Questions tagged [user-tracking]
The user-tracking tag has no usage guidance.
171
questions
1
vote
2answers
109 views
Anonymity: standardization or randomization?
I wonder if it's better to standardize or randomize data for anonymity. For example, think of browser fingerprinting. If you standardize every parameter, you would have all browsers returning the same ...
1
vote
2answers
168 views
Preventing tracking pixels on Mozilla Thunderbird
Is there a way to prevent loading of tracking pixels on Mozilla Thunderbird ? I know there's a way to prevent loading images by default but I'd like to be able to load images without having to worry ...
0
votes
0answers
35 views
How does SameSite cookie header prevent tracking?
I understand how SameSite cookie header prevents CSRF. But how does it prevent tracking by 3rd party sites, since they could set SameSite=Lax or None, and the browser will still send them:
https://web....
0
votes
0answers
55 views
Why is it wise, from a security POV to have sessions expire? [duplicate]
It is a common practice to have sessions expire for users when they are logged in for a long period, especially if they are inactive. I've seen this particularly employed in systems where sensitive ...
0
votes
1answer
100 views
Identifying devices in mobile app using UUID
I have a mobile application, for Android and iOS (both native), that communicates with the backend through a REST API (over HTTPS).
The application allows users to sign in or use the app as a guest, ...
84
votes
3answers
8k views
What information about me do stores get via my credit card?
Lets say I buy something at some (physical) store and pay using a credit card on one of these electronic terminals. What information do the owners of this store get about me (or my credit card) from ...
0
votes
0answers
52 views
How does the Brave browser protect against sites that a person has already logged into?
I understand that the Brave browser does not allow for 3rd party cookies to be set so that a user will not be tracked by a 3rd party site.
However if I were to log into a site like Facebook and ...
3
votes
2answers
173 views
Can websites uniquely identify users by the sim card used to access the website?
If I was to use a phone's data connection to access a website, and then pop that sim card into another phone to access the same website, could the website tell that I am the same user?
0
votes
1answer
147 views
Is it possible to spoof the user agent of any application?
I love using .torrent files instead of file hosting sites like Mediafire and google drive because of their lack of support for larger files.
However, even with a VPN your User Agent is still ...
0
votes
1answer
94 views
How to catch people creating many accounts on the same website using very unique credentials?
Nowadays e-commerce is the new trend compared to the retail stores, but some sellers will manipulate their rankings through false purchases of their own items to boost rankings significantly. The ...
2
votes
1answer
167 views
Finding out if a series of job emails from the same person are a scam or a way of tracking/phishing?
I'm Indian, and have received a third job email from a Canadian "Co-founder and COO". I'm not even actively job searching.
He hasn't mentioned how he got my mail id or why I'm the right fit
for the ...
14
votes
5answers
2k views
Why are users tracked? [closed]
I'm trying to get a well-informed and full picture of why one as a single person should worry about being tracked across sites and uniquely identified. The reasons I can think of are:
Serving ads as ...
1
vote
0answers
56 views
Is perceptual hashing feasible to identify users [closed]
I have been shadow-banned on an app (Tinder) and I cannot get around it. I have been doing some background research into how they are able to identify me and have come across device fingerprinting (I ...
6
votes
2answers
231 views
Can a web app fingerprint your device as identical to a native app's fingeprint
I have installed an app on Android and my account got shadowbanned. I sniffed out the traffic with fiddler and see they use a analytics service that assigns your device a fingerprint.
I tried the web ...
1
vote
0answers
21 views
If my mail domain admin can check my activity through google business when I was logged in can I avoid them to do so by using a mail client? [closed]
I think it's secure to use log-in through a mail client like mail-spring.I think in this way we have separated the account just for mail.Can they still track my google search history.If anyone can ...
4
votes
0answers
118 views
Privacy & tracking concerns regarding Service Workers
TL;DR
Should I be concerned about sites I have visited start a service worker in my browser which happens to be listening for events "forever"?
Can a dormant service worker track me?
Longer ...
8
votes
1answer
346 views
Will two smartphones (identical hardware and software) generate the same canvas fingerprint?
