Everyone who can now see your entire internet history, including the taxman

Re:Everyone who can now see your entire internet history, in... by oakesm9 on Friday November 25, 2016 @07:12AM (#13036159)

> Because you are not a unique and special snowflake. If you regularly go to /r/The_Donald, it says something specific about your politics (probably). Same for /r/LateStageCapitalism or /r/trees. It might not say much, but it adds up to a profile of who you are and what you think about.

They won't be collecting that information though. They'll only see that you visited reddit.com in all those cases.

[ Parent | on HN ]

Re:Everyone who can now see your entire internet history, in... by dictum on Friday November 25, 2016 @07:35AM (#13036275)

Bad news for https://howtoopenanumberedaccount.com visitors (Host header in plaintext) and people who click on links to http://ponies.net from https://reddit.com/r/LaunderYourCash (Referer header in plaintext)

[ Parent | on HN ]

Re:Everyone who can now see your entire internet history, in... by bkor on Friday November 25, 2016 @08:23AM (#13036521)

AFAIK browsers will not provide a referrer if the previous page in case you go from https to http. Firefox has an option to disable https to https referer sharing btw.

[ Parent | on HN ]

Re:Everyone who can now see your entire internet history, in... by m0nty on Friday November 25, 2016 @08:20AM (#13036512)

Presumably the non-https assets which get pulled in when the main request is fulfilled could also act as a "fingerprint" of the page you are visiting?

[ Parent | on HN ]

Re:Everyone who can now see your entire internet history, in... by J-dawg on Friday November 25, 2016 @07:36AM (#13036279)

Excuse my ignorance but won't they have access to the whole URL?

[ Parent | on HN ]

Re:Everyone who can now see your entire internet history, in... by Insanity on Friday November 25, 2016 @09:17AM (#13036845)

From the article: "Those ICRs in effect serve as a full list of every website that people have visited, rather than collecting which specific pages are visited or what's done on them."

And from another site on the same issue: "When you visit a website you usually start at the websites homepage such as www.bigbrotherwatch.org.uk/ the Government define this part of a website address (the part before the first forward slash) as communications data which they consider to be non-intrusive information." (https://www.bigbrotherwatch.org.uk/wp-content/uploads/2016/0...)

[ Parent | on HN ]

Re:Everyone who can now see your entire internet history, in... by noir_lord on Friday November 25, 2016 @12:13PM (#13038182)

In fairness the law mandates they record the domain, it doesn't say anything about capturing more it just sets a standard for the minimum.

Given that the ISP's have now been given cart blanche to collect data that is very commercially valuable I can see some of them doing it with the hope they can sell it later.

[ Parent | on HN ]

Re:Everyone who can now see your entire internet history, in... by tgfgvc on Friday November 25, 2016 @08:04AM (#13036424)

For http sites they have access to whole url and everything that is submitted, for example all commments you write.

For https sites (green lock icon) they only know domain name, for example reddit.com

[ Parent | on HN ]

Re:Everyone who can now see your entire internet history, in... by pants123 on Friday November 25, 2016 @08:01AM (#13036407)

As long as the site uses https (reddit does), then the path is encrypted, the only part of the URL thing they'll have access to is the host.

[ Parent | on HN ]