News for hackers. Stuff that matters.

Conting

Google could attempt a traffic correlation attack when someone visits YouTube, Google or Gmail. They run the first hop and the web service. In Tor, this would be like running the Guard and Exit Node.

For example, Wade looks at the YouTube homepage, watches a video, returns to the homepage and watches another video.

For each of these actions, Wade's IP address to the Google proxy stays the same. Also for each of these actions, the YouTube account or cookie stays the same.

All of Wade's browsing uses the Google proxy, and YouTube can't see the IP address. But thousands of times, the same volume of data goes through the proxy at the same time YouTube sends it. Over time, Google could guess that IP address A is connected to YouTube account B.

Re:YouTube Simplifying and Improving Ad Controls on Saturday September 16, 2023 @07:32PM (#37539905)
At least it's simple.
Google can also use people's IP address since so many use Gmail, Android, YouTube or Google Sync.
Re:Tailscale Has Partnered with Mullvad on Friday September 08, 2023 @02:46AM (#37430301)
>Mainstream VPNs actually reduce privacy

They help to mitigate IP based tracking.

Re:Mullvad on Tailscale: Privately browse the web on Friday September 08, 2023 @02:32AM (#37430180)
The Firefox extension "Fingerprint Shield" will show you when a canvas is generated in your browser. You can try it out on Best Buy.

https://archive.ph/ZjnwY