Questions tagged [user-tracking]
The user-tracking tag has no usage guidance.
0
votes
0answers
21 views
Is Verizon Still Injecting Perma-Cookies into Customer Traffic?
This article was published in 2014. Is Verizon still doing this to customer data? It makes sense to assume they are, but I'm hoping for some kind of official news article or something to validate its ...
2
votes
1answer
31 views
Can you serve up special content to an end-user based on IP or other identifiable data?
Is it possible to serve up specific content to an end-user? For example, I know your IP address, and other device information. Can I use that to serve up certain search results on a search engine, ...
2
votes
1answer
79 views
How to mitigate the consequences of being tracked by fingerprint2.js?
A webpage of a bank, where I get redirected to make a payment for my ticket, uses fingerprint2.js. The webpage doesn't work at all when I'm using AdBlock extension in my browser and fingerprint2.js ...
3
votes
0answers
347 views
How does Facebook Pixel's new first-party cookie work?
Facebook recently announced that they will begin offering a first-party cookie option for the Facebook Pixel. Previously, they only used third-party cookies. From their documentation:
You can now ...
2
votes
1answer
90 views
When to logout a user? [closed]
I am working on a security project which gives an admin control over certain devices in a company.
When using the web-based product, say the user switches context and opens another tab or skips to ...
0
votes
1answer
148 views
Android & Man In the Middle — how did Fox News do it?
A couple years ago Fox News aired a short clip on how smartphones track and upload user location/physical state data. The clip is freely available on youtube and it shows how two Android smartphones ...
1
vote
3answers
166 views
Why would fraudsters use old user-agents (old browsers versions)?
I would like to know why fraudsters would use old User-agents (with old browsers versions) to make conversions for PPL (Pay-Per-Lead) or PPS (Pay-Per-Sales) offers in affiliate marketing?
It seems ...
1
vote
1answer
98 views
Browser Fingerprinting to secure login
Is it a good Idea to identify if the user logging in is the actual user who created the account by using Browser fingerprinting?
Basically do a bunch of checks just as they click sign in and if it ...
0
votes
2answers
31 views
HTTP request from Embeds Trackable
I'm pretty new here so please be gentle with me, a security newb.
I have a website where I want to have a user fill out a form. This form already exists on another website I own (that has greater ...
-1
votes
2answers
170 views
Does multi-factor authentication make tracking/fingerprinting easier?
Is multi-factor authentication a privacy risk? Does it make tracking/fingerprinting easier?
It was seem so because whoever is accepting the OTP could track and record every OTP request and metadata ...
0
votes
0answers
86 views
Tracking user's private link on google analytics: will it be a security issue for GDPR?
Our web portal track page access with google analytics.
The access link will be then tracked and exposed in google analytics reports.
As the portal include personally identifiable information (PII), ...
1
vote
1answer
174 views
How to get the IP Adress of an email receiver
I am communicating through email with a scammer who is trying to by me mw own parcel of land. I already contacted the police but it could take 2 to 3 months before they start investigating. I want to ...
2
votes
0answers
68 views
How can I identify invisible online tracking images?
This question refers to invisible 1 pixel images that are placed on web pages to track you via how your browser renders the image. Is there any potential way to discover these images despite them ...
7
votes
3answers
1k views
Is Google Analytics tracking actually safe to use on pages with sensitive information?
When enabling Google Analytics, they ask you to embed a JS snippet on every page you want to track. That's fair enough.
But when you add this code are you giving Google the ability to scrape the ...
4
votes
1answer
655 views
Can websites track the tabs you open while logged into their website?
If I am on chrome and am looking up a product on Amazon on tab A, can they tell what I search if I open a tab B while tab A is still open? Should I use a new chrome or another browser window to ...
1
vote
2answers
100 views
Can a webpage track that I have downloaded the page source/webarchive?
Can a webpage track that I have downloaded the page source/webarchive?
Specifically on Safari. I understand that accessing a webpage via GET is already traceable back to the requester (me), but if I ...
