Privacy-preserving social plugins

Proceedings of the 21st USENIX Security Symposium

Volumn , Issue , 2012, Pages 631-646

  Kontaxis, Georgios ^a   Polychronakis, Michalis ^a   Keromytis, Angelos D ^a   Markatos, Evangelos P ^b  

^a Columbia University ^*  (United States)

^b INSTITUTE OF COMPUTER SCIENCE   (Greece)

Author keywords

[No Author keywords available]

Indexed keywords

SOCIAL NETWORKING (ONLINE);

BROWSER ADD-ONS; CONTENT PERSONALIZATION; NOVEL DESIGN; PERSONALIZED CONTENT; PRIVACY PRESERVING; SOCIAL NETWORKING SERVICES; USER EXPERIENCE; USER PRIVACY;

WEB BROWSERS;

EID: 84883287568     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (58)

1. AdBlock Plus. https://addons.mozilla.org/en-US/firefox/addon/adblock-plus/.
2. Browser Security Handbook - Third-party cookie rules. http://code.google.com/p/browsersec/wiki/ Part2#Third-party_cookie_rules.
3. Chromium - Don’t play plugin instances inside suppressed popups? http://code.google.com/p/chromium/issues/detail?id=3477.
4. Disconnect. http://disconnect.me/.
5. Do Not Track - Universal Web Tracking Opt Out. http://donottrack.us/.
6. Facebook - How many Pages can I like? https://www.facebook.com/help/?faq=116603848424794.
7. Facebook Blocker. http://webgraph.com/resources/facebookblocker/.
8. Facebook Fact Sheet. http://newsroom.fb.com/content/default.aspx?NewsAreaId=22.
9. Facebook fixes logout issue, explains cookies. http://nikcub.appspot.com/ facebook-fixes-logout-issue-explains-cookies.
10. Facebook Graph API. http://developers.facebook.com/docs/reference/api/.
11. Facebook Like Button Count Inaccuracies. http://faso.com/fineartviews/21028/ facebook-like-button-count-inaccuracies.
12. Facebook Plugins. http://developers.facebook.com/docs/plugins/.
13. Facebook’s Like button illegal in German state. http://news.cnet.com/8301-1023_3-20094866-93/ facebooks-like-button-illegal-in-german-state/.
14. Firefox Sync. http://www.mozilla.org/en-US/mobile/sync/.
15. Ghostery. http://www.ghostery.com/.
16. Google +1 button. http://www.google.com/+1/button/.
17. HTTP state management. http://www.ietf.org/rfc/rfc2109.txt.
18. Hypertext Transfer Protocol 1.1. http://www.ietf.org/rfc/rfc2616.txt.
19. Indexed Database API. http://www.w3.org/TR/IndexedDB/.
20. MDN - Intercepting Page Loads. https://developer.mozilla.org/en/XUL_School/Intercepting_ Page_Loads.
21. MDN - Pageshow Event. https://developer.mozilla.org/en/using_firefox_1.5_caching# pageshow.
22. MDN - window.postMessage. https://developer.mozilla.org/en/DOM/window.postMessage.
23. MDN - XML User Interface Language. https://developer.mozilla.org/En/XUL.
24. Mozilla At a Glance. http://blog.mozilla.org/press/ataglance/.
25. MSDN Blogs - Google Bypassing User Privacy Settings. http://blogs.msdn.com/b/ie/archive/2012/02/ 20/google-bypassing-user-privacy-settings. aspx.
26. No Likie. https://chrome.google.com/webstore/detail/pockodjapmojcccdpgfhkjldcnbhenjm.
27. NoScript. https://addons.mozilla.org/en-US/firefox/addon/noscript/.
28. ShareMeNot. http://sharemenot.cs.washington.edu/.
29. The Chromium projects - Sync. http://www.chromium.org/developers/design-documents/sync.
30. The Platform for Privacy Preferences Specification. http://www.w3.org/TR/P3P/.
31. Time Magazine - One Minute on Facebook. http://www.time.com/time/video/player/0,32068,711054024001_2037229,00.html.
32. Uniform Resource Identifier. http://www.ietf.org/rfc/rfc3986.txt.
33. Widgets Distribution. http://trends.builtwith.com/widgets.
34. An Open Letter to Facebook CEO Mark Zuckerberg, June 2010. https://www.eff.org/files/filenode/social_networks/OpenLettertoFacebook.pdf.
35. Facebook + Media - The Value of a Liker, Sept. 2010. https://www.facebook.com/note.php?note_id=150630338305797.
36. 5 ways Facebook’s new features will fuel social shopping, Sept. 2011. http://mashable.com/2011/09/29/facebook-social-shopping/.
37. Facebook’s response to questions from the Data Inspectorate of Norway, Sept. 2011. http://www.datatilsynet.no/upload/Dokumenter/utredningeravDatatilsynet/ FromFacebook-Norway-DPA.pdf.
