[Paper Review] Cookies Invading Our Privacy for Marketing Advertising and Security Issues

Sowmyan Jegatheesan|arXiv (Cornell University)|May 10, 2013

Privacy, Security, and Data Protection3 citations

TL;DR

This paper examines how third-party cookies enable pervasive online tracking for targeted advertising, raising serious privacy and security concerns. It argues that the widespread use of cookies—often without user consent or transparency—constitutes a privacy invasion, especially when combined with JavaScript and Flash technologies to profile users across websites, despite the lack of regulatory oversight or clear disclosure.

ABSTRACT

Privacy has been a major concern for everybody over the internet. Governments across the globe have given their views on how the internet space can be managed effectively so that there is some control on the flow of confidential information and privacy to users and as well as to data is achieved. Taking advantage of the lack of one unified body that could govern the online space with its strict and stringent rules certain websites use the text files called cookies in collecting data from users and using them for marketing them in advertisements networks and third party websites with the help of JavaScript and flash technologies. Even before many of us think what is happening around us in the online usage we are being invaded by the cookies and are targeted with their specific information that could tempt us to buy a product or service to which we were longing for in the recent past. Though it may be argued its a kind of marketing strategy to give the customer what he wants but it can no way be something like the user is just being targeted because he has already shown interest in something and he should be disturbed until he gets hold of something. Its purely a security breach as most of the websites dont ask permission for the usage of cookies and setting them into the users browser and the most important thing is no privacy statement is issued that the information is used for targeted marketing. This analysis paper has views from different sources, an example of such an activity that is a potential security breach and various other information of what these sites do to use the deadly cookies for commercial tricks.

Motivation & Objective

• To analyze the role of cookies in enabling cross-site user tracking for targeted advertising.
• To highlight the lack of user consent and transparency in cookie deployment across websites.
• To identify the security and privacy risks associated with third-party cookies and tracking technologies.
• To examine the absence of unified regulation governing online data collection and user privacy.
• To demonstrate how cookies can be used as tools for commercial manipulation without user awareness.

Proposed method

• Conducts a literature and policy review on privacy, data collection, and online tracking mechanisms.
• Analyzes technical mechanisms such as cookies, JavaScript, and Flash for cross-site user profiling.
• Reviews real-world examples of cookie-based tracking to illustrate privacy breaches.
• Evaluates the absence of user consent and privacy statements in cookie deployment.
• Compares current practices with ideal privacy standards and regulatory frameworks.
• Uses case studies from the internet advertising ecosystem to demonstrate tracking behavior.

Experimental results

Research questions

• RQ1 How do third-party cookies enable persistent tracking of users across websites?
• RQ2 What are the primary privacy and security risks associated with unconsented cookie usage?
• RQ3 Why is there a lack of transparency and user consent in cookie deployment despite known risks?
• RQ4 How do technologies like JavaScript and Flash enhance the effectiveness of cookie-based tracking?
• RQ5 What are the implications of the absence of a unified regulatory body for online data privacy?

Key findings

• Cookies are widely used to track users across websites without their explicit consent or knowledge.
• Many websites deploy cookies without providing clear privacy statements about their use for targeted advertising.
• The use of JavaScript and Flash technologies amplifies the tracking capabilities of cookies, enabling detailed user profiling.
• The lack of a centralized regulatory authority allows websites to exploit technical loopholes in privacy protection.
• Users are subjected to targeted advertising based on their browsing behavior, often without understanding how or why.
• The paper concludes that current cookie practices represent a significant breach of user privacy and data security.