The Sunday Telegraph - Money & Business

Google’s cookie ban ‘could heighten risks of hacking and ID theft’

- By James Titcomb

AN INCOMING privacy crackdown from Google could put web users at more risk of hacking or identity theft, as tracking companies look to riskier alternativ­e technology to follow people across websites.

Security researcher­s said they had identified a leap in the use of alternativ­es to third-party cookies, the pieces of code currently used by advertisin­g and analytics companies to identify users as they move around the web.

Google is planning to block the use of third-party cookies in Chrome, the world’s dominant web browser, next year.

Advertiser­s and website publishers have said the move could cause chaos as they are no longer able to use people’s web histories to direct ads. A group of security researcher­s including those from the Belgian university KU Leuven found that web advertisin­g companies were increasing­ly turning to other tracking technologi­es, in response to similar cookie bans already in place.

The researcher­s, who described online tracking as a “whack a mole game”, found that one in 10 websites were already using a potentiall­y more troubling form of tracking known as

CNAME. It disguises the tracking technology as part of a website, thus giving it trusted access to users’ browsing data.

They found that malicious trackers could potentiall­y hijack this process to make purchases with the victim’s credit card or clone the authentica­tion credential­s needed to log in to a private website. In almost all cases, they found that data was being leaked from the websites due to the technique. “User data is leaking, persistent­ly and consistent­ly, without user awareness or consent,” wrote Lukasz Olejnik, an independen­t security researcher who worked on the study.

The 22-month study found that the use of CNAME trackers among the top 10,000 websites had increased by 20pc in that time.

Web browsers such as Apple’s Safari, Firefox and Microsoft Edge already block third-party cookies. However, Google’s decision to do the same next year is likely to have a much bigger effect. Chrome is by far the world’s most popular browser, with a market share of around 50pc in the UK.

Companies providing the tracking technology, such as Adobe, advertise the CNAME solution as an alternativ­e when browsers block third-party cookies.

Newspapers in English

Newspapers from UK