‘Scheme Flooding’- Websites Track Users Across Browsers.

A security researcher has discovered a vulnerability that allows websites to track users across a number of different desktop browsers — including Apple Safari, Google Chrome, Microsoft Edge, Mozilla Firefox and Tor. Called “scheme flooding,” the flaw “allows websites to identify users reliably across different desktop browsers and link their identities together,”The vulnerability uses custom URL schemes as an attack vector — hence its name, he explained in the post. It can assign someone a permanent unique identifier using information about installed apps on that person’s computer — even if he or she switches browsers, uses incognito mode or accesses the internet through a VPN.Continue Reading