Researcher breaks AppLovin's ad mediation encryption, finds device re-identification possible despite ATT denial

I broke the cipher AppLovin wraps around its ad-mediation traffic and decrypted several thousand real requests captured on my consented mobile-traffic research panel. The conclusion is straightforward: The encrypted bid request carries enough device data