Privacy Toolkit: Privacy Awareness In The Digital Age
summary
A browser extension implements plugins that detect concrete failures: proxify serialization APIs to spot fields returned but never used, DOM scans and regexes for globally accessible data, and prototype overwrite detection to show how third‑party scripts can steal scoped values. Tested against the top 1K sites it finds about 2,300 query-string leakages to over 200 third‑party domains. Core detection works but some plugins cause heavy performance cost and the UI and false‑positive filtering need polish.
AI-written summary · about
chapters (22)
- 0:00Privacy Toolkit intro
- 2:54Testable project overview
- 3:58Sensitive data definition
- 5:03Developer challenges
- 6:49Data oversharing risks
- 8:15API excessive exposure
- 11:25Globally accessible data
- 14:16Referral leakage impact
- 16:03Referral policy effects
- 19:23Third party script risks
- 23:27Privacy Toolkit extension
- 24:32Core plugins detection
- 25:56Limitations and UI improvements
- 27:04Demo: oversharing plugin
- 27:45Demo: globally accessible data
- 28:28Demo: referral leakage
- 30:38Third party script analysis
- 31:39Next steps
- 33:32New plugin ideas
- 34:36Project availability
- 35:17Test results top 1000 sites
- 37:07Q&A
related talks
25mExtension Breakdown...
45mThe evil friend in your browser
29mStandard Classification: Everything You Always Wanted to Know About Finge...
27mWho Left Open the Cookie Jar? A Comprehensive Evaluation of Third-Party Cookie Policies
38mDoubleX: Statically Detecting Vulnerable Data Flows in Browser ...
14mBrowser Fingerprinting: Stalking With a Personal Touch
14mGloom, Doom, and the Internet
17mWPSE: Fortifying Web Protocols via Browser-Side Security Monitoring