neko
/
SpywareWatchdog
mirror of https://codeberg.org/shadow/SpywareWatchdog.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Full restyling articles Part 3

This commit is contained in:
codddfeea 2022-04-24 16:11:22 +03:00
parent dce0acbc31
commit 8ad3e138eb
6 changed files with 235 additions and 466 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

273
articles/ksp.html
View File

@ -1,184 +1,103 @@
<!--Old Style--> <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head> <head>
<link rel="stylesheet" href="../style.css"/> <meta http-equiv="Content-type" content="application/xhtml+xml;charset=utf-8"/>
<meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>Kerbal Space Program — Spyware Watchdog</title> <title>Kerbal Space Program — Spyware Watchdog</title>
<link rel="stylesheet" href="../style.css"/>
</head> </head>
<body> <body>
<img src="../images/ksp_logo.png" alt="Kerbal Space Program Logo"> <div class="case">
<h1>Kerbal Space Program</h1> <div class="nav"><a href="index.html">&larr; Catalog</a></div>
<p> <div class="main">
Kerbal Space Program is a space flight simulation video game developed and published by Squad, and currently owned by Take-Two Interactive. <img src="../images/ksp_logo.png" alt="Kerbal Space Program Logo"/>
</p> <h1>Kerbal Space Program</h1>
<h2>Spyware Level: <font color="red">EXTREMELY HIGH</font></h2> <p>Kerbal Space Program is a space flight simulation video game developed and published by Squad, and currently owned by Take-Two Interactive.</p>
<p> <h2>Spyware Level: <span class="red">EXTREMELY HIGH</span></h2>
Kerbal Space program is a spyware program that mines large amounts of personal information of its users<sup><a href="#1">[1]</a></sup><sup><a href="#2">[2]</a></sup>, <p>Kerbal Space program is a spyware program that mines large amounts of personal information of its users<sup><a href="#s1">[1]</a></sup><sup><a href="#s2">[2]</a></sup>, to use for its own advertising, and to sell to other advertisers. On its face, it is a video game, but it is loaded with a huge amount of spyware that makes it completely unusable from a privacy standpoint. If you MUST use this program, run it in a VM with no internet connection. KSP collects so much information, that it has managed to catapult itself into the highest ranks of this website and can only be described as a uniquely malicious datamining platform. KSP at one point was integrated with the <a href="../articles/redshell.html">Redshell</a> spyware platform.<sup><a href="#s3">[3]</a></sup></p>
to use for its own advertising, and to sell to other advertisers. On its face, it is a video game, but it is loaded with a huge amount of spyware that makes it completely unusable from a privacy standpoint. <h3>Kerbal Space Program collects vast amounts of personal information</h3>
If you MUST use this program, run it in a VM with no internet connection. KSP collects so much information, that it has managed to catapult itself into the highest ranks of <p>KSP collects or attempts to collect or reserves the right to collect the following information about its users<sup><a href="#s1">[1]</a></sup>:</p>
this website and can only be described as a uniquely malicious datamining platform. KSP at one point was integrated with the <a href="../articles/redshell.html">Redshell</a> spyware platform.<sup><a href="#1">[3]</a></sup><sup> <ul>
</p> <li>First and/or last name</li>
<li>E-mail address</li>
<h3>Kerbal Space Program collects vast amounts of personal information</h3> <li>Phone number</li>
<li>Photo</li>
<p> <li>Mailing address</li>
KSP collects or attempts to collect or reserves the right to collect the following information about its users<sup><a href="#1">[1]</a></sup>: <li>Geolocation (physical location)</li>
</p> <li>Payment information</li>
<li>Age</li>
<ul> <li>Gender</li>
<li>First and/or last name</li> <li>Date of birth</li>
<li>E-mail address</li> <li>Zip code</li>
<li>Phone number</li> <li>Hardware configuration</li>
<li>Photo</li> <li>Console ID</li>
<li>Mailing address</li> <li>Software products played</li>
<li>Geolocation (physical location)</li> <li>Purchases</li>
<li>Payment information</li> <li>IP address</li>
<li>Age</li> <li>Systems you have played on</li>
<li>Gender</li> <li>Other Information from integrated services</li>
<li>Date of birth</li> <li>Other Information from social media</li>
<li>Zip code</li> </ul>
<li>Hardware configuration</li> <p>Anyone who is familiar with privacy violating software can notice that compared to most spyware out there, this is a MASSIVE amount of personal information that is being collected. It's further clarified that not only does this program collect all of your information, but it uses this information to build a unique profile of you by correlating that information together.</p>
<li>Console ID</li> <h3>Kerbal Space Program is integrated with other spyware platforms</h3>
<li>Software products played</li> <p>KSP is integrated with social networking websites such as Facebook<sup><a href="#s1">[1]</a></sup>, which allows it to collect a lot of personal information about you from any sort of social media profile that you have on that website. If you're wondering how it could collect your date of birth, gender and photo if the program doesn't explicitly ask you, this is probably how it does it. When you give KSP access to your Facebook account by logging in through spyware platforms such as Facebook, it collects as much information from your profile as it possibly can. This includes:</p>
<li>Purchases</li> <ul>
<li>IP address</li> <li>Your profile picture</li>
<li>Systems you have played on</li> <li>Your friends list</li>
<li>Other Information from integrated services</li> <li>Your name</li>
<li>Other Information from social media</li> </ul>
</ul> <p>As well as all other information that KSP claims it collects in the previous section. As you can see, this feature is a way for KSP to collect huge amounts of your personal information, which it does not show and restraint in collecting.</p>
<p>Not only is KSP integrated with Facebook's spyware platform, but it is also integrated with other spyware platforms as well:</p>
<p> <p><i>"When you use a third-party authentication service or link your Company account with a third-party account, you will be asked to provide account information associated with that third-party account. Certain membership information may be transferred automatically to the Company when you register to join an Online Service from a third-party gaming network system or link your Online Service membership with a third-party service, such as your friends list on that gaming network or social network service."</i><sup><a href="#s1">[1]</a></sup></p>
Anyone who is familiar with privacy violating software can notice that compared to most spyware out there, this is a MASSIVE amount of personal information that is being collected. <p><i>"When you use Facebook Connect, OpenID or another multisite ID to log in to an Online Service, those ID services will authenticate your identity and provide you the option to share certain personal information with us to pre-populate our sign up form. Depending on your account settings, multisite IDs may also provide other information to us. Please check the terms of those services before using them to log into an Online Service."</i><sup><a href="#s1">[1]</a></sup></p>
It's further clarified that not only does this program collect all of your information, but it uses this information to build a unique profile of you by correlating that information <p><i>"If you use, purchase, or register for an Online Service through a third-party service such as a gaming console's network service, an internet based gaming service, or a social network website, or request that we associate a Company account with a third-party service account, then limited user account personal information may be transferred to the Company as part of the registration process and we may be able to collect information about your use of the Online Services."</i><sup><a href="#s1">[1]</a></sup></p>
together. <h3>Kerbal Space Program allows advertisers to collect personal information separately</h3>
</p> <p>In addition to tracking its users, KSP allows advertisers to track its users as well<sup><a href="#s1">[1]</a></sup>. These advertisers are:</p>
<ul>
<h3>Kerbal Space Program is integrated with other spyware platforms</h3> <li>DoubleClick</li>
<li>Facebook</li>
<p> <li>Google</li>
KSP is integrated with social networking websites such as Facebook<sup><a href="#1">[1]</a></sup>, which allows it to collect a lot of personal information about you from any sort of social media profile that you <li>Conversant</li>
have on that website. If you're wondering how it could collect your date of birth, gender and photo if the program doesn't explicitly ask you, this is probably how it does it. <li>Nielsen/Netratings</li>
When you give KSP access to your Facebook account by logging in through spyware platforms such as Facebook, it collects as much information from your profile as it possibly can. This includes: <li>Omniture</li>
</p> <li>Yahoo</li>
</ul>
<ul> <p>Which of course, all have their own separate privacy policies about how they handle your information. So, not only is KSP tracking you, but a huge amount of advertisers are also tracking you when you use their services.</p>
<li>Your profile picture</li> <h3>Kerbal Space Program sells your information to advertisers</h3>
<li>Your friends list</li> <p>KSP's privacy policy uses more vague language here, but it's clear that your information is being sold to advertisers. See the following quotes:</p>
<li>Your name</li> <p><i>"In the event we offer services or promotions where your personal information is separately collected and used according to the privacy policy of a third party, we will inform you of that at the time of collection and you may elect not to participate in the service or promotion."</i><sup><a href="#s1">[1]</a></sup></p>
<p><i>"In addition, we may share aggregate and other information regarding Online Service usage statistics and user demographics with third parties."</i><sup><a href="#s1">[1]</a></sup></p>
</ul> <p>Is "other information" personal information? There isn't any transparency here, so we cant know, but its clear that KSP uses its massive datamining platform to collaborate with other datamining platforms.</p>
<h3>Kerbal Space Program uses your personal information for its own advertising</h3>
<p> <p>It's clearly stated in the privacy policy<sup><a href="#s1">[1]</a></sup> that this information is used to target users for promotions, and to analyse for marketing purposes:</p>
As well as all other information that KSP claims it collects in the previous section. As you can see, this feature is a way for KSP to collect huge amounts of your personal information, <p><i>"The Company uses this information to send you promotional materials. [...] We also use your personal and other information for our internal marketing and demographic studies, so we can constantly improve the products and services we provide you and to better meet your needs."</i><sup><a href="#s1">[1]</a></sup></p>
which it does not show and restraint in collecting. <h3>Kerbal Space Program does not make its source code available</h3>
</p> <p>Its impossible to discern the level and scope of privacy violations done by this software beyond what they tell us in the privacy policy. The source code could potentially be hiding more spyware, but nobody can audit it, and nobody can go into the source code and disable all of the spyware. If KSP had nothing to hide, you would be able to build the game from its source code.</p>
<p> </div>
Not only is KSP integrated with Facebook's spyware platform, but it is also integrated with other spyware platforms as well: <hr/>
</p> <div class="footer">
<p><i> <div class="futher">
"When you use a third-party authentication service or link your Company account with a third-party account, you will be asked to provide account information associated with that third-party account. Certain membership information may be transferred automatically to the Company when you register to join an Online Service from a third-party gaming network system or link your Online Service membership with a third-party service, such as your friends list on that gaming network or social network service." <h4>Further Reading:</h4>
</i><sup><a href="#1">[1]</a></sup></p> <ol>
<p><i> <li><a href="https://www.youtube.com/watch?v=WCLbUD_aubQ">Kerbal Space Program's New EULA Makes it Spyware </a></li>
"When you use Facebook Connect, OpenID or another multisite ID to log in to an Online Service, those ID services will authenticate your identity and provide you the option to share certain personal information with us to pre-populate our sign up form. Depending on your account settings, multisite IDs may also provide other information to us. Please check the terms of those services before using them to log into an Online Service." </ol>
</i><sup><a href="#1">[1]</a></sup></p> </div>
<p><i> <hr/>
"If you use, purchase, or register for an Online Service through a third-party service such as a gaming console's network service, an internet based gaming service, or a social network website, or request that we associate a Company account with a third-party service account, then limited user account personal information may be transferred to the Company as part of the registration process and we may be able to collect information about your use of the Online Services." <div class="sources">
</i><sup><a href="#1">[1]</a></sup></p> <h4>Sources:</h4>
<ol>
<h3>Kerbal Space Program allows advertisers to collect personal information separately</h3> <li id="s1"><a href="https://www.take2games.com/privacy/">TAKE-TWO INTERACTIVE SOFTWARE, Inc. PRIVACY POLICY</a> <a href="http://web.archive.org/web/20180523084938/https://www.take2games.com/privacy/">[web.archive.org]</a> <a href="http://archive.is/WvWBD">[archive.is]</a> <a href="https://ghostarchive.org/archive/LsdEf">[ghostarchive.org]</a></li>
<li id="s2"><a href="https://forum.kerbalspaceprogram.com/index.php?/topic/171850-does-ksp-v14-really-have-spyware-in-it/&amp;page=12&amp;tab=comments#comment-3314988">Does KSP v1.4 really have spyware in it?</a> <a href="http://web.archive.org/web/20180530204319/https://forum.kerbalspaceprogram.com/index.php?/topic/171850-does-ksp-v14-really-have-spyware-in-it/&amp;page=12&amp;tab=comments">[web.archive.org]</a> <a href="http://ghostarchive.org/search?term=https%3A%2F%2Fforum.kerbalspaceprogram.com%2Findex.php%3F%2Ftopic%2F171850-does-ksp-v14-really-have-spyware-in-it%2F%26page%3D12%26tab%3Dcomments%23comment-3314988">[ghostarchive.org]</a></li>
<p> <li id="s3"><a href="https://old.reddit.com/r/Steam/comments/8pud8b/psa_red_shell_spyware_holy_potatoes_were_in_space/">[PSA] RED SHELL Spyware — "Holy Potatoes! We’re in Space?!" integrated and removed it after complaints</a> <a href="https://removeddit.com/r/Steam/comments/8pud8b/">[removeddit]</a> <a href="http://archive.is/jwlur">[archive.is]</a> <a href="http://ghostarchive.org/search?https://old.reddit.com/r/Steam/comments/8pud8b/psa_red_shell_spyware_holy_potatoes_were_in_space/">[ghostarchive.org]</a></li>
In addition to tracking its users, KSP allows advertisers to track its users as well<sup><a href="#1">[1]</a></sup>. These advertisers are: </ol>
</p> </div>
<hr/>
<ul> <b>This article was last updated on 8/17/2021</b>
<li>DoubleClick</li> <p>If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>.</p>
<li>Facebook</li> <p>All contributions must be licensed under the CC0 license to be accepted.</p>
<li>Google</li> <a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"/></a>
<li>Conversant</li> </div>
<li>Nielsen/Netratings</li> </div>
<li>Omniture</li>
<li>Yahoo</li>
</ul>
<p>
Which of course, all have their own separate privacy policies about how they handle your information. So, not only is KSP tracking you, but a huge amount of advertisers are
also tracking you when you use their services.
</p>
<h3>Kerbal Space Program sells your information to advertisers</h3>
<p>
KSP's privacy policy uses more vague language here, but it's clear that your information is being sold to advertisers. See the following quotes:
</p>
<p><i>
"In the event we offer services or promotions where your personal information is separately collected and used according to the privacy policy of a third party, we will inform you of that at the time of collection and you may elect not to participate in the service or promotion."
</i><sup><a href="#1">[1]</a></sup></p>
<p><i>
"In addition, we may share aggregate and other information regarding Online Service usage statistics and user demographics with third parties."
</i><sup><a href="#1">[1]</a></sup></p>
<p>
Is "other information" personal information? There isn't any transparency here, so we cant know, but its clear that KSP uses its massive datamining platform to collaborate with other datamining platforms.
</p>
<h3>Kerbal Space Program uses your personal information for its own advertising</h3>
<p>
It's clearly stated in the privacy policy<sup><a href="#1">[1]</a></sup> that this information is used to target users for promotions, and to analyse for marketing purposes:
</p>
<p><i>
"The Company uses this information to send you promotional materials. [...] We also use your personal and other information for our internal marketing and demographic studies, so we can constantly improve the products and services we provide you and to better meet your needs."
</i><sup><a href="#1">[1]</a></sup></p>
<h3>Kerbal Space Program does not make its source code available</h3>
<p>
Its impossible to discern the level and scope of privacy violations done by this software beyond what they tell us in the privacy policy. The source code could potentially be hiding
more spyware, but nobody can audit it, and nobody can go into the source code and disable all of the spyware. If KSP had nothing to hide, you would be able to build the game from its
source code.
</p>
<hr>
<center>
<h3>Further Reading</h3>
<a href="https://www.youtube.com/watch?v=WCLbUD_aubQ">Kerbal Space Program's New EULA Makes it Spyware </a><br>
<hr>
<h2>Sources</h2>
<p>
<a name="1">1.</a>
<a href="https://www.take2games.com/privacy/">TAKE-TWO INTERACTIVE SOFTWARE, Inc. PRIVACY POLICY</a>
<a href="http://web.archive.org/web/20180523084938/https://www.take2games.com/privacy/">[web.archive.org]</a>
<a href="http://archive.is/WvWBD">[archive.is]</a><br>
<a href="https://ghostarchive.org/archive/LsdEf">[ghostarchive.org]</a>
<a name="2">2.</a>
<a href="https://forum.kerbalspaceprogram.com/index.php?/topic/171850-does-ksp-v14-really-have-spyware-in-it/&page=12&tab=comments#comment-3314988">Does KSP v1.4 really have spyware in it?</a>
<a href="http://web.archive.org/web/20180530204319/https://forum.kerbalspaceprogram.com/index.php?/topic/171850-does-ksp-v14-really-have-spyware-in-it/&page=12&tab=comments">[web.archive.org]</a><br>
<a href="http://ghostarchive.org/search?term=https%3A%2F%2Fforum.kerbalspaceprogram.com%2Findex.php%3F%2Ftopic%2F171850-does-ksp-v14-really-have-spyware-in-it%2F%26page%3D12%26tab%3Dcomments%23comment-3314988">[ghostarchive.org]</a>
<a name="3">3.</a>
<a href="https://old.reddit.com/r/Steam/comments/8pud8b/psa_red_shell_spyware_holy_potatoes_were_in_space/">[PSA] RED SHELL Spyware — "Holy Potatoes! We’re in Space?!" integrated and removed it after complaints</a>
<a href="https://removeddit.com/r/Steam/comments/8pud8b/">[removeddit]</a>
<a href="http://archive.is/jwlur">[archive.is]</a>
<a href="http://ghostarchive.org/search?https://old.reddit.com/r/Steam/comments/8pud8b/psa_red_shell_spyware_holy_potatoes_were_in_space/">[ghostarchive.org]</a>
<br>
</p>
<hr>
<p><b>
This article was last updated on 8/17/2021
</b></p>
<p>
If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>. All contributions must be licensed under the CC0 license to be accepted.
</p>
<a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"></a>
<p><a href="../articles/index.html">Back to catalog</a></p>
</center>
</body> </body>
</html> </html>

37
articles/librewolf.html
View File

@ -1,15 +1,11 @@
<!-- NOTICE!!!! --> <?xml version="1.0" encoding="UTF-8"?>
<!-- BEFORE MAKING A PULL REQUEST OR PUSH PLEASE ALWAYS CHECK WITH THE VALIDATOR -->
<!-- http://validator.w3.org/#validate-by-input -->
<!-- NOTICE!!!! -->
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head> <head>
<meta http-equiv="Content-type" content="application/xhtml+xml;charset=utf-8"/> <meta http-equiv="Content-type" content="application/xhtml+xml;charset=utf-8"/>
<title>Librewolf — Spyware Watchdog</title> <meta name="viewport" content="width=device-width, initial-scale=1"/>
<link rel="stylesheet" href="../style.css"/> <title>Librewolf — Spyware Watchdog</title>
<link rel="stylesheet" href="../style.css"/>
</head> </head>
<body> <body>
<div class="case"> <div class="case">
@ -18,15 +14,11 @@
<img src="../images/librewolf.svg" alt="Librewolf Logo"/> <img src="../images/librewolf.svg" alt="Librewolf Logo"/>
<h1>Librewolf</h1> <h1>Librewolf</h1>
<p>Librewolf is a Firefox fork with the primary goals of privacy, security and user freedom.<sup><a href="#s1">[1]</a></sup></p> <p>Librewolf is a Firefox fork with the primary goals of privacy, security and user freedom.<sup><a href="#s1">[1]</a></sup></p>
<br/> <p>Version tested: 95.0.2</p>
<p>Version tested: 95.0.2</p>
<h2>Spyware Level: <span class="yellowgreen">Low</span></h2> <h2>Spyware Level: <span class="yellowgreen">Low</span></h2>
<br/> <p>Librewolf makes some calls on startup to <code>f.s.s.m.c.qjz9zk</code> which looks like an obliterated address, and <code>shavar.services.mozilla.com</code> which is intended (however it can be disabled by clearing the URL in <code>browser.safebrowsing.provider.mozilla.updateURL</code>).<sup><a href="#s2">[2]</a></sup> There is also an attempt to check for updates regarding the pre-installed uBlock Origin extension.</p>
<p>Librewolf makes some calls on startup to <code>f.s.s.m.c.qjz9zk</code> which looks like an obliterated address, and <code>shavar.services.mozilla.com</code> which is intended (however it can be disabled by clearing the URL in <code>browser.safebrowsing.provider.mozilla.updateURL</code>).<sup><a href="#s2">[2]</a></sup> There is also an attempt to check for updates regarding the pre-installed uBlock Origin extension.</p> <p>This is a big improvement compared to Firefox.</p>
<br/> <img class="screenshot" src="../images/librewolfproxychains1.png" alt="Librewolf connections shows via a terminal running proxychains"/>
<p>This is a big improvement compared to Firefox.</p>
<br/>
<img class="screenshot" src="../images/librewolfproxychains1.png" alt="Librewolf connections shows via a terminal running proxychains"/>
</div> </div>
<hr/> <hr/>
<div class="footer"> <div class="footer">
@ -34,19 +26,16 @@
<h4>Sources:</h4> <h4>Sources:</h4>
<ol> <ol>
<li id="s1"><a href="https://librewolf.net/">Librewolf</a> <a href="http://web.archive.org/web/20220106170403/https://librewolf.net/">[web.archive.org]</a></li> <li id="s1"><a href="https://librewolf.net/">Librewolf</a> <a href="http://web.archive.org/web/20220106170403/https://librewolf.net/">[web.archive.org]</a></li>
<li id="s2"><a href="https://gitlab.com/librewolf-community/browser/linux/-/issues/271">Automatic connection to shavar.services.mozilla.com - Librewolf Issue #271 - GitLab</a></li> <li id="s2"><a href="https://gitlab.com/librewolf-community/browser/linux/-/issues/271">Automatic connection to shavar.services.mozilla.com - Librewolf Issue #271 - GitLab</a></li>
</ol> </ol>
</div> </div>
<hr/> <hr/>
<b>This article was created on 01/7/2022</b><br/> <b>This article was created on 01/7/2022</b>
<br/>
<b>This article was last edited on 01/7/2022</b> <b>This article was last edited on 01/7/2022</b>
<!--Dont change-->
<p>If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>.</p> <p>If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>.</p>
<p>All contributions must be licensed under the CC0 license to be accepted.</p> <p>All contributions must be licensed under the CC0 license to be accepted.</p>
