37 points juliusceasar 2 hours ago 41 comments

It was discussed a year ago. https://news.ycombinator.com/item?id=44235467

KomoD 2 hours ago | parent

Looks like they stopped doing it

https://localmess.github.io

> UPDATE: As of June 3rd 7:45 CEST, Meta/Facebook Pixel script is no longer sending any packets or requests to localhost. The code responsible for sending the _fbp cookie has been almost completely removed. Yandex has also stopped the practice we describe below.

mozvalentin 1 hour ago | parent

Chrome and Firefox have deployed / are deploying local-network-access which prompts the user when apps try this.

Tade0 1 hour ago | parent

I've seen it and at least in Chrome it seems to be treating all URLs which are based on an IP address as "local", regardless of the class of the address.

kibwen 1 hour ago | parent

I'd be inherently suspicious of any website in the wild attempting to contact a bare IP address. Aside from localhost, my default assumption would be that such a website is either trying to circumvent my hosts file (or circumvent my other DNS configuration, e.g. pi-hole or DNS-over-HTTPS), malware trying to reach a command-and-control server, or malware trying to circumvent my adblocker.

shit_game 1 hour ago | parent

I was just about to say that my question in regards to this was "what are web browsers doing about it?"

pezgrande 1 hour ago | parent

I guess that's why I am getting so many "Allow to find devices on your network" alerts. Good feature overall.

SoftTalker 51 minutes ago | parent

Only a good feature if users have a clue what that question means. Most will click "Yes" because they want to get on with whatever they want to do.

Change it to something like "This website is trying to spy on your local devices, do you want to allow this?"

dpoloncsak 12 minutes ago | parent

I honestly don't think the average Google Chrome user knows what a 'local' device is, and we should go something more ELI5 "This website wants to spy on every other device connected to your network" or something

crtasm 6 minutes ago | parent

I just discovered that MacOS was blocking Firefox from connecting to devices on my LAN - there's per-app toggle in system settings.

Access to my router's web interface was not blocked (understandably) but this left me rather confused for a while.

applfanboysbgon 1 hour ago | parent

> Meta must face a lawsuit alleging that it secretly tracked Android users' browsing activity on mobile websites that embedded Meta's analytics pixel, and linked that activity to users' identities, a federal judge ruled Monday.

> The decision, issued by U.S. District Court Judge Rita Lin in San Francisco, grew out of a class-action complaint initially brought last June by California resident Devin Rose (and later joined by other Android users).

> Rose alleged that between September 2024 and June 2025, Meta exploited Android's localhost -- a feature that allows software developers to test applications -- to connect users’ mobile web browsing to their Facebook and Instagram profiles.

May 12, 2026

woodrowbarlow 1 hour ago | parent

i would love to have a software engineer's union, not so much to get better working conditions but to be able to say stuff like "i can't implement that unethical feature, it's against union rules and i'd lose my membership".

absqueued 1 hour ago | parent

Take a lead, let me sign up :)

hasahmed 1 hour ago | parent

same

SoftTalker 52 minutes ago | parent

And this is why we don't have one. Someone else is expected to do the hard part.

volkercraig 1 hour ago | parent

Start one. Unions are worker owned. You could also join the IWW.

actionfromafar 49 minutes ago | parent

Unions in the US are nerfed, by law.

greyface- 30 minutes ago | parent

Collective bargaining is nerfed. Other structures remain viable and legal.

askl 24 minutes ago | parent

Are you not allowed to leave the US?

woodrowbarlow 15 minutes ago | parent

are there examples of unions that have started around a focus on the ethics of the services they provide? unions traditionally start locally, around issues for which the locality is a hotspot, which is why they usually focus on pay and working conditions. it's also easier to get a large group to agree on a set of improvements to working conditions vs a set of ethical boundaries.

theodorejb 52 minutes ago | parent

You don't need to join a union to push back against unethical feature requests.

jakubadamw 48 minutes ago | parent

The collective leverage of a union gives you significantly more power to do something like this.

theodorejb 42 minutes ago | parent

Only if the union is against the unethical request. In some cases the union may be for it, which makes it even harder to push back.

chrncirurp 47 minutes ago | parent

> You don't need to join a union to push back against unethical feature requests.

If you push back against unethical feature requests:

No union: you get fired

Union: you still get fired

jeffgreco 38 minutes ago | parent

Still a better outcome than tossing your ethics overboard.

garciasn 22 minutes ago | parent

Why bother to join a union, pay dues, potentially have your career limited, and have another layer to deal with?

Just leave or be fired without the song and dance.

Henchman21 6 minutes ago | parent

Because you’re a person who cares about your fellow citizens and realize that collectively bargaining helps to lift all boats, not just yours

woodrowbarlow 37 minutes ago | parent

maybe, but the union could provide a lot of services to someone who loses their job this way (like income insurance and legal services) and could leverage collective power over companies that demonstrate a pattern of behavior.

dylan604 30 minutes ago | parent

This is something that has just never sat well with me. How exactly will the union provide this insurance? That insurance isn't free, so paid for by member dues? How many members are required to be able to afford the payout for just one member? How about the other services unions are touted as being able to provide? They all come from the same dues? I know that unions will put money into investment funds to attempt to grow the coffers, but that just means the money isn't liquid.

Unions are always touted as a panacea, but logically, it doesn't compute for me. They feel more like ponzi schemes than anything else.

woodrowbarlow 21 minutes ago | parent

that's definitely a big question and i don't pretend to have enough expertise to answer fully; however, i will point to the Ontario Teacher's Pension Plan which is (per Wikipedia[1]) "one of the world's largest institutional investors [...] over $266 billion in net assets, with a one-year total-fund net return of 9.4%, and a 7.4% 10-year total-fund net return". the union runs their own investment fund; it's an extension of collective power into the financial realm.

https://en.wikipedia.org/wiki/Ontario_Teachers%27_Pension_Pl...

hluska 2 minutes ago | parent

That is only a pension plan. It provides no insurance to teachers who are still employed.

askl 20 minutes ago | parent

> That insurance isn't free, so paid for by member dues?

Yes, obviously. That's how every insurance works.

soco 9 minutes ago | parent

Simple idea: look how other unions work, and in other countries as well. The wheel has already been invented.

grayhatter 23 minutes ago | parent

I didn't get fired.

grayhatter 24 minutes ago | parent

To be fair; you don't need a union... you can just say no. Context; I told them they couldn't ship this exact feature as designed. (It worked until I left.)

Trasmatta 14 minutes ago | parent

Without the protection of a union, "just saying no" is a good way to get fired

ethagnawl 13 minutes ago | parent

> not so much to get better working conditions but

... why not both?

LadyCailin 12 minutes ago | parent

That’s what licensing is for, not unions.

hluska 5 minutes ago | parent

A union could absolutely get involved in something like this.

throwa356262 57 minutes ago | parent

Off topic: I wonder how hard it is to poison this type of data gathering?