(Press-News.org) A new study by KU Leuven-iMinds researchers has uncovered that 145 of the Internet's 10,000 top websites track users without their knowledge or consent. The websites use hidden scripts to extract a device fingerprint from users' browsers. Device fingerprinting circumvents legal restrictions imposed on the use of cookies and ignores the Do Not Track HTTP header. The findings suggest that secret tracking is more widespread than previously thought.
Device fingerprinting, also known as browser fingerprinting, is the practice of collecting properties of PCs, smartphones and tablets to identify and track users. These properties include the screen size, the versions of installed software and plugins, and the list of installed fonts. A 2010 study by the Electronic Frontier Foundation (EFF) showed that, for the vast majority of browsers, the combination of these properties is unique, and thus functions as a 'fingerprint' that can be used to track users without relying on cookies. Device fingerprinting targets either Flash, the ubiquitous browser plugin for playing animations, videos and sound files, or JavaScript, a common programming language for web applications.
This is the first comprehensive effort to measure the prevalence of device fingerprinting on the Internet. The team of KU Leuven-iMinds researchers analysed the Internet's top 10,000 websites and discovered that 145 of them (almost 1.5%) use Flash-based fingerprinting. Some Flash objects included questionable techniques such as revealing a user's original IP address when visiting a website through a third party (a so-called proxy).
The study also found that 404 of the top 1 million sites use JavaScript-based fingerprinting, which allows sites to track non-Flash mobile phones and devices. The fingerprinting scripts were found to be probing a long list of fonts – sometimes up to 500 – by measuring the width and the height of secretly-printed strings on the page.
The researchers identified a total of 16 new providers of device fingerprinting, only one of which had been identified in prior research. In another surprising finding, the researchers found that users are tracked by these device fingerprinting technologies even if they explicitly request not to be tracked by enabling the Do Not Track (DNT) HTTP header.
The researchers also evaluated Tor Browser and Firegloves, two privacy-enhancing tools offering fingerprinting resistance. New vulnerabilities – some of which give access to users' identity – were identified.
Device fingerprinting can be used for various security-related tasks, including fraud detection, protection against account hijacking and anti-bot and anti-scraping services. But it is also being used for analytics and marketing purposes via fingerprinting scripts hidden in advertising banners and web widgets.
To detect websites using device fingerprinting technologies, the researchers developed a tool called FPDetective. The tool crawls and analyses websites for suspicious scripts. This tool will be freely available at http://homes.esat.kuleuven.be/~gacar/fpdetective/ for other researchers to use and build upon.
The findings will be presented at the 20th ACM Conference on Computer and Communications Security this November in Berlin.
### END
Several top websites use device fingerprinting to secretly track users
2013-10-10
ELSE PRESS RELEASES FROM THIS DATE:
After almost a century, a question answered; genes protect themselves against being silenced
2013-10-10
Harvard Stem Cell Institute (HSCI) researchers have settled a century-old debate over whether occurrence of DNA methylation acts to silence gene expression, or if genes are turned off by other means before they are methylated.
As explicated today in the journal Nature, methylation in fact enforces gene silencing, and it is levels of a newly identified form of RNA produced by individual genes that determines whether they are turned off by the addition of a methyl (CH3) group by the enzyme DNA methylase 1 (DNMT1).
The study, led by HSCI Principal Faculty member Daniel ...
'Stadium waves' could explain lull in global warming
2013-10-10
One of the most controversial issues emerging from the recent Intergovernmental Panel on Climate Change (IPCC) Fifth Assessment Report (AR5) is the failure of global climate models to predict a hiatus in warming of global surface temperatures since 1998. Several ideas have been put forward to explain this hiatus, including what the IPCC refers to as 'unpredictable climate variability' that is associated with large-scale circulation regimes in the atmosphere and ocean. The most familiar of these regimes is El Niño/La Niña, which are parts of an oscillation in the ocean-atmosphere ...
New hepatitis C drug shows potential in phase 2 trials
2013-10-10
Bethesda, MD -- The addition of danoprevir to the current treatment regimen for patients with hepatitis C leads to high rates of remission, according to a new article in Gastroenterology, the official journal of the American Gastroenterological Association. The current standard of care for hepatitis C patients includes a combination of peginterferon and ribavirin.
