tracking ecologies (digital methods summer school 2013)
TRANSCRIPT
![Page 1: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/1.jpg)
Tracking Ecologies
![Page 2: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/2.jpg)
![Page 3: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/3.jpg)
![Page 4: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/4.jpg)
![Page 5: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/5.jpg)
![Page 6: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/6.jpg)
![Page 7: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/7.jpg)
What is tracking?
Gathering data tobuild user profiles
![Page 8: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/8.jpg)
Trackers build profiles about you
—
Decisions big and smallWhich ad to showWhich rate to offerWho doesn't get the job...Who goes to prison
donttrack.us
![Page 9: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/9.jpg)
Google Ads Preferences Managerwww.google.com/settings/ads/onweb/
![Page 10: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/10.jpg)
What kind of data?Online
Page visitsSearchesSocial profilesLikes/retweets/reblogsMail...
OfflineCredit/gift card purchasesFinancial (credit/mortgage/bank)Geographic...
![Page 11: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/11.jpg)
PORN
![Page 12: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/12.jpg)
Who are you to a tracker?It depends
Facebook/Gmail/TwitterGoogle AdsFoursquare
/...Euclid Analytics Nomi
![Page 13: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/13.jpg)
So, like, how much tracking is there?
13%
21%
69%
Websites in GhostRank for June 2013
integrate with Twitter
integrate with Facebook
have Google Analytics
![Page 14: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/14.jpg)
Huh
![Page 15: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/15.jpg)
How do I track thee? (on the Web)Clientside
Standard HTTP CookiesLocal Shared Objects (Flash Cookies)Silverlight Isolated StorageStoring cookies in RGB values of autogenerated, forcecached PNGs using HTML5Canvas tag to read pixels (cookies) back outStoring cookies in Web HistoryStoring cookies in HTTP ETagsStoring cookies in Web cachewindow.name cachingInternet Explorer userData storageHTML5 Session StorageHTML5 Local StorageHTML5 Global StorageHTML5 Database Storage via SQLite
— evercookie
![Page 16: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/16.jpg)
![Page 17: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/17.jpg)
Samy "I'm Popular" Kamkar
![Page 18: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/18.jpg)
How do I track thee, pt. 2Serverside: Device/browser fingerprinting
Server creates fingerprint based on browser request signalsUser AgentScreen SizeFontsBrowser pluginsIP address...
Undetectable on the client sideCan effectively persist across browsers/devicesAlready an industry: BlueCava, ThreatMetrix, ReputationManager, ...
![Page 19: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/19.jpg)
![Page 20: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/20.jpg)
![Page 21: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/21.jpg)
![Page 22: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/22.jpg)
What are trackers?Webpage elements
scriptsimagesiframesembedded objects (Flash)...
![Page 23: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/23.jpg)
![Page 24: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/24.jpg)
Terminology minute!
Firstparty vs. thirdparty vs. fourthparty
![Page 25: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/25.jpg)
![Page 26: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/26.jpg)
So how does trackingwork?
![Page 27: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/27.jpg)
Request URL: http://www.newyorker.com/strongbox/
Request Method: GET
Status Code: 200 OK
![Page 28: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/28.jpg)
Request headersAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
AcceptEncoding:
gzip,deflate,sdch
AcceptLanguage:
enUS,en;q=0.8
CacheControl:
nocache
Connection: keepalive
Cookie: mobify=0; mbox=check#true#1372203648|session#1372203589523979009#1372205448
DNT: 1
Host: www.newyorker.com
Pragma: nocache
UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36(KHTML, like Gecko) Chrome/29.0.1541.0 Safari/537.36
![Page 29: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/29.jpg)
Response headersAcceptRanges: bytes
AccessControlAllowOrigin:
*
CacheControl: maxage=358
Connection: keepalive
ContentEncoding: gzip
ContentLength: 30018
ContentType: text/html; charset=ISO88591
Date: Tue, 25 Jun 2013 23:39:59 GMT
ETag: "a647b0d5564dcc54324dd00"
Expires: Tue, 25 Jun 2013 23:45:57 GMT
LastModified: Wed, 15 May 2013 17:41:40 GMT
Server: Apache/2.2.15 (Red Hat) mod_ssl/2.2.15 OpenSSL/1.0.0fips
Vary: AcceptEncoding
![Page 30: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/30.jpg)
DetectionIntercept requestsCompare request URLs to known tracker patternsCancel requests matching blocked trackersNo request, no tracking
![Page 31: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/31.jpg)
Tracking the trackersFinding trackers
User reportsTracker crawlerCompanies ask us to be included
Defining Ghostery tracker patternsNarrow enough to avoid false positivesWide enough to catch all trackers resources
![Page 32: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/32.jpg)
Separating tracking from contentYou can't, sometimes
DisqusBrightcovesocial buttons...
![Page 33: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/33.jpg)
Related projects
![Page 37: Tracking Ecologies (Digital Methods Summer School 2013)](https://reader031.vdocuments.site/reader031/viewer/2022030220/58850fec1a28abd05e8b5411/html5/thumbnails/37.jpg)
Panopticlick / panopticlick.eff.org
+ Cookieless Monster: Exploring the Ecosystem of Webbased Device Fingerprinting/ securitee.org/files/cookieless_sp2013.pdf