<a href="../LICENSE.txt"> <a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"/></a>
<img class="icon" src="../images/cc0.png" alt="CC0 License"/>
</a>
<!--Dont change-->
</div> </div>
</div> </div>
</body> </body>

111
articles/palemoon.html
View File

@ -1,76 +1,49 @@
<!--Old Style--> <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head> <head>
<link rel="stylesheet" href="../style.css"/> <meta http-equiv="Content-type" content="application/xhtml+xml;charset=utf-8"/>
<meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>Pale Moon — Spyware Watchdog</title> <title>Pale Moon — Spyware Watchdog</title>
<link rel="stylesheet" href="../style.css"/>
</head> </head>
<body> <body>
<img src="../images/palemoon_logo.png" alt="Pale Moon logo"> <div class="case">
<h1>Pale Moon</h1> <div class="nav"><a href="index.html">&larr; Catalog</a></div>
<p> <div class="main">
Pale Moon is a fork of an old <a href="../articles/firefox.html">Firefox</a> version, before the user interface change that put off many people. Version 28.4 was used to <img src="../images/palemoon_logo.png" alt="Pale Moon logo"/>
write this article. <h1>Pale Moon</h1>
</p> <p>Pale Moon is a fork of an old <a href="../articles/firefox.html">Firefox</a> version, before the user interface change that put off many people. Version 28.4 was used to write this article.</p>
<p> <h2>Spyware Level: <span class="yellow">Medium</span></h2>
<h2>Spyware Level: <font color=yellow>Medium</font></h2> <p>After following the <a href="../guides/palemoon.html">mitigation guide</a>, this software is <span class="lime"><b>Not Spyware</b></span>.</p>
<p>After following the <a href="../guides/palemoon.html">mitigation guide</a>, this software is <font color=lime><b>Not Spyware</b></font>. <p>Connects to analytics services, and these requests can <b>only be avoided on subsequent runs</b>. Has block lists, search suggestions, and auto-updates. Sends SSL certificates from the sites you visit.</p>
</p> <h3>Google Analytics on Homepage</h3>
<p> <p>By default, Pale Moon's home page is set to https://palemoon.start.me, and it will automatically make a connection to it upon its first run. This page connects to Google Analytics, which can fingerprint and track you across the internet.</p>
Connects to analytics services, and these requests can <b>only be avoided on subsequent runs</b>. Has block lists, search suggestions, and auto-updates. <img class="screenshot" src="../images/pm_analytics.png" alt="Google Analytics requests sent by Pale Moon's default homepage"/>
Sends SSL certificates from the sites you visit. <h3>Auto-updates</h3>
</p> <p>Pale Moon will automatically update itself, addons and search engines, as well as its blocklist.xml file with the addons it considers "malicious". Some of these can be turned off from the GUI, and some only from about:config.</p>
<h3>Google Analytics on Homepage</h3> <h3>Search Suggestions</h3>
<p> <p>The default search engine is the privacy-respecting DuckDuckGo, however search suggestions are enabled by default, which could send a request for every letter you've typed, all while you think it stays in-browser until you press Enter. Can be turned off by right-clicking the search bar.</p>
By default, Pale Moon's home page is set to https://palemoon.start.me, and it will automatically make a connection to it upon its first run. <h3>OCSP querying</h3>
This page connects to Google Analytics, which can fingerprint and track you across the internet. <p>Will automatically check every site's SSL certificate to see if it is valid, which necessitates sending it to a third party. Can be turned off from the GUI.</p>
</p> <h3>Not spyware related, but worth noting</h3>
<img class="screenshot" src="../images/pm_analytics.png" alt="Google Analytics requests sent by Pale Moon's default homepage"> <h3>Blocking privacy-enhancing addons</h3>
<h3>Auto-updates</h3> <p>Pale Moon by default won't allow you to install the privacy-enhancing addon NoScript, citing this rationale for blocking such an important addon: <i>"NoScript is known to cause severe issues with a large (and growing) number of websites. Unless finely tuned for every website visited, NoScript will cause display issues and functional issues."</i><sup><a href="#s1">[1]</a></sup> <b><span class="yellow">To disable this blocklist, set <code>extensions.blocklist.enabled</code> to <code>false</code> in about:config.</span></b></p>
<p> </div>
Pale Moon will automatically update itself, addons and search engines, as well as its blocklist.xml file with the addons it considers "malicious". Some of these can be turned off from the GUI, and some only from about:config. <hr/>
</p> <div class="footer">
<div class="sources">
<h3>Search Suggestions</h3> <h4>Sources:</h4>
<p>The default search engine is the privacy-respecting DuckDuckGo, however search suggestions are enabled by default, which could send a request for every letter you've typed, all while you think it stays in-browser until you press Enter. Can be turned off by right-clicking the search bar. <ol>
</p> <li id="s1"><a href="https://blocklist.palemoon.org/info/?id=pm112">This Add-on to your browser has been blocked or disabled.</a> <a href="https://web.archive.org/web/20180514135250/http://blocklist.palemoon.org/info/?id=pm112">[web.archive.org]</a> <a href="https://archive.is/EiraE">[archive.is]</a> <a href="https://ghostarchive.org/archive/q9Ijt?kreymer=false">[ghostarchive.org]</a></li>
</ol>
<h3>OCSP querying</h3> </div>
<p>Will automatically check every site's SSL certificate to see if it is valid, which necessitates sending it to a third party. Can be turned off from the GUI.</p> <hr/>
<b>This article was created on 3/19/2019</b>
<h3>Not spyware related, but worth noting</h3> <p>If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>.</p>
<p>All contributions must be licensed under the CC0 license to be accepted.</p>
<h3>Blocking privacy-enhancing addons</h3> <a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"/></a>
<p> </div>
Pale Moon by default won't allow you to install the privacy-enhancing addon NoScript, citing this rationale for </div>
blocking such an important addon: <i>"NoScript is known to cause severe issues with a large (and growing) number of websites. Unless finely tuned for every website visited,
NoScript will cause display issues and functional issues."</i><sup><a href="#1">[1]</a></sup>
<b><font color=yellow>To disable this blocklist, set <code>extensions.blocklist.enabled</code> to <code>false</code> in about:config.</font></b>
</p>
<center>
<hr>
<h2>Sources</h2>
<p>
<a name="1">1.</a>
<a href="https://blocklist.palemoon.org/info/?id=pm112">This Add-on to your browser has been blocked or disabled.</a>
<a href="https://web.archive.org/web/20180514135250/http://blocklist.palemoon.org/info/?id=pm112">[web.archive.org]</a>
<a href="https://archive.is/EiraE">[archive.is]</a>
<a href="https://ghostarchive.org/archive/q9Ijt?kreymer=false">[ghostarchive.org]</a>
<br>
</p>
<hr>
<p><b>
This article was created on 3/19/2019<br>
</b></p>
<p>
If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>. All contributions must be licensed under the CC0 license to be accepted.
