Skip to main content
182 votes
Accepted

How does DuckDuckGo know my native language even though I am using a VPN in a country with a different language?

One possible explanation is that DuckDuckGo is using the headers that are sent in your request to determine their display. For example, it is very common to use the Accept-Language header to ...
PunPun1000's user avatar
  • 1,375
120 votes

How does Facebook track your browsing without third party cookies?

Facebook does not need to use third-party cookies to track you as you move from site to site, if the sites contain Facebook's javascript code (e.g. for the Facebook 'like' button). In this case, ...
mti2935's user avatar
  • 23.5k
95 votes

Trying to create safe website where security is handled by the website and not the user

Don't do it If you are targeting unsafe regimes, the consequences can be severe. For example, in Iran, condemned homosexuals are usually sentenced to death by hanging. It would only take the ...
paj28's user avatar
  • 33.4k
63 votes

What information about me do stores get via my credit card?

From the card itself, the Merchant gets the track data, which includes card number, expiration date, and cardholder name. If the Merchant requires zip code verification, they'll get your zip code, ...
gowenfawr's user avatar
  • 72.9k
47 votes

How does DuckDuckGo know my native language even though I am using a VPN in a country with a different language?

I had the same problem: Google always responding in my native language, even though I used a VPN elsewhere in the world. I wiped all cookies and so on....to no avail... and then I found that I had an ...
entrop-x's user avatar
  • 1,017
32 votes
Accepted

Listening to phone calls as user profiling for marketing

Data dealers often buy data from multiple sources and aggregate it to generate an all-compassing user-profile from it. For example: xyz company sold your telephone number and what the conversation ...
Philipp's user avatar
  • 49.4k
27 votes

Trying to create safe website where security is handled by the website and not the user

This is not an easy thing to do. There are a few different ways to get something like what you want. First, use HTTPS. This stops anyone from seeing the data being transferred other than the server ...
Topher Brink's user avatar
  • 1,649
25 votes

Trying to create safe website where security is handled by the website and not the user

Your requirements as stated are physically impossible. Think of it like this. If you were posting a letter to someone in another country and wanted to be sure a powerful dangerous group was both ...
John McNamara's user avatar
25 votes

How does Facebook track your browsing without third party cookies?

In addition to the other answers: The website you visited could have sent information about your visit directly to Facebook using their "Server-side API". This doesn't need any client-side ...
Aaron F's user avatar
  • 351
20 votes
Accepted

Is there a security advantage or risk in removing disabled user accounts?

In general, it is always best to reduce your attack surface. No system is ever perfect and your deactivation protocol will be no exception due to both programmatic and potential human error. Risk 1: ...
dFrancisco's user avatar
  • 2,721
18 votes

Why are users tracked?

Users are tracked because the collected information can be sold. A major reason why data is collected from users is due to the simple fact that people will pay for the data. There are many companies ...
forest's user avatar
  • 66.8k
14 votes

What information about me do stores get via my credit card?

At the very least, they can get the card number. Most receipts will even have the last few digits of the card number printed on them, but the system will have had the full number at some point, and ...
Matthew's user avatar
  • 27.3k
13 votes
Accepted

How does sending referrer HTTP headers protect against CSRF attacks?

To understand this, one first needs to understand what a cross-site request forgery is. A Cross-Site Request Forgery is when the attacker has some script or embedded media on a website they control ...
Philipp's user avatar
  • 49.4k
10 votes

Listening to phone calls as user profiling for marketing

The whole discussion of privacy issues today has turned to matters of profiling and patterns, think, prediction. Prediction is the big thing these days. "You might also be interested in xyz..." This ...
C. Kelly's user avatar
  • 201
10 votes

Why are users tracked?

The simple yet complicated answer is Because of data. In addition to what schroeder said (tracking users for a commercial optimization,profiling and targeted marketing...), by profiling you, a ...
Soufiane Tahiri's user avatar
10 votes

How does Facebook track your browsing without third party cookies?

There are more ways to keep track of your browser fingerprint. For example the following data may be used for finger printing: Operating system Installed fonts Installed Browser add-ons User agent, ...
com2ghz's user avatar
  • 217
9 votes

How does DuckDuckGo know my native language even though I am using a VPN in a country with a different language?

I think @punpun1000 is right, you can easily test your browser language by visiting this website - https://browserleaks.com/ip or just simply run this JavaScript code: alert(navigator.language);//...
Mirsad's user avatar
  • 10.2k
9 votes
Accepted

Can CAPTCHA-solving patterns be used to track/identify a person?

This is absolutely possible. Whether or not reCaptcha itself or any other given captcha service does this, I don't know, but biometrics based on mouse movements are absolutely able to uniquely ...
forest's user avatar
  • 66.8k
8 votes

Can a PDF embed a tracking image?

Can a PDF contain something that tracks you? If you mean in the PDF file itself, and part of the PDF standard, and which does not require the user to click on something (like a link annotation), it ...
Ryan's user avatar
  • 181
7 votes

How does sending referrer HTTP headers protect against CSRF attacks?

Couldn't the attacker just spoof the referrer header No, they can't. It is obviously not possible when submitting a form (or the various GET methods such as image tags or url in CSS), and it is not ...
tim's user avatar
  • 29.6k
7 votes
Accepted

How to block Evercookie

Blocking access to this specific library can be done with the acl mechanism in squid if you know the full URL of the library or a relevant part of the path which should of course match only against ...
Steffen Ullrich's user avatar
7 votes
Accepted

What is this user trying to do?

Assuming this user is legitimately trying to participate in a bug bounty, they should not be attempting drop a database via SQL injection. This user sounds like a very inexperienced penetration ...
Dan Landberg's user avatar
  • 3,322
7 votes
Accepted

Can websites track the tabs you open while logged into their website?

Amazon can confidently tell what you you're looking at on another tab if the site you are looking at is affiliated with or is Amazon themselves. This can be achieved through cookies, browser ...
Rubydesic's user avatar
  • 188
7 votes
Accepted

Will two smartphones (identical hardware and software) generate the same canvas fingerprint?

This site describes the techniques used in canvas fingerprinting: The technique is based on the fact that the same canvas image may be rendered differently in different computers. This happens for ...
Mike Ounsworth's user avatar
7 votes

Why are users tracked?

I would re-focus your conclusion about ads to be more generic, and bring the question more closely aligned with security/privacy. Users are tracked across a single website, across multiple websites, ...
schroeder's user avatar
  • 129k
7 votes

How does Facebook track your browsing without third party cookies?

I want to clarify that what you are seeing is most likely a retargeting advertisement (Learn more at wikipedia). The website you visited may be voluntarily sending data to Facebook in order to serve ...
ShadowTiger's user avatar
6 votes
Accepted

How does the Random Hardware Access function work on a smartphone?

This feature randomly changes the MAC address reported by the phone. Nothing else. The MAC address is available to the Wi-Fi network but also, potentially, to software running on the device. E.g. a ...
Julian Knight's user avatar
6 votes
Accepted

Does blocking ads and deleting cookies improve privacy online?

Let's see: I always use uBlock This improves your privacy protection. Note that some ads are only not shown, but still running in background (thus they still can get some info about you such as IP)...
George Y.'s user avatar
  • 3,534

Only top scored, non community-wiki answers of a minimum length are eligible