Indiscrete web browsers assist de-anonymisation
Indiscrete web browsers assist de-anonymisation: Via The H Security: News and Features.
A test on browser fingerprinting by the Electronic Frontier Foundation (EFF) has shown how uniquely identifiable a user's browser is on the web. What that test is unable to do is to identify individual users. This, however, is the goal of an experiment by the International Secure Systems Lab (Isec Lab). Originally founded by the Vienna University of Technology (TUV), Isec Lab is now a collaborative venture between TUV, Eurécom and the University of California in Santa Barbara. The test makes use of Xing, a platform widely-used in Europe on which many millions of users have published profiles.
[...]
The second step is the actual test. Using special calls by the website within the browser, a website can determine whether a specific site on another server has previously been viewed by a visitor (this technique is known as history stealing). This enables the test to determine which group pages a user has visited. For each group found, the test now checks whether the current visitor is a particular member of the group (on the forum) by again checking through the previously collected URLs. The fact that social networks contain unique URLs, such as personal profile pages, should also make it possible to more or less unambiguously identify someone.
[...]
According to Holz, other large social networks such as LinkedIn and Facebook could also be used for this type of test, although the shear size of these networks and the resulting data volumes would present a problem. He adds that the team has, using two computers, already found more than 40 million profiles on Facebook and that, with better equipment, it would probably be possible to crawl all of Facebook.
Read Original Article:(Via The H Security: News and Features.)
Recent blog posts
- In Bid to Sway Sales, Cameras Track Shoppers
- Unprecedented 25-Year Sentence Sought for TJX Hacker
- EFF Appeals Dismissal of Warrantless Wiretapping Case
- Viacom Makes Its Case Against Yesterday's YouTube
- Obama supports Senators draft plan to rework U.S. immigration policy - Includes National Biometric ID card for all.
- Domain Names Can't Defend Themselves
- Hacker Disables More Than 100 Cars Remotely
- Judges Approves $9.5 Million Facebook ‘Beacon’ Accord
- Hooking Up The Big Brother Machine... And Fighting It
- Court: State Can Dump Non-Sex Offenders Into Registry