Security researchers at Spi Dynamics have demonstrated a technique that exposes the search queries and web pages that a user has visited.
Websites could use the technique to check whether a user has researched its products through search engines.
An insurance provider, for instance, could verify whether a client applying for life insurance has ordered cigarettes online. It could also allow an online retailer to check whether users have been shopping with competing stores.
"You can basically determine how loyal a customer I am and offer me a price break," Billy Hoffman, a lead security researcher with Spi Dynamics, told vnunet.com.
Hoffman likened the technique to the publication by AOL of 20 million search queries from 650,000 of its users last August.
The 439MB of data was released as part of a research project and AOL was soon forced to delete the information following privacy concerns.
Although the data could not directly be linked to individual users, The New York Times was able to trace one set of search queries to 62 year-old Thelma Arnold from Lilburn, Georgia.
"The release of the AOL data a few months ago showed that you can learn so much about a person from their search engine queries. Imagine that scary lack of privacy, but for everybody on the internet," said Hoffman.






Do you agree?
Have your say on this article