Google Settles Class-Action Lawsuit Over 'Incognito' Mode Tracking Allegations

Plus, Albania's Assembly and Telecom Giant Hit by Cyber Attacks: Iran-Linked Hacker Group Claims Responsibility

Jan 03, 2024

Google Chrome's Incognito mode isn't 100% private | London Evening Standard | Evening Standard

Google has reached a settlement in a lawsuit filed back in June 2020, where the company faced accusations of misleading users about the privacy of their internet activity while using the "incognito" or "private" mode on web browsers. The lawsuit, seeking at least $5 billion in damages, alleged that Google's tracking practices violated federal wiretap laws, allowing the collection of user data despite the presumption of privacy in these modes.

The specific terms of the settlement remain undisclosed. Plaintiffs argued that Google utilized Google Analytics to gather information even in private mode, amassing a significant volume of user data unbeknownst to those who believed their browsing was shielded from tracking.

While Google defended itself by highlighting warnings displayed when users activated Chrome's incognito mode, indicating that some information might still be visible to certain entities, U.S. District Judge Yvonne Gonzalez Rogers contested this defense. The Judge ruled that Google's failure to explicitly inform users about the extent of data collection in incognito mode nullified the argument that users had consented to this tracking.

Importantly, enabling incognito or private mode merely prevents the local storage of browsing history, providing users with a browsing session without saving data on the device. However, this does not prevent websites utilizing advertising technologies and analytics APIs from tracking and potentially correlating user activity, such as IP addresses, within that session.

This legal battle underlines the nuances of online privacy and user consent, shedding light on the complexities surrounding how user data is managed, tracked, and disclosed by tech giants. The settlement brings closure to this contentious issue, prompting a reexamination of the transparency and user notification practices in digital privacy policies.

National Security Alarms Sound as Attacks Strike Albanian Infrastructure

Albania faced another wave of cyber assaults targeting significant entities, including the Assembly of the Republic and One Albania, revealed by the country's National Authority for Electronic Certification and Cyber Security (AKCESK). Despite these attacks not currently classified as critical infrastructure under prevailing legislation, they've raised concerns about the nation's cybersecurity defenses.

One Albania, serving a substantial subscriber base, reassured customers via Facebook that its services remained unscathed by the security incident, asserting the swift handling of the situation.

AKCESK disclosed that the intrusions originated from non-Albanian IP addresses, emphasizing their real-time identification of potential threats. Efforts are now focused on tracking the source, restoring compromised systems, and reinforcing security measures to thwart future incidents.

The agency's proactive response includes a thorough review and bolstering of existing cybersecurity strategies prompted by this breach.

Although the full scale of the attacks remains unclear, an Iranian hacker group named Homeland Justice claimed responsibility on its Telegram channel. The group's statement also mentioned breaching Air Albania, the country's flag carrier airline, in a quest to target "supporters of terrorists," amplifying the gravity of the situation.

This development follows prior cyber assaults on Albanian government services in mid-July 2022, where Homeland Justice similarly claimed responsibility. These previous attacks prompted the U.S. government to impose sanctions on Iran's Ministry of Intelligence and Security (MOIS) and its Minister of Intelligence, Esmail Khatib, citing their involvement in cyber-enabled activities against the U.S. and its allies. The recent events in Albania underscore the persistent challenges in safeguarding against international cyber threats and highlight the need for robust defense mechanisms in the face of evolving cyber warfare tactics.