Google can track surfing habits without need for HTTP cookies
youbroketheinternet.org
Google can track surfing habits without need for HTTP cookies
1–10 of 65 posts
Re: Google can track surfing habits without need for HTTP cookies
#2 However, continuous user tracking
via TLS session resumption is only
possible as long as the browser is
not restarted, because this clears
the TLS cache.
Re: Google can track surfing habits without need for HTTP cookies
#3However, continuous user tracking via TLS session resumption is only possible as long as the browser is not restarted, because this clears the TLS cache. https://svs.informatik.uni-hamburg.de/publications/2018/2018...
I wonder if that deletion can be scriptable and triggered on-demand without restarting by a Firefox extension.
Re: Google can track surfing habits without need for HTTP cookies
#4So DNS over HTTPS sounds great.
Re: Google can track surfing habits without need for HTTP cookies
#5Mitigated by uMatrix and other Firewall tools, no?
I don't find myself ever needing to allow Google Fonts/Analytics to view a page.
Re: Google can track surfing habits without need for HTTP cookies
#6The author states:
>"Eight years later, everyone in the business seems keen to point out that TLS version 1.3 will finally address this issue by encrypting session data, although it isn't obvious if the measures taken by IETF actually work."
Can someone say why it not yet if the measure taken by the IETF in TLS 1.3 work? Is it simply that this part of the spec hasn't been finalized yet? Or does the author mean something else?
Re: Google can track surfing habits without need for HTTP cookies
#7There are a lot of dark patterns Google could use to track you if it wanted to. Does it? Who can say besides those on the inside. If you think they're using this, then there are probably half a dozen other methods you also think they are using, so this shouldn't bother you (at least, not any more than you are already bothered). If you don't think they're using any of those half a dozen other methods, you probably shouldn't worry about this one too much either.
Re: Google can track surfing habits without need for HTTP cookies
#8So theoretically possible != proof.
A high TLS resumption lifetime is used to decrease latency and it can have a huge impact. The RFC itself recommends a TTL of 24 hours (RFC4346).
Re: Google can track surfing habits without need for HTTP cookies
#9This is why you block the surveillance shops' IP space. They are professional panty-sniffers, dependent on doing so for their dinner. Like trolls and narcissists, your only value to them is instrumental. Assuming you care about these things, communicating with them in any way is against your interests.
The internet is a much nicer, safer place when you blackhole the commercial-Stasi-wannabes.
Re: Google can track surfing habits without need for HTTP cookies
#10Mitigated by uMatrix and other Firewall tools, no? I don't find myself ever needing to allow Google Fonts/Analytics to view a page.
https://www.easyjet.com had a hilarious bug where their menu bar wouldn't work if you were blocking Analytics.
But yes, it is often not a problem at all to block Google Fonts/Analytics - almost everything works as expected.