What was the 'localhost' tracking bug Meta got caught using?
Academic researchers disclosed on June 3, 2025 that Meta Pixel, embedded on roughly 5.8 million websites, sent tracking cookies through the device's own loopback interface to the Facebook and Instagram apps, silently linking web browsing to a user's logged-in identity — bypassing Incognito Mode, cookie-clearing, and Android's app sandbox. Meta halted it the same day Google shipped countermeasures.
Answered in
How Meta Actually Tracks You: Inside Facebook, Instagram and WhatsApp's Surveillance MachineA localhost backdoor beat Incognito Mode. Instagram DMs lost encryption entirely. Here's how Meta's tracking machine really works, fact by fact.
Read the full analysisOther questions this article answers
More ai & society questions
- How many workers have been affected by AI-attributed layoffs in 2026?
- What percentage of 2026 layoffs are linked to AI?
- Which job categories are most affected by AI-related layoffs?
- Are companies genuinely replacing workers with AI or using it as an excuse?
- When did AI become the leading cited reason for US job cuts?
- How many robots competed in the 2026 World Humanoid Robot Games?
- What new events were added to the 2026 Humanoid Robot Games?
- Why do the World Humanoid Robot Games matter for robotics development?
Every answer on Crashtech is written by the editor of the article it comes from — never auto-summarised. Browse all answers or the AI & Society beat.