Questions tagged [user-tracking]
The user-tracking tag has no usage guidance.
214
questions
108
votes
3
answers
36k
views
How does DuckDuckGo know my native language even though I am using a VPN in a country with a different language?
I recently started using a VPN and I've felt more comfortable browsing the Internet. My VPN allows me to select another country through which my traffic is routed to make it appear I'm located in that ...
92
votes
5
answers
21k
views
How does Facebook track your browsing without third party cookies?
Facebook has served me an ad for a website I visited earlier in the day. I have third party cookies disabled and have not followed any links between the website and Facebook (links which could contain ...
87
votes
3
answers
45k
views
What information about me do stores get via my credit card?
Lets say I buy something at some (physical) store and pay using a credit card on one of these electronic terminals. What information do the owners of this store get about me (or my credit card) from ...
72
votes
4
answers
60k
views
How can you be tracked using screen resolution/monitor size in Tor?
Whenever I maximize the Tor browser, it shows a warning:
Maximizing Tor Browser can allow websites to determine you monitor size, which can be used to track you...
How can screen resolution or ...
34
votes
8
answers
9k
views
Why Say IP Addresses Are Harmless?
Whenever I see someone on the internet ask the question, "Can someone find out my IP Address from my tweets/my tumblr/facebook posts/whatever else", the response I always see is, "Who cares! An IP ...
33
votes
1
answer
31k
views
How do social media apps notify you when someone else takes a screenshot of your profile?
Social media apps like snapchat, instagram, viber, etc notify you if someone takes a screenshot of your profile, chat, conversation, story, etc.
How does the app find out that you are taking a ...
30
votes
2
answers
6k
views
How is Skype showing ads from my Google search history?
I can understand when I see the same ads across websites, and ads similar to my search history. Some tracking magic through cookies - fine.
But Skype has been showing me ads for exact terms I ...
29
votes
7
answers
6k
views
Trying to create safe website where security is handled by the website and not the user
I work with civil rights for children and youth and am trying to create a website for LGBT youth and children and their families. The website needs to be safe as it is still very dangerous in many ...
24
votes
3
answers
4k
views
Listening to phone calls as user profiling for marketing [closed]
I had a landline phone call about xyz with an xyz-expert (also on landline) for about an hour, for the first time. After couple of days I started getting suggested links on websites as an ad exactly ...
22
votes
2
answers
2k
views
Does this CSS code expose if a message is read, and how long they have been reading it?
This email analytics company offers an 'engagement metric' that shows how much time someone spends looking at an email, whether the email is printed or deleted.
They also claim it works in pretty ...
20
votes
6
answers
12k
views
Is there a security advantage or risk in removing disabled user accounts?
So I'm having a debate with someone about whether or not to remove disabled accounts. My stance is that it is good network hygiene, reduces the amount of noise to sift through, etc. However, the ...
20
votes
1
answer
16k
views
How can I detect real location of the user through their IP address?
There were many ways to detect the user's IP, for instance we could get it through a single click link or through any other medium of communication where we could get the user's IP.
But the tedious ...
19
votes
4
answers
28k
views
How does someone with HubSpot Sidekick knows when I opened their sent email?
This app claims to know when recipients opened the emails that were sent to them. Tracking clicked URLs is fairly straightforward. What I don't understand is how a 3rd party can possibly know when I ...
17
votes
2
answers
6k
views
Is it possible to identify who's behind a nmap -D scan?
Nmap's -D option stands for decoy, which means that the attacker can simulate that the attack is coming from multiple IPs, including attacker's IP.
From the point of view of the victim, is it ...
15
votes
3
answers
109k
views
Someone keeps using my email address. What to do?
I have had a GMail ever since it was created, so it's an email address that is easy to remember, but also easy for somebody else to get confused with.
Since I'm not going to post my email address ...
14
votes
5
answers
2k
views
Why are users tracked? [closed]
I'm trying to get a well-informed and full picture of why one as a single person should worry about being tracked across sites and uniquely identified. The reasons I can think of are:
Serving ads as ...
11
votes
7
answers
14k
views
Does a chain of proxies (e.g. one connecting to another and another and so on) make tracing the original IP harder/impossible?
