Fauxx
from ArchsageRamases@lemmy.world to privacy@lemmy.ml on 16 May 22:53
https://lemmy.world/post/46958370

Fauxx is an open-source Android privacy tool that poisons data broker and ad-tech profiles by generating continuous, plausible, off-demographic synthetic activity from your device. The goal is simple: make your real behavioral signal statistically indistinguishable from noise.

github.com/digital-grease/fauxx

#privacy

threaded - newest

FauxLiving@lemmy.world on 17 May 03:54 next collapse

Yes? Hello?

crandlecan@mander.xyz on 17 May 10:30 collapse

Who is this please?

FauxLiving@lemmy.world on 17 May 19:39 collapse

You called me, friend. Who is this?

crandlecan@mander.xyz on 17 May 19:50 collapse

May I have a moment to talk about your car insurance? We at Geico can change your life in less than a minute of your time šŸ™Œ

FauxLiving@lemmy.world on 17 May 20:01 collapse

<img alt="" src="https://lemmy.world/pictrs/image/0cd97997-619c-4ee4-87ff-abc7fa616aea.gif">

crandlecan@mander.xyz on 18 May 06:16 next collapse

:)

ArchsageRamases@lemmy.world on 18 May 09:57 collapse

<img alt="" src="https://lemmy.world/pictrs/image/26936f07-15e0-44b5-b701-72bf478b629f.gif">

FauxLiving@lemmy.world on 18 May 17:47 collapse

<img alt="" src="https://lemmy.world/pictrs/image/a85cb192-3efa-48d3-b490-8fcfede9065d.gif">

ArchsageRamases@lemmy.world on 19 May 15:47 collapse

Sidenote: I miss movies like these 😢

eldavi@lemmy.ml on 19 May 16:07 collapse

same here, except that i’m learning that i’m losing touch enough with pop culture that i don’t get the jokes from other newer movies like this.

but on the flip side, the scary movie series has become a delightful time capsule of the 90’s and 00’s because of it. lol

ArchsageRamases@lemmy.world on 19 May 16:33 collapse

True. šŸ’Æ

ScoffingLizard@lemmy.dbzer0.com on 17 May 05:40 next collapse

This sounds great.

crandlecan@mander.xyz on 17 May 08:01 next collapse

Oh wow!! You really went above and beyond! Any chance non coders get this on their phone? And does it need a local vpn connection? Or can I keep DuckDuckGo anti app tracking too?

Edit: thanks repliers

whosepoopisonmybuttocks@sh.itjust.works on 17 May 08:28 next collapse

It looks like you can download the most recent apk here

github.com/digital-grease/fauxx/…/v0.2.9

matelt@feddit.uk on 17 May 10:09 collapse

I just got it off F-Droid, dead easy to set up.

guymontag@lemmy.ml on 17 May 08:10 next collapse

Holy shit this tool does way to much. My god

crandlecan@mander.xyz on 17 May 10:30 collapse

Right??!

washington_irving@lemmy.ml on 17 May 08:53 next collapse

The concept is very interesting, I used the app for a while but I don’t get one thing. Why would you want to randomize fingerprints? If the goal is to pollute your profile with random data then it does the exact opposite thing and makes it harder to assosiate the noise with actual user activity.

crandlecan@mander.xyz on 17 May 10:29 collapse

So much noise, you’re just that: noise. It’s all about statistics

washington_irving@lemmy.ml on 17 May 11:46 collapse

yes, but when you spoof fingerprints the only thing connecting the noise generated by the app to the user is then the IP address and ironically the README recommends using it alongside a VPN to hide your IP, which means that the queries made by Fauxx are, like you said, ā€œjust noiseā€, not noise associated with your profile, the noise could as well be generated by any other device

also, I think that the extensive use of LLMs should be stated in the description, not burried in a closed issue, as it is an important matter especially when creating a privacy oriented project

sem@piefed.blahaj.zone on 17 May 11:52 next collapse

Maybe it is because the data brokers will still identify you buy your device fingerprint even when using the vpn

crandlecan@mander.xyz on 17 May 12:34 collapse

Yep. They look at way more than your IP. The one I can’t tackle yet is window sizes… I have asked a dev to see if he can slightly randomize new browser window sizes just for that. Otherwise I have a bunch of anti fingerprint extensions. And I often find myself unable to pass captchas or services because of it. But most of the time, that works. That and using a non-tracking search engine. I like presearch. And their browser on android supports extensions, just like Edge.

crandlecan@mander.xyz on 17 May 12:35 collapse

I like the way you think. That said… presearch.com/search?q=Browser+fingerprinting+too…

washington_irving@lemmy.ml on 17 May 13:33 collapse

Still, browser fingerprints are most commonly used and spoofing them seems counterproductive. If the goal is to maximize confusion about users interests and search history it should mimic actual users’ behavior as closely as possible.