When using Canvas Fingerprint (like on this website) to distinguish users, does two smartphones (same model, same OS version, and no browser/plugin customization) will share the same fingerprint?
0
votes
1answer
635 views
get ip address of person from facebook chat [closed]
A person was bugging my friend not necessarily threatening, but like sending useless messages for a long period of time on facebook.
Is it possible to obtain the IP address of such person?
(and then ...
2
votes
1answer
191 views
Is Verizon Still Injecting Perma-Cookies into Customer Traffic?
This article was published in 2014. Is Verizon still doing this to customer data? It makes sense to assume they are, but I'm hoping for some kind of official news article or something to validate its ...
2
votes
1answer
41 views
Can you serve up special content to an end-user based on IP or other identifiable data?
Is it possible to serve up specific content to an end-user? For example, I know your IP address, and other device information. Can I use that to serve up certain search results on a search engine, ...
2
votes
1answer
298 views
How to mitigate the consequences of being tracked by fingerprint2.js?
A webpage of a bank, where I get redirected to make a payment for my ticket, uses fingerprint2.js. The webpage doesn't work at all when I'm using AdBlock extension in my browser and fingerprint2.js ...
3
votes
0answers
460 views
How does Facebook Pixel's new first-party cookie work?
Facebook recently announced that they will begin offering a first-party cookie option for the Facebook Pixel. Previously, they only used third-party cookies. From their documentation:
You can now ...
2
votes
1answer
97 views
When to logout a user? [closed]
I am working on a security project which gives an admin control over certain devices in a company.
When using the web-based product, say the user switches context and opens another tab or skips to ...
0
votes
1answer
265 views
Android & Man In the Middle — how did Fox News do it?
A couple years ago Fox News aired a short clip on how smartphones track and upload user location/physical state data. The clip is freely available on youtube and it shows how two Android smartphones ...
1
vote
3answers
180 views
Why would fraudsters use old user-agents (old browsers versions)?
I would like to know why fraudsters would use old User-agents (with old browsers versions) to make conversions for PPL (Pay-Per-Lead) or PPS (Pay-Per-Sales) offers in affiliate marketing?
It seems ...
2
votes
1answer
426 views
Browser Fingerprinting to secure login
Is it a good Idea to identify if the user logging in is the actual user who created the account by using Browser fingerprinting?
Basically do a bunch of checks just as they click sign in and if it ...
0
votes
2answers
32 views
HTTP request from Embeds Trackable
I'm pretty new here so please be gentle with me, a security newb.
I have a website where I want to have a user fill out a form. This form already exists on another website I own (that has greater ...
-1
votes
2answers
515 views
Does multi-factor authentication make tracking/fingerprinting easier?
Is multi-factor authentication a privacy risk? Does it make tracking/fingerprinting easier?
It was seem so because whoever is accepting the OTP could track and record every OTP request and metadata ...
0
votes
0answers
92 views
Tracking user's private link on google analytics: will it be a security issue for GDPR?
Our web portal track page access with google analytics.
The access link will be then tracked and exposed in google analytics reports.
As the portal include personally identifiable information (PII), ...
1
vote
1answer
774 views
How to get the IP Adress of an email receiver
I am communicating through email with a scammer who is trying to by me mw own parcel of land. I already contacted the police but it could take 2 to 3 months before they start investigating. I want to ...
2
votes
0answers
74 views
How can I identify invisible online tracking images?
This question refers to invisible 1 pixel images that are placed on web pages to track you via how your browser renders the image. Is there any potential way to discover these images despite them ...
9
votes
3answers
2k views
Is Google Analytics tracking actually safe to use on pages with sensitive information?
When enabling Google Analytics, they ask you to embed a JS snippet on every page you want to track. That's fair enough.
But when you add this code are you giving Google the ability to scrape the ...
4
votes
1answer
2k views
Can websites track the tabs you open while logged into their website?
If I am on chrome and am looking up a product on Amazon on tab A, can they tell what I search if I open a tab B while tab A is still open? Should I use a new chrome or another browser window to ...
1
vote
2answers
102 views
Can a webpage track that I have downloaded the page source/webarchive?
