Trackers Bounce Back: Measuring Evasion of Partitioned Storage in the Wild

by   Audrey Randall, et al.

This work presents a systematic study of navigational tracking, the latest development in the cat-and-mouse game between browsers and online trackers. Navigational tracking allows trackers to 'aggregate users' activities and behaviors across sites by modifying their navigation requests. This technique is particularly important because it circumvents the increasing efforts by browsers to partition or block third-party storage, which was previously necessary for most cross-website tracking. While previous work has studied specific navigational tracking techniques (i.e. "bounce tracking"), our work is the first effort to systematically study and measure the entire category of navigational tracking techniques. We describe and measure the frequency of two different navigational tracking techniques on the Web, and find that navigational tracking is present on slightly more than ten percent of all navigations that we made. Our contributions include identifying 214 domains belonging to at least 104 organizations tracking users across sites through link decoration techniques using direct or indirect navigation flows. We identify a further 23 domains belonging to at least 16 organizations tracking users through bounce tracking (i.e. bouncing users through unrelated third parties to generate user profiles). We also improve on prior techniques for differenting user identifiers from non-sensitive information, which is necessary to detect one class of navigational tracking. We discuss how our findings can used to protect users from navigational tracking, and commit to releasing both our complete dataset and our measurement pipeline


page 6

page 9


By the user, for the user: A user-centric approach to quantifying the privacy of websites

Third-party tracking is common on almost all commercially operated websi...

Towards Understanding First-Party Cookie Tracking in the Field

Third-party web tracking is a common, and broadly used technique on the ...

PURL: Safe and Effective Sanitization of Link Decoration

While privacy-focused browsers have taken steps to block third-party coo...

A machine learning approach for detecting CNAME cloaking-based tracking on the Web

Various in-browser privacy protection techniques have been designed to p...

The CNAME of the Game: Large-scale Analysis of DNS-based Tracking Evasion

Online tracking is a whack-a-mole game between trackers who build and mo...

Third Party Tracking in the Mobile Ecosystem

Third party tracking allows companies to identify users and track their ...

Masked LARk: Masked Learning, Aggregation and Reporting worKflow

Today, many web advertising data flows involve passive cross-site tracki...

Please sign up or login with your details

Forgot password? Click here to reset