@soyguijarro

Privacy threats in the browser age

Sorry, this website needs JavaScript

14 KB → 2.3 MB

x160

14 KB → 2.3 MB

x160

14 KB → 2.3 MB

x160

14 KB → 2.3 MB

x160

14 KB → 2.3 MB

x160

https://www.javaworld.com/article/2077269/mobile-java/netscape-introduces-new--...

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

Device fingerprinting

User identification

Location tracking

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

Device fingerprinting

User identification

Location tracking

Location tracking

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

Device fingerprinting

User identification

Location tracking

Eavesdropping

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Keystroke monitoring

Device fingerprinting

User identification

Location tracking

Eavesdropping

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

Device fingerprinting

User identification

Location tracking

Keystroke monitoring

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Device fingerprinting

User identification

Location tracking

Keystroke monitoring

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

Device fingerprinting

User identification

Location tracking

Device fingerprinting

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

User identification

Location tracking

Device fingerprinting

screen.width
screen.height
screen.colorDepth
screen.orientation

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

User identification

Location tracking

Device fingerprinting

navigator.userAgent
navigator.vendor
navigator.appName
navigator.appCodeName
navigator.buildID
navigator.cookieEnabled

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

User identification

Location tracking

Device fingerprinting

navigator.platform
navigator.hardwareConcurrency
navigator.plugins
navigator.language
new Date().getTimezoneOffset()

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

User identification

Location tracking

Device fingerprinting

navigator.geolocation
navigator.vibrate
navigator.getBattery
navigator.bluetooth
navigator.mediaDevices
navigator.connection
navigator.getGamepads
navigator.share
navigator.requestMIDIAccess

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

User identification

Location tracking

Device fingerprinting

Notification
AudioContext
Worker
ServiceWorker
ImageCapture
PaymentRequest
FaceDetector
BarcodeDetector
SpeechRecognition
SpeechSynthesisUtterance

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

User identification

Location tracking

Device fingerprinting

Notification
AudioContext
Worker
ServiceWorker
ImageCapture
PaymentRequest
FaceDetector
BarcodeDetector
SpeechRecognition
SpeechSynthesisUtterance

https://panopticlick.eff.org

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

User identification

Location tracking

Device fingerprinting

Notification
AudioContext
Worker
ServiceWorker
ImageCapture
PaymentRequest
FaceDetector
BarcodeDetector
SpeechRecognition
SpeechSynthesisUtterance

https://panopticlick.eff.org

https://browserleaks.com/javascript

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

User identification

Location tracking

Device fingerprinting

Notification
AudioContext
Worker
ServiceWorker
ImageCapture
PaymentRequest
FaceDetector
BarcodeDetector
SpeechRecognition
SpeechSynthesisUtterance

https://panopticlick.eff.org

https://browserleaks.com/javascript

http://browserinformer.soyguijarro.com

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

Device fingerprinting

User identification

Location tracking

User identification

Notification
AudioContext
Worker
ServiceWorker
ImageCapture
PaymentRequest
FaceDetector
BarcodeDetector
SpeechRecognition
SpeechSynthesisUtterance

https://panopticlick.eff.org

https://browserleaks.com/javascript

http://browserinformer.soyguijarro.com

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

Device fingerprinting

Location tracking

User identification

https://www.w3.org/TR/generic-sensor/#main-privacy-security-threats

Eavesdropping

Keystroke monitoring

Device fingerprinting

Location tracking

User identification

• Network Information
• Battery Status
• Vibration
• Ambient Light Sensor
• Proximity Sensor

• Network Information
• Battery Status
• Vibration
• Ambient Light Sensor
• Proximity Sensor

• Network Information
• Battery Status
• Vibration
• Ambient Light Sensor
• Proximity Sensor

• Network Information
• Battery Status
• Vibration
• Ambient Light Sensor
• Proximity Sensor

https://www.bleepingcomputer.com/news/software/battery-status-api-being-removed-...

• Network Information
• Battery Status
• Vibration
• Ambient Light Sensor
• Proximity Sensor

https://www.bleepingcomputer.com/news/software/battery-status-api-being-removed-...

• Network Information
• Battery Status
• Vibration
• Ambient Light Sensor
• Proximity Sensor

• Ambient Light Sensor
• Proximity Sensor
• Motion Sensors
  • Accelerometer
  • Gyroscope
  • Magnetometer

• Network Information
• Battery Status
• Vibration
• Ambient Light Sensor
• Proximity Sensor

• Ambient Light Sensor
• Proximity Sensor
• Motion Sensors
  • Accelerometer
  • Gyroscope
  • Magnetometer

https://developers.google.com/web/updates/2017/09/sensors-for-the-web#privacy-and-...

• Network Information
• Battery Status
• Vibration
• Ambient Light Sensor
• Proximity Sensor

• Ambient Light Sensor
• Proximity Sensor
• Motion Sensors
  • Accelerometer
  • Gyroscope
  • Magnetometer

https://developers.google.com/web/updates/2017/09/sensors-for-the-web#privacy-and-...

http://news.softpedia.com/news/new-w3c-proximity-sensor-api-can-be-used-for-user-...

• Network Information
• Battery Status
• Vibration
• Ambient Light Sensor
• Proximity Sensor

• Ambient Light Sensor
• Proximity Sensor
• Motion Sensors
  • Accelerometer
  • Gyroscope
  • Magnetometer

https://developers.google.com/web/updates/2017/09/sensors-for-the-web#privacy-and-...

http://news.softpedia.com/news/new-w3c-proximity-sensor-api-can-be-used-for-user-...

https://blog.lukaszolejnik.com/w3c-web-bluetooth-api-privacy/