HackerPapers

arXiv:1510.04031cs.SI

TRAP: using TaRgeted Ads to unveil Google personal Profiles

Mauro Conti, Vittoria Cozza, Marinella Petrocchi, Angelo Spognardi

Early discovery. Linked by one identifiable commenter. This paper is outside the main ranking; a mention is not an endorsement.

Abstract

In the last decade, the advertisement market spread significantly in the web and mobile app system. Its effectiveness is also due thanks to the possibility to target the advertisement on the specific interests of the actual user, other than on the content of the website hosting the advertisement. In this scenario, became of great value services that collect and hence can provide information about the browsing user, like Facebook and Google. In this paper, we show how to maliciously exploit the Google Targeted Advertising system to infer personal information in Google user profiles. In particular, the attack we consider is external from Google and relies on combining data from Google AdWords with other data collected from a website of the Google Display Network. We validate the effectiveness of our proposed attack, also discussing possible application scenarios. The result of our research shows a significant practical privacy issue behind such type of targeted advertising service, and call for further investigation and the design of more privacy-aware solutions, possibly without impeding the current business model involved in online advertisement.

arXiv comments
7th IEEE International Workshop on Information Forensics and Security (WIFS) 2015. 6 pages
Journal reference
DOI
doi:10.1109/WIFS.2015.7368607
Subjects
cs.SISocial and Information Networks cs.CRCryptography and Security cs.CYComputers and Society

On Hacker News

Linked by 1 identifiable commenter in 1 comment across 1 thread, from Oct 2026 to Oct 2026.

Comments linking this paper, per year.

Discussed in comments1 thread

  1. Root shell on Samsung TV 1 comment
    • I'm not sure why you're going so hard in the paint to be pedantic but sure, Google doesn't literally sell their exact byte-for-byte data, what they sell is a service that is functionally a few translation layers removed from their actual database. This is pretty much how all…

      paimapiView on HNParent context

Submitted to Hacker News

Connected through shared HN threads, not inferred similarity or a recommendation.