Websites can detect Chrome 76 incognito mode

[tangor]

On Sunday, developer Jesse Li described a novel method to detect when Chrome users have activated Incognito mode using Chrome's FileSystem API: it is possible to benchmark the speed at which files can be written to disk using this software interface.

The technique is similar to one proposed last month by security researcher Vikas Mishra. He found that browser's Quota Management API, for managing temporary and persistent storage, can be used to infer the presence or absence of Incognito mode.

Incognito mode in Chrome sounds as if it keeps users anonymous online. But it doesn't. It simply prevents browsing activity from being stored in the History log and it erases local HTTP cookies and site data from memory when the Incognito session ends (rather than writing the data to local storage). Its purpose is to prevent other people using the same browser on the same device from being able to look at an in-browser record of past browsing sessions.

[theregister.co.uk...]

The more you fix, the more things break. Sigh.

[Dimitri]

This is what happens when you do too complex things. I am unsure that it's right for web browser to propose API , there will always be tricks to do unexpected things.

[tangor]

the fun thing overlooked by users (and not mentioned in the TOS ...) is incognito mode does not mean the browser maker doesn't know what you are doing in private ... only that no logs/record will be written to the LOCAL drive while in those sessions.

Security and privacy on the web is largely a myth. All incognito mode does is make it more difficult for a spouse to find out what their significant other is doing on the web.

[Dimitri]

Also incognito is very misleading, up to the icon used to represent it. I am sure that average people believe it means they are surfing "anonymously".