Hacker News new | ask | show | jobs
by sp332 5433 days ago
KISSmetrics has a post explaining how the tracking works. http://www.kissmetrics.com/how-it-works They claim that simply using AdBlock is enough to defeat the tracking. They also claim "KISSmetrics has never, and will never, share anonymous customer activity of what people did on customer A’s site with customer B."
8 comments

One important detail for AdBlock: you HAVE to be using a Tracking/Privacy filter subscription. Please, if you're using ABP, add one of these as a subscription: http://www.fanboy.co.nz/fanboy-tracking.txt (Fanboy's Tracking List) or https://easylist-downloads.adblockplus.org/easyprivacy.txt (EasyPrivacy). None of the default filter subscriptions block KISSmetrics, but either of these will.
If, as the article implies, the same user gets the same identifier across all KISSmetrics customers they ARE (implicitly) sharing customer activity between customers.

As the article states, customer A and B could simple put the information they each have about identity XYZ together. Without KISSmetrics having to be involved any further than in providing and maintaining the unique identity to each customer separately.

Even if it was not the intent of KISSmetrics for this to be possible (which I've a hard time believing), the chosen implementation makes it possible.

well the wired article directly contradicts what they say they are doing

"These services are using practically every known method to circumvent user attempts to protect their privacy (Cookies, Flash Cookies, HTML5, CSS, Cache Cookies/Etags…)"

They may not share information about specific users, but doesn't mean they don't use it to sell information in some aggregate form.

Ghostery blocks many tracking scripts.

http://www.ghostery.com/download

" They also claim "KISSmetrics has never, and will never, share anonymous customer activity of what people did on customer A’s site with customer B.""

but if they change their mind, there is no way I can stop them - right?

And there is nothing from stopping other companies from using the same techniques to sell individual browsing data.
>They claim that simply using AdBlock is enough to defeat the tracking

I'm highly suspicious of that claim. The only site I have whitelisted is reddit, and I found the i.kissmetrics.com cookie in with the rest. That's not to say reddit isn't using them, but I'd be surprised given their very cautious approach to advertising.

Unfortunately, this does not help with mobile devices which do not have the same capability.

Well, I guess you can always maintain a hosts file but that's the only way I can think of.

There's Firewall iP for jailbroken iPhones. Also one can install other browsers than Safari from the Appstore and, for example, iCab Mobile has the ability to use filters (and comes with some).
Mobile devices != iPhone+Android. I find this trend pretty disturbing.
I didn't even mention Android. I just gave an example of what's possible on one type of mobile device.
hazza for adblock, as much as i like to see the legislature and courts support privacy this is fundamentally a technological problem.
I disagree. This is a Whack-A-Mole game, and that means a societal solution is required.

Compare with spam. Technological solutions have reduced the problem, but to virtually eliminate it requires global law enforcement.

Any evidence that law enforcement could virtually eliminate spam?
Severe dents have been put in spam production when specific individual senders were shut down.
Temporary things. Same happens with illegal drugs when key people get killed. Does not mean the war on drugs needs more law enforcement to win...