Wednesday, April 21, 2010

Personalized services create new security holes - good article from Technology Review

Personalization is a key part of Internet search, providing more relevant results and gaining loyal customers in the process. But new research highlights the privacy risks that this kind of personalization can bring. A team of European researchers found that they were able to hijack Google's personalized search suggestions to reconstruct users' Web search histories.

Google has plugged most of the holes identified in the research, but the researchers say that other personalized services are likely to have similar vulnerabilities. "The goal of this project was to show that personalized services are very dangerous in terms of privacy because they can leak information," says Claude Castelluccia, a senior research scientist at the French National Institute for Research in Computer Science and Control, who was involved with the work. The work will be presented this summer at the Privacy Enhancing Technologies Symposium in Berlin, Germany.

Good point - yet another "cloud" risk factor. There are many other reasons to be wary of search personalization - I see it making the web ever less global, more local, more "tribal", more solipsistic. Blog cooking on this topic 'The inverting Internet Mirrorball'.

Posted via web from _technoist_

No comments: