Help / Frequently Asked Questions
   


How do I install TrackMeNot?

  • Install or upgrade Firefox if necessary - TMN runs in version 1.5 or greater.
  • Click the 'Install TrackMeNot' link
  • Click 'Install' in the dialog, (you may need to instruct Firefox to accept downloads from mrl.nyu.edu; then Restart Firefox.
  • You should now see the TMN icon in the status bar (bottom right-hand corner of the browser window). It will indicate "Off".
  • To start TMN, click 'TrackMeNot' in the Firefox 'Tools' menu. This will change TMN's status to "On". After a few seconds you will see queries start to appear in the status bar.
    [Note: TMN requests are sent to search engines just like 'real' requests, and so will end up in any history kept by the site, e.g., Google's 'search-history' function]
  • To disable display of queries in the status bar, view the query log, or to adjust other options, select 'TrackMeNot->Options' in the Firefox 'Tools' menu.
  • To turn TMN off, locate 'TrackMeNot->Enabled' in the Firefox 'Tools' menu & uncheck it.
     Back to main page
 

How do I upgrade to the current version of TrackMeNot?

  • Firefox's extension manager will alert you when TrackMeNot is updated, and prompt you to install the upgrade.
  • If you've disabled this function or want to do a manual upgrade, simply follow the iInstall instructions above.

     Back to main page
 

How do I remove TrackMeNot?

  • To remove TrackMeNot from your system, click 'Tools->Extensions' in the Firefox menu and launch the extension manager.
  • Select TrackMeNot from the list of installed extensions, then click the 'Uninstall' button.
  • Restart Firefox to complete the uninstall.

     Back to main page
 

Can I control the rate at which TMN sends queries?

Yes. Go to 'Tools->TrackMeNot->Options' and select an average frequency.

    Back to main page
 

Can I choose the search engines that TMN queries?

Yes. Go to 'Tools->TrackMeNot->Search-Engines' and select one or more search-engines to query.

     Back to main page
 

Can I control the search terms that TMN uses?

The current version of TMN begins only with a small seed list (taken from lists of most-frequent search terms published by the search companies). Using these terms as 'seeds', each TMN client dynamically 'evolves' its query list by parsing likely search terms from the results of each query and swapping these back into its 'Current-Query' list. To view the current query list, click 'Tools->Options->Current Queries'.

     Back to main page
 

Isn't it easy for search companies (or third parties) to filter out TMN queries?

The answer here is not straightforward; even with dynamically evolving query sets, there are data-mining and machine-learning techniques which may well be able to filter some TMN queries based on data patterns obtained from actual users. However, with the combination of randomized scheduling and query lengths, inclusion of popular search terms, and dynamic query sets, we believe the difficulty for 3rd parties wishing to aggregate such data into accurate or identifying profiles is significantly increased.

     Back to main page
 

Can TMN effectively hide my identity?

To the extent that a third-party tries to identify you through searches alone, TMN can potentially make this a lot more difficult. Much depends on the search query terms included in future versions of TMN. If third-parties are using other means to identify you, e.g. through IP addresses and information from your ISP, TMN will be of little use.

     Back to main page
 

Can TMN prevent mining and profiling of my searches?

This is a potentially promising application of TMN, particularly with version 0.4.x's use of dynamically evolving query terms.

     Back to main page
 

Isn't it a good thing that search companies keep track of my search history?

In a perfect world, where search companies and other third parties could be trusted, such histories would serve all of us well and promise greater functionality to both the companies and individual searchers. As long as search companies and other information collectors unilaterally develop and pursue policies that don't take seriously the interests of individuals, society, and standing political and social values, individuals will have to make a choice between convenience and privacy.

     Back to main page
 

Why is TMN so concerned with keeping control in the hands of individual users; as opposed to other strategies which use 3rd party servers/proxies?

