Slashdot Mirror
Google Is A Serial Tracker (softpedia.com)
An anonymous reader writes: Two Princeton academics conducted a massive research into how websites track users using various techniques. The results of the study, which they claim to be the biggest to date, shows that Google, through multiple domains, is tracking users on around 80 percent of all Top 1 Million domains. Researchers say that Google-owned domains account for the top 5 most popular trackers and 12 of the top 20 tracker domains. Additionally, besides tracking scripts, HTML5 canvas fingerprinting and WebRTC local IP discover, researchers discovered a new user fingerprinting technique that uses the AudioContext API. Third-party trackers use it to send low-frequency sounds to a user's PC and measure how the PC processes the data, creating an unique fingerprint based on the user's hardware and software capabilities. A demo page for this technique is available. Of course, this sort of thing is nothing new and occurs all across the web and beyond. MIT and Oxford published a study this week that revealed that Twitter location tags on only a few tweets can reveal details about the account's owner, such as his/her real world address, hobbies and medical history. Another recently released study by Stanford shows that phone call metadata can also be used to infer personal details about a phone owner.
I don't even have a computer!
Sent from my iPhone 6.
I use requestpolicy [continued] too, but I had ajax.googleapis.com whitelisted because almost every damn site needs it so the test worked on my browser. : (
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
If you do your damned best to block Google's tracking - not loading their scripts and so on - the Web is broken. So many sites use Google scripts for required functions that things just don't work any more. "The open Web" is now "The Google Web".
There might be hope though. Some people have packaged up the Google scripts (sanitized?) so that your browser can load them locally, and you can still block Google IP ranges without breaking every fucking site on the web.
Letting one company become THIS pervasive? Not so good for fault tolerance, privacy, and decentralization of control.
between my wife and kids and I we have almost a dozen laptops, phones and tablets at home. My wife used to buy underwear for herself on the macbook at home. week later on my lenovo at work i'm seeing ads from the same sites she visited. same with Fredricks of Hollywood. she bought a costume there for halloween and i saw their ads at work with half naked women on my slashdot page.
They misspelled "stalker".
This is where regulators need to step in. Simple legislation is all we need: if you don't own a domain, you can't track people on it, unless it's something like an OAuth login.
Who makes their own web site dependent on a third party server just to load some static script library files? Almost everybody, that's who. There isn't a system simple enough that blithering idiots like you lot can't subvert and ruin.
I see that every damn site seems to include it, but of the sites I visit very few require it to work. Or at least work sufficiently for me to use.
I keep an entirely separate firefox profile for those rare cases that I do need to interact with google. When I run across a page that needs something like that, I fire up a new browser with the second profile and drag-n-drop the URL from my normal browser window into it. When I'm done with that page, I exit that browser.
The second profile spoofs a different user-agent on a completely different OS, and uses the CleanQuit firefox extension to wipe everything on exit.
fyi use the -no-remote and -P cmd-line options on firefox to run multiple profiles simultaneously
I can use OS/X, Linux. With all the fervor over Windows 10, there's still Windows options to reduce or turn off telemetry off (in some versions). Google's been doing this forever, making billions for it, and there's no escaping it. Why won't Microsoft get in on the trend to make a better OS?
No option to self host your own Google software, no way to get them to truly honor your preference not to track you, nothing. I can't even pay them to do so. And if my employer or school uses their applications, I have to trust them that they don't track those users, but if some of the current lawsuits against them turn out to be true, that trust was misplaced.
Look, if you want to make software services, just do so. But Google can't let go of ads or advertising revenue and are dragging other software companies with them. Frustrating. But, go ahead, keep using Chrome and making fun of MS or Apple for having their own browsers and cheer as their market share goes down.
My question is: How much is all of this, from one company, slowing down the web experience?
I think parallel is a much better word....
"I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)
They bought doubleclick.net ten years ago when it was probably the most notorious tracking site around, *and* they have Google Analytics which they've been peddling to web sites forever.
Oh well. It doesn't run on my iBook G4. You think I'm going to play with tracking sites using my primary system?
I ain't clickin' that shit, .....
Have gnu, will travel.
... about the NSA
Try this search engine.... https://oscobo.co.uk/
Not an unique. Damn foreigners go HOME!
VOTE TRUMP 2016
Is there a simple guide to protecting oneself?
