When you visit a website, there is a chance that you are tracked by the operators of the site or by third-parties. Whether that is the case or not depends on the site in question and which site party connections it makes.
Software vendors and download sites may track users that visit the website. They may track the pages that users open or where they came from.
What most Internet users may not know is that they may also embed unique identifiers in software downloads.
A recent article on the Ctrl blog suggests that software vendors embed identifiers to software downloads for various reasons.
Companies use two different means to add unique data to downloads; the first adds data before or after code signature certificates on Windows or in extended file system attributes on Mac, the second adds data to downloaded file names.
The adding happens on-the-fly after users initiate the start of the download process on the site.
Data that is added may include the IP address, web browser, marketing campaign data, or other data.
It is difficult to find out if companies add unique identifiers if the first method is used, and most companies hide the fact that they do. To find out about it, you need to analyze certificates and use Diff-software.
The Ctrl blog analyzed downloads from popular companies and discovered that companies like Google or Yandex add unique identifiers to downloads, and that others, Avast, AVG, Avira, or WinZip add marketing campaign data to the downloads.
The data is only useful if it is picked up again somehow. Companies may retrieve the data during installation and during upgrades.
In a follow-up blog post, Ctrl blog listed ways to limit the tracking in software downloads.
I'd like to add that you could use portable software as it is not installed and often provided by third-parties instead of the developing company.
Now You: how do you download software?Advertisement
Advertising revenue is falling fast across the Internet, and independently-run sites like Ghacks are hit hardest by it. The advertising model in its current form is coming to an end, and we have to find other ways to continue operating this site.
We are committed to keeping our content free and independent, which means no paywalls, no sponsored posts, no annoying ad formats or subscription fees.
If you like our content, and would like to help, please consider making a contribution:
Ghacks is a technology news blog that was founded in 2005 by Martin Brinkmann. It has since then become one of the most popular tech news sites on the Internet with five authors and regular contributions from freelance writers.