A new report titled "Uncovering Webloc" details how ad-based technology is used to surveil people [1].
This discovery highlights a growing concern regarding the intersection of private sector tracking tools and state-sponsored surveillance. By repurposing tools designed for marketing, actors can track individuals without the traditional level of oversight associated with legal intercepts.
Ronald Deibert of The Citizen Lab said the report is about how ad-based technology is used to surveil people [1]. The study examines the technical mechanisms that allow advertising networks to collect data on users, often without their knowledge or explicit consent. These systems are designed to optimize ad delivery, but the report suggests they have become a primary vector for surveillance.
Deibert said, "A new report entitled "Uncovering Webloc," which is about how ad-based technology is used to surveil people" [1].
While the report focuses on the technicalities of "Webloc," webloc files are used to transmit a specific level of information to a browser. The Citizen Lab researchers found that these files can be manipulated to leak information about a target's device and location.
This shift toward using commercial tools for surveillance represents a change in how intelligence agencies and private firms are operating. Rather than relying on exclusively own-developed software, they are now leveraging the existing infrastructure of the global advertising ecosystem. This allows them to operate with a higher degree of anonymity and blend in with normal web traffic.
The Citizen Lab continues to monitor these threats to digital privacy. The report serves as a warning to both users and policymakers that the tools used to target consumers for ads are the same tools being used to track individuals of interest.
“A new report titled "Uncovering Webloc" details how ad-based technology is used to surveil people.”
The repurposing of ad-tech for surveillance marks a transition from targeted hacking to the exploitation of existing commercial infrastructure. By using the global advertising ecosystem, surveillance actors can bypass traditional security measures and bypass the need for expensive, custom-developed spyware, making high-level tracking more accessible and scalable across the population.
