Killi is an app that pays you $3 a month to track you. How can we find out exactly what data they collect?

I know a bit about networking, a lot about marketing & analytics, but nothing about network analysis or reverse engineering. So i'm hoping somebody here can help me solve a puzzle that's been bothering me.

An app called Killi is trying to make waves by playing off the fear that evil companies are selling your data, but this wonderful company is finally taking ethics into it's own hands and splitting the profits by paying YOU for your data. Finally, YOU get to decide what you sell, and if you go all in you can earn $3 a month. That's like a free coffee, and as long as you aren't some bougie twat you'll still have change left over.

So: what do they track? Just the basics, nothing that isn't already being tracked. The sites you visit. Your location. purchase history. Demographic information. Personally identifying information like name, address, and phone number. your bank records. Plus you have a chance to earn even more! If some company decides you're particularly interesting, they can target you with a survey to answer specific questions to learn even more. And of course they may insert ads into your content. They'll insert ads before every video you watch. I bet they insert affiliate links to.

Is this all safe you might ask? of course! See, we have an SSL certificate. We got it for free from lets encrypt. Plus, your data is protected with a password! Oh right, FAQs. what do we have here. "why can't I log in?" well, we are now requiring users to provide a password to log in. Apparently we were not before.

Sarcasm aside, this whole thing seems incredibly sketchy. Sure, I technically "buy data" all the time because i can pay Facebook to show ads to people who viewed my site, and change the ad based on their age and gender. I also have analytics so I can track viewer trends. But how many companies are able to keep 24/7 tabs on users behavior at all times?

I would love to see if somebody could sniff the data that is being sent back to this company, or find a way to see how they are modifying the pages you view or what you do on your phone. If not i'm familiar enough with linux that if somebody were to point me in the right direction I could buy one of those monitor mode wifi adapters and run my traffic through there. I'm just really curious about this.

submitted by /u/TheDodgeLodge
[link] [comments]

from hacking: security in practice https://ift.tt/2JaZtM8

Comments