Security researchers have demonstrated a technique that exposes the search queries and web pages that a user has visited
Researchers warn of a 'scary lack of privacy'

Browser history hack compromises user privacy

Proof-of-concept code demonstrates search history 'theft'

Written by Tom Sanders in California

Security researchers at Spi Dynamics have demonstrated a technique that exposes the search queries and web pages that a user has visited. 

Websites could use the technique to check whether a user has researched its products through search engines.

An insurance provider, for instance, could verify whether a client applying for life insurance has ordered cigarettes online. It could also allow an online retailer to check whether users have been shopping with competing stores.

"You can basically determine how loyal a customer I am and offer me a price break," Billy Hoffman, a lead security researcher with Spi Dynamics, told vnunet.com

Hoffman likened the technique to the publication by AOL of 20 million search queries from 650,000 of its users last August. 

The 439MB of data was released as part of a research project and AOL was soon forced to delete the information following privacy concerns.

Although the data could not directly be linked to individual users, The New York Times was able to trace one set of search queries to 62 year-old Thelma Arnold from Lilburn, Georgia. 

"The release of the AOL data a few months ago showed that you can learn so much about a person from their search engine queries. Imagine that scary lack of privacy, but for everybody on the internet," said Hoffman.

Tags:

Further reading

Related articles

Opera claims to prevent web-based attacks

New browser includes Haute Secure for malware protection   More...

Check Point puts ForceField around browsers

ZoneAlarm plays in the sandbox   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

25 Jul 2008

7.85 MBPodcast Special: Views from the Valley More...

24 Jul 2008

3.68 MBSpammer jailed, Esquire e-cover, and network passwords More...

23 Jul 2008

2.99 MBSmall time security, official 'spying' requests and a spammer jail break More...

Poll

EUROPEAN E-COMMERCE

EUROPEAN E-COMMERCE

Are you happy making an online purchase from another European country?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Credit card transaction

Credit card fraud rampant in the UK

Attempted frauds go unreported and ignored, analysts claim   More...

Intel

Intel rolls out new embedded line-up

System-on-a-chip offerings promise footprint and power saving   More...

Advertisement

Network cables

Tech giants collaborate on wireless HD

Another attempt at cable-free transmission in the home   More...

iPhone fever fills AT&T coffers

US provider cashes in on Apple smartphone   More...

Advertisement