I broke AppLovin's mediation cipher protocol
Summary
The article documents a security analysis of AppLovin's mediation cipher, demonstrating that device fingerprinting can deterministically re-identify a user across apps even with ATT restrictions. It details the cipher design, reveals real-world payloads, and highlights privacy implications and cross-publisher tracking risks across multiple ad networks.