Skip to main content

Security Tips - Incognito Window

A lot of people know what incognito mode (or private mode) is at some basic level. They should use it when they want to do something "private" on the web. But I think most people don't actually understand what it means and how/why to use it. Perhaps this will help.

Before we start - cookies are little bits of data used to track you between page loads. Think of it like a fingerprint. They're extremely important for session handling, so that a site can remember who you are from one page to the next. But they're also really handy for things like advertising services to track your activity on the web.

When you open a new incognito window (and don't have one open already) - you're starting a new session in your web browser that doesn't have any of the cookies or caching that your "normal" browser window has. In practical terms, this means that when you visit a site, they won't have any history of you (mostly) and you may need to relogin, etc. And when you close an existing incognito window, all cookies associated with that window are also lost. Things like history are also not tracked in incognito.

Many people think of the incognito mode as "porn" mode - but I'd argue that it should be the most that we do most of our browsing in. This is because it makes it much harder for sites to track you - and there are many, many sites and systems that can track your activity across many, many different sites now.

Ever search for a product of some sort, only to start getting emails and ads around that target all over the place? That's the advertising network (probably google) tracking you. They're always building up a profile of your interests, tastes, habits, etc. Personally, that's annoying enough. But, this is also data that they can sell to other parties. While you may trust google with your data... how about anyone they sell that data too? What if it's hacked?

The other thing to remember is that cookies, etc are still tracked within one incognito window "session" - so, just closing the tab in an incognite window isn't enough to clear cookies/history for that tab. You have to close all the tabs in that window - and not have any other incognito windows open.

Incognito is also really helpful when you're developing a site. You can have your "normal" window logged into the system, and use your incognito window to test things like user login, etc - things that would be more complicated when you're trying to use just a "normal" window - as the cookies would conflic.

My general rule is that I use "normal" browser windows only for things I really have to be logged into constantly - for example email. Or things that I control (i.e. sites I developed myself). Pretty much everything else happens in an incognite window that I close pretty much once a day at least.

Comments

Popular posts from this blog

Another VI tip - using macros, an example

God I love VI. Well, actually, vim but whatever. Here's another reason why. Suppose you need to perform some repetitive task over and over, such as updating the copyright date in the footer of a static website. (Yes, yes I know you could do a javascript thing or whatever, just bear with me.) Of course you could just search and replace in some text editor, changing "2007" to "2008" (if you're stupid) - and you'll end up with a bunch of incorrect dates being changed, most likely. What you need to do is only change that date at the bottom. And suppose that because of the formatting, you can't use the "Copy" part of the string in a search replace - perhaps some of the pages use "©", some spell out "Copyright" etc. This is where vi macros come in handy. A macro in vi is exactly what you expect, it records your actions and allows you to play them back. To start recording, press q followed by a character to use to "stor

Using FIle FIlters in FileZilla

Here's a handy tip for situations when you want to download a large number of files - but only of a certain type. For example, perhaps you want to download all the PHP files from a largish website, scattered through many subdirectories. Perhaps you're making a backup and don't want any image files, etc. FileZilla (still the best FTP in my opinion) has a handy feature called filename filters - located under the Edit menu. Here you can set various filters that filter out files based on their filename. Took me a minute to figure that out - you're saying show only PHP files, rather you're saying filter out files that do not have ".php" as their suffix. For some reason, that seems a little backwards to me, but whatever. It works quite well. You can also check whether the filter applies only to files, only to directories - or both. In this example, you'd want to check only files, as otherwise you won't see any directories unless they happen to end in

Debugging a DOS

I'm not a sysadmin, but I end up doing my best now and then when one of my sites gets into trouble. This is a sort of "after action report" of an incident that I just resolved (hopefully). I woke up and happened to check email on my phone (don't always do this, will now) and was greeted with a uptime robot email that one of my sites was down, and had been for about 4 hours. I quickly checked the site on my phone and yup, it wasn't loading. Ran to the office and hopped on my laptop. SSH to the server, and everything seems fine. Very little load on the server (AWS instance). Did a restart of apache/php/mysql and the site is still down. Weird. Running the site's index.php file on the command line works as expected and fast. Ask a few other people to check, and it's down for them. Then I logged into the AWS console and checked on status there - everything is up and running.... WTF? This is a lightsail instance, and then I noticed the outgoing network traffic h