Privacy Risks with Facebook’s PII-based Targeting: Auditing a Data Broker’s Advertising Interface - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2018

Privacy Risks with Facebook’s PII-based Targeting: Auditing a Data Broker’s Advertising Interface

Abstract

Sites like Facebook and Google now serve as de facto data brokers, aggregating data on users for the purpose of implementing powerful advertising platforms. Historically, these services allowed advertisers to select which users see their ads via targeting attributes. Recently, most advertising platforms have begun allowing advertisers to target users directly by uploading the personal information of the users who they wish to advertise to (e.g., their names, email addresses, phone numbers, etc.); these services are often known as custom audiences. Custom audiences effectively represent powerful linking mechanisms, allowing advertisers to leverage any PII (e.g., from customer data, public records, etc.) to target users. In this paper, we focus on Facebook’s custom audience implementation and demonstrate attacks that allow an adversary to exploit the interface to infer users’ PII as well as to infer their activity. Specifically, we show how the adversary can infer users’ full phone numbers knowing just their email address, determine whether a particular user visited a website, and de-anonymize all the visitors to a website by inferring their phone numbers en masse. These attacks can be conducted without any interaction with the victim(s), cannot be detected by the victim(s), and do not require the adversary to spend money or actually place an ad. We propose a simple and effective fix to the attacks based on reworking the way Facebook de-duplicates uploaded information. Facebook’s security team acknowledged the vulnerability and has put into place a fix that is a variant of the fix we propose. Overall, our results indicate that advertising platforms need to carefully consider the privacy implications of their interfaces.
Fichier principal
Vignette du fichier
Venkatadri-etal_PrvacyCustomAudience_Oakland2018.pdf (1.93 Mo) Télécharger le fichier
Origin Files produced by the author(s)
Loading...

Dates and versions

hal-01955327 , version 1 (14-12-2018)

Identifiers

  • HAL Id : hal-01955327 , version 1

Cite

Giridhari Venkatadri, Athanasios Andreou, Yabing Liu, Alan Mislove, Krishna P Gummadi, et al.. Privacy Risks with Facebook’s PII-based Targeting: Auditing a Data Broker’s Advertising Interface. 39th IEEE Symposium on Security and Privacy (S&P), 2018, San Francisco, United States. ⟨hal-01955327⟩
195 View
590 Download

Share

Gmail Mastodon Facebook X LinkedIn More