Nothing Private
Uncovering the myths of Incognito & Private browsing mode
Intro
This project is a proof of concept that any website can identify and track you, even if you are using private browsing or incognito mode in your web browser. Many people think that they can hide their identity if they are using private browsing or incognito mode. This project will prove that they are wrong.
How to use the website
- Visit https://nothingprivate.gkr.pw and enter your name
- Click the “See the magic” button
- Visit the same website in Private browsing / Incognito mode
- See the magic ⭐️
Hey! How?
Hope you are surprised! 😄 Yes, the website can remember your name even if you had visited it via private browsing or incognito mode. Yes, nothing is private in this world anymore! This is what the big companies are doing with your identity. You think that going into private mode will wipe out all the traces? Absolutely not! In reality, using private browsing or incognito mode will just help you to clear your browsing history. Your internet service provider, search engines, and your favorite websites can still track you. They know your likes and dislikes. They use your data to earn money.
The video below explains everything:
References
- https://privatebrowsingmyths.com/
- https://panopticlick.eff.org/
- https://amiunique.org/
- https://www.pcworld.com/article/192648/browser_fingerprints.html
- https://en.wikipedia.org/wiki/Device_fingerprint
- https://nakedsecurity.sophos.com/2014/12/01/browser-fingerprints-the-invisible-cookies-you-cant-delete/
- https://spreadprivacy.com/browser-fingerprinting/
Some tech stuff
Nothing Private uses the browser fingerprinting feature of Client.js to obtain the fingerprint of your web browser. When you submit the form, this fingerprint is saved, along with your name in an MySQL database using PHP as a backend. The next time you visit the website your browser fingerprint is matched with the column in the database and your name is returned.
Visit db_server for the server files. (See historical SQLite version of the backend code).