The Markup Profile picture
Challenging technology to serve the public good. Send tips: https://t.co/yv1m5SzbDP. Subscribe: https://t.co/t3INg1q8dS. Support: https://t.co/Ps92EHohDT. Bluesky: https://t.co/dxoOXljZbD

Sep 22, 2020, 12 tweets

🧵New investigation: Do you know who’s informed when you visit government websites? Sites for abortion providers? Those serving LGBTQ people? We found online tracking is common, even where privacy would seem paramount. themarkup.org/blacklight/202…

2/ We spent 18 months developing Blacklight, a one-of-a-kind instant privacy inspection tool. It’s free for anyone to use: themarkup.org/blacklight
👉 Enter any URL
👉 Hit “scan site”
👉See the results of seven different privacy tests
👉😱

3/ Using Blacklight, we found more than 100 sites serving undocumented immigrants, domestic and sexual abuse survivors, sex workers, and LGBTQ people sent data about their visitors to advertising companies. themarkup.org/blacklight/202…

4/ Some website operators told us they didn’t know about the trackers—or what advertisers and marketers did with the data they collected. Operators can unknowingly load trackers through add-ons like social share buttons or comment sections that install with a few easy clicks.

5/ One of the more invasive techniques Blacklight tests for, key logging, captures information users type before they hit send.

6/ We found @MayoClinic using key logging on forms for appointments and clinical trials. The site didn’t disclose this tracking, and didn’t respond to multiple requests for comment.

7/ Even some government sites used invasive tracking methods. The U.S. Mint and Small Business Association sites loaded trackers called canvas fingerprinting, which can track people who block cookies. Neither disclosed this tracking.

8/ The Arizona Department of Child Safety’s website linked to the state’s privacy policy, which said it didn’t load cookies to track users. Blacklight found that the agency did. After we asked about it, the agency changed the disclosure.

9/ Building a tracker-free website is possible but can be time-intensive and costly. Websites for @ProtonMail, conservative think tank @AEI, a Bitcoin wiki forum, @getlantern, and of course, themarkup.org all came up clean in Blacklight scans.

10/ Try using Blacklight throughout the day before you visit websites to find out how you might be tracked. Surprised at what you find? Take a screenshot of results and tag us on social 🔦 themarkup.org/blacklight

11/ Read the full investigation by @suryamattu and @ASankin here: themarkup.org/blacklight/202…
And see how they conducted this investigation in our Show Your Work piece: themarkup.org/blacklight/202…

12/ Finally, join us this Thursday at 7 p.m. ET to celebrate the launch of Blacklight through art and a conversation about tracking. Sign up for a reminder: themarkup.org/events/introdu… /end

Share this Scrolly Tale with your friends.

A Scrolly Tale is a new way to read Twitter threads with a more visually immersive experience.
Discover more beautiful Scrolly Tales like this.

Keep scrolling