Unique Kaspersky AV User ID Allowed 3rd-Party Web Tracking

Peter Reutemann <[email protected]> Fri, 16 Aug 2019 10:49:55 +1200
Newsgroups gmane.org.user-groups.linux.waikato
Message-ID <CAHoQ12KaidNWvkqt0tBMsXQo+iVHv+4PPNd8pNJ411h9rYArnw@mail.gmail.com>
'Kaspersky antivirus solutions injected in the web pages visited by
its users an identification number unique for each system. This
started in late 2015 and could be used to track a user's browsing
interests. From a report:

Versions of the antivirus product, paid and free, up to 2019,
displayed this behavior that allows tracking regardless of the web
browser used, even when users started private sessions. Signaled by
c't magazine editor Ronald Eikenberg, the problem was that a
JavaScript from a Kaspersky server loaded from an address that
included a unique ID for every user. Scripts on a website can read the
HTML source and glean the Kaspersky identifier, which Eikenberg
determined to remain unchanged on the system.'

-- source: https://it.slashdot.org/story/19/08/15/1849235

Cheers, Peter
-- 
Peter Reutemann
Dept. of Computer Science
University of Waikato, NZ
+64 (7) 858-5174
http://www.cms.waikato.ac.nz/~fracpete/
http://www.data-mining.co.nz/
_______________________________________________
wlug mailing list | [email protected]
Unsubscribe: https://list.waikato.ac.nz/mailman/listinfo/wlug