0
votes
0answers
41 views
What are the vulnerabilities of storing a User's Public IP address in Secure Messaging Service?
What are the drawbacks if a Secure Messaging App (Privacy&Encryption based) stores a User's Public IP Address ?
Are Public IPs used to detect concurrent connections from across the gloabe ? Can ...
0
votes
0answers
111 views
How would the identity of a company be discovered through banner ads?
Our company has started researching using a new tech. We started seeing banner ads for a consulting company "with expertise in" this new tech.
The recently we had a call from someone representing ...
21
votes
5answers
5k views
Is there a security advantage or risk in removing disabled user accounts?
So I'm having a debate with someone about whether or not to remove disabled accounts. My stance is that it is good network hygiene, reduces the amount of noise to sift through, etc. However, the ...
8
votes
1answer
694 views
Can CAPTCHA-solving patterns be used to track/identify a person?
Captchas are everywhere. Suppose you're a big company offering Captchas on many sites and you can easily track a user across the web simply by setting a cookie everytime some site loads your captcha ...
1
vote
1answer
75 views
Are Chrome file system API not supercookies? Why are people not worried about them?
Chrome has a file system API that seems to persist through normal clearing of the cache, etc.
(In fact, I'm not sure if there's any built-in way to clear this data globally.)
Isn't this a security ...
2
votes
2answers
373 views
How to confirm if a site is using Device Fingerprinting
Is it possible to confirm if a site is using Device Fingerprinting? When the site owner uses JavaScript, is there something we can look for in the script to confirm if a website is using device ...
1
vote
0answers
157 views
Digital Camera Fingerprinting via Instagram and Snapchat
I was going through one of the articles on camera fingerprinting that says that
using most basic Instagram or Snapchat filters will not get rid of the
camera fingerprint. However, changing the ...
6
votes
2answers
784 views
Does Yandex browser have known records of snooping for user data & passwords?
I've installed Yandex Browser (Based on Chromium) on Windows 10. I use LastPass for logins so I asked Yandex to not remember passwords.
While I was trying to login to another website, it gave me a ...
-1
votes
2answers
670 views
Can my employer track everything in my mobile even i disconnected my wifi connection?
Can my employer track everything in my mobile? I am always connected to wifi while working but disconnect it always after going home. We have an ID whenever we were connected to wifi. Also i ...
0
votes
1answer
71 views
If I log on facebook on Chrome am I trackable when I use Firefox?
I rarely use Facebook and rarely use Chrome. I would like to limit the tracking I am subject to, so I think it would be good to log on Facebook on Chrome and use only Chrome to use Facebook.
Does ...
111
votes
3answers
32k views
How does DuckDuckGo know my native language even though I am using a VPN in a country with a different language?
I recently started using a VPN and I've felt more comfortable browsing the Internet. My VPN allows me to select another country through which my traffic is routed to make it appear I'm located in that ...
0
votes
0answers
255 views
Does the WiFi or Bluetooth device send a unique MAC address only in probe requests?
Is it possible to intercept MAC addresses that are sent in normal communication between a device and a router (in Wifi/Bluetooth communication)?
1
vote
0answers
41 views
Electronic store security [closed]
Iam not sure if this is the right place to ask this question. I would like to know what security features an electronic store should have besides the general alarm system monitored by a security ...
0
votes
2answers
269 views
Is there a coordinated Firefox user-agent for anonymous browsing?
One fingerprinting element is the browser's user-agent string. If we consider one browser, Firefox, we can see that it has different strings across different OSes, distros, forks (Tor, IceCat) and ...
4
votes
1answer
418 views
How is Google's Sidewalk Lab's Free Wifi Hotspot Tracking me?
Elaborating from this question : Bluetooth/WiFi Identity tracking in public spaces - How to discover?
Questions:
How are they tracking me :
From a hardware perspective
Is it a mac address that ...
4
votes
2answers
723 views
Hidden network continually connecting that I cannot disconnect
Whenever I boot it connects. There is no option to disconnect it except to uncheck the "connect automatically" box, but it stays connected even if I reboot.