</p>
<a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"></a>
<p><a href="../articles/index.html">Back to catalog</a></p>
</center>
</body> </body>
</html> </html>

24
articles/seamonkey.html
View File

@ -9,29 +9,29 @@
</head> </head>
<body> <body>
<div class="case"> <div class="case">
<div class="nav"> <div class="nav"><a href="index.html">&larr; Catalog</a></div>
<a href="index.html">&larr; Catalog</a>
</div>
<div class="main"> <div class="main">
<img src="../images/seamonkey/SeaMonkey.svg" alt="SeaMonkey Logo"/> <img src="../images/seamonkey/SeaMonkey.svg" alt="SeaMonkey Logo"/>
<h1>SeaMonkey</h1> <h1>SeaMonkey</h1>
<p>SeaMonkey is a web browser, email client, news reader, HTML editor and an IRC client.<sup><a href="#two">[2]</a></sup></p> <p>SeaMonkey is a web browser, email client, news reader, HTML editor and an IRC client.<sup><a href="#s2">[2]</a></sup></p>
<h2>Spyware Level: <span class="yellow">Medium</span></h2> <h2>Spyware Level: <span class="yellow">Medium</span></h2>
<p>SeaMonkey makes about 35 requests on first start, with a connection to Google SafeBrowsing recurring about every 30 minutes, though it can be <a href="../guides/seamonkey.html">disabled</a>.</p> <p>SeaMonkey makes about 35 requests on first start, with a connection to Google SafeBrowsing recurring about every 30 minutes, though it can be <a href="../guides/seamonkey.html">disabled</a>.</p>
<img class="screenshot" src="../images/seamonkey/seamonkey.png" alt="SeaMonkey Requests in Mitmproxy"/> <img class="screenshot" src="../images/seamonkey/seamonkey.png" alt="SeaMonkey Requests in Mitmproxy"/>
</div> </div>
<hr/> <hr/>
<div class="center"> <div class="center">
<h4>Sources:</h4> <div class="sources">
<p><a id="one">1.</a> <h4>Sources:</h4>
<a href="https://commons.wikimedia.org/wiki/File:SeaMonkey.svg">SeaMonkey Logo (WikiMedia)</a></p> <ol>
<p><a id="two">2.</a> <li id="s1"><a href="https://commons.wikimedia.org/wiki/File:SeaMonkey.svg">SeaMonkey Logo (WikiMedia)</a></li>
<a href="https://www.seamonkey-project.org/about">https://www.seamonkey-project.org/about</a><a href="http://web.archive.org/web/20201130073628/https://www.seamonkey-project.org/about">[web.archive.org]</a></p> <li id="s2"><a href="https://www.seamonkey-project.org/about">https://www.seamonkey-project.org/about</a><a href="http://web.archive.org/web/20201130073628/https://www.seamonkey-project.org/about">[web.archive.org]</a></li>
</ol>
</div>
<hr/> <hr/>
<b>This article was created on 1/17/2021</b><br/> <b>This article was created on 1/17/2021</b>
<br/>
<b>This article was last edited on 5/3/2021</b> <b>This article was last edited on 5/3/2021</b>
<hr/> <p>If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>.</p>
<p>If you want to contribute to this website, you can always <a href="https://codeberg.org/shadow/SpywareWatchdog">make a pull request</a>.</p>
<p>All contributions must be licensed under the CC0 license to be accepted.</p> <p>All contributions must be licensed under the CC0 license to be accepted.</p>
<a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"/></a> <a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"/></a>
</div> </div>

100
articles/waterfox_classic.html
View File

@ -9,107 +9,53 @@
</head> </head>
<body> <body>
<div class="case"> <div class="case">
<div class="nav"> <div class="nav"><a href="index.html">&larr; Catalog</a></div>
<a href="index.html">&larr; Catalog</a>
</div>
<div class="main"> <div class="main">
<img src="../images/waterfox_logo.png" alt="Waterfox Logo"/> <img src="../images/waterfox_logo.png" alt="Waterfox Logo"/>
<h1>Waterfox Classic</h1> <h1>Waterfox Classic</h1>
<p>Version tested was 2020.10.</p> <p>Version tested was 2020.10.</p>
<p> <p>Waterfox is a web browser that is a fork of <a href="../articles/firefox.html">Firefox</a>. Note: This article has a few issues. See <a href="https://codeberg.org/shadow/SpywareWatchdog/issues/117">this</a> for more details.</p>
Waterfox is a web browser that is a fork of <a href="../articles/firefox.html">Firefox</a>.
Note: This article has a few issues. See <a href="https://codeberg.org/shadow/SpywareWatchdog/issues/117">this</a> for more details.
</p>
<h2>Spyware Level: <span class="yellow>">Medium</span></h2> <h2>Spyware Level: <span class="yellow>">Medium</span></h2>
<p> <p>Waterfox is a fork of Firefox that claims to be more private and secure than Firefox. However, Waterfox contains telemetry and shares information about you with Mozilla, and has other spyware features.</p>
Waterfox is a fork of Firefox that claims to be more private and secure
than Firefox. However, Waterfox contains telemetry and shares
information about you with Mozilla, and has other spyware features.
</p>
<h3>Waterfox connects to spyware services when it is first run</h3> <h3>Waterfox connects to spyware services when it is first run</h3>
<p> <p>If you start up Waterfox for the first time, it will make <b><span class="red">55 requests</span></b><sup><a href="#s4">[4]</a></sup> to several spyware platforms, notably Matomo, and Mozilla online services like its Geolocation service, and several other Mozilla services, as well as Waterfox's own update service. You can look at a list of these requests <a href="../images/waterfox_classic_spyware.png">here</a>.</p>
If you start up Waterfox for the first time, it will make <b><span class="red">55 requests</span></b><sup><a href="#s4">[4]</a></sup> to several spyware platforms, notably
Matomo, and Mozilla online services like its Geolocation service, and several other Mozilla services, as
well as Waterfox's own update service. You can look at a list of these requests
<a href="../images/waterfox_classic_spyware.png">here</a>.
</p>
<h3>Waterfox is integrated into the "Firefox Accounts" spyware platform</h3> <h3>Waterfox is integrated into the "Firefox Accounts" spyware platform</h3>
<p> <p>The "Firefox Accounts" platform allows you to sync a lot of sensitive information, such as your internet history, across all of your devices. This is, of course, all being stored on Mozilla's servers.<sup><a href="#s3">[3]</a></sup> This feature is opt-in spyware, but it should still be mentioned. If you don't want your internet history to be uploaded to Mozilla servers, don't use this feature.</p>
The "Firefox Accounts" platform allows you to sync a lot of sensitive
information, such as your internet history, across all of your devices.
This is, of course, all being stored on Mozilla's servers.<sup><a href="#s3">[3]</a></sup>
This feature
is opt-in spyware, but it should still be mentioned.
If you don't want your internet history to be uploaded to Mozilla servers,
don't use this feature.
</p>
<h3>Waterfox is self updating software</h3> <h3>Waterfox is self updating software</h3>
<p> <p>Self updates are a spyware feature since they are usually ways for the developer of a program to put spyware into their software without presenting it in a prominent way where the user can understand what they are giving up when they download the update.</p>
Self updates are a spyware feature since they are usually ways for the developer of a program to put spyware into their software without presenting it in a prominent way
where the user can understand what they are giving up when they download the update.
</p>
<p>Other known spywares, like Chromium, make use of this method</p> <p>Other known spywares, like Chromium, make use of this method</p>
<h3>Not spyware related, but worth noting</h3> <h3>Not spyware related, but worth noting</h3>
<h3>Anti-privacy search engine by default</h3> <h3>Anti-privacy search engine by default</h3>
<p> <p>By default Waterfox uses the search engine <a href="../articles/bing.html">Bing</a>. Why would a privacy-based Web Browser offer this search engine by default? The other offered search engines are not much better- we have the option of searching with Google, which also logs your internet searches, and Ecosia, which also logs your internet searches (but it gives them to Bing). The developers attitude towards these search engines is concerning:</p>
By default Waterfox uses the search engine <a href="../articles/bing.html">Bing</a>. <p><i>"Bing is actually quite good for privacy as well (let's not forget Mozilla even suggested them as a more privacy focused search back in 2009)."</i><sup><a href="#s2">[2]</a></sup></p>
Why would a privacy-based Web Browser offer this search engine by default? The other offered search engines are not much better- we have the option of searching with Google, <p>It's very clear that while the browser advertises itself as very privacy focused, the actual words and actions of the developers aren't consistent with this claim.</p>
which also logs your internet searches, and Ecosia, which also logs your internet searches (but it gives them to Bing). The developers attitude towards these search engines is concerning:
</p>
<p>
<i>"Bing is actually quite good for privacy as well (let's not forget Mozilla even suggested them as a more privacy focused search back in 2009)."</i><sup><a href="#s2">[2]</a></sup>
</p>
<p>
It's very clear that while the browser advertises itself as very privacy focused, the actual words and actions of the developers aren't consistent with this claim.
