Researchers have found that Meta and Yandex are exploiting legitimate internet protocols to de-anonymize Android users by embedding tracking codes in websites. This practice allows them to bypass security measures and link web browsing identifiers to persistent user identities in their mobile apps. Google is currently investigating this issue.