Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Chrome Google Privacy The Internet

Chrome Updates Incognito Warning To Admit Google Tracks Users In 'Private' Mode (arstechnica.com) 40

An anonymous reader quotes a report from Ars Technica: Google is updating the warning on Chrome's Incognito mode to make it clear that Google and websites run by other companies can still collect your data in the web browser's semi-private mode. The change is being made as Google prepares to settle a class-action lawsuit that accuses the firm of privacy violations related to Chrome's Incognito mode. The expanded warning was recently added to Chrome Canary, a nightly build for developers. The warning appears to directly address one of the lawsuit's complaints, that the Incognito mode's warning doesn't make it clear that Google collects data from users of the private mode.

Many tech-savvy people already know that while private modes in web browsers prevent some data from being stored on your device, they don't prevent tracking by websites or Internet service providers. But many other people may not understand exactly what Incognito mode does, so the more specific warning could help educate users. The new warning seen in Chrome Canary when you open an incognito window says: "You've gone Incognito. Others who use this device won't see your activity, so you can browse more privately. This won't change how data is collected by websites you visit and the services they use, including Google." The wording could be interpreted to refer to Google websites and third-party websites, including third-party websites that rely on Google ad services. The new warning was not yet in the developer, beta, and stable branches of Chrome as of today. It also wasn't in Chromium. The change to Canary was previously reported by MSPowerUser.

Incognito mode in the stable version of Chrome still says: "You've gone Incognito. Now you can browse privately, and other people who use this device won't see your activity." Among other changes, the Canary warning replaces "browse privately" with "browse more privately." The stable and Canary warnings both say that your browsing activity might still be visible to "websites you visit," "your employer or school," or "your Internet service provider." But only the Canary warning currently includes the caveat that Incognito mode "won't change how data is collected by websites you visit and the services they use, including Google." The old and new warnings both say that Incognito mode prevents Chrome from saving your browsing history, cookies and site data, and information entered in forms, but that "downloads, bookmarks and reading list items will be saved." Both warnings link to this page, which provides more detail on Incognito mode.

This discussion has been archived. No new comments can be posted.

Chrome Updates Incognito Warning To Admit Google Tracks Users In 'Private' Mode

Comments Filter:
  • by TwistedGreen ( 80055 ) on Tuesday January 16, 2024 @05:07PM (#64165009)

    A more accurate name would've been "Dementia Mode"

    They can track you, but they just don't remember who you are if you leave and come back.

    • They still remember your IP address, just not your browser usage.
      • Yeah, though no real web site would use that to identify a user individually. It's really of limited usefulness nowadays especially given that multiple users will often be sharing the same IP, or your IP may change every few minutes in the case of carrier-grade NAT.

        • I suspect some collectors can analyse the traffic data from a given IP to try and determine if it is likely to be dedicated or dynamic or shared. This can be combined with browser based metrics where available to make for a more accurate guesstimate. If you share an IP in a household that is still useful for targeted ads. In a large business environment probably not so much.
    • Re:Dementia Mode (Score:5, Informative)

      by Thelasko ( 1196535 ) on Tuesday January 16, 2024 @05:59PM (#64165169) Journal
      It's like the whole world forgot what cookies [wikipedia.org] are and how they're used, including Slashdot readers.

      When you browse a website, you are given a number, called a cookie. Whenever the website asks your browser for your cookie, the browser responds with the number it was given when it first connected to that page. Using this number, websites can keep track of you. Usually this is for things you want, like online shopping carts, or to keep you logged in to Slashdot. Other times cookies can track you like Big Brother.

      Incognito just deletes the cookies for that session the moment you close the browser. It doesn't stop your browser from accepting cookies, because that would break the functionality of a lot of websites.
      • Yes, it's not that complicated. In the old days of Netscape I used to enabled "Ask every time" when a website wanted to leave a cookie and I'd manually approve or deny every cookie request.

      • by AmiMoJo ( 196126 )

        Chrome has started limiting acceptance of cookies though. For some people, 3rd party cookies are no longer accepted. For everyone, expiry dates on cookies are now ignored and Chrome deletes them after a period of inactivity.

        Longer term, Chrome will do away with cookies entirely. For logging in, cryptographic tokens will be used to auto log back in instead.

      • True, but what irks me is that they've been forced to admit they record what sites you visit while in Incognito mode...

        Definition of evil.
    • Not Exactly (Score:4, Interesting)

      by The MAZZTer ( 911996 ) <megazzt.gmail@com> on Tuesday January 16, 2024 @07:27PM (#64165389) Homepage

      I think the key here is that some websites will use browser fingerprinting to track you.

      This will use data that websites typically need to function correctly so it's not a good idea to mess with it when switching to incognito mode. Things like what fonts are available for use and so forth. Messing with some of this stuff could cause some websites to break which you don't want to happen.

      And if you replace some of these factors with static lists to make it harder to differentiate incognito users, well, it also becomes easier to guess when a user is using incognito mode. Then the website can block them completely making incognito mode useless.

      I suspect Google tried to have a good balance here between privacy and stealth, as well as a balance between accurately informing the user and informing the user in a way most people can understand. A court decided they did not just a bad job, but a legally liable job.

    • What bugs me majorly is the fact that Google is recording what sites you visit in Icognito mode. Screw them. I'm done.
  • Get sued, lose, keep doing it but add a tiny disclaimer. Yeah, that sounds familiar. I can think of a few more examples of that AND not every single one was Apple, believe it or not. Now do note that this is in the same day as Verizon loses their lawsuit and announces "Fuck you, you're gonna keep doing it"
    https://mobile.slashdot.org/st... [slashdot.org]
    • by BigFire ( 13822 )

      BE EVIL

    • by Xenx ( 2211586 )

      Get sued, lose, keep doing it but add a tiny disclaimer.

      They didn't get sued for tracking in incognito. They got sued for an ambiguous disclaimer about tracking in incognito. They're correcting the disclaimer.

      Now do note that this is in the same day as Verizon loses their lawsuit and announces "Fuck you, you're gonna keep doing it"

      They didn't lose a lawsuit. They settled it, admitting no wrong doing. If Verizon was certain they'd win, it might have gone to court instead. If the class-action was certain they'd win, it might have gone to court. It sounds like neither side was certain, and didn't want to spend the time and resources to hash it out.

      • by BranMan ( 29917 )

        Probably not. Even if the class-action lawyers were certain of a win, they still would take the bird in the hand, rather than the bigger one in the bush that would take years of actual work, and several appeals, to get.

      • All true, however, they've been forced to admit they are recording what sites you're visiting when in Incognito mode. It boggles the mind. I've ignored so many bad Google behaviours in the past, now I'm done.
    • by Sloppy ( 14984 )

      Doesn't adding the disclaimer truly fix the problem, though? Apparently nontechnical users didn't understand what incognito does, so a sufficiently-well-written disclaimer ought to be able to fully correct the misunderstanding.

      On the techie side, we all know that a browser setting isn't going to somehow magically keep other peoples' computers from remembering users' requests, but non-techies didn't understand that magic isn't a thing, so Google's understandably under some pressure to better-document the inc

      • Google is basically saying that they have visibility of what you're browsing, even in incognito mode. Read the wording. So no, in my estimation it's pure evil.
  • Google is always tracking you.
    • Vote with your feet. Best way to avoid being racked by Google is to avoid using their products. They keep making them worse anyways so it's not as though you're gaining much for the privilege of having your privacy violated.
      • This. I switched to lynx today and I don't plan on looking back.

        But more seriously, there are not a lot of alternatives for people that want a cheap phone, a correctly working web browser, and free email. Google has got most people by the short and curlies

        • by CAIMLAS ( 41445 )

          I highly disagree with your sentiment here. There are tons of alternatives, available transparently and easily accessible.

          * Browser alternatives: Iron, Brave, Vivaldi, Opera, Firefox - and these are all good browsers. There are many other options as well.

          * Phones: past model iPhones (I'm personally using an iPhone Xs, the second one I bought since 2017 when it was new. It wasn't a great price when it was new, but it was $125 for the second one (on amazon) about 2 years ago when I accidentally spilled superg

          • Uhh my contract free pay as you go phone is $90. Brand new and not refurbished. And I'm simply thrifty and not actually broke. But a family with 3 kids and only a single working parent very well might aim for inexpensive phones for their kids since they'll be buying multiple.

            Half the browsers are using the same technology behind Chrome. And some of the examples you listed have some privacy problems or invasive ads. While I will admit you can trade Google for someone that is just as bad, it doesn't seem peop

      • >"Vote with your feet. Best way to avoid being racked by Google is to avoid using their products."

        ^^^THIS

        And by also not giving them power over the Internet/Web. Top four:

        * Don't use any browser based on Chromium (translation- use Firefox). Turn on blocking of third-party cookies and anti-tracking.
        * Don't use google.com for searching, use something else like Startpage or DuckDuckGo
        * Don't use Gmail (any more than required to activate Android, etc, if necessary. Then use something else for Email)
        * Don'

    • by higuita ( 129722 )

      they will not track you if i don't use chrome and chrome based browsers, don't use google services, block google dns, use ad blockers and use noscript extension as a final protection layer.... simple and easy! :)

      also, do not use windows and only good OS for phones (graphene, ubports and other open and degoogle androids... iphone doesn't count, as you can't control the OS, apple do it instead)

  • by TheNameOfNick ( 7286618 ) on Tuesday January 16, 2024 @05:27PM (#64165065)

    Wikipedia: Incognito is an English adjective meaning "in disguise", "having taken steps to conceal one's identity".

    That's not what that does at all. It forgets what you do when you close the window, but it does not disguise anything you do and doesn't conceal your identity. Calling it "incognito" mode is like calling cruise control "self driving".

  • by Speare ( 84249 ) on Tuesday January 16, 2024 @06:00PM (#64165181) Homepage Journal

    Yeah, it's obvious this was the case.

    Sometimes I want to watch a video on YouTube without YouTube thinking my whole life revolves around this new topic. Go ahead, browse a video about breadmaking or farming or restoring tools. Great, now the feed is filled with almost nothing but that sudden new passion, begging for views.

    Try viewing it in incognito mode. It's still tracked back to your account, and now you have a feed full of sweater-knitting or lessons on how to pronounce 'Nguyen' or what Taurus means to Sagittarius that you didn't really want to follow.

  • Yes, sure, on new tabs in Incognito mode it says "Now you can browse privately, and other people who use this device won’t see your activity" like TFA says, but it also says, and always has:

    Your activity might still be visible to:
    * Websites you visit
    * Your employer or school
    * Your internet service provider

    In other words, it's essentially useless for user privacy since everybody (except other users on your computer) can still see what you're up to.

  • the Canary warning replaces "browse privately" with "browse more privately."

    So harmless => mostly harmless?

  • Why do people still use that garbage browser? Remember the bad old days when internet explorer took over the market and we paid the price?
  • I'm disappointed in Google. But why am I surprised? What happened to "Do no evil?" Pathetic
    • Sorry, replying to my own post: I wonder if Edge or Brave does the same? I've always been a die-hard Chrome user, but perhaps it's time to reconsider.

      My only issue with switching are all the stored passwords, credit card details, etc. Bookmarks can be imported, but what about all the other stuff?
      • Quick install/test: brave *says* it imports passwords, but it does not. Deal breaker.

        Edge does in fact import everything. It does seem a bit flashy and busy (and some shit is linked to your microsoft Azure account - eg, credit card details, which is a PITA), but I'm going to give it a try and wean myself off the corrupt dribbling Chrome tit.

Avoid strange women and temporary variables.

Working...