Stay Safe - Is private browsing really private?
Hi Steemians! Web browsers nowadays provide a mode called "private browsing". On Firefox, it is called private browsing and on Chrome, it is called incognito mode. Does using private browsing sessions really make you untrackable on the internet? The answer is NO.
Each time you launch a private session, you will be greeted by a warning as shown in the screenshot below.
Private Browsing doesn’t make you anonymous on the Internet. Your employer or Internet service provider can still know what page you visit.
Essentially, private browsing is just able to reduce the browsing traces on your local PC by not storing your browsing history and cookies. However, it is totally ineffective in hiding your traces from your ISPs and employers (if you browse from your company PC).
Fret not, the smart folks from MIT have discovered a solution. Their proposed solution is dubbed, "Veil".
Veil gets around this problem by ensuring that any data the browser loads into memory remains encrypted until it’s actually displayed on-screen. Rather than typing a URL into the browser’s address bar, the Veil user goes to the Veil website and enters the URL there. A special server — which the researchers call a blinding server — transmits a version of the requested page that’s been translated into the Veil format.
"Veil" to save the day? What are the pros and cons?
The idea is to not browse a website directly on the hosting servers but to browse through a "Veil" blinding server. What this server does is to encrypt the data before transmitting them to your browser. Upon receiving the data, your browser will execute a code embedded on the "Veil" blinding server to decrypt the data and display them on your browser. What are the benefits in doing so?
- To your ISP or employer, you are only browsing to the "Veil" blinding server. So your web traffic can not be traceable by them.
- There are no clear-text data stored on your PC, so there will be zero browsing footprint.
The solution is somewhat similar to a Symantec solution that I know of. Although this looks good on paper, I do see a few issues:
- We have to trust that this "blinding server" is not secretly collecting our data instead.
- Who will pay to host this server?
- The framework requires web developers create a "Veil" friendly version of their website. Which will take some time before site owners start to adopt this technology.
Blockchain might be able to help
Blockchain might be able to help address the first two concerns that I have. I proposed to have the blinding server hosted in a decentralized manner. On top of that, the site hosted by the nodes should be open-sourced. We are then able to build a trustless system whereby the nodes are hosting the blinding servers, and we can use the services without worrying that the servers are secretly collecting our data.
In addition, through the use of blockchain, users will have to spend the native cryptocurrency in order to use the service to browse privately. The spent currency will serve as compensation to the hosts. This will provide a self-sustaining economy and we do not need to worry about who should pay for the hosting cost. I just proposed a business plan, whoever starting this project, and you read about it here first, please remember to show me some credits 😎.
[Updated]
What are the differences between "Veil" and the good old VPN?
I am providing an update as I saw good questions from @gandalfthewhite and @generaldisarray. Below is a table which I try to explain the differences and their respective pros and cons.
| VPN | Veil |
|---|---|
| Established technology and does not require support from the website hosts | Still work in progress and mostly paper talk. Requires website hosts to create a "Veil" compatible website. |
| Creates an encrypted tunnel between you and the VPN provider at the network level. Once data reaches your PC, they are loaded into memory in clear-text. Hence, certain traces will still be left behind. This is explained in the MIT article as well. | The data itself is encrypted and will only be decrypted when it is presented on your browser. The MIT researchers claim that no clear-text traces will be left in permanent storage on your local PC. |
| Requires additional setup such as installing a client to be installed or making configurations to establish the VPN tunnel. Hence, not suitable to be used in public PCs, like those in internet cafes or airports, as you may not have the local PC admin rights to do so. | Ideally, it should just need a normal browser. So no additional setup is required. |
| Can be used for all sort of internet operations. E.g. Torrenting, browsing, gaming and etc… | Only meant for web browsing |
| The VPN provider will have records of your activities. And for some VPN provider, they have explicitly stated that they will keep such records. | Veil blinding server technically can collect your data. |
What do you think of this piece of technology? And do you think blockchain can help make it even more feasible?
Wow good idea.
Thanks!
Hey fellow! At first I thought "Um... what about VPN?", but this could be even better? I mean, I am not a specialist when it comes to vpn stuff and so on, but "Veil" sounds like vpn just with blockchain stuff? Or am I missing out something. (:
Great article bro!
Great question bro! I have updated the article to explain the differences between VPN and the proposed Veil technology. I would say VPN + Veil and you are quite well covered. Thanks for the support as usual bro! Really appreciate it!
Thx! Alright, I will check that. ;D
Of course bro - as always, welcome!
It's surprising how many people think private mode makes their invisible. It is useful though for checking if sites are altering their content based on your cookies, without having to delete your existing cookies.
As for Veil, sounds like a really cool idea. Would you say it's basically like a public VPN that you just don't have to register/pay for? Decentralizing it and funding it with a utility tokes sounds like a neat solution.
Good question @generaldisarray, I have updated the article to talk about the differences between VPN and the proposed Veil solution.
Thanks for the heads up. This is the first time I heard of 'veil' blinding server. It's certainly useful to know.
I know that whatever I do on the computer can be traced. So, I don't do anything that is absolutely illegal. But if it is a grey area and lots of others are doing it, I might be tempted to do it too. :-)
I am too IT challenged to know whether Blockchain will solve the problem.
Cheers!
Still very early. I think it is still all just paper talks, nothing is developed yet.
I see.
To listen to the audio version of this article click on the play image.
Brought to you by @tts. If you find it useful please consider upvote this reply.
Blockchain to the rescue. It is incredible in how many ways this amazing technology can be used. Veil sounds very promising.
Yup! Blockchain can be applied in many ways.
good post
Thanks!
Great read as usual @culgin.
You said, "I just proposed a business plan, whoever starting this project, and you read about it here first". I believe you are more than capable of just proposing a business plan. Cheers!
I think that this piece of technology is only on paper and need committed developers to work. Blockchain will only strengthen the "Veil" technology to a greater extent. Upvoted!