web view in Mona (iOS Mastodon client). And no, I checked, it’s also signed out on Safari (if I even ever had an account, which I don’t think I do) and I don’t have a Google account.
This entry was edited (1 day ago)
in reply to Aral Balkan

and? Guardian is payed for content with a very small free tier, it's like that for years. So yes it pushed hard to login to get you on a subscription. The web interface always says "your account" , logged in or not. More like an unclear web design problem...
in reply to Aral Balkan

@fvdholst
Did you perhaps perform a single login for a Google mailbox or something on the same device?

I experienced this with having done OAuth for opening a Google mailbox in Thunderbird. Then suddenly Maps starting asking if I was really that Google account when I just opened an anonymous web interface in Firefox (or so I thought).

Those OAuth flows are not done in a throw away web view, so they can store info for later. i had to clean out the entire Firefox profile.

in reply to Aral Balkan

grrr, gross! what the hell? time to scrub your browser of cookies, or maybe connect through another ip, because it's possible they associated your name with your ip, which would be a particularly bad way of going about it
in reply to Aral Balkan

@fvdholst
And you didn't make a Guardian account earlier outside Mona? Unfortunately apps share almost all browser state with each other on mobile.
in reply to Gerrit 🇪🇺🌍🍉🔻

@gvenema @fvdholst It’s not in my password manager so highly unlikely I ever did. My best bet is a third party dataset with IP to profile mappings.
in reply to Aral Balkan

@fvdholst
That does not seem likely. Does it also happen if you are on a VPN or public wifi?

Maybe some service connected to a advertisement id of your device or some data deal with the mobile service.

in reply to Aral Balkan

WKWebView defaults are a privacy nightmare. Unless Mona explicitly uses an ephemeral WKWebsiteDataStore, WebKit leaks local storage and cookies like a sieve. The Guardian's scripts are likely fingerprinting your device and reconstructing a profile anyway.
in reply to Bob Corbin

@Shadowfetch This is what I’m thinking. Or they’re using a dataset they bought that correlates either the fingerprint or my IP with my name, etc.

Either way, gross violation of GDPR.

CC @noybeu

in reply to Aral Balkan

Data brokers absolutely sell those IP-to-identity maps. Apple has been tightening the screws on fingerprinting APIs lately, but shady SDKs still find ways to stitch this together. It is a constant battle keeping third-party code clean of this stuff.
in reply to Aral Balkan

@Shadowfetch
I don't know whether there's something similar on iOS, but #personalDNSfilter catches a lot of bullets for me...
in reply to Aral Balkan

@Shadowfetch It’s an in-app Safari view with data transferring managed by Apple software.
in reply to Aral Balkan

From their Privacy Policy :blobcatfearful:

We will match your unique ID number to your browsing behaviour to recognise you on a new device or through a different application such as the Guardian app on mobile devices.
in reply to Aral Balkan

@gytisrepecka
mastodon.social/@urlyman/11428…
in reply to Aral Balkan

I stopped reading #TheGuardian sadly some time ago, as the only way to continue was to consent with sharing with 139 'partners' in the cookie dialog, and I am not up for buying a subscription and go "Ad-lite" 🤢 (lack the money anyway).

Nice #newspaper selling people's news browsing habits to commercial parties. Well, newspapers got it tough, but still.