Sunday, June 17, 2012

Microsoft Announces Change To “Do Not Track”


Internet Explorer Version 10 will soon be available and when it is, it comes with an update to the “Do Not Track” feature.  Microsoft just announced that when this new version is released, “Do Not Track” will no longer have to be manually enabled by the user; it will be a default setting.   In earlier versions, a user would have to go into their settings to enable “Do Not Track”, now, it will be done automatically.  However, even when “Do Not Track” is enabled, any advertisements on the Microsoft ad network ignore the signals.  What this means to users is that they won’t be tracked by ads on networks OTHER than Microsoft.  It’s interesting that this default “Do Not Track” works to Microsoft’s advantage.

Many groups do not agree with Microsoft making “Do Not Track” a default setting.  They feel that since Microsoft was involved in the development of the “Do Not Track” principles, they should understand that this should be a user preference, not a default setting.  The advertisers who do not agree with Microsoft will probably choose to ignore any “Do Not Track” signals.

For a long time, Microsoft has been trying to compete with Google’s success in online advertising.  At one point, Microsoft even attempted to buy Yahoo in order to boost their success.  Now that “Do Not Track” will become a default setting, there are some in the online advertising industry who claim that this is yet another ploy by Microsoft to damage Google’s status.

The World Wide Web Consortium’s Tracking Protection Group was one that was stunned by Microsoft’s decision.  “Do Not Track” policies are being formed by the Tracking Protection Group.   However, according to Aleecia M. McDonald, Co-Chair of the TPG, they had no idea what Microsoft was planning until the announcement was made.  

Not only is Ms. McDonald the Co-Chair of the TPG, she is also working for Mozilla, part-time, as a privacy researcher.  She feels that the Microsoft announcement is forcing an immediate action on the “Do Not Track” issue.  Mozilla’s Privacy and Public Lead Person, Alex Fowler, is yet another person who rejects Microsoft’s plan.  In his rejection, he references the World Wide Web Consortium’s report that states that in order for “Do Not Track” to work effectively, it must be based on user preference.  In a blog, Mr. Fowler stated:  “If DNT is on by default, it’s not a conversation.  For DNT to be effective, it must actually represent the user’s voice.”   By making “Do Not Track” a default setting, the user would lose control.

However, the concept of “Do Not Track” as a default setting was not rejected by all.  There are some lawmakers and policy-makers who agree that this is a good idea.

Sunday, June 10, 2012

Cookies? What are They? Can I Avoid Them?

 We’ve all heard about “cookies”, but not everyone knows what they are.  Sometimes, they’re called “HTTP cookies”, “browser cookies” or “web cookies”.  Sometimes, they’re just “cookies”.  It doesn’t matter what name you call them; cookies are what websites use to store and identify actions performed by people on their browsers.  Each time a person uses their computer to read a news article, log into a website, shop online, or even if that person simply clicks the “Like” button on Facebook, that person’s information is stored on those sites for an indefinite amount of time.  This is why, when you log into your favorite sites, you no longer have to input your personal information.  The visits are “remembered” by the browser, so your “username”, and even your password, automatically pop up.  You can delete these cookies, but sometimes, even deleting them won’t ensure your safety on the internet.

Websites using “tracking cookies” and “third-party tracking cookies” caused significant privacy concerns, prompting lawmakers in the US and Europe to take a stand against the use of cookies.  Cookies do not carry “viruses”, nor do they install malicious software (or malware) on computers, but they DO store the browsing and purchasing histories of internet users for many, many years.  According to privacy advocates, this is not acceptable.

There are many different kinds of cookies.  They all perform particular tasks, but they all center on storing sensitive information.  Examples of cookies are as follows:

  • Session Cookies stay on the computer only as long as the user is on a certain website.  Normally, the browser deletes these cookies as soon as the session is finished.
  • Third-Party Cookies are used by advertisers to gather information in order to build a detailed profile on a specific user.  For example:  if a user signs into a site that was targeted by an advertisement, then signs into another site which has the same targeted advertisement, both visits are tracked by the advertiser. 
  • Authentication Cookies are said to be the most important kind of cookie.  These cookies are used by servers to identify if a user is logged on.  These cookies can also identify which specific account the computer is logged onto.  With this device, the website recognizes if it is safe to transmit personal information.  If the user cannot be identified by the cookie, a “You Must Log In” message is shown.  If a website or browser does not have a high security level, it’s possible that the user’s information could be captured by hackers.  In other words, authentication cookies are only as safe as the user’s browser and website being logged into.