Except that for normal usages at the application level, the UUID is
generated by the app and placed in its private per-app storage, which is
always erased on a factory-reset.  To Andrew Allen: I strongly recommend
factory-resetting your phone before you sell it, and also factory-resetting
any phones you buy second-hand, just to be sure.  Most people do this, for
good reason. -T


On Sat, Jul 20, 2013 at 1:55 PM, Scott Brim <scott.b...@gmail.com> wrote:

> On Sat, Jul 20, 2013 at 4:08 PM, Andrew Allen <aal...@blackberry.com>
> wrote:
> > Tim
> >
> > The quote is from RFC 5626 which also states:
> >
> > "3.1. Summary of Mechanism
> >
> > Each UA has a unique instance-id that stays the same for this UA even if
> the
> > UA reboots or is power cycled."
> >
> > Since the UUID in the instance ID is also static how is this
> significantly
> > different in terms of privacy concerns from the IMEI being used as an
> > instance ID?
>
> You're not demonstrating that an IMEI is just as good, you're
> demonstrating that a UUID is just as bad.
>

Reply via email to