Topic
Evercookie
About: Evercookie is a research topic. Over the lifetime, 2 publications have been published within this topic receiving 476 citations.
Papers
3 Nov 2014
TL;DR: The evaluation of the defensive techniques used by privacy-aware users finds that there exist subtle pitfalls --- such as failing to clear state on multiple browsers at once - in which a single lapse in judgement can shatter privacy defenses.
Abstract: We present the first large-scale studies of three advanced web tracking mechanisms - canvas fingerprinting, evercookies and use of "cookie syncing" in conjunction with evercookies. Canvas fingerprinting, a recently developed form of browser fingerprinting, has not previously been reported in the wild; our results show that over 5% of the top 100,000 websites employ it. We then present the first automated study of evercookies and respawning and the discovery of a new evercookie vector, IndexedDB. Turning to cookie syncing, we present novel techniques for detection and analysing ID flows and we quantify the amplification of privacy-intrusive tracking practices due to cookie syncing. Our evaluation of the defensive techniques used by privacy-aware users finds that there exist subtle pitfalls --- such as failing to clear state on multiple browsers at once - in which a single lapse in judgement can shatter privacy defenses. This suggests that even sophisticated users face great difficulties in evading tracking techniques.
631 citations
TL;DR: Several privacy advocates have cautioned that HTML 5 might enable advertisers and malware creators to embed more persistent tracking opportunities, but the most publicized example thus far is Samy Kamkar's Evercookie, which combines traditional tracking tools with new features that come with the new Web language.
Abstract: A recent round of publicized privacy vulnerabilities on prominent websites has led technologists, regulators, and end users all to begin asking more detailed questions about how best to achieve privacy: What data leaves a user's computer, what another party can observe about that user via that data, and then, vitally, what that party does with it? Several privacy advocates have cautioned that HTML 5 might enable advertisers and malware creators to embed more persistent tracking opportunities. The most publicized example thus far is Samy Kamkar's Evercookie, which can burrow into at least 10 places on a computer, far more than usually found. It combines traditional tracking tools with new features that come with the new Web language.
8 citations
Performance Metrics
| Year | Papers |
|---|---|
| 2014 | 1 |
| 2011 | 1 |