38. R. Dingledine, N. Mathewson, and P. Syverson. Tor: the second-generation onion router. In Proceedings of the 13th USENIX Security Symposium, pages 303–320. USENIX Association, 2004.
39. P. Eckersley. How unique is your web browser? In Proceedings of the 10th international conference on Privacy Enhancing Technologies, pages 1–18. Springer, 2010.
40. M. Egele, A. Moser, C. Kruegel, and E. Kirda. PoX: Protecting users from malicious facebook applications. In Proceedings of the 9th Annual IEEE international conference on Pervasive Computing and Communications (PerCom), Workshop Proceedings, pages 288–294. IEEE Computer Society, 2011.
41. A. Felt and D. Evans. Privacy protection for social networking platforms. In Proceedings of the 2008 IEEE Workshop on Web 2.0 Security and Privacy, 2008.
42. M. Fredrikson and B. Livshits. RePriv: Re-envisioning in-browser privacy. In Proceedings of the 2011 IEEE Symposium on Security and Privacy, pages 131–146. IEEE Computer Society, 2011.
43. C. Jackson, A. Bortz, D. Boneh, and J. C. Mitchell. Protecting browser state from web privacy attacks. In Proceedings of the 15th international World Wide Web Conference (WWW), pages 737–744. ACM, 2006.
44. A. Kobsa. Privacy-enhanced personalization. Communications of the ACM, 50:24–33, August 2007.
45. G. Kontaxis, M. Polychronakis, and E. P. Markatos. SudoWeb: Minimizing information disclosure to third parties in single sign-on platforms. In Proceedings of the 14th Information Security Conference, pages 197–212. Springer, 2011.
46. B. Krishnamurthy and C. E. Wills. Characterizing privacy in online social networks. In Proceeedings of the 1st Workshop on Online Social Networks, pages 37–42. ACM, 2008.
47. B. Krishnamurthy and C. E. Wills. On the leakage of personally identifiable information via online social networks. SIGCOMM Computer Communication Review, 40, 2010.
48. M. M. Lucas and N. Borisov. FlyByNight: mitigating the privacy risks of social networking. In Proceedings of the 7th ACM workshop on Privacy in the ElecTronic Society (PETS), pages 1–8. ACM, 2008.
49. W. Luo, Q. Xie, and U. Hengartner. FaceCloak: An architecture for user privacy on social networking sites. In Proceedings of the international conference on computational science and engineering, pages 26–33. IEEE Computer Society, 2009.
50. J. R. Mayer and J. C. Mitchell. Third-Party Web Tracking: Policy and Technology. In Proceedings of the 2012 IEEE Symposium on Security and Privacy. IEEE Computer Society, 2012.
51. L. I. Millett, B. Friedman, and E. Felten. Cookies and web browser design: toward realizing informed consent online. In Proceedings of the SIGCHI conference on Human factors in computing systems. ACM, 2001.
52. M. A. Rajab, J. Zarfoss, F. Monrose, and A. Terzis. My botnet is bigger than yours (maybe, better than yours): why size estimates remain challenging. In Proceedings of the first workshop on Hot topics in understanding Botnets (Hot-Bots). USENIX Association, 2007.
53. F. Roesner, T. Kohno, and D. Wetherall. Detecting and defending against third-party tracking on the web. In Proceedings of the 9th USENIX conference on Networked Systems Design and Implementation (NSDI). USENIX Association, 2012.
54. A. Roosendaal. Facebook tracks and traces everyone: Like this! http://ssrn.com/abstract=1717563.
55. K. Singh, S. Bhola, and W. Lee. xbook: Redesigning privacy control in social networking platforms. In Proceedings of the 18th USENIX Security Symposium, pages 249–266. USENIX Association, 2009.
56. L. Sweeney. k-anonymity: a model for protecting privacy. International Journal of Uncertainty, Fuzziness and Knowledge-Based Systems, 10:557–570, October 2002.
57. V. Toubiana, A. Narayanan, D. Boneh, H. Nissenbaum, and S. Barocas. Adnostic: Privacy preserving targeted advertising. In Proceedings of the 17th Network and Distributed System Security Symposium (NDSS). IEEE Internet Society, 2010.
58. J. Ugander, B. Karrer, L. Backstrom, and C. Marlow. The anatomy of the facebook social graph. CoRR, abs/1111.4503, 2011.