The ad industry is just so damn broken that it's ripe for a huge disruption. The whole hypothesis of Google- that people will want to see ads centered on what they are searching for- seems to be erroneous. But it's been taken as gospel for what- a dozen years?- that everybody has piled on to the idea that we can know what people want to buy based on the type of information they seek. I think that except in explicit cases- searching for 'umbrellas that can withstand high winds' for instance- it's not true.
As I've said before here, when I'm ready to buy I'm searching Amazon, not Google.
Can you be certain that this is true? Perhaps you didn't click through (I don't either), but what if your unconscious mind saw an ad that you did not register consciously.
It's probably more important than an antivirus for stopping malware.
Firefox + uBlock Origin is the right level of protection and you can get it on desktop and mobile (Android at least).
I've come across a few sites that were still using affiliate links and uO didn't block them. I'm not sure if uO has a policy of not blocking them but, to me, those are the only type of "acceptable ad" and CPU cycles shouldn't be wasted trying to detect and eliminate them.
No, Firefox really does have tracking protection built-in:
https://blog.mozilla.org/blog/2017/11/20/firefox-private-bro...
Ad pushers have repeatedly shown that they cannot be trusted with our bandwidth and browser resources, they will always try to find the most insidious ways of inserting themselves into our lives, and try to track our every move, no matter how unwelcome they are.
Add to this the long history of malware using ad networks as an attack vector, and you have a very good case for simply blocking everything, in the name of privacy and security.
I hate ads, both for the above mentioned reasons, and because I find them extremely obnoxious (yes, even simple text ads), so I block everything with extreme prejudice. I am also on the "no mailed ads, ever" and the "you will be fined if you ever call this number with advertising" registries. My eyeballs, my attention, my PC, my OS, my browser, my home. Anything I don't trust and don't explicitly allow can just buzz off and leave me alone.
While ad blockers do stop a lot of third party ads and iframes, and probably some tracking, I don't think that ad blockers are stopping most tracking by web sites. Not the kind this article is talking about, anyway. It's quite simple for sites to track user activity in ways that ad blockers can't easily stop. And I suspect it's becoming more likely quickly, purely on the anecdotal number of sites I visit that now detect ad blockers.
Some of this article seems like FUD though. It's pretty hard to think of what keystrokes you would type into a web site that you don't want to send the web site. The main thing they're getting by tracking keystrokes that they didn't get before is typos and form activity that you start and then decide to clear and bail out. I'd speculate that this is being used and is most important for sales conversion pages, where they monitor your activity to try to figure out if you started out interested in buying something but then decided not to buy.
Web sites cannot track your keystrokes when you're using a different site / tab in your browser, they can't track keystrokes when you use another program besides the browser, they can only track when you're interacting with the site. So what sensitive data can they get that you weren't already giving them?
Adblock lists are community maintained, so whether this stuff is blocked depends a lot on people who actually enjoy having their network debug panel open.
Facebook's tracking pixel their e-commerce affiliates use is insane. It sends most mouse movements and they use it to determine what words users hover their mouse over! Their AI/marketing engine is pretty advanced, to the point where their predictive analysis is accurate enough people swear Facebook/Instragram are sending microphone data.
Sure they cannot track you across tabs and browsers ... directly. But they do. If 30% of the pages you visit have some kind of Adobe Omniture or Facebook pixel, they do in fact gleam a ton of data about you. This AI is so powerful it can predict products you want, potentially before you even verbally announce them. That's incredibly powerful predictive analysis ... used to cure cance---oh no wait. It's not. It's just used to sell you shit. What a waste of tech honestly.
I know a lot of people here use uBlock Origin since there are concerns with Ghostery/AdBlock/etc either allowing in certain ads for a price or selling some of your data to be viable. The only real solution for tech people is to run a Javascript blocker like NoScript, and explicitly white listing what you want to run .. which is honestly a ton-o-work.
Yep, heat maps for mouse movements are a very common technique. You get click location data out of Google Analytics and everyone uses Google Analytics.
But we should be clear and careful -- since I'm using the web site, my click data is not something I can ever keep private from the web site. We can (and probably should) keep it from third parties, but first party mouse and keyboard data isn't a privacy concern.
Good point about cross-tab tracking, this is fairly common too, and an ad blocker does usually block this. But, the article was primarily about key logging, and the iframed ads can't do any key logging.
Don't get me wrong; I use an ad blocker myself, and I think it's a good idea. I just wanted to make the point that blocking only 3rd party content does not solve the problem this article pointed at, and it especially doesn't solve direct key logging or mouse tracking by the website you're using.
If that data can be used to infer anything about me, it certainly is a privacy concern for me.
I think of it like going to a library and instead of freely browsing through the books without being watched, instead being spied on and every book I look at and even where my gaze travels through each book's pages being monitored.
This is a paranoid's nightmare level of surveillance, and that's what we're gradually being weaned in to accepting. It certainly is a major privacy concern for me.
Ideally, the internet would have been built in such a way as to allow fully private and anonymous use, as it's really nobody's business but your own what you look at, what you're interested in, or what you read.
We've helped build the internet in to a spy's paradise, and it's really sad.
