What ‘Incognito Mode’ Can and Can’t Do to Protect Your Data

https://lifehacker.com/what-incognito-mode-can-and-cant-do-to-protect-your-dat-1843888437

Screenshot: Brendan Hesse

Do you know what Chrome’s Incognito mode does with your browser’s data? If not, it’s worth a refresher, because it seems some users have been operating under the wrong impression.

Google is being sued for $5 billion over “intentionally deceiving users” into believing their browsing data was off-limits while using Incognito mode. While I’m all for questioning Google’s privacy policies, it’s hard to see Google losing this one, since Chrome clearly explains how Incognito mode works each time you open an incognito tab.

No matter what happens with the lawsuit, it’s important to know what Chrome’s incognito mode—and similar options in other browsers—actually does, and how it should (and shouldn’t) be used.

What incognito and private browsing modes actually do

Incognito mode simply prevents your browsing history from being saved on your device and in your personal Google account. This includes searches, sites visited and cookies (though downloads and bookmarked sites will still show up). Basically, if others have access to your device or account, they won’t be able to see what you did while in Incognito mode.

Those same limitations apply to private browsing modes on other browsers like Firefox and Edge. It’s best to treat Incognito mode/private browsing as little more than a pause button on your browsing history. These modes do not make you anonymous or hide your personal information when you log into websites, nor do they prevent Google, your internet provider, employers, advertisers or anyone else from seeing or collecting data about what you’re up to. This is all clearly stated when you open a new incognito tab.

Since private browsing modes often disable browser add-ons by default, including those that block traffic or add extra layers of privacy, it can be easier for websites and companies to track certain data if you are using incognito mode. Similarly, if you actually log into a website like, say, Instagram while in Incognito Mode, the site will be able to see what you’re doing and all the usual account activity will be visible to other users even after you’ve closed the incognito tab.

Bottom line: if you’re trying to keep your browsing history hidden from the people who use the same devices or Google account as you, use incognito mode. If you’re trying to keep your traffic anonymous and your data out of the hands of companies, you need to do a lot more.

How to keep your browsing data private

Relying on incognito mode and private browsing tabs isn’t much of a data-security strategy—though I won’t deny they can be a small part of one when used correctly. To that end, we have guides covering the best browsers for blocking ads, third-party trackers and data privacy—though some of these will require configuring optional tracker-blocking settings or installing third-party add-ons.

Other tools, like a reliable VPN, will obfuscate your IP address and traffic (at least most of the time), while DNS over HTTPS services encrypt your traffic and make it harder for outsiders to see what websites you’re accessing.

Lastly, we also have guides on controlling what information companies like Google, Twitter and Facebook can share with others; limiting how much information your devices can share; and replacing apps that collect data regardless of your browser-level security settings.

via Lifehacker https://lifehacker.com

June 3, 2020 at 03:21PM

Zoom explains why free users won’t get encrypted video calls

https://www.engadget.com/zoom-explains-why-free-users-wont-get-encrypted-video-calls-103046648.html

Zoom has confirmed it won’t be offering end-to-end encryption on free accounts. Last week, the company’s security consultant Alex Stamos revealed that plans for tightened security on paying accounts were in the pipeline — today Zoom CEO Eric Yuan has confirmed it. Predictably, the move has stirred a lot of controversy, namely because Yuan has given the impression that in doing so, Zoom wants to keep authorities sweet.

In the company’s latest financial results announcement, Yuan said, “Free users, for sure, we don’t want to give that [end-to-end encryption]. Because we also want to work it together with FBI and local law enforcement, in case some people use Zoom for bad purpose.” Some have subsequently accused Zoom of “kowtowing to the police.”

However, Stamos asserted that Yuan’s statement was not clear (and also gave a tongue-in-cheek nod to his relationship with his former CEO Mark Zuckerberg), and then took to Twitter to explain in more detail why Zoom has made this decision. According to Stamos, Zoom faces a “difficult balancing act” trying to improve privacy guarantees while “reducing the human impact of the abuse of its product.” Here, he’s referring to hate speech, exposure to children and other illegal behaviors which have blighted Zoom in recent times. Those involved in this type of activity will mostly use a free account with throwaway email addresses – a lower level of encryption will allow Zoom, with the assistance of law enforcement, to take action on repeat offenders.

Concluding, Stamos notes, “Will this eliminate all abuse? No, but since the vast majority of harm comes from self-service users with fake identities this will create friction and reduce harm.” He also reiterated that Zoom does not proactively monitor content in meetings and “will not in the future.” Nor does it, or will it, record meetings silently.

The company has faced a raft of challenges in recent times, largely catalyzed by its increased uptake due to the coronavirus crisis. And now, as the platform is increasingly being used by nefarious individuals for illegal activities, Zoom — like all other tech companies — must strike a balance between security for its trusted users, and mechanisms for weeding out the bad actors. Zoom hasn’t yet given a release date for the new encryption feature.

via Engadget http://www.engadget.com

June 3, 2020 at 05:39AM

Lawsuit accuses Google of tracking users in Incognito mode

https://www.engadget.com/google-lawsuit-tracking-users-incognito-mode-134515384.html

A proposed class action lawsuit filed against Google is accusing the company of violating federal wiretap laws by tracking users’ online activities even when they’re in Incognito mode. The complaint says the tech giant uses tools like Google Analytics, Google Ad Manager, smartphone and PC applications, as well as website plug-ins, to monitor users even if they don’t click on Google-supported ads. It also says that “millions” of users who went online in Chrome’s Incognito mode since June 1st, 2016 have likely been affected.

“Google tracks and collects consumer browsing history and other web activity data no matter what safeguards consumers undertake to protect their data privacy,” the lawsuit reads. The plaintiffs argue that by tracking users’ info when they’re in Incognito, Google has been intentionally deceiving customers into believing that they have control over the information they share with the company. According to Reuters, the lawsuit is seeking $5 billion in damages or at least $5,000 per affected user for violations of federal wiretapping and California privacy laws.

In a statement sent to The New York Times, Google spokesperson Jose Castaneda said that the company strongly disputes the claims and that it will defend itself “vigorously” against them. He also explained:

“Incognito mode in Chrome gives you the choice to browse the internet without your activity being saved to your browser or device. As we clearly state each time you open a new incognito tab, websites might be able to collect information about your browsing activity during your session.”

Back in 2019, Google rolled out a Chrome update that prevents website from tracking users in Incognito. When activated, it closes a loophole that websites use to identify whether a user is browsing in private or not.

via Engadget http://www.engadget.com

June 3, 2020 at 04:39AM