HARry Parser and the Cursed Tracker: Breaking the Spell of Online Data Collection
summary
A small Python tool parses HAR files into spreadsheets, joins results to Tracker Radar, base64-decodes payloads and flags selectors; it surfaces concrete evidence such as a Priceline tab sending 42 fields to tiktok.com, a travel site switching CNAMEs from Cloudflare to Route 53 and an odd domain receiving 65 unique fields. Obfuscated JavaScript clusters get Bard-assisted deobfuscation, dozens of similar throwaway sites appear, and the parser reliably reduces manual analysis from hours to minutes.
AI-written summary · about
chapters (6)
- 0:00Introduction to browser OpSec
- 7:29Privacy policies analysis
- 10:41Tracker types and ecosystems
- 15:48Browser tools for privacy
- 20:54Analyzing data with AI
- 30:57Conclusion and Q&A
related talks
47mWorm Charming: Harvesting Malware Lures for Fun and Profit
29mInvisible Strings – Contemporary Challenges And Techniques Of Infrastructure Tracking
30mTrawling for IOCs: Catching C2 in a Sea of Data
32mSomething’s Phishy: See the Hook Before the Bait
27mReverse Engineering a Private API
48mDawn Of The Dead: The Tale Of The Resurrected Domains
44mDigital Cat-and-Mouse: Strategies to Outsmart Scrapers, Phishers, and Thieves
42mCracking the Code: Decoding Anti-Bot Systems!