</p>
<hr/> <hr/>
</div> </div>
<div class="footer"> <div class="footer">
<div class="futher"> <div class="futher">
<h4>Further Reading:</h4> <h4>Further Reading:</h4>
<ol> <ol>
<li><a href="https://www.waterfox.net/privacy">https://www.waterfox.net/privacy</a> <li><a href="https://www.waterfox.net/privacy">https://www.waterfox.net/privacy</a> <a href="http://web.archive.org/web/20201228044209/https://www.waterfox.net/privacy">[web.archive.org]</a></li>
<a href="http://web.archive.org/web/20201228044209/https://www.waterfox.net/privacy">[web.archive.org]</a></li> <li><a href="https://www.waterfox.net/legal/">https://www.waterfox.net/legal</a> <a href="http://web.archive.org/web/20201228044236/https://www.waterfox.net/legal">[web.archive.org]</a></li>
<li><a href="https://www.waterfox.net/legal/">https://www.waterfox.net/legal</a>
<a href="http://web.archive.org/web/20201228044236/https://www.waterfox.net/legal">[web.archive.org]</a></li>
</ol> </ol>
</div> </div>
<hr/> <hr/>
<div class="sources"> <div class="sources">
<h4>Sources:</h4> <h4>Sources:</h4>
<ol> <ol>
<li id="s1"> <li id="s1"><a href="https://www.reddit.com/r/waterfox/comments/880z4b/what_happened_to_waterfoxs_devotion_to_user/">What happened to Waterfox's devotion to user privacy?</a> <a href="http://removeddit.com/r/waterfox/comments/880z4b/what_happened_to_waterfoxs_devotion_to_user/">[removeddit.com]</a> <a href="http://web.archive.org/web/20180329154241/https://www.reddit.com/r/waterfox/comments/880z4b/what_happened_to_waterfoxs_devotion_to_user/">[web.archive.org]</a> <a href="https://archive.li/omeK3">[archive.li]</a></li>
<a href="https://www.reddit.com/r/waterfox/comments/880z4b/what_happened_to_waterfoxs_devotion_to_user/">What happened to Waterfox's devotion to user privacy?</a> <li id="s2"><a href="http://old.reddit.com/r/waterfox/comments/7m1pkq/waterfox_and_ecosia_privacy_concerns/">Waterfox and Ecosia — Privacy Concerns</a> <a href="http://removeddit.com/r/waterfox/comments/7m1pkq/waterfox_and_ecosia_privacy_concerns/">[removeddit.com]</a> <a href="https://web.archive.org/web/20180201210222/https://www.reddit.com/r/waterfox/comments/7m1pkq/waterfox_and_ecosia_privacy_concerns/">[web.archive.org]</a> <a href="https://archive.is/smDw6">[archive.is]</a></li>
<a href="http://removeddit.com/r/waterfox/comments/880z4b/what_happened_to_waterfoxs_devotion_to_user/">[removeddit.com]</a> <li id="s3"><a href="https://support.mozilla.org/en-US/kb/access-mozilla-services-firefox-accounts">Access Mozilla Services with Firefox Account</a> <a href="https://web.archive.org/web/20150322103834/https://support.mozilla.org/en-US/kb/access-mozilla-services-firefox-accounts">[web.archive.org]</a> <a href="https://archive.li/oDcmj">[archive.li]</a></li>
<a href="http://web.archive.org/web/20180329154241/https://www.reddit.com/r/waterfox/comments/880z4b/what_happened_to_waterfoxs_devotion_to_user/">[web.archive.org]</a> <li id="s4"><a href="../images/waterfox_classic_spyware.png">All the requests made (mitmproxy)</a></li>
<a href="https://archive.li/omeK3">[archive.li]</a><br/>
</li>
<li id="s2">
<a href="http://old.reddit.com/r/waterfox/comments/7m1pkq/waterfox_and_ecosia_privacy_concerns/">Waterfox and Ecosia — Privacy Concerns</a>
<a href="http://removeddit.com/r/waterfox/comments/7m1pkq/waterfox_and_ecosia_privacy_concerns/">[removeddit.com]</a>
<a href="https://web.archive.org/web/20180201210222/https://www.reddit.com/r/waterfox/comments/7m1pkq/waterfox_and_ecosia_privacy_concerns/">[web.archive.org]</a>
<a href="https://archive.is/smDw6">[archive.is]</a><br/>
</li>
<li id="s3">
<a href="https://support.mozilla.org/en-US/kb/access-mozilla-services-firefox-accounts">Access Mozilla Services with Firefox Account</a>
<a href="https://web.archive.org/web/20150322103834/https://support.mozilla.org/en-US/kb/access-mozilla-services-firefox-accounts">[web.archive.org]</a>
<a href="https://archive.li/oDcmj">[archive.li]</a><br/>
</li>
<li id="s4">
<a href="../images/waterfox_classic_spyware.png">All the requests made (mitmproxy)</a>
</li>
</ol> </ol>
</div> </div>
<hr/> <hr/>
<p><b> <b>This article was created prior to 6/2/2018</b>
<b>This article was created prior to 6/2/2018</b><br/> <br/>
This article was last edited on 2/20/2022 <b>This article was last edited on 2/20/2022</b>
</b></p> <p>If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>.</p>
<p> <p>All contributions must be licensed under the CC0 license to be accepted.</p>
If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>. All contributions must be licensed under the CC0 license to be accepted.