The larger intention of TMN is to challenge the current practice of search companies, and other third-parties, of unilaterally setting policies on the collection and use of personal information. We think users should have a say; we think search companies should listen. To level the playing field, we have sought to create a mechanism that places some degree of control back in the hands of users and, at every point in the design where this has been feasible, we have sought to do so.

     Back to main page
 

Won't software like this make it harder for the government to catch real criminals (or terrorists) who might be using the web for nefarious purposes?

We are unaware of any instances in which the analysis of search queries has helped law enforcement or security agencies deter or prosecute criminals or terrorists. Constitutional principles, however, place limits on what the government can and cannot do in such investigations. A targeted search on a particular individual's online activities (once probable cause has been demonstrated) is unlikely to be affected. TMN may, however, make unconstitutional 'fishing expeditions' more difficult, which is consistent with the values of a free society.

    Back to main page
 

Will widespread deployment of TMN eventually 'clog' the search engines it queries?

TMN no doubt places some additional load on search engines (though TMN requests are tiny compared with other types of web-traffic -- e.g. images, animations, music, video, etc.). How much and how serious the impact will depend on the number of users and their use patterns. Our intention (and expectation) with TMN is that its effect on search engines be minimal. Further, universal deployment of TMN is not a goal of the project. Rather, we hope to offer a level of protection to individuals who may feel threatened by the practices of search engines, and perhaps even to afford such users a small voice in the emerging debate on such practices.

    Back to main page
 

Does TMN ever simulate click-throughs on links that come up from "fake" searches. If not, why not? Further, couldn't a search engine just look at any searches for which a result is clicked on and know that these are the 'real' searches?

We are not yet releasing an implementation of TMN with click-through while we consider the potential impact on existing business models. Although search companies might be able to infer that clicked results are "real," it is not clear they can infer that unclicked ones are not (at least, not merely on those grounds.)

    Back to main page
 

What kind of guarantees can TMN make regarding its effectiveness at protecting my privacy?

We can make no guarantees, however, we believe that search companies may need to go to considerable trouble to separate user-generated from TMN-generated searches. Further, any such filtering efforts are likely to contain some number of 'false-positives'.

    Back to main page
 

If one of the search engines were to come up with a new technical mechanism that could defeat TMN, how would you even know?

There have been changes to which we have been able to respond, but there may be current or future mechanisms of which we are unaware and hence not able to respond to.

    Back to main page
 

How random is TMN's random timing mechanism. Isn't it likely that a search engine (using the massive amount of user data they've already collected) could distinguish 'any' random mechanism from real user search behavior?

With sufficient time and resources, search companies could likely detect a majority of TMN searches with some certainty. We are continuously improving TMNs timing mechanism to mimic, more closely, real usage patterns. New releases of TMN (> v.050) contain a 'burst' mechanism which schedules TMN queries only when users are actually searching, thus avoiding 'patterns' in TMN's randomness.

    Back to main page
 

How is this different than a (Distributed) Denial of Service attack or spamware?

In providing a way for individual users to assert their privacy rights in web-search, we believe TMN is a legitimate use of network and computing resources. Although we understand that critics may use such rhetoric to cast doubt on our efforts and intentions, we are confident that by all common understandings, TMN is neither DOSware nor spamware. Here are definitions from Wikipedia.

"a denial-of-service attack (DoS attack) is an attempt to make a computer resource unavailable to its intended users. Typically the targets are high-profile web servers, and the attack attempts to make the hosted web pages unavailable on the Internet." (Wikipedia, March 29 2007)

"Spamming is the abuse of electronic messaging systems to send unsolicited bulk messages, which are generally undesired." (Wikipedia, March 29 2007)

"Spamdexing is any of various methods to manipulate the relevancy or prominence of resources indexed by a search engine, usually in a manner inconsistent with the purpose of the indexing system." (Wikipedia, March 29 2007)

    Back to main page
 

How have the search engine companies responded to this project?

They haven't.

    Back to main page
 

I read Bruce Schnier's review that said TrackMeNot doesn't work; is he right?

