Happy New Year! Forget all that stuff about the Mayan Calendar. Be Cool!

Latest Reviews & Tutorials

  • How to make DuckDuckGo the default search engine in Chromium
  • How to customize Linux Mint 12 KDE
  • Linux Mint 12 KDE review
  • GhostBSD 2.5 review
  • How to install Takeoff Launcher on Fedora 16 KDE
  • Install Quick Access on Linux Mint 12 KDE or any KDE installation
  • How to install Linux Mint 12 KDE on a btrfs file system
  • Manual disk partitioning guide for Linux Mint 12 KDE
  • How to compile and install Takeoff Launcher on Linux Mint 12 KDE
  • 3 must-have extensions for Fedora 16 and other GNOME 3 installations
  • How to install Razor-qt on Linux Mint 12 KDE
  • How to enable desktop slideshow on Linux Mint 12 KDE
  • KahelOS 111111 review
  • How to install Cinnamon in Ubuntu 11.10
  • How to customize Cinnamon on Fedora 16 and Linux Mint 12
  • How to install Cinnamon on Fedora 16
  • What does Cinnamon bring to the desktop?
  • How to access Microsoft Windows files and folders from Linux
  • How to dual-boot Pear OS Panther 3 and Windows 7
  • How to dual-boot Chakra Linux Edn and Windows 7, part 1

The Traceability of an Anonymous Online Comment


Yesterday, I described a simple scenario where a plaintiff, who is having difficulty identifying an alleged online defamer, could benefit from subpoenaing data held by a third party web service provider. Some third parties—like Facebook in yesterday’s example—know exactly who I am and know whenever I visit or post on other sites. But even when no third party has the whole picture, it may still be possible to identify me indirectly, by combining data from different third parties. This is possible because loading one webpage can potentially trigger dozens of nearly simultaneous web connections to various third party service providers, whose records can then be subpoenaed and correlated.

Suppose that I post an anonymous and potentially defamatory comment on a Boing Boing article, but Boing Boing for some reason is unable to supply the plaintiff with any hints about who I am—not even my IP address. The plaintiff will only know that my comment was posted publicly at “9:42am on Fri. Feb 5.” But as I mentioned yesterday, Boing Boing—like almost every other site on the web—takes advantage of a handful of useful third party web services.

For example, one of these services—for an article that happens to feature video—is an embedded streaming media service that hosts the video that the article refers to. The plaintiff could issue a subpoena to the video service and ask for information about any user that loaded that particular embedded video via Boing Boing around “9:42am on Fri. Feb 5.” There might be one user match or a few user matches, depending on the site’s traffic at the time, but for simplicity, say there is only one match—me. Because the video service tracks each user with a unique persistent cookie, the service can and probably does keep a log of all videos that I have ever loaded from their service, whether or not I actually watched them. The subpoena could give the plaintiff a copy of this log. Continue reading.

0saves
To have articles like this delivered automatically to your Feed Reader or Inbox, subscribe via RSS or email. For simple comments, use the commenting system, but for more involved assistance, please use the Question & Answer section.

Posts From The Same Category:




Questions & Answers Hola! Looking for an answer to a question but did not find it? Then surf on over to the Questions & Answers section. It's a brand new addition to our site, and we are waiting just to answer your question(s).

Leave a Reply

Trackbacks

Read previous post:
Mozilla Debates Whether to Trust Chinese CA
PC-BSD’s graphical firewall manager
Google Buzz Privacy Update
Close