Super-cookie crumbles: Verizon vows to FINALLY kill off hated zombie stalkers
Verizon has backed down over its mandatory fingerprinting of subscribers using so-called “super-cookies.”
In 2012, the US mobile telco started injecting unique identifying headers (UIDHs) into every HTTP request users made to websites via the Verizon network. This allowed sneaky advert networks to recognize people, even if they had deleted other cookies or changed IP address, as they moved from site to site, allowing the admen to display ads targeted for individuals’ interests.
Customers could “opt out” of the system, but the X-UIDH code would still be injected, allowing smart networks – like Turn in San Francisco – to follow people around the web regardless. The ad agency stopped doing that a week ago.
The per-subscriber headers caused a stink among privacy warriors, due to the blanket nature of the injection and the impossibility of removing it. Campaigners at the EFF objected to the mandatory nature of the headers.
ATT was using a similar system, and dropped that when it was exposed.
Now Verizon has said that this time “opt-out” really means opt-out: it’s going to stop injecting UIDHs into subscribers’ web traffic if they switch off the system in their account settings.
Previously, if you opted out, stats about where you’ve been online were withheld from advertisers, but as we’ve seen with Turn, that didn’t stop determined networks.
“Verizon takes customer privacy seriously and it is a central consideration as we develop new products and services. As the mobile advertising ecosystem evolves, and our advertising business grows, delivering solutions with best-in-class privacy protections remains our focus,” the company told El Reg in a statement on Friday.
“We listen to our customers and provide them the ability to opt out of our advertising programs. We have begun working to expand the opt-out to include the identifier referred to as the UIDH, and expect that to be available soon. As a reminder, Verizon never shares customer information with third parties as part of our advertising programs.” ®
Sponsored:
How to determine if cloud backup is right for your servers
Article source: http://go.theregister.com/feed/www.theregister.co.uk/2015/01/30/verizon_uidh_super_cookie_killer/