Can a webpage track that I have downloaded the page source/webarchive?
Specifically on Safari. I understand that accessing a webpage via GET is already traceable back to the requester (me), but if I ...
0
votes
0answers
130 views
How would the identity of a company be discovered through banner ads?
Our company has started researching using a new tech. We started seeing banner ads for a consulting company "with expertise in" this new tech.
The recently we had a call from someone representing ...
21
votes
6answers
7k views
Is there a security advantage or risk in removing disabled user accounts?
So I'm having a debate with someone about whether or not to remove disabled accounts. My stance is that it is good network hygiene, reduces the amount of noise to sift through, etc. However, the ...
8
votes
1answer
1k views
Can CAPTCHA-solving patterns be used to track/identify a person?
Captchas are everywhere. Suppose you're a big company offering Captchas on many sites and you can easily track a user across the web simply by setting a cookie everytime some site loads your captcha ...
1
vote
1answer
119 views
Are Chrome file system API not supercookies? Why are people not worried about them?
Chrome has a file system API that seems to persist through normal clearing of the cache, etc.
(In fact, I'm not sure if there's any built-in way to clear this data globally.)
Isn't this a security ...
3
votes
3answers
619 views
How to confirm if a site is using Device Fingerprinting
Is it possible to confirm if a site is using Device Fingerprinting? When the site owner uses JavaScript, is there something we can look for in the script to confirm if a website is using device ...
1
vote
0answers
175 views
Digital Camera Fingerprinting via Instagram and Snapchat
I was going through one of the articles on camera fingerprinting that says that
using most basic Instagram or Snapchat filters will not get rid of the
camera fingerprint. However, changing the ...
6
votes
2answers
1k views
Does Yandex browser have known records of snooping for user data & passwords?
I've installed Yandex Browser (Based on Chromium) on Windows 10. I use LastPass for logins so I asked Yandex to not remember passwords.
While I was trying to login to another website, it gave me a ...
-1
votes
2answers
1k views
Can my employer track everything in my mobile even i disconnected my wifi connection?
Can my employer track everything in my mobile? I am always connected to wifi while working but disconnect it always after going home. We have an ID whenever we were connected to wifi. Also i ...
0
votes
1answer
74 views
If I log on facebook on Chrome am I trackable when I use Firefox?
I rarely use Facebook and rarely use Chrome. I would like to limit the tracking I am subject to, so I think it would be good to log on Facebook on Chrome and use only Chrome to use Facebook.
Does ...
111
votes
3answers
33k views
How does DuckDuckGo know my native language even though I am using a VPN in a country with a different language?
I recently started using a VPN and I've felt more comfortable browsing the Internet. My VPN allows me to select another country through which my traffic is routed to make it appear I'm located in that ...
1
vote
0answers
41 views
Electronic store security [closed]
Iam not sure if this is the right place to ask this question. I would like to know what security features an electronic store should have besides the general alarm system monitored by a security ...
0
votes
2answers
384 views
Is there a coordinated Firefox user-agent for anonymous browsing?
One fingerprinting element is the browser's user-agent string. If we consider one browser, Firefox, we can see that it has different strings across different OSes, distros, forks (Tor, IceCat) and ...
4
votes
1answer
434 views
How is Google's Sidewalk Lab's Free Wifi Hotspot Tracking me?
Elaborating from this question : Bluetooth/WiFi Identity tracking in public spaces - How to discover?
Questions:
How are they tracking me :
From a hardware perspective
Is it a mac address that ...
4
votes
2answers
1k views
Hidden network continually connecting that I cannot disconnect
Whenever I boot it connects. There is no option to disconnect it except to uncheck the "connect automatically" box, but it stays connected even if I reboot.
What is going on here?
Also, I cannot ...
0
votes
2answers
10k views
When my location is turned on can someone track me? [closed]
When the location is turned on can someone track me without me sharing my location with them?
0
votes
3answers
94 views
Single token in cookie for e-commerce site to store all data related to user in DB, is it secure?
I am building an e-commerce website using PHP, mysql, javascript.
My idea is to save one token, say a 50 character guid, to a single cookie, and use this to identify the user for each request.
I ...
