IE9 privacy bug a blacklist bypass

An Internet Explorer 9 privacy feature that stops companies from tracking users using blacklists doesn't work as envisaged if users enable multiple blacklists.

An Internet Explorer 9 privacy feature that stops companies from tracking users using blacklists doesn't work as envisaged if users enable multiple blacklists.

Privacy image

(Privacy image by Rob Pongsajapan, CC2.0)

Users can download more than one blacklist, or tracking protection list (TPL) from a selection that includes Abine, EasyList, TRUSTe and PrivacyChoice. They can also create their own custom list.

But according to independent consumer body Which?, a behaviour conflict exists that automatically sets the browser to "allow" sites by default even if they have been specified with a "block" instruction in another installed list. This means a company banned from accessing user data under one list would be able to access the information if such a conflict arose between lists.

For more on this story, read the full version on ZDNet UK.