[X]
Feedburner count

Internet Explorer 8 Informative - Privacy Feature In Internet Explorer 8 Leaks Private Data

Review by DebtorBasher on 2008-08-29
Privacy Feature In Internet ExplorerA privacy feature built into the second beta version of Microsoft's Internet Explorer 8 browser aren't as private as advertised.

The InPrivate Browsing feature in Microsoft's latest browser is designed to delete a user's browsing history and other personal data that is gathered and stored during regular browsing sessions. The feature is commonly referred to as 'porn mode' for its ability to hide which websites have been visited from nosy spouses or employers.

Forensic experts however found it trivial to retrieve the history, according to a test by Webwereld, an IDG affiliate in the Netherlands, and Fox IT, a Dutch firm specializing in IT security and forensic research.

"The privacy option in this beta is mainly cosmetic. For a forensic investigator, retrieving the browsing history should be regarded as peanuts," said Christian Prickaerts, forensic IT expert with Fox IT.

To prevent login details, online orders and other sensitive information from leaking out, the privacy feature prevents Internet Explorer 8 beta 2 from storing any cookies. The browser furthermore refrains from storing the browsing history in the Windows registry.

But researchers were able to retrieve data displaying general information about the browser's behavior. Although URLs (Uniform Resource Locators) aren't stored, Prickaerts was still able to restore the browsing history. "The remaining records in the history file still enable me to deduce which websites have been visited," said Prickaerts.

Even more data is stored in the browser's cache, a feature designed to speed up performance of websites by storing a copy of recently accessed information on a user's hard disk. InPrivate Browsing failed to disable this feature. Users seeking a higher level of privacy could manually delete the cache, but it can later easily be retrieved through commonly available forensic tools.

The shortcomings in InPrivate Browsing put the level of privacy protection in Internet Explorer 8 on a par with Firefox 2 and 3. The open source browser allows users to delete all private data, but does that by merely deleting files. Those too can easily be retrieved. Developers have crafted plugins for Firefox which mitigate the risk of information leaks.

Microsoft's main goal with InPrivate Browsing is to prevent other users of the same computer to gain access to the browsing history, the company said in an e-mail response. The feature isn't designed to protect a user's privacy from security experts and forensic researchers, the company said.
Comments:3 Replies - Latest reply on 2008-08-30
Posted by madconsumer on 2008-08-30:
this is the same as with any online browser. any good IT person can retrieve this data.
Posted by DebtorBasher on 2008-08-30:
I guess I can't hide from anyone!
Posted by madconsumer on 2008-08-30:
there are firewalls that allow what is called stealth mode. these do not allow outgoing paths. but, most firewalls have the ability to limit outging paths. unfortunately, the ones that offer stealth mode will only work with a 32 bit system. and i think, as of yet, one has not been updated for windows vista.

Your Name:
(displayed with your comment)
Your E-mail:
(required)

Your Experience/Advice:
Check spelling


By clicking submit you agree that you have read and accept the Terms of Service & Privacy Policy.


Note: All comments are reviewed by a moderator before being published. Please be sure to read our guidelines before commenting.