Quite literally, they were just found bypassing OS security anonymization through a localhost exploit to track people: cybersecuritynews.com/track-androi...