Microsoft unveils new privacy feature

SAN FRANCISCO (AP) - Microsoft Corp. is tweaking its Internet Explorer with an upcoming feature that will let users add lists of sites that they do and don’t want tracking them, a peace offering as the debate about websites’ shady surveillance tactics heats up.

The announcement Tuesday comes amid uproar over the sneaky ways websites watch their users as they bounce around the Internet. The Federal Trade Commission is proposing new rules to limit advertisers’ ability to do that.

But Microsoft’s new feature comes with several drawbacks. One is that it’s not automatically turned on, and another is that consumers will be responsible for creating or finding their own lists of sites they want to block.

Part of the reason for the uproar is that it’s hard to tell which sites you’re sharing information with. Websites use many third-party advertising partners that might use shady surveillance schemes.

Requiring users to sort out which sites are good and bad puts the onus on the wrong people, said Anup Ghosh, founder and chief scientist of Invincea, which makes software that companies layer on top of Internet Explorer for additional security.

“With this kind of ‘do not track’ list, the industry is not held accountable for not tracking; it’s the user that’s responsible. They kind of got it backward,” he said. “Users aren’t equipped to make these kinds of decisions, nor do they want to.”

A familiar refrain among security and privacy professionals is that Internet users by and large don’t fully appreciate the extent to which sites harvest their personal information.

Visiting a modern website is less like a handshake between two friends than it is glad-handing a room full of strangers. Unless you have tinkered with your security settings, in most browsers, you implicitly give any site you visit permission for it and all of its advertising partners to track you. The tracking happens silently, and your browsing habits are sold and analyzed by advertising firms looking for ways to show you more relevant ads.

Ghosh said it would be more useful for Microsoft to work directly with privacy groups in creating lists of sites to identify sites that engage in controversial forms of tracking.

Dean Hachamovitch, who leads Internet Explorer development for Microsoft, said on a webcast with reporters that Microsoft isn’t including pre-made lists in Internet Explorer 9, which ships next year, because it would amount to making a judgment for consumers about which sites are OK to track them.

“Choosing a tracking protection list is a statement around what the consumer wants out of the box, and in some ways that is completely up to the consumer,” Hachamovitch said.

Privacy worries and corporate interests often collide in building a browser, which is why the privacy features that do make it into the finished product are often compromises between competing interests. As a seller of Internet advertising, Microsoft has to weight the benefits from completely shielding consumers from tracking with its advertising customers’ need to monitor people to sell them more targeted ads.

Those pressures were apparently front and center in the development of the current version of Microsoft’s browser.