What is going on here?
Also, I cannot ...
0
votes
2answers
8k views
When my location is turned on can someone track me? [closed]
When the location is turned on can someone track me without me sharing my location with them?
0
votes
3answers
88 views
Single token in cookie for e-commerce site to store all data related to user in DB, is it secure?
I am building an e-commerce website using PHP, mysql, javascript.
My idea is to save one token, say a 50 character guid, to a single cookie, and use this to identify the user for each request.
I ...
0
votes
1answer
305 views
eM Client auto-downloads avatars for e-mail senders, including spammers. Can this be used against me?
After a recent upgrade, eM Client started showing me avatars for e-mail senders (including senders of spam messages). On their blog eM says:
eM Client now automatically downloads and displays ...
5
votes
6answers
2k views
Stop YouTube tracking when signed out
I use YouTube while signed out. I have a Google account, but I only sign in to
check email, then sign right back out. YouTube is tracking what I watch when
signed out, then putting similar videos in ...
1
vote
1answer
238 views
How are Google always identifying me? [closed]
I'm trying to create multiple Google accounts
Here's my setup:
I use Firefox with the FoxyProxy plugin and a bunch of IP's.
I use the Firefox Random Agent Spoofer plugin, with the following ...
1
vote
0answers
165 views
Why does the task switcher shows the background app in preview?
Normally on android devices, the task switcher shows screenshot of the last state of the app in preview. But on my device for Facebook, it shows the screenshot of the background app instead of ...
-1
votes
1answer
82 views
Tracking a cellphone
Can my cellphone be traced if I used a library wifi to send a message on a school site using their contact us portal? I sent a message basically but I am wondering if they will see that it came like ...
-5
votes
1answer
100 views
Capture location over ip? [closed]
I want to ask you is it possible to programm a programm (in python) that can track people over their ip adress.
Or do you know a programm that can do it.
2
votes
1answer
534 views
Cross-domain tracking techniques
I have read several articles about user tracking through web trackers (e.g. doubleclick) across domains. Many articles write about cookies, web storage, flash cookies, ETags or image caching ...
0
votes
2answers
169 views
Can a telephone call be traced back to my location?
Basically the title, can a simple telephone call be traced back to my location like seen in the common movies, and if so, what are the ways to prevent this from happening?
0
votes
1answer
161 views
How much can my company track me? [duplicate]
It is common sense that companies networks are being monitored and they can track what https you visited. But how much does companies have access to on tracking your usage?
HTTPS and websites are a ...
1
vote
2answers
186 views
Are there tracking methods for targeted ads from regular cell phone use, and how can one monitor that?
There are many stories of individuals exchanging information near a cell phone, then finding targeted ads closely related to that information, with those same individuals claiming they did not search ...
5
votes
1answer
318 views
What is this user trying to do?
I work with a company that creates marketing software, we recently created a forum so we could talk with users who need support.
I'm the main admin on this forum and a user, let's call them person1 ...
10
votes
1answer
611 views
How to block Evercookie
There is a Javascript library called Evercookie designed to track the user. It writes cookie information into every possible location:
Standard HTTP cookies
local shared objects (Flash cookies)
...
1
vote
1answer
86 views
Families of spam [duplicate]
I typically use a different email address for every site that demands one. It's an additional factor I use to authenticate that this particular email really came from a particular site. Many of ...
2
votes
0answers
77 views
Can I trace malicious email sent through a cloud hosting service?
Around the time my phone started acting like it was hacked, I was sent a suspicious email that opened automatically into a website without clicking on anything. I tracked it to a cloud hosting service....
1
vote
1answer
308 views
How is wsj.com tracking users to find how many articles I have read?
I was exploring how websites track users with how paywalls are implemented. WSJ.com has the best ways to detect users who have read content (which I am unable to figure out how they have done it).
...
1
vote
0answers
416 views
Risk considerations with using Hotjar tracking service
Recently have received requested to implement Hotjar service on our e-commerce solution. This is a user tracking / heatmap tracking service that essential tracks all user interactions with your site ...