If the advertisers truly believe what they say, i.e., that computer users want to see advertising that is relevant to their interests, then why do advertisers feel the need to act so surreptitiously in their tracking practices?
We're out of corn flakes and don't forget the milk!
Doesn't it get a unique fingerprint based on your hardware? Wouldn't this render switching browsers useless?
Oh the irony. "Don't be evil". Perhaps Larry & Serge should have paid attention to Friedrich Nietzsche
"He who fights with monsters might take care lest he thereby become a monster. And if you gaze for long into an abyss, the abyss gazes also into you."
Well no fucking shit Sherlock
What? The audio fingerprint? I would never let that run outside of the demo page.
As for any other fingerprint - remember they are composed of multiple pieces of information, if you change any one piece it causes the computation to produce a different fingerprint.
This is worse
They went from Don't be evil, to Do only evil in record time. Wonder which one made them more money ? Google makes Microsoft look like amateurs, though to be honest it doesn't take much to make Microsoft look like amateurs.
errr....umm...*whooosh* *whoosh* Is this thing on ?
See the other AC's reply. I ran the demo page on firefox and chrome and the fingerprint is vastly different. You can try it for yourself. It seems like the browser has a significant effect on the results.
Google Is A Serial Tracker
I always thought that it was a concurrent tracker.
Any sensitive page should be opened in Incognito (Chrome) / Anonymous. Chrome ( == Google) could secretly track Incognito as well - deceiving the user - and some people fear that, but that would actually mean the end of the browser, if someone finds out.
Slashdot, fix the reply notifications... You won't get away with it...
Should have been from-the-stating-the-bleeding-obvious-DUH! department.
on a work night at 2am I was searching for LED lights for the kitchen but google kept returning -
Did you mean: "Asian shave Piss porn". It was late and yes I did... So I spanked one out a went to bed. Thanks google.
Tear it down. I hope Bernie breaks it up. It's too big and too powerful. And they have unprecedented access to the White House. Fuck these assholes.
google tracking?
no shit...
why is this news on slash?
fuck this pussy whipped brady bunched version of shit slash says is news.
Im almost done with this pussy arse site....there is so much better around
Remember when the Web was for retrieving documents remotely?
You'd set up a server, and people would request an HTML document, and you'd send it to them!
What a concept!
At each ofl these 800 thousand domains, it was a conscious decision by each webmaster to put links to Google on their page.
"You can call home and ask my wife!"
psst.. spies... pssst pssst pssst... dig a big fucking tomb.
Looks like you may also want to mute your sound card's mic port and sound output.
uBlock origin provides a "dummy" google analytics script so that sites that expect it don't break.
"I'm failing to see a problem with this"
The half dressed part, of course.
AddThis ostensibly exists to make it convenient for a website's viewers who are also members of social media sites to share URLs of HTML documents with their followers. Unless a particular social media site offers a keyless intent API, such as Twitter's Web Intents, the alternative is for each website publisher to maintain contractual relationships with a dozen or more different sites to get API keys and add their individual button codes, and not every publisher wants to spend time on that.
With all the fervor over Windows 10, there's still Windows options to reduce or turn off telemetry off (in some versions).
Only Windows 10 Enterprise, which most users are unlikely to have, includes anything resembling an "off" setting. The minimum setting on Home and Pro is "basic", which lets Microsoft see all installed applications, all installed device drivers, and the IMEI of your laptop's aircard if any. It may sound innocuous, but in some cases, the presence of a particular application or driver on a computer may incriminate a user if some big company decides to go on a fishing expedition and subpoena Microsoft for this data. An example of such an application is a video game console emulator. An example of such a driver is the driver for a video game cartridge reader (such as Kazzo) or for a capture card that happens not to enforce all of HDCP. These have noninfringing and infringing uses, but good luck affording to prove your noninfringement in a court of law.
Google's been doing this forever, making billions for it, and there's no escaping it.
One can block all Google-owned domains in a DNS resolver on localhost. (A hosts file alone can't do it because the hosts file format doesn't support wildcards.) Windows 10, on the other hand, includes a separate DNS resolver used just for updates and telemetry.
