Web Privacy — Arvind Narayanan

« Back

Highlights: 1-million-site privacy analysis  /  OpenWPM software  /  Overview book chapter  /  Overview talk

Publications

Conference
Password policies of most top websites fail to follow best practices
Kevin Lee, Sten Sjöberg, Arvind Narayanan.
Symposium on Usable Privacy and Security (SOUPS) 2022.
Conference
Virtual Classrooms and Real Harms: Remote Learning at US Universities
Shaanan Cohney, Ross Teixeira, Anne Kohlbrenner, Arvind Narayanan, Mihir Kshirsagar, Yan Shvartzshnaider, Madelyn Sanfilippo.
Symposium on Usable Privacy and Security (SOUPS) 2021.
Conference
Privacy Policies over Time: Curation and Analysis of a Million-Document Dataset
Ryan Amos, Gunes Acar, Elena Lucherini, Mihir Kshirsagar, Arvind Narayanan, Jonathan Mayer.
The Web Conference, 2021.
Journal
No boundaries: data exfiltration by third parties embedded on web pages
Gunes Acar, Steven Englehardt, Arvind Narayanan.
Proceedings on Privacy Enhancing Technologies (PoPETs) 2020.
Runner up for the 2020 CNIL-Inria Award for Privacy Protection.
Conference
An Empirical Study of Wireless Carrier Authentication for SIM Swaps
Kevin Lee, Ben Kaiser, Jonathan Mayer, Arvind Narayanan.
Symposium on Usable Privacy and Security (SOUPS) 2020.
Conference
Watching You Watch: The Tracking Ecosystem of Over-the-Top TV Streaming Devices
Hooman Mohajeri Moghaddam, Gunes Acar, Ben Burgess, Arunesh Mathur, Danny Yuxing Huang, Nick Feamster, Edward W. Felten, Prateek Mittal, Arvind Narayanan.
ACM Conference on Computer and Communications Security 2019.
Runner up for the Caspar Bowden Award for Outstanding Research in Privacy Enhancing Technologies.
Workshop
The Impact of User Location on Cookie Notices (Inside and Outside of the European Union)
Rob van Eijk, Hadi Asghari, Philipp Winter, Arvind Narayanan.
Workshop on Technology and Consumer Protection (ConPro) 2019.
Conference
Characterizing the Use of Browser-Based Blocking Extensions To Prevent Online Tracking
Arunesh Mathur, Jessica Vitak, Arvind Narayanan, Marshini Chetty.
Symposium on Usable Privacy and Security (SOUPS) 2018.
Journal
When the cookie meets the blockchain: Privacy risks of web payments via cryptocurrencies
Steven Goldfeder, Harry Kalodner, Dillon Reisman, Arvind Narayanan.
Proceedings on Privacy Enhancing Technologies (PoPETs) 2018.
Blog post.
Journal
I never signed up for this! Privacy implications of email tracking
Steven Englehardt, Jeffrey Han, Arvind Narayanan.
Proceedings on Privacy Enhancing Technologies (PoPETs) 2018.
Blog post.
Draft
The future of ad blocking: An analytical framework and new techniques
Grant Storey, Dillon Reisman, Jonathan Mayer, Arvind Narayanan.
Manuscript, 2017.
Blog post.
Workshop
Battery Status Not Included: Assessing Privacy in Web Standards
Lukasz Olejnik, Steven Englehardt, Arvind Narayanan.
International Workshop on Privacy Engineering 2017.
Best paper award.
Book chapter
The Princeton Web Transparency and Accountability Project
Arvind Narayanan, Dillon Reisman.
In "Transparent data mining for Big and Small Data". Editors: Tania Cerquitelli, Daniele Quercia, Frank Pasquale. Springer. 2017.
Conference
De-anonymizing Web Browsing Data with Social Networks
Jessica Su, Ansh Shukla, Sharad Goel, Arvind Narayanan.
World Wide Web Conference 2017.
Conference
Online tracking: A 1-million-site measurement and analysis
Steven Englehardt, Arvind Narayanan.
ACM Conference on Computer and Communications Security, 2016.
FPF Privacy Papers for Policy Makers Award.
Journal
No Encore for Encore? Ethical Questions for Web-Based Censorship Measurement
Arvind Narayanan, Bendert Zevenbergen.
Technology Science, 2015.
Conference
Cookies that give you away: Evaluating the surveillance implications of web tracking
Steven Englehardt, Dillon Reisman, Christian Eubank, Peter Zimmerman, Jonathan Mayer, Arvind Narayanan, Edward Felten.
WWW 2015.
Blog post.
Conference
The Web never forgets: Persistent tracking mechanisms in the wild
Gunes Acar, Christian Eubank, Steven Englehardt, Marc Juarez, Arvind Narayanan, Claudia Diaz.
ACM Conference on Computer and Communications Security, 2014.
Related blog post: The hidden perils of cookie syncing.
Workshop
Privacy concerns of implicit secondary factors for web authentication
Joseph Bonneau, Edward W. Felten, Prateek Mittal, Arvind Narayanan
Adventures in Authentication: WAY Workshop, 2014.
Draft
Web Privacy Measurement: Scientific principles, engineering platform, and new results
Steven Englehardt, Christian Eubank, Peter Zimmerman, Dillon Reisman, Arvind Narayanan.
Manuscript, 2014.
Workshop
Shining the Floodlights on Mobile Web Tracking — A Privacy Survey
Christian Eubank, Marcela Melara, Diego Perez-Botero, Arvind Narayanan.
Web 2.0 Security & Privacy (W2SP) 2013.
Policy
Privacy considerations of online behavioural tracking
Claude Castelluccia and Arvind Narayanan.
European Network and Information Security Agency (ENISA) expert report, 2012.
Policy
Do Not Track: A Universal Third-Party Web Tracking Opt Out
Jonathan Mayer, Arvind Narayanan, Sid Stamm.
IETF Internet-Draft, 2011.
Conference
Adnostic: Privacy Preserving Targeted Advertising
Vincent Toubiana, Arvind Narayanan, Dan Boneh, Helen Nissenbaum, Solon Barocas.
Network and Distributed System Security Symposium 2010.

