Case Study: Disclosure of Indirect Device Fingerprinting in Privacy Policies

Autor: Mayank Varia, Julissa Milligan, Ari Trachtenberg, Andrew Sellars, Trishita Tiwari, Sarah Scheffler
Rok vydání: 2021
Předmět:
Zdroj: Lecture Notes in Computer Science ISBN: 9783030559571
STAST
DOI: 10.1007/978-3-030-55958-8_10
Popis: Recent developments in online tracking make it harder for individuals to detect and block trackers. This is especially true for device fingerprinting techniques that websites use to identify and track individual devices. Direct trackers – those that directly ask the device for identifying information – can often be blocked with browser configurations or other simple techniques. However, some sites have shifted to indirect tracking methods, which attempt to uniquely identify a device by asking the browser to perform a seemingly-unrelated task. One type of indirect tracking known as Canvas fingerprinting causes the browser to render a graphic recording rendering statistics as a unique identifier. Even experts find it challenging to discern some indirect fingerprinting methods. In this work, we aim to observe how indirect device fingerprinting methods are disclosed in privacy policies, and consider whether the disclosures are sufficient to enable website visitors to block the tracking methods. We compare these disclosures to the disclosure of direct fingerprinting methods on the same websites.
Databáze: OpenAIRE