Kaspersky AV injected unique ID allowing sites to track users in incognito mode
1–10 of 164 posts
Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode
#2Their fix is apparently to not leak machine-unique UUIDs but UUIDs unique to the version of the AV. Thanks Kaspersky for leaking if the users AV is vulnerable to exploits!
Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode
#3Previous discussion: https://news.ycombinator.com/item?id=20703699
Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode
#4Avast also tracks clickstream data and sells it to Jumpshot.
Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode
#5Avast also tracks clickstream data and sells it to Jumpshot.
Jumpshot is Avast.
Just a subsidiary.
Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode
#6Interesting. I think its time to get rid of this junk. I always had a bad feeling about AVs, due to repeated "extra vulnerabilities" they seemed to introduce, while not providing measurable added value compared to Windows Defender.
That Kaspersky is apparently too stupid to fix this leak properly even after it was pointed out, suggests to me that their developers obviously are incompetent and the trust int hem doing AV right is approaching zero, if they can't even load a script into a website without leaking like the Iraqi marine.
Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode
#7Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode
#8Interesting. I think its time to get rid of this junk. I always had a bad feeling about AVs, due to repeated "extra vulnerabilities" they seemed to introduce, while not providing measurable added value compared to Windows Defender. That Kaspersky is apparently too stupid to fix this leak properly even after it was pointed out, suggests to me that their developers obviously are incompetent and the trust int hem doing…
Indeed.
But then, I don't trust Microsoft, either.
In Debian, I can be reasonably confident that no information leaves the system without my authorization.
Edit: Just out of curiosity, am I wrong in mistrusting Microsoft, or in trusting Debian?
Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode
#9Re: Kaspersky AV injected unique ID allowing sites to track users in incognito mode
#10Honest question: what is AV even for these days? I have had some form of AV on all of my Windows machines since the 90's. I don't think I have seen a detection in at least ten years.