crandlecan@mander.xyz on 17 May 16:49 collapse

You’ve lost me here I’m afraid. Care to elaborate?

washington_irving@lemmy.ml on 17 May 20:50 collapse

ahh, sorry what I meant is that the app shouldn’t randomize identifiers, such as browser fingerprints or even cookies, because the goal is to make the noise associated with the user’s profile, otherwise it’s just random requests and it becomes pointless.

crandlecan@mander.xyz on 18 May 06:17 collapse

Yeah… I think we are disagreeing here, and I don’t fully understand your point, or your point is wrong from my point of view :) āœŒļø

Cherry@piefed.social on 17 May 09:01 next collapse

Where would this be ran at device level or can it be ran at server router level to generate activity at full property/users level?

MidnightMarauder@lemmy.dbzer0.com on 17 May 17:36 collapse

I would love to run this type of software in a container or on my router to spoof my entire home network data traffic. That would be awesome.

crandlecan@mander.xyz on 17 May 19:50 collapse

🫦

SocialistVibes01@lemmy.ml on 17 May 10:17 next collapse

The dev’s doing Che’s work

crandlecan@mander.xyz on 17 May 10:28 collapse

I hope not! But a proper Saint’s work? Absolutely!

SocialistVibes01@lemmy.ml on 17 May 10:35 collapse

Fuck religion. Go away, liberal.

crandlecan@mander.xyz on 17 May 12:30 next collapse

Fauxx isn’t responding for the last half hour when it started to query ad networks what they knew about me. I am using a vpn so maybe if it’s querying that public IP… It might get overloaded. I have a reasonably modern and beefy phone.

Update: and after closing it and starting it again the service starts as disabled, yet the app still crashes with a not responding warning. There is no time to even go into the settings.

ArchsageRamases@lemmy.world on 18 May 09:53 collapse

Just found out they use Ai to code šŸ™„ so no womder it crashes. Yeah it crashed for me but seems fine now.

crandlecan@mander.xyz on 18 May 10:18 next collapse

Alright I’ll try again with the next build

crandlecan@mander.xyz on 21 May 18:51 collapse

I also only had it crash the first time.

That said, it doesn’t seem to remain active.

ArchsageRamases@lemmy.world on 21 May 21:03 collapse

Yeah keeps shuting off. I hope they fix that.

BehavioralClam@lemmy.world on 17 May 17:14 next collapse

Any ELI5 on how to run this for someone that is a zero on Android code?

Edit: nvm found the app on F-droid and it just installed and now running it

WhyJiffie@sh.itjust.works on 17 May 20:25 collapse

It’s on fdroid

edit: oh you just edited it

WorldsDumbestMan@lemmy.today on 17 May 17:46 next collapse

Guess it’s almost time to make the jump to all FOSS.

ArchsageRamases@lemmy.world on 18 May 10:00 collapse

Yes 100% Join us.

WhyJiffie@sh.itjust.works on 17 May 20:46 next collapse

this seems to be a heavily vibecoded project, the readme has at least one contradiction and weird statements and formatting.

I mean now is it clicking ads or is it not? and what’s the reason for including the ā€œtech stackā€?

washington_irving@lemmy.ml on 18 May 08:44 collapse

This issue was raised on github, the dev admitted to using AI (but probably still underplayed it’s role in the project) but closed the issue and didn’t bother to disclose it in the readme.

github.com/digital-grease/fauxx/issues/8

traxex@lemmy.dbzer0.com on 18 May 11:24 collapse

Yikes! It’s really not hard to be upfront about it. Or do these dweebs understand that nobody likes this bullshit?

As a software engineer who absolutely uses Claude for all his dumbass ideas, these ā€œdevelopersā€ don’t know the difference between a toy app and something production ready. Maybe this will get people to start reading source code (like the issue you linked above) and understand what they are deploying way more.

utjebe@reddthat.com on 17 May 21:48 next collapse

It kind of looks good on paper, but this might single you on the other side of a spectrum. Say, now you are that weird user running Firefox on Android - you give out some data, but with adblock you don’t see majority of it. With this tools, you kind of poison the data, but you could still get singled out because the bad guys just have more money to spend.

ArchsageRamases@lemmy.world on 18 May 09:50 collapse

No I’m using brave I only use firefox tor browser

[deleted] on 18 May 09:56 next collapse

.

Zerush@lemmy.ml on 18 May 11:41 next collapse

I use InVizible Pro

ArchsageRamases@lemmy.world on 18 May 16:25 collapse

Another good one that has I2P

Malyca@lemmy.zip on 18 May 23:49 collapse

Sounds resource intensive

ArchsageRamases@lemmy.world on 19 May 15:46 collapse

Not really, works fine on my google pixel 5a with LineageOS.