No. First, his comments targetted the first alpha version of TMN which is significantly different from the current version. Second, he misconstrues the goal of TMN.

    Back to main page
 

I would love to use TrackMeNot; why doesn't it work with browsers other than Firefox?

Our resources are limited but we would be happy to collaborate with others who would like to develop TMN for other browsers.

    Back to main page
 

I would love to use TrackMeNot; why doesn't it work for languages besides English?

Again a problem of limited resources. We would be happy to collaborate with anyone wishing to extend TMN to their language!

    Back to main page
 

There are several projects that claim to protect privacy in web search (e.g., Tor, Anonymizer, etc.) Which is most effective? Should I use TMN instead of these others?

The use of TMN does not preclude the use of any of these other technologies and the highest degree of protection will likely be obtained with some combination of approaches; i.e., Tor, TMN and manual cookie-management.

    Back to main page
 

Can you help me understand the new TMN features in version 'X'?

  • Realtime Search-Tracking (since 0.5.x)

    TMN now recognizes when a 'real' search is being performed by a user and can act on this information in a variety of ways (see below).
  • Dynamic URLs/Header Matching (since 0.5.x)

    TMN now keeps track of where (for each search engine) you've last searched and uses that URL to send its queries (i.e., if you start using the Google toolbar rather than the webpage, TMN will update itself to do the same). Similarly, TMN now stores the header information your browser is sending out (browser type, version, OS, etc.) and mimics these in its own queries.
  • New Timing Mechansim (since 0.5.x)

    TMN now monitors the number of queries it has sent for each session and dynamically adjusts its randomizaation to attempt to match the user's specified frequency. Note: queries sent during 'bursts' (when burst-mode is enabled) are not counted in this running average...
  • Dynamic Queries (since 0.4.x)

    As of version 0.4.x, TMN's static word list has been replaced with a dynamic query mechanism which 'evolves' each client (uniquely) over time, parsing the results of its searches for 'logical' future query terms with which to replace those already used.

    Note: since the query list is continually evolving according to TMN algorithms, changes made by hand-editing this file will be overwritten; it is our intention to support user-supplied query lists in future versions.

     Back to main page

Can you help me understand all the different TMN Options?

  • Burst-Mode (since 0.5.x)

    Rather than sending queries only at randomized intervals, TMN (in burst-mode) recognizes when the user performs a search, then sends a 'burst' of queries over the next few moments to simulate actual user behavior.
  • Cookie-Anonymization (since 0.5.x)

    For user searches, TMN 'hides' the search-engine's cookies to further obfuscate search logs. For TMN-generated searches, however, this 'real' cookie is used, so that only 'fake' queries are associated with a user's profile. TMN then blocks all incoming cookies for its own searches. For non-searches (i.e., general browsing and/or mail services, etc.), the cookie is sent as usual. To see this behavior, one can use the google or AOL search-history feature. With 'cookie-anonymization' disabled, both TMN and user searches will appear in these histories; when this feature is enabled, only TMN searches will appear.
  • Current Queries (since 0.4.x)

    This button allows the user to view the current state of TMN's evolving query-list (see above for description).
  • Show/Clear Log (since 0.4.x)

    The 'Show Log' button allows the user to view a snapshot of TMN's log state (refreshing the browser window will keep this view current); The 'Clear Log' button, will (as expected) clear and re-initialize TMN's log.
  • Logging Options (since 0.4.x)

    TMN offers 3 modes for logging: 1) 'disabled' - no logs are written, 2) 'normal' (no options checked) - logs are kept for each session and then deleted when Firefox is closed, and 3) 'persistent' - each session is appended to the log which remains indefinately (Note: although TMN logs are not large, the user is responsible for occasionally clearing them in this mode).
  • Show Status/Queries (since 0.3.x)

    These checkboxes control TMN's status bar -- if 'Show Queries' is unchecked, TMN queries are not displayed as they are sent; if 'Show Status' is unchecked, no messages are displayed in the status bar at all.

      Back to main page
 

licensed under
Creative Commons License