Blog posts

Deconstructing Google’s Excuses on Tracking Protection (with Jonathan Mayer) Aug 23, 2019

CITP’s OpenWPM Privacy Measurement Tool Moves to Mozilla (by Steven Englehardt) Apr 12, 2019

No Boundaries for Facebook Data: Third-party Trackers Abuse Facebook Login (with Steven Englehardt and Gunes Acar) Apr 18, 2018

When the Business Model *Is* the Privacy Violation Apr 12, 2018

Four Cents to Deanonymize: Companies Reverse Hashed Email Addresses (with Gunes Acar and Steven Englehardt) Apr 09, 2018

No Boundaries for Credentials: New Password Leaks to Mixpanel and Session Replay Companies (with Steven Englehardt and Gunes Acar) Feb 26, 2018

Website Operators Are in the Dark About Privacy Violations by Third-party Scripts (with Steven Englehardt and Gunes Acar) Jan 12, 2018

No Boundaries for User Identities: Web Trackers Exploit Browser Login Managers (with Steven Englehardt and Gunes Acar) Dec 27, 2017

No Boundaries: Exfiltration of Personal Data by Session-replay Scripts (with Steven Englehardt and Gunes Acar) Nov 15, 2017

Web Census Notebook: A New Tool for Studying Web Privacy Jun 09, 2017

Online price discrimination: Conspicuous by its absence 08 Jan 2013

New Developments in Deanonymization 17 Dec 2012

Tracking Not Required: Behavioral Targeting 11 Jun 2012

Web Privacy Measurement: Genesis of a Community 04 Jun 2012

There Is No Such Thing as Anonymous Online Tracking Jul 28, 2011

Privacy and the Market for Lemons, or How Websites Are Like Used Cars 18 Mar 2011

One Click Frauds and Identity Leakage: Two Trends on a Collision Course 22 Feb 2011

Facebook’s Instant Personalization: An Analysis of Fundamental Privacy Flaws 28 Sep 2010

“Do Not Track” Explained 20 Sep 2010

Yet Another Identity Stealing Bug. Will Creeping Normalcy be the Result? 01 Jun 2010

