Web Bugs - Tracking your every move
by Luc Vezina
This past June, the state of Michigan charged four Web sites of not
disclosing in their privacy policies the practice of profiling using "Web
bugs". The state attorney general's office served Stockpoint.com,
Procrit.com, AmericasBaby.com and iFriends.com with "notices of intended
action," alleging that they were in violation of the state's Consumer
Protection Act.
Web bugs are invisible one-pixel by one-pixel images that are served by an
advertising network such as DoubleClick to "covertly shadow" a user's
activity on a given page. Bugs are often used on pages that do not contain
banners but act like banners in that they allow the ad network to read and
write cookies to the user's computer as well as log information such as
IP, referrer, browser, etc.
For example, by examining the HTML source code of Procrit's home page
(http://www.procrit.com), a drug manufacturer,
we can see that the following image is being inserted by DoubleClick:
<IMG SRC="http://ad.doubleclick.net/activity;src=64526;type=views1;cat=home;ord
=[ Time]?" WIDTH=1 HEIGHT=1 BORDER=0>
This allows DoubleClick to modify one of the cookies that it has written to a
computer to include information that the user has also visited the site of an HIV-related
drug manufacturer.
Web bugs allow profilers to build even more detailed databases because
bugs can be placed on pages that don't contain banners and even in HTML
e-mail. If DoubleClick ever merges its online database with the Abacus
database, it will have a very precise log of over 100 million North
Americans' surfing habits right at its fingertips.
Web bugs are used on many sites including FedEx, Quicken and several
Johnson & Johnson sites. The best protection against the bugs is to manage
your cookies using the Cookie Jar in Freedom. You can select, block all
cookies or simply delete those that are written by ad networks such as
DoubleClick.
For more information on Web bugs, see Richard Smith's Web bugs FAQ:
http://www.tiac.net/users/smiths/privacy/wbfaq.htm
------------
Privacy News
------------
-> MI5 builds new centre to read e-mails on the net - The Sunday Times
"The MI5 is building a new £25m e-mail surveillance centre that will
have
the power to monitor all e-mails and internet messages sent and received
in
Britain."
http://www.sunday-times.co.uk/news/pages/sti/2001/04/30/stinwenws01034.html
-> Enonymous Ratings Questioned - Wired
"...it was something of a surprise for Rotenberg to learn the epic.org
site
received only two of a possible four stars from enonymous, a San Diego
company that published what it billed as a 'comprehensive' privacy survey
on
Tuesday"
http://www.wired.com/news/print/0,1294,35587,00.html
-> DeBeers' Security Hole Reveals Customer Info - News.com
"About 35,000 customer email and home addresses were exposed on
Adiamondisforever.com, an informational site about diamonds sponsored by
De
Beers, CNET News.com has learned"
http://news.cnet.com/news/0-1007-200-1639327.html?dtn.head
-> Privacy-loving space aliens put the smack down on SETI ;-)
"A SETI radio telescope has been destroyed and scientists fear that
space
aliens may be responsible, the Weekly World News reports."
http://www.theregister.co.uk/000419-000004.html
-> Chinese Gov't Arrests Head of Human Rights Website - eMarketer
http://www.emarketer.com/enews/20010607_rChina.html?ref=dn
-> Drug Office Ends Tracking of Web Users
http://www.nytimes.com/library/tech/00/06/biztech/articles/22net.html
-> UK COURT FORCES ISP TO REVEAL CONFIDENTIAL INFORMATION
http://www.theregister.co.uk/content/1/11296.html
-> Software that can spy on you - Why did Mattel include
technology that can encrypt and send data to and from your
PC in its children's CD-ROMs?
http://www.salon.com/tech/col/garf/2001/06/15/brodcast/index.html
-> AOL Instant Messenger hacked
The stolen AIM identity allows strangers to masquerade as
others and even invade their personal lives: "Some hackers
pretend they are the victim, and carry on conversations with
the person's friends," says the self-described hacker who
demonstrated the technique. He tells of one prankster who used
the account of a teenage girl to trade messages with her mother
-- and pilfer a credit-card number.
http://www.salon.com/tech/log/2001/01/25/aol_hack/index.html?CP=SAL&DN=110
-> AOL-Time Warner: What it Will Know About You
The proposed $140.9 billion merger between America Online Inc.
and Time Warner Inc. could create one of the largest databases
ever, teeming with juicy information about individual tastes
in books, music, magazines, as well as hobbies.
Marketers already are salivating about how the companies could
combine their data and use it to send targeted advertisements
and promotions...
http://www.zdnet.com/zdnn/stories/news/0,4586,2422412,00.html?chkpt=zdnntop
-> 300,000 credit card numbers hijacked
Because the company, CD Universe, has refused to pay [the
US$100,000] blackmail, the anonymous intruder has released
some of the credit card files on the Internet. He also claims
to have used some other credit card numbers to obtain money
for himself.
http://www.nytimes.com/library/tech/00/01/biztech/articles/10hack.html
http://www.lasvegassun.com/sunbin/stories/tech/2001/jan/10/011000521.html
-> Congress faces cyber-agenda
The Big Kahuna issue of the year will be the balance between
individuals' right to privacy and the ability of online
companies and organizations to harvest, organize and sell
information concerning users' Internet surfing habits.
http://www.zdnet.com/intweek/stories/news/0,4164,2422763,00.html
-> Free ISPs on the way out
A nationwide poll of 403 Internet users contained the
following question: 'In exchange for free Internet access,
would you be willing to provide very detailed personal and
behavioral information that your access provider could
possibly sell to other retailers?' A striking 84 percent said
that they would not...
http://gt.clickz.com/cgi-bin/gt/cz/cz.html?article=1206
-> China registering businesses to monitor Net
"This is for safety," said an official of the Huangpu
district branch of the Public Security Bureau. "In order
to inspect the Internet, we must control it."
http://www.nytimes.com/library/tech/99/12/biztech/articles/23china.html
http://news.cnet.com/news/0-1005-200-1518026.html?tag=st.ne.1002.bgif.1005-2