Categories: Security

A Firefox Loophole Allowed Websites to Track Users

Until recently, Firefox allowed websites to track users through their device’s battery status. This includes smartphones, PCs, laptops, and tablets. The loophole allowed for users’ browser activity to be tracked. Thankfully, the loophole has since been disabled. Read on to find out more about how the feature allowed users to be tracked, and whether or not this feature is exclusive to Firefox.

Battery Status API

Firefox used this feature to allow websites to receive information about a user’s device. This information includes whether or not the item is charging, the battery percentage, and how much time (in seconds) the device has left before it needs to be charged. This feature was intended to provide websites with information on how they could make their sites battery-friendly. They could then adjust a website’s features to suit the battery level of a person’s device.

Read More: Why Would Hewlett Packard Want to Hack Itself?

Last year, the Guardian reported that battery API had the ability to track users. For example, if you opened a website in Firefox, and then a website in Chrome under private browsing mode, the battery API would be able to associate the two pages as being on the same phone due to their battery status. Once the web pages are recognized as being from the same device, a website can then use battery API to identify someone and further enable cookie-tracking of online activities. Even if you clear cookie-tracking, the battery API can help websites to identify the device so that cookie-tracking can be re-enabled.

The Issue with Chrome and Opera

Firefox is not the only browser to use battery status API: Chrome and Opera also use this feature. Before Firefox removed the feature, they allowed users to easily disable it. Unfortunately, that doesn’t seem to be an option with Chrome or Opera. If you’re concerned about your online behavior being tracked through the battery status of your smartphone or PC, it might be best to avoid Chrome and Opera.

Currently, it’s unclear if Chrome or Opera will start allowing users to disable the feature, or if they’ll follow Firefox’s lead and remove it. Although Firefox has disabled this feature, you can still access it as a Firefox add-on. Chrome and Opera could, potentially, follow this move as well. However, considering Facebook and Google’s habit of excessively tracking users, it’s unlikely this will change any time soon.

PSafe Newsroom

The dfndr blog is an informative channel that presents exclusive content on security and privacy in the mobile and business world, with tips to keep users protected. Populated by a select group of expert reporters, the channel has a partnership with dfndr lab's security team. Together they bring you, first-notice news about attacks, scams, internet vulnerabilities, malware and everything affecting cybersecurity.

Recent Posts

How to identify a spy app on your smartphone

In the United States, the use of spyware apps is a growing concern, affecting mobile…

56 years ago

5 trending digital scams: how AI is making fraud more dangerous

Every day, millions of mobile phone users receive malicious links through SMS, email, or social…

56 years ago

Pix Gains Momentum Abroad: Convenience and Security for Brazilian Travelers

Travel is about new experiences — and making payments without hassle is a crucial part…

56 years ago

Malicious links: what they are and how to protect yourself

Every day, millions of  cell phone users receive malicious links via SMS, email, or social…

56 years ago

Zero Trust: what it is, why it matters, and how dfndr security protects your phone with this concept

Have you heard of Zero Trust? The term is one of the most  important trends…

56 years ago

5 Reasons to Use Biometrics to Secure Mobile Devices

Mobile devices have become essential tools in both our personal and professional lives, but they…

56 years ago