PCmag Security Watch

The study examined 18 categories, from period trackers to dating sites and identified the apps that collect information such as contact info, search history, purchases, location, and more. Why does a weather app need your health and fitness information? Ask the people behind WeatherBug, as that’s one of the data points the weather tracking app collects. Should a cryptocurrency app have access to your search history? eToro demands that information from its users.

Choose apps that don’t ask for your data in the first place. For example, while Mint is a handy money manager with a lot of slick perks, it also collects a lot of information about you. Try Mvelopes instead. Likewise, YouTube Kids is a convenient site for entertaining little ones, but it collects data in the location and search history categories. Disney Coloring World and Duolingo ABC are kid-friendly alternatives that don’t collect much information.

Get this from a friend? Get it delivered to your inbox weekly. Sign up for the SecurityWatch newsletter.

Are You Trackable?

Chances are, you’re also using a browser that tracks your every move online. Whether via cookies or a browser fingerprint, advertisers can keep track of your online purchases and searches.

As PCMag lead software analyst Michael Muchmore writes, you can delete your cookies, but the bigger threat to your online privacy is browser fingerprinting. Your browser fingerprint can contain your browser type and version, operating system, plug-ins, time zone, language, screen resolution, installed fonts, and other identifying information.
Want to see your fingerprint? The Electronic Frontier Foundation’s (EFF) Cover Your Tracks web page allows you to put your browser’s privacy to the test.

How to Prevent Web Tracking

To prevent or minimize being tracked, start by using a private browser. Apple’s Safari and Microsoft Edge are both options with high ratings from EFF.
If you can’t quit Chrome or another browser that doesn’t offer much tracking protection, use a plug-in that hinders tracking, such as Decentraleyes, DuckDuckGo, PrivacyBadger, or uBlock Origin.

And don’t get fooled by private browsing modes (known as Incognito mode on Google Chrome). They don’t protect you from prying eyes online. They just hide your activity from your local machine’s history.

There’s no such thing as total privacy or perfect security in an online space, but using these tips can make it harder for anyone to track your activity.
Stay safe,

Kim Key
PCMag Security Analyst

What Else Is Happening in the Security World this Week?

• Scammers Stick Fraudulent QR Codes on Texas Parking Meters. The bogus codes have been found across Austin and San Antonio.
• North Korean Hackers Stole $400M in Cryptocurrency Last Year. Much of the cryptocurrency stolen was Ether, not Bitcoin, according to blockchain tracking firm Chainalysis.
• Google to White House: It’s Time to Secure Open-Source Software. Google was among the tech companies that attended a White House meeting about the security of open-source software following the threat of the Apache Log4J vulnerability.
• Russia Arrests Members of REvil Ransomware Group, Citing US Request. It may be the first time the Russian government has publicly cracked down on a ransomware gang operating within the country.
• Ukrainian Government Websites Defaced Amid Threat of Russian Invasion. The Ukrainian government websites were altered to claim local citizens’ personal information had been leaked.