A curious episode that happened to me some weeks ago:
I was working on a data-analysis challenge in my spare time. The application was expected to deal with English expressions in a specific sub-field with which I am not too familiar. So, I was doing quite a few searches for certain terms (which I never do and have nothing to do with my work or my typical search activity) during some days at different hours. I used google.com and google.es without being logged-in in any site (I have various browsers, where I am logged-in with different accounts; one of them is unlogged from anywhere and this is the one I used here). During the next week or so, most of the advertisement being shown to me virtually everywhere (like in Twitter or here) was about that specific field of expertise; a type of advertisement which I rarely see anywhere.
In summary:
- They spend resources (to track, store, analyse, transmit, etc.).
- Act in the pure limit, if not legally at least clients-being-pissed-off speaking.
- Their activity is intuitively detected without any effort.
- And what is even much, much worse: they aren't able to show relevant-to-me advertisement!
This experience explains well what I think about private information being systematically stolen: it is certainly bad, but I honestly don't care. They are much more worried about collecting everything than about actually understanding what they have. Firstly, I did find the episode slightly annoying, but this feeling quickly disappeared. It was like seeing a not-too-honest-but-kind-of-nice trickster trying over and over to impress me and always failing.
Custom Solvers 2.0 = Alvaro Carballo Garcia = varocarbas.
See subject & APK Hosts File Engine 9.0++ SR-4 32/64-bit http://www.bing.com/search?q=%...
Less power/cpu/ram + IO use vs. DNS/routers/addons/antivirus (slows you) + less security issues/complexity. Compliments firewalls (w/ layered drivers blocking less used IP addys vs. hosts blocking more used domains) & DNS (lightens dns load). Gets data via 10 security sites.
Ads rob bandwidth/speed paid for, security (adnetwork abuse), privacy in tracking + anonymity.
Hosts add speed (hardcodes/adblocks), security (bad sites/poisoned dns), reliability (dns down), & anonymity (dns requestlogtrackers) natively. Hosts != blockable by ClarityRay (vs. souled-out to admen inferior wasteful redundant slow usermode browser addons)
Works vs. caps & HTTP PUSH ads w/ firewalls.
Avg. webpage = big as Doom http://www.theregister.co.uk/2...
APK
P.S. - Safe https://www.virustotal.com/en/... (Verified by Malwarebytes' S. Burn "I've seen the code & yes it's safe" http://forum.hosts-file.net/vi... )
Google Is King..
From Syed Aashir Hussain
See subject tepples: I block google domain ads & trackers using hosts. This automates it for me https://yro.slashdot.org/comme...
APK
P.S.=> It works & does so with far less security issues than DNS has (or antivirus which also slows you down) with less moving parts complexity, easier mgt. of data (format's way simpler than DNS rules & certainly moreso than regex), & less resource usage... apk
UBlock can't do 17 items hosts do:
1.) Protect vs. bad sites (past ads)
2.) Protect vs. fastflux botnets
3.) Protect vs. dyndns botnets
4.) Protect vs. DGA botnets
5.) Protect vs. downed DNS
6.) Protect vs. poisoned dns
7.) Protect vs. trackers
8.) Protect vs. spam bad links
9.) Protect vs. phish bad links
10.) Protect vs. caps
11.) Get by dns blocks
12.) Avoid dns request logs
13.) Speed up 2 ways (adblocks + hardcodes)
14.) Work on anything webbound multiplatform.
15.) Ez data control
16.) Block ads more efficiently
17.) UBlock uses hosts (no DNS benefit vs. tracker or dns poisoning) - poor imitation = "sincerest form of flattery"
Hosts = native vs. illogically "Bolting on 'MoAr'" & not ClarityRay blockable like addons.
BEST hosts file https://yro.slashdot.org/comme...
APK
P.S.=> Hosts do MORE w/ less in kernelmode & start before REDUNDANT inefficient slow usermode addons (as 1st resolver)
Hosts ~3mb vs. UBlock = 63++ MB -> http://cdn.ghacks.net/wp-conte...
See subject: Titles of each post are self-explanatory https://news.slashdot.org/comm... in more moving parts + resource overuse (gb's of it no less) & each post has TONS of substantiating links from reputable sources to support each!
* Yes - I *COULD* block out ALL blogspot in hosts, but why? Some of it is useful.
APK
P.S.=> There isn't a google ad server OR tracker I don't have blocked though & yes, via hosts... apk