I totally agree and empathize with the increasingly privacy hostile place the internet is. But, that analogy seems a little hyperbolic to me. The library currently does track which books you check out, and maybe fine you when you’re late to return them. They do track which books are popular, in order to figure out what to stock. Some libraries track how their building is being used, and my local library does have cameras. These are all the same kinds of things web sites are doing. It may be more aggressive on a site, and more focused on selling you something, but it’s not fundamentally different. First party sites (not ads) aren’t tracking your gaze or invading your privacy, they’re responding to what you ask for, and using some of the breadcrumbs you leave to improve conversions if they can.
Talking to a person face to face has exactly the same issues. If I buy a car, for example, the sales guy will definitely watch my gaze and listen to what I say with an ear toward exploiting anything I share with him to increase his odds of selling me a car. We wouldn’t call what the sales guy does a privacy issue, and what “first party” web site tracking directly (without third party services) is doing is no more creepy and no less private than what car sales guys do.
If the direct tracking is sold or shared or handled by a third party, then absolutely, huge privacy concerns. But for the direct communication, if you don’t want someone to infer anything about you at all, your only choice is and always has been to not use the service.
This is why I explicitly talked about browsing of books at the library, not checking them out.
But now that you mention it, tracking who checks out which books also has disturbing privacy implications, and I am against that. There's nothing stopping an anonymous library checkout system from being designed and implemented, if we only had the will.
Camera use in libraries is a relatively new phenomenon, and I'd have similar privacy concerns about it if, like website tracking, its explicit aim was to track who was looking at which books, but as far as I know it's not being used for that purpose. But it's not very far from being capable of doing that, especially with high resolution cameras and facial recognition systems. So that's definitely something to keep an eye on.
"Talking to a person face to face has exactly the same issues. If I buy a car, for example, the sales guy will definitely watch my gaze and listen to what I say with an ear toward exploiting anything I share with him to increase his odds of selling me a car. We wouldn’t call what the sales guy does a privacy issue"
I would in fact call that a privacy issue. We're just so used to it we don't normally notice it. There's also an enormous difference between one person noticing your interest in one thing and the systemic, omnipresent surveillance apparatus we've made the internet in to, which is tracking all your interests, and voiced opinions and ideas.
Look at the repression, imprisonment, murder of political or ideological opponents throughout history, and you'll see their surveillance, tallying, and location has always been a part of that. Today's surveillance apparatus is thousands or millions of times more effective than it's ever been in the past, and every bit of data collected about you feeds in to those profiles which could be used against you. We should oppose it, instead of meekly submitting to it, much less enabling it.
You're right that there is a difference between face to face conversations and digital tracking. That's why I'm weaseling out with my "first party" qualifications. As long as the tracking is between you and the site you're on, it's sort-of similar to personal conversations. Not the same, but not super different. As soon as third parties and groups of people and governments are involved, it's wildly different.
The camera issue is interesting. This will be a growing concern from now on. According to US law, there is no expectation of privacy from being photographed while you're in a public place. You are not currently entitled to privacy in a library, or while walking downtown, or while driving in a car on public roads. But that law wasn't drafted with the idea of digital mass surveillance in mind, nobody had the capability to capture and correlate all your movement when it was written.
Also, I've always wondered what the use is of tracking which words the mouse is hovering over. I mean who does that: hovering the mouse over words?
Lots of people, you’d be surprised. ;) Sometimes I catch myself unconsciously highlighting what I’m reading.
But the mouse tracking is for detecting waffling potential button clicks and form fills too.
It’s a bad proxy for attention, but it is a proxy that kinda works.
Lots of people will cut and paste passwords and sensitive information while working and swapping back and forth between applications. That would include every sort of personal information possible that can be put into a clipboard.
Having 3rd party tracking services is a bit of a problem with some complex issues, but it's very common. Ad blockers can help, but I suspect the ability for ad blockers to increase privacy is going down. It's easy for sites to configure third party services as though they belong to the site's domain, and all ad blocking goes out the window. This is an arms race that will not end by blocking third party requests.
For first party tracking though, direct tracking by the web site, there is no hard line for what input tracking even means, using the web site at all is a form of input tracking. Logging of inputs to a site by the site should be and always has been expected. Accidentally sending sensitive data directly to a site has always been a problem, and ad blockers don't solve that problem at all.
I've alternated between Chromium and Firefox. Some sites seem to work better in one browser or the other.
I've re-read their whitepaper and while there is some data one may consider sensitive, it's not something like "user tracking and reporting" beyond the performance metrics and search suggestions (which all other major browsers do as well). There are optional features which may result in private data being sent to Google, e.g. keeping history with Google without local encryption - but you have to opt-in, which feels OK to me.
https://www.google.com/chrome/browser/privacy/whitepaper.htm...
The problem is that most of us are reading what should be static content which is instead a dynamic program written in a general-purpose language.
Personally, I do not understand why this has become acceptable, if all I am doing is viewing text and static images.
Ideally, I would like it so that the browser suspends everything if a tab is not visible in the foreground, unless I pin it.
It's barely even about ads in the traditional sense anymore, it's about being able to read a fucking article without having half the internet downloaded in the background while every nano of my being available is processed and analysed by 30 different tracking companies simultaneously.