History Stealing: It’s All Shades of Grey 09 Mar 2010

Google Docs Identity Leak Bug Fixed 23 Feb 2010

How Google Docs Leaks Your Identity 22 Feb 2010

Ubercookies Part 2: History Stealing meets the Social Web 19 Feb 2010

Cookies, Supercookies and Ubercookies: Stealing the Identity of Web Visitors 18 Feb 2010

Press

Web privacy How to Protect Your Privacy When Using Online Therapy Apps
NPR, Jul 18, 2022
Web privacy Passwords: 75 Per Cent of the World's Top Websites Allow Bad Choices
New Scientist, Jun 23, 2022
Web privacy Your Old Phone Number Can Be Used to Hack You, Study Finds
VICE Motherboard, May 06, 2021
Web privacy Spy Pixels in Emails Have Become Endemic
BBC News, Feb 17, 2021
Web privacy Quibi, JetBlue and Others Gave Away Email Addresses, Report Says
New York Times, Apr 29, 2020
Web privacy Privacy and Power: Your Digital Fingerprint
NBC Nightly News, Dec 11, 2019
IoT privacy They Know What You Watched Last Night
New York Times, Oct 25, 2019
IoT privacy Smart TVs Are Data-collecting Machines, New Study Shows
The Verge, Oct 11, 2019
IoT privacy Your Smart TV Is Watching You
Science Friday (podcast), Oct 04, 2019
Web privacy Google Blocks Privacy Push at the Group That Sets Web Standards
Bloomberg, Sep 24, 2019
Iot privacy Facebook and Google Have Ad Trackers on Your Streaming TV, Studies Find
Ars Technica, Sep 19, 2019
IoT privacy Smart TVs Sending Private Data to Netflix and Facebook
Financial Times, Sep 18, 2019
IoT privacy On Roku and Amazon Fire TV, Channels Are Watching You
Wired, Sep 18, 2019
Web privacy I Visited 47 Sites. Hundreds of Trackers Followed Me
New York Times Opinion, Aug 23, 2019
Web privacy 'Do Not Track,' the Privacy Tool Used by Millions of People, Doesn't Do Anything
Gizmodo, Oct 15, 2018
Web privacy The Security Risks of Login With Facebook
Wired, Apr 19, 2018
Web privacy Replay Sessions From Mixpanel and Others Have Recorded Passwords
Wired, Feb 26, 2018
Web privacy WWW: Tracking-Methoden Werden Brutaler, Browser-Hersteller Schauen Weg
Heise Online (German), Feb 19, 2018
Web privacy Get a Password Manager. No More Excuses
Wired, Jan 03, 2018
Web privacy How Email Open Tracking Quietly Took Over the Web
Wired, Dec 11, 2017
Web privacy More Than 480 Web Firms Record 'Every Keystroke'
BBC News, Nov 21, 2017
Web privacy The Dark Side of 'Replay Sessions' That Record Your Every Move Online
Wired, Nov 16, 2017
Web privacy How Facebook’s Oracular Algorithm Determines the Fates of Start-Ups
New York Times, Nov 02, 2017
Bitcoin, Anonymity, Web privacy Bitcoin Transactions Aren’t as Anonymous as Everyone Hoped
MIT Technology Review, Aug 23, 2017
Web privacy Have These Researchers Created an Unbeatable Ad-Blocking Technology?
Fast Company, Jun 08, 2017
Anonymity, Web privacy Legalized Sale of Browser Histories Should Worry Journalists
Columbia Journalism Review, Apr 12, 2017
Anonymity, Web privacy Your Private Browsing History Alone Can Give Away Your Identity
The Atlantic, Feb 07, 2017
Anonymity, Web privacy Your 'Anonymized' Web Browsing History May Not Be Anonymous
ACM TechNews, Jan 19, 2017
Web privacy Firefox Disables Loophole That Allows Sites to Track Users via Battery Status
The Guardian, Nov 01, 2016
Anonymity, Web privacy You Are Less Anonymous on the Web Than You Think--Much Less
ACM TechNews, Oct 31, 2016
Web privacy Breaking the Black Box: When Machines Learn by Experimenting on Us
ProPublica, Oct 12, 2016
Web privacy Online Trackers Follow Our Digital Shadow by 'Fingerprinting' Browsers, Devices
All Things Considered (NPR), Sep 26, 2016
Web privacy Internet Tracking Has Moved Beyond Cookies
FiveThirtyEight, Sep 02, 2016
Web privacy You’re Being Tracked (And Tracked and Tracked)
IEEE Spectrum, Aug 23, 2016
Web privacy Facebook Can’t Win Against Ad Blockers, and Here’s the Proof
MIT Tech Review, Aug 15, 2016
Web privacy Sites Spying on You in Weird New Ways, Princeton Study Exposes
NBC News, Aug 03, 2016
Web privacy Your Battery Status Is Being Used to Track You Online
The Guardian, Aug 02, 2016
Web privacy Customized or Creepy? Websites and Your Data, a Guide
Fast Company, Jun 16, 2016
Web privacy Study of 1 Million Sites Shows Just How Closely We're Watched
New Scientist, Jun 01, 2016
Web privacy Audio Fingerprinting Being Used to Track Web Users, Study Finds
Techcrunch, May 20, 2016
Web privacy Largest Study of Online Tracking Proves Google Really Is Watching Us All
MIT Technology Review, May 18, 2016
Web privacy How Much Do Online Advertisers Really Know About You? We Asked an Expert
Digital Trends, Jun 27, 2015
Web privacy Stealthy Web Tracking Tools Pose Increasing Privacy Risks to Users
PC World (via IDG News), Jul 22, 2014
Web privacy Web Tracking Advances Beat Privacy Defenses
InformationWeek, Jul 22, 2014
Web privacy The Hidden Threat in Your Browser: Share Buttons Reveal Personal Information Each Time You Visit Certain Popular Sites
Daily Mail, Jul 22, 2014
Web privacy Browser 'Fingerprints' Help Track Users
BBC News, Jul 22, 2014
Web privacy Queen's Website Hosts Controversial Tracking Technique
SC Magazine UK, Jul 22, 2014
Web privacy The New Technology Which Advertisers Use to Track Your Every Movement Online: Canvas Fingerprinting
The Telegraph, Jul 22, 2014
Web privacy Online ‘fingerprinting’ Could Pose Privacy Risks
The Globe and Mail, Jul 22, 2014
Web privacy White House Website Includes Unique Non-Cookie Tracker, Conflicts With Privacy Policy
EFF Deeplinks blog, Jul 22, 2014
Web privacy Canvas Fingerprinting Macht Internetnutzung Nachverfolgbar
Spiegel online, Jul 22, 2014
Web privacy Meet the Online Tracking Device That Is Virtually Impossible to Block
ProPublica, Jul 21, 2014
Web privacy New Tracking Tool Is Like a Cookie That Can't Be Blocked
NBC News, Jul 21, 2014
DoNotTrack 'Do Not Track'? Oh What the Heck, Go Ahead
PC World (via IDG News), May 21, 2014
Web privacy Browser Cookies: How They Could Be Undermining Your Privacy
CBC News, Apr 08, 2014
Web privacy Connecting the Dots Between Cookies and Identities
Threatpost, Apr 07, 2014
Web privacy How Advertising Cookies Let Observers Follow You Across the Web
The Verge, Apr 04, 2014
Web privacy This Landmark Study Could Reveal How the Web Discriminates Against You
Forbes, Dec 02, 2013
DoNotTrack Intrusos Invisibles: Cómo Proteger Su Privacidad en El Internet
Univision Chicago, Nov 05, 2013
DoNotTrack, Privacy Can I Get Some Privacy?
Stanford Magazine, Mar 11, 2013
DoNotTrack Do Not Track Me Online, Please
CBC News, Mar 22, 2011
DoNotTrack Don’t Follow Me
The Stanford Daily, Jan 18, 2011
DoNotTrack What if There Was a Do-Not-Track List for Online Browsing?
NYT Gadgetwise blog, Dec 02, 2010
DoNotTrack Stanford Students Create 'Do Not Track' Software
Stanford Report, Dec 02, 2010
DoNotTrack Techies, Not Lawmakers, Can Curb Online Tracking
CNN Opinion, Dec 02, 2010
adnostic, DoNotTrack Privads: Better BT Alternative?
Daily Online Examiner, Oct 28, 2009