Minh Uong, New York Times
How to muddy your tracks online
- Article by: KATE MURPHY
- New York Times
- May 22, 2012 - 6:53 PM
Legal and technology researchers estimate that it would take about a month for Internet users to read the privacy policies of all the websites they visit in a year. So in the interest of time, here is the deal: You know that dream where you suddenly realize you're stark naked? You're living it whenever you open your browser.
There are no secrets online. That emotional e-mail you sent to your ex, the illness you searched for in a fit of hypochondria, those hours spent watching kitten videos can all be gathered to create a defining profile of you.
Your information can be stored, analyzed, indexed and sold as a commodity to data brokers who in turn might sell it to advertisers, employers, health insurers or credit rating agencies.
Balance cost, convenience, privacy
And while it's probably impossible to cloak your online activities fully, you can take steps to do the technological equivalent of throwing on a pair of boxers and a T-shirt. Some of these measures are quite easy and many are free. Of course, the more effort and money you expend, the more concealed you are. The trick is to find the right balance between cost, convenience and privacy.
Before you can thwart the snoopers, you have to know who they are. There are hackers hanging around Wi-Fi hot spots, to be sure. But security experts and privacy advocates said more worrisome were Internet service providers, search engine operators, e-mail suppliers and website administrators -- particularly if a single entity acts in more than one capacity, like Google, Yahoo, Facebook and AOL. This means they can easily collect and cross-reference your data, that is, match your e-mails with your browsing history, as well as figure out your location and identify all the devices you use to connect to the Internet.
"The worst part is they sell this extremely creepy intrusion as a great boon to your life because they can tailor services to your needs," said Paul Ohm, an associate professor at the University of Colorado Law School in Boulder who specializes in information privacy and computer crime. "But do most people want to give that much away? No."
He advised logging off sites like Google and Facebook as soon as practicably possible and not using the same provider for multiple functions if you can help it. "If you search on Google, maybe you don't want to use Gmail for your e-mail," he said.
If you do not want the content of your e-mail messages examined or analyzed at all, you may want to consider lesser-known free services like HushMail, RiseUp and Zoho, which promote no-snooping policies. Or register your own domain with an associated e-mail address through services like Hover or BlueHost, which cost $55 to $85 a year.
Do-it-yourself mail server
Or you can forgo trusting others with your e-mail correspondence altogether and set up your own mail server. It is an option that is not just for the paranoid, according to Sam Harrelson, a middle-school teacher and self-described technology aficionado in Ashville, N.C., who switched to using his own mail server this year using a $49.99 OS X Server and $30 SpamSieve software to eliminate junk mail.
"The topic of privacy policies and what lies ahead for our digital footprints is especially fascinating and pertinent for me, since I work with 13- and 14-year-olds who are just beginning to dabble with services such as Gmail and all of Google's apps, as well as Facebook, Instagram, social gaming," he said. "I have nothing to hide, but I'm uncomfortable with what we give away."
Another shrouding tactic is to use the search engine DuckDuckGo, which distinguishes itself with a "We do not track or bubble you!" policy. Bubbling is the filtering of search results based on your search history. (Bubbling also means you are less likely to see opposing points of view or be exposed to something fresh and new.)
Regardless of which search engine you use, security experts recommend that you turn on your browser's "private mode," usually found under Preferences, Tools or Settings. When this mode is activated, tracking cookies are deleted once you close your browser, which "essentially wipes clean your history," said Jeremiah Grossman, chief technology officer with WhiteHat Security, an online security consulting firm in Santa Clara, Calif.
He warned, however, that private mode does nothing to conceal your IP address, a unique number that identifies your entry or access point to the Internet. So websites may not know your browsing history, but they will probably know who you are and where you are as well as when and how long you viewed their pages.
Shielding your IP address is possible by connecting to what is called a virtual private network, or VPN, such as those offered by WiTopia, PrivateVPN and StrongVPN. These services, whose prices run from $40 to $90 a year, route your data stream to what is called a proxy server, where it is stripped of your IP address before it is sent on to its destination. This obscures your identity not only from websites but also from your Internet service provider.
Moreover, these services encrypt data traveling to and from their servers so it looks like gibberish to anyone who might be monitoring wireless networks in places like coffee shops, airports and hotels.
© 2013 Star Tribune