Live data from Hacker News

Google Chrome Incognito Mode Can Still Be Detected

bleepingcomputer.com

121–130 of 201 posts

Re: Google Chrome Incognito Mode Can Still Be Detected

#121
post #111

Earlier quoted context omitted.

The big idea here is that the web advertising economy is user-hostile, and has to go. Someone - Apple, Chrome extension, whatever - will go nuclear, and craft the AI ad blocker that will do to ads what Gmail did to spam. God willing.

I think the solution lies in a system that doesn't use HTTP. Been thinking about it for years.

meaning?

Re: Google Chrome Incognito Mode Can Still Be Detected

#122
post #103
post #37

Earlier quoted context omitted.

Plenty of sites respect user privacy. I should know; I run dozens of them.

If plenty is "a few" than I would agree (and I am glad you respect privacy). I am still searching for one site that I could give an example for GDPR and they are all blatantly violating it. In most cases they just give you fake impression they respect privacy (by setting banner to "opt-out" (which is violation on its own) after the tracking 3rd party scripts are already loaded). The whole privacy deal on the web just…

> I am still searching for one site that I could give an example for GDPR and they are all blatantly violating it.

I think the reason you can't find one is likely because you are disqualifying all the ones that aren't violating it. There a lots of websites that don't violate GDPR: they don't record any information. Perhaps we can quibble about server logs and whether or not IP addresses are PII, but let's stick to at least the broad strokes here since you are saying all sites blatantly violate GDPR.

I think what you are probably trying to say is that amongst the websites that are trying to harvest your data, (virtually) all of them do so in a way that violates GDPR. This is not surprising to me, because at its heart GDPR is trying to encourage companies not to harvest personal information.

I don't think we will ever get around that. The question is not whether or not many (most? virtually all?) companies will try to get around GDPR (they will). The question is whether or not GDPR will have an positive influence on the use of private data. I can say in the company I do work for, it has completely transformed how we deal with PII. We now actually have gatekeepers that tell marketing what they can and can't have access to. If there are problems, then people actually get chewed out and we put real, emergency resources into fixing them. I mean it is absolutely night and day.

For us there is always this fight between people and departments that would like unrestricted access to information and people who are protecting it. Without GDPR, there was no defense! There was no argument you could make -- "It's wrong!" "By whose definition? The lawyers are fine with it" Now we can legitimately say, "You can't legally do that". Not only that, but I've even had marketing managers being very concerned that we might be handling data incorrectly. I've never, ever seen that before in my 30 year career.

Yeah, there are lots of problems and I don't see them going away ever, but man GDPR is really helping in a lot of areas.

Re: Google Chrome Incognito Mode Can Still Be Detected

#123

Earlier quoted context omitted.

No problem. All your favourite online services are no longer free though, what a bummer. Will it be a lite, regular or premium Google maps subscription? How about Facebook Messenger?

I use OSM and IRC, so that's fine by me!

You also put your time where your mouth is and compete against one of those free services (Github) :-) I don't even use SourceHut (yet!) and I send you money because what you are doing is awesome (admittedly a tiny amount -- if anyone can convince Boris Johnson to walk away from Brexit, I'll be able to up that ;-) ).

Re: Google Chrome Incognito Mode Can Still Be Detected

#124
post #24
post #23

Earlier quoted context omitted.

Just don't use sites that dont respect your privacy. If it doesn't like you blocking cookies, walk away.

So, don't use the internet? Because that's what you're describing. Better cut the power cord, too, just to be safe.

I whitelist cookies; only sites that I have a known relationship to (e.g., HN, for login) get to set cookies.

The overwhelming majority of the web still works just fine. It's trivial to pick out what doesn't, as it either tends to:

a. require cookies for some inane task that doesn't need them, and it tells me this

b. breaks horribly. Typically, JS trying to access LocalStorage, but not checking whether the call was successful or not.

The grandparent is also wrong about,

> Therefore if you do not have cookies from the major ad networks, you're either a brand-new device or an incognito browser.

No, or you're whitelisting all or third-party cookies. (The latter being significantly easier to do, and causes much less breakage. I don't think I've ever seen a third-party cookie cause breakage.)

N.b., I'm not necessarily recommending what I do to others; it takes a lot of work, and I really need better tooling around my flow. But it gives me the context on how cookies/persistence causes or does not cause site breakage.

Re: Google Chrome Incognito Mode Can Still Be Detected

#125

Client tracking throw Browser Fingerprinting is a spooky tech. Check these two websites to see for yourself. Try using different browsers, even aVPN connection, and see how trackable you are: 1) https://panopticlick.eff.org 2) https://amiunique.org

These things state I'm unique every time I go to them. That's the problem with the tech, it can't track very well.

Re: Google Chrome Incognito Mode Can Still Be Detected

#126
post #111

Earlier quoted context omitted.

The big idea here is that the web advertising economy is user-hostile, and has to go. Someone - Apple, Chrome extension, whatever - will go nuclear, and craft the AI ad blocker that will do to ads what Gmail did to spam. God willing.

I think the solution lies in a system that doesn't use HTTP. Been thinking about it for years.

Why? Would you please be more specific?

Re: Google Chrome Incognito Mode Can Still Be Detected

#128
post #15

Can this fight ever be won? If you've been browsing the internet for more than 5 minutes you already have cookies from some of the major ad networks. Therefore if you do not have cookies from the major ad networks, you're either a brand-new device or an incognito browser. All that is left to do is get in bed with the ad network to ask them if they have good cookies for this session. As it so happens most of the compa…

> All that is left to do is get in bed with the ad network to ask them if they have good cookies for this session.

What's funny is that this is pretty much what ReCaptcha v3 is. Asking how "authentic" the Google cookie looks.

Re: Google Chrome Incognito Mode Can Still Be Detected

#129

Earlier quoted context omitted.

No problem. All your favourite online services are no longer free though, what a bummer. Will it be a lite, regular or premium Google maps subscription? How about Facebook Messenger?

You don’t need detailed tracking to run ads. Newspapers did it in the time before the internet. What did occur, is that advertisers could not be sure of performance so placed more value on the prominence and reputation of the media source. National well reputed papers got the best deals, regardless of real world performance. It will lead to tight localization again, as advertisers can’t rely on Google just selecting…

They actually have ways of tracking ad performance in newspapers.

Remember the "mention this ad and get 10% discount" ads? There you go.

Re: Google Chrome Incognito Mode Can Still Be Detected

#130
post #48

Earlier quoted context omitted.

What is nytimes.com using now to detect incognito? Enabling filesystem in incognito used to work until a few days ago.

The article says they are using the quota trick.

Interesting on Firefox

>https://www.bleepingcomputer.com/PoC/incognito-detection/inc...

= NO Incognito

Menawhile on NYTimes

= You’re in private mode.

Post reply on HN