Cookies and User History

Cookies

• Cookies are small data pieces websites use to personalize information for users.
• Upon login, websites using cookies store the user's login information.
• Types of Cookies:
  • Session Cookies: Temporary cookies that vanish after the browser closes.
  • Persistent Cookies: Remain on the device for a defined time, even after closing the browser; used for storing login details.
  • Third-Party Cookies: Set by external websites (e.g., advertisers) to track user activity across various sites.

User History

• User history documents a user's actions on a website or platform.
• This includes pages viewed, forms filled out, and items clicked, stored on the site's server.

Search History

• Search history records all user searches on search engines or within apps/websites.
• Search engines (e.g., Google) store this history to suggest future searches and display relevant ads.
• For example, searching "best laptop 2024" will be saved within your search history.

Browser History

• Browser history maintains a record of visited websites and pages.
• Browsers (e.g., Chrome, Firefox, Safari) store this history locally on the device.

Geolocation

• Geolocation identifies a device's (and therefore the user's) physical location using GPS, IP address, or Wi-Fi signals.
• Websites and apps use geolocation for location-based services, like map and navigation, restaurant recommendations, and social media check-ins.
• How Geolocation Works:
  • Trilateration: Uses signals from multiple satellites or cell towers to pinpoint a device's location. The precise location is the center point of these signals.
  • Triangulation: Uses angles and distances from at least three cell towers to determine a device's position.

Cyber Attacks

• Phishing Attacks: Tricking users into revealing sensitive information.
  • Attackers impersonate trusted organizations (e.g., banks, social media) in emails or messages.
  • These messages often pressure victims to click links, open attachments, or provide personal information.
  • Fake websites mirror legitimate ones, luring users into unknowingly entering their sensitive data.
• Rogue Access Points: Unauthorized wireless access points (intentionally or unintentionally created).
  • Criminals utilize rogue access points to steal data.
  • When connected, hackers can monitor user traffic and data, potentially introducing malware.
  • Evil Twin Attacks: Attackers create rogue access points that mimic legitimate access points in public spaces.
  • In corporate settings, internal or external attackers might set up rogue access points to circumvent security measures.

Computer Malware

• Malware (malicious software) is software designed to damage, disrupt, or gain unauthorized access to computer systems or networks.
• How Malware Works:
  • Malware spreads via infected downloads, email attachments, malicious websites, or external devices.
  • Once installed, malware can steal data, encrypt files, track user activity, or corrupt files.
• Types of Malware:
  • Virus: Attaches to files, replicates, and spreads to other files.
  • Ransomware: Encrypts files and demands payment for decryption.
  • Trojan: Disguises itself as legitimate software, then steals data or installs additional malware.
  • Spyware: Secretly monitors and collects information from a user's device, such as keystrokes.

Encryption

• Encryption: Converting data into an unreadable format for protection.
• Decryption: The reverse process of converting ciphertext back to readable plaintext.
• Why Encryption Is Needed:
  • Protects data from unauthorized access.
  • Ensures confidentiality.
• Encryption Methods:
  • Caesar Cipher: Simple encryption where each letter is shifted by a fixed number.
  • Vigenère Cipher: More complex cipher using a keyword to shift each letter differently.
• Symmetric Encryption: Uses the same key for encryption and decryption, requiring secure key sharing.
• Asymmetric Encryption: Uses two keys (public and private) for encryption and decryption; public keys are shared openly, and private keys are kept secret. This method is better for secure communication with unknown parties.
• How Public Key Encryption Works:
  • Key Generation: Users generate a pair of public and private keys.
  • Encryption: The sender uses the recipient's public key to encrypt the message.
  • Transmission: The encrypted message is sent across the network. It’s unreadable without the recipient's private key.
  • Decryption: The recipient uses their private key to decrypt the message.