Wednesday, November 29, 2017 by Russel Davis
Today’s technological landscape makes for a seemingly unlimited marketplace of various browser functionalities and features that compromise a user’s privacy and security, a recent study suggests. As part of the study, a team of researchers at the University of Illinois at Chicago has examined the potential cost and benefits of websites with complete access to up to 74 different types of web application programming interfaces or APIs.
The researchers used Firefox as the study’s test browser due, in part, to its popularity as an open-source browser. According to the experts, results obtained from the Firefox browser test should be taken as generalized findings because it has access to a nearly identical array of features and capabilities as other common browsers such as Internet Explorer and Chrome. The scientists then assessed the frequency in which the features were used. Furthermore, the researchers evaluated the potential of each feature as a security or privacy risk. According to the research team, features with low user benefits but high security risk were flagged.
The findings showed that about a quarter of all the APIs in Firefox placed a user’s security and privacy in jeopardy. However, the research team noted that these risks could be mitigated without breaking websites. According to the experts, blocking a risky feature simultaneously reduced the amount of codes that a website could access.
“Ultimately we saw that about 25 percent of web API posed high risks to security and privacy and could be blocked without breaking websites. For example, browsers allow websites to perform low-level graphics calculations. We found that this functionality is rarely used on honest websites, but that malicious sites can use it to harm users’ privacy and security. The less code you have available through the web API, the safer websites you’ll have,” researcher Peter Snyder told Science Daily online.
The findings were presented at the Association for Computing Machinery Conference on Computer and Communications Security in Dallas, Texas.
Browser security has become an increasingly worrisome topic over the past few years due in part to the rapid increase in technology adoption. Separate entries posted on TheStar.com and the How To Geek website have listed a few smart tips to boost browser security. These tips include: