安全与密码学2019arxiv.org
追踪性：色情网站上广泛的数据泄露与追踪的影响
Tracking Sex: Implications of widespread data leakage and tracking on porn sites
入门 · 约 45 分钟读完前置知识：Web 追踪机制基础、隐私政策与 GDPR 常识
导读
这篇论文对 22,484 个色情网站进行了追踪与隐私风险分析，发现 93% 的网站会将用户数据泄露给第三方，且追踪高度集中于少数几家大公司。研究还分析了 3,856 个隐私政策（仅占样本 17%），发现其可读性差到需要两年大学教育才能理解，并指出近 45% 的网站会暴露或暗示用户特定的性别/性取向信息，带来远高于一般数据的泄露风险。
HN 关注点：色情浏览数据一旦泄露可能造成严重人身和声誉伤害，HN 读者关注追踪生态的集中程度、隐私政策的实际可用性，以及这类数据被滥用的真实案例。
HN 评论精选
这几条评论里：支持 1 质疑 1 补充 2
补充用 RedTubeGate 真实案例说明色情浏览数据被用于敲诈勒索的现实危害
值得借此回顾 2013 年德国臭名昭著的 RedTubeGate 事件：几名律师和可疑商人先买下三部廉价色情片的版权，然后在 RedTube 上投放广告收集访客 IP 地址，并声称拥有能追踪谁看过这些影片的神奇软件（甚至拿到了一份语焉不详的软件蓝图官方认证）。随后他们向科隆法院申请获取这些 IP 对应的真实地址，声称能证明这些人看过他们非法上传的影片。突然间成千上万人收到威胁信，要求支付 250 欧元否则起诉，许多人因害怕名誉受损而乖乖付款。许多原始资料已被删除，只能通过 archive.org 找到。
rv-de查看英文原文
Maybe a good moment to commemorate the infamous RedTubeGate from 2013 in Germany: A couple lawyers and fishy business men launch an ad campaign on RedTube. Through that advertisement they collected IP addresses of visitors. Before launching that campaign they allegedly bought the rights for three cheap porn flicks. Now they also claim that they have some miraculous software which allows them to track who has been watching those flicks on RedTube. They even get a totally unclear blueprint for that software officially certified by a surveyor. [4] Then they appeal to a court in Cologne for the real world addresses corresponding to the IP addresses arguing they can prove those poor schmocks watched their illegally uploaded crap flicks. Suddenly thousands of people receive letters threatening legal action if they do not agree on paying a fee of 250 Euro. Many people comply out of fear for their reputation and just pay. 1: https://web.archive.org/web/20140822000304/http://www.wbs-law.de/eng/streaming/redtube-wave-streaming-warning-letters-hits-germany-49182/ 2: https://www.joyofdata.de/blog/tool-visualization-connections-agents-entities-for-redtubegate/ 3: https://web.archive.org/web/20140911214044/http://www.crackajack.de/2013/12/13/pornostreamingabmahnungsupdate-3-the-distributed-digital-porn-heist/ 4: https://www.abmahnhelfer.de/wp-content/uploads/2013/12/EV.pdf (many of the original sources have been deleted and are only available through archive.org)
质疑指出 Mindgeek 自建追踪生态可建立用户性癖档案并与支付信息关联，且'第三方'概念在此失效
Mindgeek 运营着几乎所有最大的色情网站，还自建广告网络。由于色情内容极易按演员外貌特征、行为类型等分类，他们可以轻松为每个用户建立非常具体的档案，这在商业上也极为有利：既能最大化用户粘性，又能促进向其众多付费站点的转化。他们运营大量付费站这一点，很可能意味着可以把特定性癖（和作息时间）与信用卡号关联起来。Mindgeek 技术能力很强，这些大概率已经在做了。如果广告网络是自家的，那还算第三方吗？众多域名只是给用户一种'换了一家公司'的错觉，实际上更像是在同一栋房子里换个房间。
pessimizer查看英文原文
Mindgeek runs all of the biggest porn sites, and also runs its own ad network. Since the biggest of those sites are their "tube" sites, they run into the same issues as youtube when it comes to tracking individual tastes. Since the product is porn, which is very easily classifiable with a list of the physical features of actors (with maybe a few behavioral distinctions), the actors in the video, how they are matched ("how" doing a lot of heavy lifting here) and possibly director, producer, and age of content, it would be easy for them to have a very specific dossier on all users. Moreover, it would be financially beneficial, because it'd be easy to maximize engagement with that stuff and a past record of engagement time, and that information would also aid conversions to their other paysite products (of which there are many.) The fact that they run so many paysites probably means they can associate specific sexual tastes (and schedules) with a credit card number. Mindgeek have also shown themselves to be extremely savvy technologists, so this stuff is probably already being done. If it's your own ad network, is it really a third party, though? The plethora of domains does give the user the impression that they're leaving one business and moving to another, when it's really more akin to switching rooms. example of unexpected situation: I used a credit card to join vanillanormalromance.com, but I watch weird stuff on redtube. ----- edit: for some reason it didn't occur to me, but there would clearly be an interest to sell these categories to other porn sites, facebook-style, generating even more info from people not on Mindgeek sites. I feel like I remember a few Mindgeek/Manwin devs being good HN posters.
补充摘录论文关键数据、研究方法与立场，供未读者快速了解
我读了论文并摘录一些要点：'Jack 不知道的是，无痕模式只能保证浏览历史不存留在自己电脑上，他访问的网站和第三方追踪器仍可记录其行为'；'互联网上 30% 的数据传输是色情内容，YouPorn 使用的带宽是 Hulu 的六倍'；研究采用'性积极'视角，承认色情业存在诸多问题，但强调其普遍性和社会功能，以及社会/国家/机构叙事可能带来的规训危险；技术上使用 webXray 工具分析网页第三方内容并识别收集用户数据的公司；编码工作由四名不同背景的标注员完成（三女一男，其中三人自我认同为酷儿/流动性取向）。
johnedwards查看英文原文
Some friends noted that this had been up on HN for three hours with no comments. So I decided to read the paper and note some highlights. > What Jack does not know is that incognito mode only ensures his browsing history is not stored on his computer. e sites he visits, as well as any third-party trackers, may observe and record his online actions. > ‘30% of all the data transferred across the internet is porn,’ with site YouPorn using six times more bandwidth than Hulu (Kleinman, 2017) > Herein, we take such a ‘sex positive’ view of porn and access to online pornography. While acknowledging the many racist, misogynistic, heteronormative and other problematic histories and themes in pornography and its production, distribution and consumption, our work recognizes the ubiquity and permanence of porn and its many uses and social functions, and the danger of societal, state, and institutional narratives that might work to discipline gender and sex. > To identify third-parties found on a given website we used the webXray software platform. webXray 'is a tool for analyzing thirdparty content on web pages and identifying the companies which collect user data’ (webXray, 2018) > We used four coders from diverse backgrounds: one primary researcher and three volunteers. Three coders were women (one identifed her sexuality as fluid; the others as queer), and one was a heterosexual man. > Coders were instructed to code Presence for: ‘Any word or phrase that indicates or suggests the porn content will feature a specifc gender or sexual identity, orientation, or preference,’ and/or ‘Any word or phrase that indicates or suggests the porn content will feature a specifc sexual focus, body part or type, identity or character (like race, nationality, ethnicity, religion, profession), act, fetish, interest, porn genre, porn trope, etc. >Our March 2018 analysis successfully examined 22,484 sites drawn from the Alexa list of one million most popular websites where the URL, page title, or page description includes ‘porn.’ We found third-party tracking is widespread, privacy policies are difficult to understand and do not disclose such tracking, and third-parties may often be able to infer specifc sexual interests based solely on a site URL. > We identified 230 different companies and services tracking users in our sample. Such tracking is highly concentrated by a handful of major companies, some of which are pornography-specifc. Of non-pornography-specifc services, Google tracks 74% of sites, Oracle 24%, Facebook 10%, Cloudflare and Yadro 7%, and New Relic and Lotame 6%. Porn-specific trackers in the top ten are exoClick (40%), JuicyAds (11%), and EroAdvertising (9%). > Based on a random sample, 44.97%of porn site URLs expose or strongly suggest the site content includes or targets one or more specific gender or sexual: identities or orientations, and/or topic(s) of interest/focus. > We contend that the tracking of