</p>
<a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"/></a> <a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"/></a>
<p><a href="../articles/index.html">Back to catalog</a></p>
</div> </div>
</div> </div>
</body> </body>

156
articles/youtube.html
View File

@ -1,114 +1,56 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
<head> <head>
<link rel="stylesheet" href="../style.css"/> <meta http-equiv="Content-type" content="application/xhtml+xml;charset=utf-8"/>
<meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"/>
<title>YouTube — Spyware Watchdog</title> <title>YouTube — Spyware Watchdog</title>
<link rel="stylesheet" href="../style.css"/>
</head> </head>
<body> <body>
<img src="../images/youtube_logo.png" alt="youtube logo"> <div class="case">
<h1>YouTube</h1> <div class="nav"><a href="index.html">&larr; Catalog</a></div>
<p> <div class="main">
YouTube is an American video-sharing website headquartered in San Bruno, California. It is owned by <a href="../articles/google.html">Google</a>. <img src="../images/youtube_logo.png" alt="youtube logo"/>
</p> <h1>YouTube</h1>
<h2>Spyware Level: <font color="red">EXTREMELY HIGH</font></h2> <p>YouTube is an American video-sharing website headquartered in San Bruno, California. It is owned by <a href="../articles/google.html">Google</a>.</p>
<p> <h2>Spyware Level: <span class="red">EXTREMELY HIGH</span></h2>
Google’s business strategy with YouTube relies on tracking user’s device identifiers, location, search history, IP addresses and other personally identifying data to provide to advertisers. Google discloses in their YouTube privacy policy that it collects many types of personal information, including geolocation, unique device identifiers, mobile telephone numbers, and persistent identifiers used to recognize a user over time and across different websites or online services.<sup><a href="#1">[1]</a></sup> <p>Google’s business strategy with YouTube relies on tracking user’s device identifiers, location, search history, IP addresses and other personally identifying data to provide to advertisers. Google discloses in their YouTube privacy policy that it collects many types of personal information, including geolocation, unique device identifiers, mobile telephone numbers, and persistent identifiers used to recognize a user over time and across different websites or online services.<sup><a href="#s1">[1]</a></sup></p>
</p> <h3>Integration with Google Tracking</h3>
<h3>Integration with Google Tracking</h3> <p>YouTube is integrated with Google’s suite of advertising technologies and services, including AdWords, DoubleClick, and Google Preferred. DoubleClick is “an advertising serving and tracking company that uses web cookies to track browsing behavior online by their IP address to deliver targeted ads. Other DoubleClick ad technologies used to target YouTube users include the Campaign Manager, which helps advertisers “identify, locate and understand your customers, wherever they are.”<sup><a href="#s2">[2]</a></sup></p>
<p> <p>You can find that Google operates tracking domains active on the YouTube page, “pubads.g.doubleclick.net” and “googleads.g.doubleclick.net” in addition to three cookies requested by *.youtube.com. YouTube serves a particular tracking cookie, “VISITOR_INFO1_LIVE” in order to continue monitoring users that have signed out of their account and to continue serving recommended videos related to that session. Of course, while you are logged in to any Google service, Google can track you with absolute precision. <sup><a href="#s3">[3]</a></sup></p>
YouTube is integrated with Google’s suite of advertising technologies and services, including AdWords, DoubleClick, and Google Preferred. DoubleClick is “an advertising serving and tracking company that uses web cookies to track browsing behavior online by their IP address to deliver targeted ads. Other DoubleClick ad technologies used to target YouTube users include the Campaign Manager, which helps advertisers “identify, locate and understand your customers, wherever they are.”<sup><a href="#2">[2]</a></sup> <p>The YouTube app for android additionally uses the Google Firebase Analytics tracker which provides methods for logging events and setting user properties. The full app report finds that the YouTube app employs three trackers and requires 33 permission, 14 of which are considered dangerous such as access to the user’s location and contacts.<sup><a href="#s4">[4]</a></sup><sup><a href="#s5">[5]</a></sup></p>
</p> <h3>Taking down more private alternatives</h3>
<p> <p>For some time, a popular YouTube tracking sanitizer, Hooktube.com was a useful resource for accessing YouTube videos without being subjected to Google’s surveillance techniques in full. Hooktube was also useful for circumventing region blocking. However, Google, not to be stopped in their spying endeavors, served Hooktube’s operators with a cease and desist over their use of the YouTube API. Hooktube was effectively forced to use YouTube’s official embedded player if they wished to continue to operate, nullifying Hooktube as a viable means for privately viewing YouTube content.<sup><a href="#s6">[6]</a></sup><sup><a href="#s7">[7]</a></sup></p>
You can find that Google operates tracking domains active on the YouTube page, “pubads.g.doubleclick.net” and “googleads.g.doubleclick.net” in addition to three cookies requested by *.youtube.com. YouTube serves a particular tracking cookie, “VISITOR_INFO1_LIVE” in order to continue monitoring users that have signed out of their account and to continue serving recommended videos related to that session. Of course, while you are logged in to any Google service, Google can track you with absolute precision. <sup><a href="#3">[3]</a></sup> <h3>YouTube Requires non-free JavaScript</h3>
</p> <p>It is also worth noting that, in order to function, YouTube requires visitors to run non-free JavaScript. As with any proprietary software, these programs can be doing just about anything with almost no way to determine exactly what.<sup><a href="#s10">[10]</a></sup> For example, there has been some speculation as to whether YouTube’s compulsory JavaScript might be useful for YouTube to track your device’s unique MAC address. <sup><a href="#s8">[8]</a></sup><sup><a href="#s9">[9]</a></sup></p>
<p> <p>All that said, it would be wise to avoiding using any of Google’s services. If you must access YouTube, we recommend doing so through one of the remaining sanitizers such as Invidious (<a href="https://invidious.io/">https://invidious.io/</a>).</p>
The YouTube app for android additionally uses the Google Firebase Analytics tracker which provides methods for logging events and setting user properties. The full app report finds that the YouTube app employs three trackers and requires 33 permission, 14 of which are considered dangerous such as access to the user’s location and contacts. </div>
<sup><a href="#4">[4]</a></sup><sup><a href="#5">[5]</a></sup> <hr/>
</p> <div class="footer">
<h3>Taking down more private alternatives</h3> <div class="sources">
<p> <h4>Sources:</h4>
For some time, a popular YouTube tracking sanitizer, Hooktube.com was a useful resource for accessing YouTube videos without being subjected to Google’s surveillance techniques in full. Hooktube was also useful for circumventing region blocking. However, Google, not to be stopped in their spying endeavors, served Hooktube’s operators with a cease and desist over their use of the YouTube API. Hooktube was effectively forced to use YouTube’s official embedded player if they wished to continue to operate, nullifying Hooktube as a viable means for privately viewing YouTube content.<sup><a href="#6">[6]</a></sup><sup><a href="#7">[7]</a></sup> <ol>
</p> <li id="s1"><a href="https://policies.google.com/privacy">Google Privacy policy</a> <a href="https://archive.li/U4mQP">[archive.li]</a> <a href="https://ghostarchive.org/archive/v">[ghostarchive.org]</a></li>
<h3>YouTube Requires non-free JavaScript</h3> <li id="s2"><a href="https://www.commercialfreechildhood.org/sites/default/files/devel-generate/tiw/youtubecoppa.pdf">Request to Investigate Google’s YouTube Online Service...</a> <a href="http://web.archive.org/web/20180816062432/https://www.commercialfreechildhood.org/sites/default/files/devel-generate/tiw/youtubecoppa.pdf">[web.archive.org]</a></li>
<p> <li id="s3"><a href="https://security.stackexchange.com/questions/165842/stop-youtube-tracking-when-signed-out">Stop YouTube tracking when signed out</a> <a href="http://web.archive.org/web/20180910190055/https://security.stackexchange.com/questions/165842/stop-youtube-tracking-when-signed-out">[web.archive.org]</a> <a href="https://archive.fo/ri7xa">[archive.fo]</a> <a href="https://ghostarchive.org/archive/hyLbx">[ghostarchive.org]</a></li>
It is also worth noting that, in order to function, YouTube requires visitors to run non-free JavaScript. As with any proprietary software, these programs can be doing just about anything with almost no way to determine exactly what.<sup><a href="#10">[10]</a></sup> For example, there has been some speculation as to whether YouTube’s compulsory JavaScript might be useful for YouTube to track your device’s unique MAC address. <sup><a href="#8">[8]</a></sup><sup><a href="#9">[9]</a></sup> <li id="s4"><a href="https://reports.exodus-privacy.eu.org/reports/11758/">Youtube Android App Permissions</a> <a href="http://web.archive.org/web/20180910190242/https://reports.exodus-privacy.eu.org/reports/11758/">[web.archive.org]</a> <a href="https://ghostarchive.org/archive/dDPMD">[ghostarchive.org]</a></li>
</p> <li id="s5"><a href="https://firebase.google.com/docs/reference/android/com/google/firebase/analytics/package-summary">com.google.firebase.analytics </a> <a href="http://web.archive.org/web/20170307052724/https://firebase.google.com/docs/reference/android/com/google/firebase/analytics/package-summary">[web.archive.org]</a> <a href="http://archive.is/N5qvH">[archive.is]</a> <a href="https://ghostarchive.org/archive/ve4xC">[ghostarchive.org]</a></li>
<p> <li id="s6"><a href="https://twitter.com/swack/status/1018665375364501506">@swack on Twitter</a> <a href="https://archive.fo/bXAoK">[archive.fo]</a> <a href="https://ghostarchive.org/archive/nAaS8">[ghostarchive.org]</a></li>
All that said, it would be wise to avoiding using any of Google’s services. If you must access YouTube, we recommend doing so through one of the remaining sanitizers such as Invidious (<a href="https://invidious.io/">https://invidious.io/</a>). <li id="s7"><a href="https://github.com/FreeTubeApp/FreeTube/releases">FreeTube Releases</a> <a href="http://web.archive.org/web/20180724155631/https://github.com/FreeTubeApp/FreeTube/releases">[web.archive.org]</a> <a href="https://via.hypothes.is/https://github.com/FreeTubeApp/FreeTube/releases">[via.hypothes.is]</a> <a href="http://archive.is/Sei5n">[archive.is]</a> <a href="https://ghostarchive.org/archive/gWhyz">[ghostarchive.org]</a></li>
</p> <li id="s8"><a href="https://www.blackhatworld.com/seo/does-youtube-track-our-mac-address.197618/">Does Youtube track our Mac address??</a> <a href="http://web.archive.org/web/20161010063335/http://www.blackhatworld.com:80/seo/does-youtube-track-our-mac-address.197618/">[web.archive.org]</a> <a href="https://ghostarchive.org/archive/jct3G">[ghostarchive.org]</a></li>
<hr> <li id="s9"><a href="https://www.stormfront.org/forum/t900258/?postcount=9#post10428507">How does YouTube know what I've been watching?</a> <a href="http://web.archive.org/web/20180910193256/https://www.stormfront.org/forum/t900258/?postcount=9%23post10428507">[web.archive.org]</a> <a href="https://ghostarchive.org/archive/mMcli">[ghostarchive.org]</a></li>
<center> <li id="s10"><a href="https://www.fsf.org/youtube">Does the FSF use YouTube? </a> <a href="https://web.archive.org/web/20171223035419/http://www.fsf.org/youtube/">[web.archive.org]</a> <a href="https://ghostarchive.org/archive/2T8cp?kreymer=false">[ghostarchive.org]</a></li>
<h2>Credits</h2> </ol>
<p> </div>
This review was written by Alia Sarmor.<br> <hr/>
Formatting changes were done by the site maintainer. <b>This article was created on 9/10/2018</b>
</p> <br/>
<hr> <b>This article was last updated on 6/19/2021</b>
<h2>Sources</h2> <p>If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>.</p>
<p> <p>All contributions must be licensed under the CC0 license to be accepted.</p>
<a name="1">1.</a> <a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"/></a>
<a href="https://policies.google.com/privacy">Google Privacy policy</a> </div>
<a href="https://archive.li/U4mQP">[archive.li]</a> </div>
<a href="https://ghostarchive.org/archive/v">[ghostarchive.org]</a>
<br>
<a name="2">2.</a>
<a href="https://www.commercialfreechildhood.org/sites/default/files/devel-generate/tiw/youtubecoppa.pdf">Request to Investigate Google’s YouTube Online Service...</a>
<a href="http://web.archive.org/web/20180816062432/https://www.commercialfreechildhood.org/sites/default/files/devel-generate/tiw/youtubecoppa.pdf">[web.archive.org]</a>
<br>
<a name="3">3.</a>
<a href="https://security.stackexchange.com/questions/165842/stop-youtube-tracking-when-signed-out">Stop YouTube tracking when signed out</a>
<a href="http://web.archive.org/web/20180910190055/https://security.stackexchange.com/questions/165842/stop-youtube-tracking-when-signed-out">[web.archive.org]</a>
<a href="https://archive.fo/ri7xa">[archive.fo]</a>
<a href="https://ghostarchive.org/archive/hyLbx">[ghostarchive.org]</a>
<br>
<a name="4">4.</a>
<a href="https://reports.exodus-privacy.eu.org/reports/11758/">Youtube Android App Permissions</a>
<a href="http://web.archive.org/web/20180910190242/https://reports.exodus-privacy.eu.org/reports/11758/">[web.archive.org]</a>
<a href="https://ghostarchive.org/archive/dDPMD">[ghostarchive.org]</a>
<br>
<a name="5">5.</a>
<a href="https://firebase.google.com/docs/reference/android/com/google/firebase/analytics/package-summary">com.google.firebase.analytics </a>
<a href="http://web.archive.org/web/20170307052724/https://firebase.google.com/docs/reference/android/com/google/firebase/analytics/package-summary">[web.archive.org]</a>
<a href="http://archive.is/N5qvH">[archive.is]</a>
<a href="https://ghostarchive.org/archive/ve4xC">[ghostarchive.org]</a><br>
<a name="6">6.</a>
<a href="https://twitter.com/swack/status/1018665375364501506">@swack on Twitter</a>
<a href="https://archive.fo/bXAoK">[archive.fo]</a>
<a href="https://ghostarchive.org/archive/nAaS8">[ghostarchive.org]</a><br>
<a name="7">7.</a>
<a href="https://github.com/FreeTubeApp/FreeTube/releases">FreeTube Releases</a>
<a href="http://web.archive.org/web/20180724155631/https://github.com/FreeTubeApp/FreeTube/releases">[web.archive.org]</a>
<a href="https://via.hypothes.is/https://github.com/FreeTubeApp/FreeTube/releases">[via.hypothes.is]</a>
<a href="http://archive.is/Sei5n">[archive.is]</a>
<a href="https://ghostarchive.org/archive/gWhyz">[ghostarchive.org]</a>
<br>
<a name="8">8.</a>
<a href="https://www.blackhatworld.com/seo/does-youtube-track-our-mac-address.197618/">Does Youtube track our Mac address??</a>
<a href="http://web.archive.org/web/20161010063335/http://www.blackhatworld.com:80/seo/does-youtube-track-our-mac-address.197618/">[web.archive.org]</a>
<a href="https://ghostarchive.org/archive/jct3G">[ghostarchive.org]</a>
<br>
<a name="9">9.</a>
<a href="https://www.stormfront.org/forum/t900258/?postcount=9#post10428507">How does YouTube know what I've been watching?</a>
<a href="http://web.archive.org/web/20180910193256/https://www.stormfront.org/forum/t900258/?postcount=9%23post10428507">[web.archive.org]</a>
<a href="https://ghostarchive.org/archive/mMcli">[ghostarchive.org]</a>
<br>
<a name="10">10.</a>
<a href="https://www.fsf.org/youtube">Does the FSF use YouTube? </a>
<a href="https://web.archive.org/web/20171223035419/http://www.fsf.org/youtube/">[web.archive.org]</a>
<a href="https://ghostarchive.org/archive/2T8cp?kreymer=false">[ghostarchive.org]</a>
<br>
</p>
<hr>
<p><b>
This article was created on 9/10/2018<br>
This article was last updated on 6/19/2021
</b></p>
<p>
If you want to edit this article, or contribute your own article(s), visit us at the git repo on <a href="https://codeberg.org/shadow/SpywareWatchdog">Codeberg</a>. All contributions must be licensed under the CC0 license to be accepted.
</p>
<a href="../LICENSE.txt"><img class="icon" src="../images/cc0.png" alt="CC0 License"></a>
<p><a href="../articles/index.html">Back to catalog</a></p>
</center>
</body> </body>
</html> </html>