I see nobody here has asked this question. What if one, instead of just using a single proxy, connected a proxy-to-proxy in a very long chain and downloaded something (illegal) using secure packets (...
11
votes
1
answer
10k
views
Identify Unique Computer through Tracking
How are websites able to uniquely track my computer?
I'm aware of: Cookies/Tracking, Super Cookies(HTML5 Cache), IP, Referrer, UA etc
I have been experimenting with Private Proxies and VPNs, but I ...
11
votes
3
answers
4k
views
Is Google Analytics tracking actually safe to use on pages with sensitive information?
When enabling Google Analytics, they ask you to embed a JS snippet on every page you want to track. That's fair enough.
But when you add this code are you giving Google the ability to scrape the ...
10
votes
2
answers
3k
views
How does sending referrer HTTP headers protect against CSRF attacks?
How does sending referrer HTTP headers protect against CSRF attacks?
I tried logging into an HTTPS site with Firefox's network.http.sendRefererHeader set to 0 (i.e., completely disabled, as a measure ...
10
votes
1
answer
3k
views
Can CAPTCHA-solving patterns be used to track/identify a person?
Captchas are everywhere. Suppose you're a big company offering Captchas on many sites and you can easily track a user across the web simply by setting a cookie everytime some site loads your captcha ...
10
votes
4
answers
9k
views
Preventing tracking pixels on Mozilla Thunderbird
Is there a way to prevent loading of tracking pixels on Mozilla Thunderbird ? I know there's a way to prevent loading images by default but I'd like to be able to load images without having to worry ...
10
votes
1
answer
1k
views
How to block Evercookie
There is a Javascript library called Evercookie designed to track the user. It writes cookie information into every possible location:
Standard HTTP cookies
local shared objects (Flash cookies)
...
9
votes
1
answer
5k
views
What are the privacy pros and cons of using a public DNS server vs. your own?
Whether I'm using a normal internet connection setup, or tunnelling it through an anonymizing VPN or through TOR, what information of mine is revealed to whatever DNS server that I choose (e.g. Google ...
9
votes
1
answer
1k
views
Privacy & tracking concerns regarding Service Workers
TL;DR
Should I be concerned about sites I have visited start a service worker in my browser which happens to be listening for events "forever"?
Can a dormant service worker track me?
Longer ...
8
votes
1
answer
1k
views
Will two smartphones (identical hardware and software) generate the same canvas fingerprint?
When using Canvas Fingerprint (like on this website) to distinguish users, does two smartphones (same model, same OS version, and no browser/plugin customization) will share the same fingerprint?
8
votes
0
answers
826
views
How does Facebook Pixel's new first-party cookie work?
Facebook recently announced that they will begin offering a first-party cookie option for the Facebook Pixel. Previously, they only used third-party cookies. From their documentation:
You can now use ...
7
votes
4
answers
6k
views
Third party analytics/tracking javascript tags and PCI DSS
Although variants of this question have been asked before, they seem to be about general risk, and I'm interested in the PCI DSS connotations.
If an e-commerce site is looking for level 1 or level 2 ...
7
votes
2
answers
3k
views
Is there a way to bypass click-tracking links in emails?
Most newsletters that I receive use mass-mailing software that rewrites links to add tracking information. That is, instead of www.google.com, the email will point to something like links.somecompany....
7
votes
1
answer
17k
views
Can your Windows or Linux username be exposed to websites?
For example:
Accessing a website with javascript enabled can expose information such as browser, fonts and local time. Can it, theoretically, expose your Windows or Linux username?
Will saving a file ...
7
votes
3
answers
3k
views
Ali Express hijacking my Chrome
So randomly every now and then, when I click on a link - instead of opening it normaly, a new tab is opened and some website with "tracking" in the name (I haven't caught the full name yet, it's quite ...
6
votes
4
answers
7k
views
Do RFID key cards track the user through entry ways?
At work we use RFID tags to enter the building and each floor. The tags double as photo ID, I always wondered if they are used (or can be used) to keep track of staff movements.
I always assumed that ...
6
votes
1
answer
13k
views
Can websites track the tabs you open while logged into their website?
If I am on chrome and am looking up a product on Amazon on tab A, can they tell what I search if I open a tab B while tab A is still open? Should I use a new chrome or another browser window to ...
