Privacy mode

Google Chrome in Incognito mode

Internet Explorer 8 in InPrivate mode

Privacy mode or "private browsing" or "incognito mode"^[1] is a privacy feature in some web browsers to disable browsing history and the web cache. This allows a person to browse the Web without storing local data that could be retrieved at a later date. Privacy mode will also disable the storage of data in cookies and Flash cookies. This privacy protection is only on the local computing device as it is still possible to identify frequented websites by associating the IP address at the web server.^[2]

History

The earliest reference to privacy mode was in May 2005 and used to discuss the privacy features in the Safari browser bundled with Mac OS X Tiger.^[1] The feature has since been adopted in other browsers, and led to popularisation of the term in 2008 by mainstream news outlets and computing websites when discussing beta versions of Internet Explorer 8.^[3][4][5] However, privacy modes operate as shields because browsers typically do not remove all data from the cache after the session. Plugins, like Silverlight, are able to set cookies that will not be removed after the session. Internet Explorer 8 also contains a feature called InPrivate Subscriptions, an RSS web feed with sites approved for use with InPrivate browsing.^[6]

The common web browser plugin Adobe Flash Player began supporting privacy mode in Chrome, Firefox, Internet Explorer, and Safari with the release of version 10.1 in June 2010.^[7]

Uses

Privacy mode has multiple uses, including:^[8][9][10]

• reducing history, including autofill, browsing, and personal information;
• performing "pure searches" that are not influenced by prior browsing history or networks or friends' recommendations, which may weight and more highly rank certain results than others;
• preventing accidental saving of log-in credentials to accounts;
• signing into multiple accounts simultaneously, via multiple tabs;
• testing websites;
• preventing other users of the computer from finding one's search history;
• preventing potentially embarrassing pornographic links from appearing on suggestions or tabs;^[11]

The Mozilla Foundation performed a study about the user behavior when the feature is switched on and how long the session lasts. The results were that most sessions last only about 10 minutes, though there are periods where activation increases; usually around 11 a.m. to 2 p.m., 5 p.m., between 9 p.m. and 10 p.m., and a minor peak about an hour or two after midnight.^[12]

Support in popular browsers

Privacy mode is known by different names in different browsers.

Security

At the year of 2012 Brazilian researchers published the results of a research project ^[17] where they applied forensic techniques (namely the Foremost data carving tool and Strings program) to extract information about the users browsing activities on IE and Firefox browsers with their private mode enabled. They were able to collect enough data to identify pages visited and even partially reconstruct them.

This research was later extended^[18] to include Chrome and Safari browsers. The gathered data proved that browsers private mode implementation are not able to fully hide users browsing activities and that browsers in private mode leave traces of activities in caching structures and files related to the paging process of the operational system.

Another independent security analysis, performed by a group of researchers at Newcastle University in 2014, shows a range of security vulnerabilities in the implementation of the private mode across four major browsers (IE, Firefox, Chrome and Safari).^[19] The results are summarized below.

1. Browser extensions are potential threats to the user privacy. By design, existing browsers (e.g., Firefox, Safari) commonly choose to enable extensions in the private mode by default. This however allows an installed extension to secretly record the visited websites without the user's awareness. Newer versions of Chrome disable extensions in the private mode by default, but allow the private and the normal modes to run in parallel. This makes it possible for an installed extension in the normal mode to learn the user activities in the private mode by measuring the usage of shared computing resources.
2. Data erasure by the browser alone is found to be insufficient. For example, the records of visited websites during the private session can be retained in memory for a long time even after the private session is closed. In addition, the visited website records are usually kept by the operating system in the local DNS cache. Furthermore, the modified time stamps of certain profile files saved on the disk may reveal if the private mode was previously turned on and when it was turned on.
3. Software bugs present in some browsers are found to seriously degrade the security of the private mode. For example, in some earlier versions of Safari, the browser retained private browsing history records if the browser program was not closed normally (e.g., as a result of program crash), or if the user acted to add a bookmark within the private mode.
4. Depending on whether the session is in the private or the normal mode, web browsers typically exhibit different user interfaces and traffic characteristics. This allows a remote website to tell if the user is currently in the private mode, for example, by checking the color of the hyperlinks or measuring the time of writing cookies. (The fact that the user is using the private mode should be considered protected information as well.)

In 2010, professors at Stanford University found that while Firefox won't record your history during a private browsing session, it still records the sites on which you've installed SSL certificates (which enable secure, encrypted information exchange indicated by the "https" in front of the URL) and allowed specific permissions. If you download an SSL certificate from a website or told that site specifically to stop displaying pop-ups and downloading cookies, all of that information is still stored on Firefox.

In 2015, researchers from Pennsylvania State University found that a considerable amount of extensions on Firefox violated the private browsing policy based on an investigation of the top 2,000 extensions.^[20] Many extensions maintain their own profile folders on the local machine and most of them will not wipe out the browsing data after the private browsing session ends. This violation even happens on some most popular extensions with millions of users on Firefox.

References

External links

• Mozilla Specification for Private Browsing