Quantcast
 

Friday, August 13, 2010

23

Their Eyes Were Watching Porn

WHAT ARE YOU LOOKING AT?Considering that you are on the Internet right now, the odds are that, if you're not in an open-plan office, either your previous or next visit will be to a porn site. And when you do so, you may do it in your browser's "privacy mode," in order to cover your digital footsteps. But maybe you should hold off for a minute on that. A very important new study explains that the authors "show that many popular browser extensions and plugins undermine the security of private browsing." The long and the short of it? If you are on the internet looking at porn, you are not safe. And worse, the study details exactly what portion of you people in private browsing are looking at porn. With bar graphs. We spoke to an author of the study to get more vital information about porn safety.

Private Browsing Rates

(You can read the study, by Dan Boneh, Gaurav Aggarwal, Elie Burzstein, and Collin Jackson in this PDF.)

As it turns out, the only self-restraint Safari users know about is of an auto-erotic nature. The study strikes an appropriately sober tone in the results section:

We found that private browsing was more popular at adult web sites than at gift shopping sites and news sites, which shared a roughly equal level of private browsing use. This observation suggests that some browser vendors may be mischaracterizing the primary use of the feature when they describe it as a tool for buying surprise gifts.

And with that, the scientists christened "buying surprise gifts" as a euphemism for masturbation.

You may have some questions–serious questions couched in irony–about this study, and what it means for your completely unironic porning, and also, I guess, your secretive news browsing. But fret not!

I contacted Dr. Aggarwal, a man who can now call himself one of the world's foremost experts on sneakily watching porn, and he was generous enough to write back to me about his study.

Dr. Aggarwal cited a few reasons why he undertook this study: "People are concerned about their data on various websites and whether their browsing activities are being tracked by websites. Private browsing is also marketed as a special browsing mode that provides privacy against ‘local' attacker [i.e. somebody using your computer while you're away from it, even though you like, totally told them not to, and they still did it anyway. Why doesn't anybody listen to me? I can't wait until I move out of the house and get my own place without mom and dad always going through my things!] and also to some degree against tracking websites."

And so "we wanted to study private browsing, define its threat model and analyze how good it is at providing privacy."

Should we be concerned about their revelations?

"The most alarming [security weaknesses] in my opinion are browser extensions [basically, plugins and add-ons]. Most of these extensions are oblivious of private mode and can store URLs of sites being visited on disk."

Okay, so these things are inadequate now...but surely some day in the future, private browsing will be truly private, a vast wonderland where the vast, guiltless porn horizon stretches as far as the eye can see, right? Right??? Dr. Aggarwal???

"It is not possible to guarantee that no state would be saved on disk in private mode – all browsers fail in one way or the other," he wrote.

Or not.

"We need a better browser architecture for handling extensions," he wrote. "Browsers need to agree on the goals for private browsing that are consistent with user's expectation and the way this mode is marketed."

Great. Lower your expectations people, and know that someone on the internet could be watching you right now, but only if you're important enough to them. So, from now on, when you get on the internet, just ask yourself: "Am I as important as Ben Quayle?"



Photo from the First Goatse Flickr pool by Scott Perry.

23 Comments / Post A Comment

Andrew Cheung
Andrew Cheung (#6,513)

To be clear, a "browser extension" refers to the application, not something happening to the user.

DoctorDisaster
DoctorDisaster (#1,970)

"Trojan" and "plugin" are also rich veins.

Mister_Neutron
Mister_Neutron (#5,921)

Engorged veins.

DoctorDisaster
DoctorDisaster (#1,970)

This could be fixed in a few ways. The simplest would be a "disable extensions in private mode" option. Power users could get a checklist: e.g. private mode turns off Undo Closed Tabs but keeps AdBlock.

If you want to drive it on the developer side, add an optional private mode feature to the API; extensions with a private mode automatically switch to it, those without one switch off. Developers could circumvent this pretty easily, though.

It's true nobody has done much on this front yet, but private browsing is still new to this browser generation. I think it will become more robust in time.

Andrew Cheung
Andrew Cheung (#6,513)

The elephant in the room is still Flash itself.

My big worry is that Flash can store its own cookies. http://www.schneier.com/blog/archives/2009/08/flash_cookies.html

rolandcrosby
rolandcrosby (#1,480)

Chrome already does this:
"Because Google Chrome does not control how extensions handle your personal data, all extensions have been disabled for incognito windows. You can reenable them individually in the extensions manager."

Sean Peters
Sean Peters (#6,014)

The solution: BetterPrivacy - it gives you really good control of so-called "local shared objects" (LSOs)... also known as "Flash cookies".

Bus Driver Stu Benedict

Do people really turn on private browsing to view goatse?

Bus Driver Stu Benedict

I could sort of understand he they were going to goatkcd.

Art Yucko
Art Yucko (#1,321)

Love it when one refreshes the Tumblr feed and someone's posted a way-porny picture without a SFW click-through thumbnail and no NSFW warning!

-YOU PEOPLE KNOW WHO YOU ARE-

cherrispryte
cherrispryte (#444)

I know people who do this deliberately. And I kind of love them for it.

NinetyNine
NinetyNine (#98)

I thought all those iPhone havers were getting so much action they wouldn't need porn. Also, nice two fer with the uncut vids post just below.

Joey Camire
Joey Camire (#6,325)

A sock on the door also offers a great solution for private browsing.

ehcotton
ehcotton (#358)

I don't check pr0n sites at work, but I do stay on Facebook somewhere about 95% of the time. Is private browsing doing anything for me in re: my employer spying on me? (sorry for the earnest question.)

ehcotton
ehcotton (#358)

pr0n***

ehcotton
ehcotton (#358)

sigh...

kitten_witawip

You misspelled pR0n.

Grant G Brown
Grant G Brown (#3,366)

What's a cowboy doing on the internet, anyhow?

I'd be fired in a minute if I looked at porn at work. Forget it. At a previous job they simply kept a record of websites visited by each computer, since all the DNS stuff went through their servers anyhow.

RonMwangaguhunga

"unironic porning"? What the hell is that?

Trilby
Trilby (#3,897)

Um, do you not know you have some female readers, some of whom are not obsessed with porn? I can't even remember the last time I looked at porn. It doesn't exist for me. It is destructive to my female psyche and I find nothing pleasurable about it. Especially since I left my jack-ass of a husband.

DoctorDisaster
DoctorDisaster (#1,970)

Just bouncing off the front page, they also have readers who aren't Korean, comic book fans, bear enthusiasts (fewer of those), Peruvians, Kanye listeners, New Yorkers, or female bosses/employees of same. For many (if not most) Awl readers, the mix of material is part of the fun.

That said, "naughty pictures are bad for my delicate female psyche" is a bit... Victorian? I mean, it's perfectly understandable if you find the topic distasteful and decide to skip the article, but I don't think that preference has anything to do with your gender.

Vulpes
Vulpes (#946)

Well, I guess The Awl IS technically bear porn...

Post a Comment

You must be logged-in to post a comment.

Login To Your Account