online porn consumption represents an even riskier violation of privacy, in line with Citron’s (2019:1870,1881) argument that: "Sexual privacy sits at the apex of privacy values because of its importance to sexual agency, intimacy, and equality. We are free only insofar as we can manage the boundaries around our bodies and intimate activities… It therefore deserves recognition and protection, in the same way that health privacy, financial privacy, communications privacy, children’s privacy, educational privacy, and intellectual privacy do." > For example, same-sex relations between consenting adults are criminalized in 70 United Nations member states, with punishments ranging from imprisonment to death (Fox et al., 2019). Thee consequences of sexual privacy violations in such contexts would clearly be severe. Even in societies with less regulation around sex, breaches of sexual privacy often have bodily stakes > Porn website privacy policies are long, dense, difficult to understand, and only 11% of the third-parties observe…
支持转述论文摘要核心数据与三大结论
论文摘要：对 22,484 个色情网站的分析显示 93% 会将用户数据泄露给第三方，追踪高度集中于少数大公司。成功提取了 3,856 个（占 17%）隐私政策，其可读性需要两年大学教育才能理解。44.97% 的域名会暴露或暗示用户特定的性别/性取向或兴趣。三大核心影响：1) 色情数据泄露相比其他数据有独特/更高的风险；2) 对弱势群体的特殊风险；3) 色情网站用户知情同意的复杂性，以及在线性互动中需要'肯定式同意'。
octosphere查看英文原文
> This paper explores tracking and privacy risks on pornography websites. Our analysis of 22,484 pornography websites indicated that 93% leak user data to a third party. Tracking on these sites is highly concentrated by a handful of major companies, which we identify. We successfully extracted privacy policies for 3,856 sites, 17% of the total. The policies were written such that one might need a two-year college education to understand them. Our content analysis of the sample's domains indicated 44.97% of them expose or suggest a specific gender/sexual identity or interest likely to be linked to the user. We identify three core implications of the quantitative results: 1) the unique/elevated risks of porn data leakage versus other types of data, 2) the particular risks/impact for vulnerable populations, and 3) the complications of providing consent for porn site users and the need for affirmative consent in these online sexual interactions.
相关资源
从这篇论文所有 HN 讨论帖的全部评论里整理出来的链接。
历次讨论
- 2019Hacker News 讨论帖348 分 · 222 评
同领域还值得读
如何入侵一台已关机的电脑：在 Intel ME 中运行未签名代码
How to hack a turned-off computer, or running unsigned code in Intel ME
这篇 Black Hat 2017 白皮书讨论 Intel Management Engine（ME）的安全问题：如何在 ME 中运行未签名代码，以及攻破处于关机状态的电脑的相关…
安全与密码学2017 · 543 分 · 107 评专业 · 约 40 分钟编辑精选比特币：一种点对点的电子现金系统（2008）
Bitcoin: A Peer-to-Peer Electronic Cash System (2008)
中本聪 2008 年发表的比特币白皮书，提出了无需可信第三方的点对点电子现金系统。
安全与密码学2017 · 536 分 · 394 评入门 · 约 45 分钟编辑精选GPRS 加密算法 GEA-1 的密码分析表明存在故意弱点
Cryptanalysis of GPRS Encryption Algorithms GEA-1 suggest intentional weakness
首次公开了对 GPRS 加密算法 GEA-1 和 GEA-2 的密码分析攻击。
安全与密码学2021 · 487 分 · 107 评专业 · 约 90 分钟编辑精选Signal 消息协议的形式化安全分析
A Formal Security Analysis of the Signal Messaging Protocol
用形式化方法分析 Signal 消息协议（TextSecure）的安全性：作者在多阶段密钥交换模型下，借助自动化证明工具对协议的密钥协商与 Double Ratchet 密钥更新…
安全与密码学2016 · 353 分 · 230 评专业 · 约 120 分钟编辑精选A2：模拟恶意硬件
A2: Analog Malicious Hardware
论文研究如何在芯片设计阶段植入模拟电路形式的恶意硬件后门，使其难以被常规检测发现。
安全与密码学2016 · 315 分 · 94 评专业 · 约 75 分钟编辑精选