The Yandex Leak: How a Russian Search Giant Uses Consumer Data
summary
A 45 GB source dump reveals code for AppMetrica SDK in hundreds of millions of apps, the Crypta behavioral engine, and matching services that glue hashed and unhashed device IDs, SSIDs, passport IDs, email and phone numbers into searchable Yandex profiles. Collected fields include altitude direction speed timestamps and voice biometrics for children, models produce segments like summer residents and gas station visitors, and matcher syncs fingerprints with RosTelecom, with most data stored in Russia.
AI-written summary · about
chapters (9)
- 0:00Yandex data leak intro
- 1:49Yandex background
- 3:13Yandex ties to Kremlin
- 5:432023 leak details
- 13:06Leaked code structure
- 19:27User profiles for ads
- 27:11Data sharing with telecoms
- 28:34Findings and implications
- 31:51Q&A
related talks
27mChinese Surveillance and CloudPets
39mAccidental Abyss: Data Leakage on The Internet
39mAre your secrets secure - How mobile apps are leaking millions of credentials
01h 00mHow I Met Your Data
53mAre your secrets secure? How mobile applications are leaking millions of credentials
59mInside the Breach: Secrets Exposed
28mDigital Titans: Inside Google and Facebook's Data Empires
34mCovert web-to-app tracking via localhost on Android