Modern websites extensively rely on JavaScript to implement both functionality and tracking.
Existing privacy-enhancing content-blocking tools struggle against mixed scripts, which …

To counteract the ads and third-party tracking ubiquitous on the web, users turn to blocking
tools—ad-blocking and tracking-protection browser extensions and built-in features …

Modern websites heavily rely on JavaScript (JS) to implement legitimate functionality as well
as privacy-invasive advertising and tracking. Browser extensions such as NoScript block any …

This work presents Unbundle-Rewrite-Rebundle (URR), a system for detecting privacy-
harming portions of bundled JavaScript code and rewriting that code at runtime to remove …

Recent advances in web technologies make it more difficult than ever to detect and block
web tracking systems. In this work, we propose ASTrack, a novel approach to web tracking …

Privacy-enhancing blocking tools based on filter-list rules tend to break legitimate
functionality. Filter-list maintainers could benefit from automated breakage detection tools …

A core problem in the development and maintenance of crowd-sourced filter lists is that their
maintainers cannot confidently predict whether (and where) a new filter list rule will break …

This article provides an overview of security and privacy challenges and concerns that come
with modern browser application programming interfaces. We aim to inform the community …

Behind everyday websites, a hidden shadow world tracks the behavior of Internet users.
Web tracking analyzes online activity based on collected data and delivers content tailored …

We identify class of covert channels in browsers that are not mitigated by current defenses,
which we call “pool-party” attacks. Pool-party attacks allow sites to create covert channels by …