Legislation that would force Internet service providers to store more data about their customers’ browsing habits, as well as ban encrypted devices including the iPhone, is currently being discussed in the U.K. where the government is looking to expand its powers when it comes to surveillance programs. To show what kind of information the proposed Investigatory Powers Bill would offer secret agencies, one developer created a Chrome plugin that records all the sites you visit.
Developed by Liverpool John Moores University senior lecturer in computing Brett Lempereur, the plugin records plenty of information about the user including the device used and the exact webpage that was accessed. Lempereur even set up a special website where the data is live-streamed.
Under the Investigatory Powers Bill, ISPs would have to collect similar data and make it available to law enforcement. Furthermore, this browsing metadata would be stored for 12 months.
“This is an attempt to show the amount of information that will be available about you without and with a warrant if the new Investigatory Powers Bill comes into force in its current form,” Lempereur said.
As Wired points out, the plugin shows exactly what domains Lempereur visited, including Gmail, YouTube, Google APIs, Facebook, and others (see top image). Under the new law, ISPs would only collect the domain the user visits, not every page belonging to it. Even so, the amount of information about each user would be impressive, offering precious information about a user’s preferences and browsing habits.
“Their browsing habits and their personal preferences can be identified, for example how much pornography they have viewed. I have certainly been self-censoring what I have been viewing,” he added. The computer scientist also acknowledged that he censored his browsing exactly because he knew his plugin was recording the information.
“Surveillance on this scale would have an impact on people’s behavior on the internet,” he said.
The Chrome extension currently works on computers and won’t collect any browsing data originating from a mobile device.