The best defenses against Verizon’s invasive, already-being-abused web tracking
By Jeremy Kirk
PCWorldJan 16, 2015 5:50 am PST
The Electronic Frontier Foundation has published a list of tools that can block online advertising companies from collecting web browsing data in ways that privacy advocates contend are deceptive.
Computer scientist Jonathan Mayer of Stanford University and ProPublica revealed on Wednesday that an online advertising company, Turn, can re-create the history of a person’s Web browsing traffic using Verizon’s tracking system.
Verizon tracks its mobile subscribers’ web surfing by tagging their traffic at the carrier level with a number called a UIDH (Unique Identifier Header). Verizon uses the system for two of its targeted advertising programs.
The type of tracking, known as “header enrichment,” is controversial. AT&T stopped using the method last year after running tests, ProPublica reported in November 2014.
But if a person deletes their cookies, online advertisers have less data. Turn, however, can re-create one of its deleted cookies by looking at Verizon’s UIDH, a practice that critics say is invasive. It’s called a “zombie” cookie.
Turn has defended its practices, writing in a blog post on Wednesday that “clearing a cookie cache is not a widely recognized method of reliably expressing an opt-out preference.”
There are several tools, however, that can block Web trackers such as Turn, wrote Peter Eckersley, technology projects editor for the EFF. Applications such as AdAway, AdBlock, AdBlock Plus and Disconnect Pro will all halt Turn from receiving data.
Users don’t have a lot of options for preventing their mobile traffic from being tagged with a UIDH. Using a VPN or Tor would stop it, but it’s probably unlikely the vast majority of people would use those kinds of services on a mobile device.