0

How difficult it is to find out someone's searching patterns on Google for example or sites I'm visiting? There is things like disconnect search engine, Tor browser and VPN etc. that provides the anonymity and privacy and it seems to be a growing concern for active internet users today. Can someone find out my search behaviour through IP adress for example, through my ISP or something similar?

closed as too broad by techraf, S.L. Barth, Matthew, grochmal, Xander Nov 16 '16 at 21:44

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    Someone? Google? ISP? Law enforcement? or just a normal person? – schroeder Nov 16 '16 at 7:50
  • Well, for example normal person who wants to know what I am doing (for some reason) in internet. Law enforcement can do it mostly through ISP, or? – Deloss Nov 16 '16 at 11:31
  • So, can someone walk up to Google or your ISP with your IP and ask for all your details? – schroeder Nov 16 '16 at 17:40
1

One of the most useful explanations I've found is the EFF's page on Tor and HTTPS. It's an interactive diagram that shows who has access to what information about you, normally, when using one of Tor or HTTPS, or using both. It is a bit U.S.-centric; laws in other countries may affect what organizations can legally gather.

One limitation to what that page covers is that it only discusses what an observer can find out about a single HTTP request. When discussing things like tracking your search results across multiple days, there's more to talk about in terms of deanonymizing traffic. That is, if I know someone searched for "foo" and I know someone searched for "bar", do I know those were the same person? IP is the most obvious way you can be tracked, and persistent cookies is another well-known option, but there are also plenty of more sophisticated options like HSTS super cookies and fingerprinting (more here and here). It's even easier if you log in to sites (Are you logged into a Google account? A Facebook account?).

There's a lot more to talk about, more than will probably fit in a Stack Exchange answer. If you have more specific questions, I'd encourage you to ask those separately.

The very short tldr is "yes, companies and governments (yours and others) know what you're doing".

Not the answer you're looking for? Browse other questions tagged or ask your own question.