6
votes
2
answers
2k
views
Can a web app fingerprint your device as identical to a native app's fingeprint
I have installed an app on Android and my account got shadowbanned. I sniffed out the traffic with fiddler and see they use a analytics service that assigns your device a fingerprint.
I tried the web ...
6
votes
2
answers
161k
views
Are VISA gift cards untraceable?
I was in a retail store today, and these people were discussing how easy it is for people to use stolen credit cards, and buy those visa gift cards without being traced after they purchase the gift ...
6
votes
2
answers
5k
views
How does X-UIDH user tracking work and how can I detect it?
See these two EFF articles about how Verizon puts a tracker ID in the header of a http request, circumventing anti-cookie measures:
Verizon Injecting Perma-Cookies to Track Mobile Customers, ...
6
votes
2
answers
2k
views
Does Yandex browser have known records of snooping for user data & passwords?
I've installed Yandex Browser (Based on Chromium) on Windows 10. I use LastPass for logins so I asked Yandex to not remember passwords.
While I was trying to login to another website, it gave me a ...
5
votes
2
answers
10k
views
How does the Random Hardware Access function work on a smartphone?
Certain smartphones and laptops, one of which my Windows 10 Phone and Laptop (Windows 10, redstone 1 update) have a function called "Random Hardware Access" under the WiFi settings.
The settings has ...
5
votes
1
answer
2k
views
Can a PDF embed a tracking image?
I know that PDFs can contain embedded images and Javascript.
Can a PDF contain something that tracks you? For instance, can it contain a remote image that, when the PDF is opened, will fetch that ...
5
votes
1
answer
20k
views
How to trace virtual phone number?
Suppose I received a call from internet with some virtual number, I called the same number back after few days but it didn't exist at the time or it was routed to some other user.
Is there a way to ...
5
votes
3
answers
572
views
How do open (no password) wireless networks deal with abuse?
Many places today such as restaurants, malls, and other public places have free and open WiFi that does not need a password or login information to access. That means that anyone, even people outside ...
5
votes
1
answer
503
views
What is this user trying to do?
I work with a company that creates marketing software, we recently created a forum so we could talk with users who need support.
I'm the main admin on this forum and a user, let's call them person1 ...
5
votes
2
answers
28k
views
Is it possible to identify the source of message in whatsapp?
Is it possible to identify the real source of message in whatsapp?
Scenario :
Texting whatsapp message to a group,one of the group member forwards it to another and it goes on atlast one day it ...
5
votes
1
answer
680
views
Government/ISP tracking of internet activity trivial to evade?
The recently announced Investigatory Powers Bill in the United Kingdom will mean that ISPs must store the internet activity of everyone for one year.
Anyone who wishes to evade such tracking can use ...
5
votes
1
answer
2k
views
Prevent all Firefox Addons from sending data
Firefox addons are known to send data (like the URLs visited, location, installed cookies etc.) to their maintainers and (from there) to third parties. See for instance the newest "scandal" about the ...
5
votes
1
answer
330
views
Can HPKP be used to track users?
There is already a large flora of "supercookies" and browser fingerprinting methods out there. I am wondering whether HPKP provides yet another method to track users?
A server could send an extra ...
5
votes
2
answers
3k
views
OSX Yosemite and Security/Privacy
I currently have a Macbook Pro running OSX Mavericks, being the skeptic that I am I always wait a bit before upgrading to 'new' OS versions when they are released to see how they fare both stability ...
5
votes
1
answer
562
views
How is Google's Sidewalk Lab's Free Wifi Hotspot Tracking me?
Elaborating from this question : Bluetooth/WiFi Identity tracking in public spaces - How to discover?
Questions:
How are they tracking me :
From a hardware perspective
Is it a mac address that they ...
5
votes
2
answers
10k
views
How are logs stored with ISP?
When dynamic IP addresses are assigned to users, how do ISPs store the logs? Do they just store the time and address of the websites visited or do they store the whole URL like we see in our browsers?
...
5
votes
6
answers
15k
views
Stop YouTube tracking when signed out
I use YouTube while signed out. I have a Google account, but I only sign in to
check email, then sign right back out. YouTube is tracking what I watch when
signed out, then putting similar videos in ...