If you’re like most web users, you assume that your browser history is private. For example if you visit an online store, you assume they can’t see if you’ve been looking at their competitor. Just a few weeks ago I assumed this was the case. Guess what?
Your browser history is not private!
In fact with a few well crafted lines of Javascript, websites can examine your browser history and record what pages you have been to. Keep reading and I’ll tell you exactly how it’s done and introduce you to a service that any webmaster can put on their site to see what pages their users have visited. I’ll also tell you exactly what type of information can be retrieved, and how you can protect yourself.
How JavaScript Can Be Used To Steal Your Browser History:
With CSS website designers can make links a different color if they have been visited by the user. For example this link should be colored differently than this other link. The first link you have been to before (it’s the page you are on right now) while the second link you have never visited (because it is fictitious). Now you’re thinking “but how can this be used to steal my history?”. Let’s dive a little deeper.
Example Code
The code to do this examination can be a little tricky due to cross browser issues. Here is a snippet of Javascript that can do the evaluation (based on the Hey you! Where have you been? blog post by Peter van der Graaf and script from Jeremiah Grossman and Robert Cabri):
function hasLinkBeenVisited(url) {
var link = document.createElement('a');
link.href = url;
document.body.appendChild(link);
if (link.currentStyle) {
var color = link.currentStyle.color;
if (color == '#ff0000')
return true;
return false;
} else {
link.setAttribute("href",url);
var computed_style = document.defaultView.getComputedStyle( link, null );
if (computed_style) {
if (computed_style.color == 'rgb(255, 0, 0)')
return true;
}
return false;
}
}
How To Stop People From Spying On Your Browser History
There are two sure fire ways to stop people from stealing your browser history.
The nuclear option is to disable JavaScript within your browser. In Firefox you’d just go to Tools -> Options -> Content tab and then uncheck “Enable JavaScript”. This method is very limiting because you probably enjoy all the JavaScript goodness on the web.
Limit your browser history. The less browser history you store the fewer URLs someone can steal from that history. In Firefox you can change the amount of browser history by going to Tools -> Options -> Privacy and then either uncheck the “Remember visited pages” checkbox or change the number of days that history is stored for.
More Information on Spyjax
On Super Jumbo A380 Airbus double-decker the world's largest civilian passenger aircraft in India for first time - May' 07.
Mayawati leader of Bahujan Samaj Party (BSP) becomes Chief Minister of Uttar Pradesh for the fourth time after her party's splendid Assembly Election success - May 2007.
Richard Gere Hollywood actor and Shilpa Shetty Bollywood actress in a controversial incident in public at an AIDS function in India - May, 2007.
Underworld don Dawood Ibrahim's sister Haseena Parkar granted bail in case of extortion, cheating & forgery - May '07.
Bollywood romantic comedy film CHEENI KUM (A Sugar Free Romance) in which superstar Amitabh Bachchan shares time with little girl his neighbour, suffering from leukaemia, wise beyond her years - June '07.
Load shedding in Mumbai & its suburbs and parts of Maharashtra due to power shortage - April '07
Indian Cricket Coach Mr. Greg Chappell resigns after debacle in ICC World Cup 2007 and bitter feud with players - April '07
Sanjaya Malakar youngest semifinalists in American Idol Season 6 - singing contest - April '07
On Bollywood superstars Amitabh and Jaya Bachchan's son Abhishek's wedding with Aishwarya at their residence Prateeksha in Mumbai - April 2007.
On Bollywood's comedy film Bheja Fry - May' 07.
