Is your browser knows about you ?

In modern days, most of the tech websites were collecting your information using via browser. Most of the websites accessing lot of personal/device/network information without enduser permission.

What browser can access from enduser endpoint:

  1. Location
  2. Software (OS / Browser version / Browser Plugins)
  3. Hardware (CPU info / GPU / Battery percentage )
  4. Network Connection ( Public IP / Download Speed )
  5. Social Media (Currently logged in Social media websites information )
  6. Click jacking
  7. Auto-fill Browser data (Phishing )
  8. Gyroscope
  9. Network scan (WiFi/LAN scan from browser itself )
  10. Images ( Metadata reveals )

Demo Website

https://webkay.robinlinus.com/

Enduser Best Practices

Most of the websites were executing Java scripts to extract & data collection from end user browser.To block those scripts running in background, we have to install below items:

  1. NoScript Chrome browser Add-on
  2. NoScript Mozilla browser Add-on
  3. Enable Private Browsing in enduser’s browser.
  4. Use Web-proxy to hide your real IP identity.

References