Social networks leak personal data

Thanks to Facebook, web tracking services can identify individual users
Thanks to Facebook, web tracking services can identify individual users

A new study has found that social networking sites including Facebook, MySpace and Digg are making personal information available to companies that track web users' habits and allows them to link anonymous browsing habits to specific people.

The report by researchers at Worcester Polytechnic Institute is the first to show how tracking sites could directly link browsing habits to specific individuals using information leaked in HTTP headers, referrer headers, cookies and applications.

"When you sign up with a social networking site, you are assigned a unique identifier," says Craig Wills, professor of computer science at WPI. "This is a string of numbers or characters that points to your profile. We found that when social networking sites pass information to tracking sites about your activities, they often include this unique identifier."

Yes, we know all about you, Mr Wiggins of Solihull

"So now a tracking site not only has a profile of your browsing history, it can link that profile to the personal data you post on the social networking site. Now your browsing profile is not just of somebody, it is of you."

Social networks use third-party tracking sites, called aggregators, to learn about the browsing habits of visitors using tracking cookies. Online networking sites have gone a step further by allowing for transmission of unique identifiers. This is a troubling practice for two reasons, Wills says. "First, users put a lot of information about themselves on social networking sites. Second, a lot of that information can be seen by other users, by default. There are mechanisms users can use to limit access to their information, but we found through previous research that most users don't take advantage of them."

With a unique identifier, a tracking site could gain access to a user's name, physical address, email address, gender, birth date, educational and employment information, and much more. Wills says he does not know what, if anything, tracking sites do with the identifiers that social networks transmit to them.

Not malicious, just ignorant?

"We are not saying that they are necessarily trying to leak private information," he says. "But once someone is in possession of your unique identifier, there is so much they can learn about you. And even if tracking sites do not use the information themselves, can they guarantee that it will never find its way into other hands? For these reasons, we feel this issue is something that we should to be concerned about."

Wills notes that while users can protect themselves to some degree by limiting the amount of information they post and using the protections available o limit access to their information, the easiest way to prevent privacy leakage would be for social networking sites to stop making unique identifiers visible.

You can download the full study from here.

Latest in Computing
Deep Resarch
I test AI agents for a living and these are the 5 reasons you should let tools like ChatGPT Deep Research get things done for you
ChatGPT vs. Manus
I compared Manus AI to ChatGPT – now I understand why everyone is calling it the next DeepSeek
Vision Pro Metallica
Apple Vision Pro goes off to never never land with Metallica concert footage
An Nvidia GeForce RTX 4060 on a table with its retail packaging
Nvidia RTX 5060 GPU spotted in Acer gaming PC, suggesting rumors of imminent launch are correct – and that it’ll run with only 8GB of video RAM
cyberpowerpc gamer supreme gaming PC on orange background with don't miss text overlay
I've looked through all the available RX 9070 XT pre-builts and this is the gaming PC I'd buy with my own cash
Image of Asus VU34WCIP monitor
Asus might have just changed the display game for good with three new air-purifying monitors - and one of them is ultrawide
Latest in News
A stressed employee looking over some graphs
UK workers are spending more than one day per week tracking down information
Vision Pro Metallica
Apple Vision Pro goes off to never never land with Metallica concert footage
Mufasa is joined by another lion, a monkey and a bird in this promotional image
Mufasa: The Lion King prowls onto Disney+ as it finally gets a streaming release date
An American flag flying outside the US Capitol building against a blue sky
Sean Plankey selected as CISA director by President Trump
An Nvidia GeForce RTX 4060 on a table with its retail packaging
Nvidia RTX 5060 GPU spotted in Acer gaming PC, suggesting rumors of imminent launch are correct – and that it’ll run with only 8GB of video RAM
Indiana Jones talking to a friend in a university setting with a jaunty smile on his face
New leak claims Indiana Jones and the Great Circle PS5 release will come in April