What Your Browser Says About You

Sue Marquette Poremba

Another day, another round of Facebook and privacy articles.


However, today I came across another article that took me back to the old days, when privacy concerns centered around browsers and your browsing history. The article, "On the Web, your browser history is an open book," was published on Sunbelt Blog and focuses on a paper by researchers Artur Janc and Lukasz Olejnik. As is reported in the blog, the paper:


describes how a decade-old "feature" of Cascading Style Sheets (CSS) allows Web sites to tap the "visited" pseudoclass and read a visitor's browser history.

This leaves browsers vulnerable to attacks. Dan Goodin wrote in a piece for The Register that these attacks expose detailed information about viewing habits, including news articles they've read and the Zip Codes they've entered into online forms. He continued:

Researchers showed how webmasters can launch attacks that detect Zip Codes entered into weather or movie listings sites, find search terms entered into Google and Bing, and discover specific articles viewed on Wikileaks and dozens of popular news sites.

Separate research released earlier this week showed that 84 percent of browser users leave digital fingerprints that can uniquely identify them. It stands to reason that attacks that combine both methods could unearth even more information most presume is private.

Since many people enter personal information on computers connected through company websites, it is likely these vulnerabilities in browser history also leave business information open to attack.


This is an issue that faces every browser. While developers work on plug-ins and work-arounds to fix the problem, there is one solution enterprise and individuals might want to employ, according to the Sunbelt Blog: Turn off the browser history.

Add Comment      Leave a comment on this blog post
May 22, 2010 1:12 AM Peter Laitin Peter Laitin  says:

I have to say that Invincea has not only come up with a great solution, but it is American made with American know how.  The folks at DARPA gave Dr. Anup Ghosh the opportunity to develop a solution that keeps malware off the OS...well...he did it and finally a threat layer that has finally addressed the new threat vector.  The secure PDF viewer is also state of the art...check it out. 


Post a comment





(Maximum characters: 1200). You have 1200 characters left.




Subscribe to our Newsletters

Sign up now and get the best business technology insights direct to your inbox.