"Despite recent advances, the current hepatitis C treatment regimen is burdensome on the patient and prone to adverse events," said Patrick Marcellin, lead study author from the Service d'Hépatologie and Inserm ...
Increased risk of depression linked to mountaintop coal mining
2013-10-10
New Rochelle, NY, October 10, 2013—People who live among the destructive environmental effects of mountaintop coal mining face an increased risk of major depression. The results of a study conducted in the coal mining regions of Central Appalachia that explored the relationship between psychological health and environmental degradation are published in Ecopsychology, a peer-reviewed, online journal from Mary Ann Liebert, Inc., publishers. The article is available free on the Ecopsychology website.
Michael Hendryx (current affiliation Indian University, Bloomington) and ...
Massive spruce beetle outbreak in Colorado tied to drought, according to new CU study
2013-10-10
A new University of Colorado Boulder study indicates drought high in the northern Colorado mountains is the primary trigger of a massive spruce beetle outbreak that is tied to long-term changes in sea-surface temperatures from the Northern Atlantic Ocean, a trend that is expected to continue for decades.
The new study is important because it shows that drought is a better predictor of spruce beetle outbreaks in northern Colorado than temperature alone, said lead study author Sarah Hart, a CU-Boulder doctoral student in geography. Drought conditions appear to decrease ...
Pulp friction cleans up 'Brockovich' chemical
2013-10-10
A byproduct of the manufacture of pulp using the sulfite process for making paper, sodium lignosulfonate, can be used to immobilize and soak up toxic chromium compounds from soil and water, according to research published in the International Journal of Innovation and Sustainable Development.
Konstantin Volchek and Carl Brown of Environment Canada, and Dario Velicogna of Velicogna Consultants Inc in Ottawa, have carried out two successful parallel tests of efficacy on a laboratory scale. The first involved removal of chromium ions from water using reagent binding and ...
A silent epidemic: Minor traumatic brain injury
2013-10-10
ROSEMONT, Ill.—In the United States, approximately 1.4 million people suffer a traumatic brain injury (TBI) each year. Of those injuries, three out of four are minor TBI (mTBI)—a head injury that causes a temporary change in mental status including confusion, an altered level of consciousness, or perceptual or behavioral impairments.
According to a literature review appearing in the October 2013 issue of the Journal of the American Academy of Orthopaedic Surgeons (JAAOS), falls and motor vehicle accidents are responsible for most cases of mTBI and also are a common cause ...
Study: Ethanol not a major factor in reducing gas prices
2013-10-10
CAMBRIDGE, MA -- If you have stopped at a gas station recently, there is a good chance your auto has consumed fuel with ethanol blended into it. Yet the price of gasoline is not substantially affected by the volume of its ethanol content, according to a paper co-authored by an MIT economist. The study seeks to rebut the claim, broadly aired over the past couple of years, that widespread use of ethanol has reduced the wholesale cost of gasoline by $0.89 to $1.09 per gallon.
Whatever the benefits or drawbacks of ethanol, MIT's Christopher Knittel says, price issues are ...
As sea level rises, Everglades' freshwater plants perish
2013-10-10
Just inland from the familiar salt-loving mangroves that line the Southern tip of the Florida Peninsula lie plant communities that depend on freshwater flowing south from Lake Okeechobee. These communities provide critical habitats to many wildlife species, and as salt water intrudes, it could spell problems for freshwater plants and animals alike.
Satellite imagery over the southeastern Everglades confirms long-term trends of mangrove expansion and sawgrass habitat loss near the shore. The trend is related to salt water intrusion caused by sea-level rise and water management ...
The Cancer Genome Atlas exposes more secrets of lethal brain tumor
2013-10-10
HOUSTON – When The Cancer Genome Atlas launched its massively collaborative approach to organ-by-organ genomic analysis of cancers, the brain had both the benefit, and the challenge, of going first.
TCGA ganged up on glioblastoma multiforme (GBM), the most common and lethal of brain tumors, with more than 100 scientists from 14 institutions tracking down the genomic abnormalities that drive GBM.
Five years later, older and wiser, TCGA revisited glioblastoma, producing a broader, deeper picture of the drivers – and potential therapeutic targets – of the disease published ...