After reports and scientific studies revealed that browsers' private modes aren't that safe, MIT graduate student Frank Wang made a decision to take things into his own hands. He and his team from MIT CSAIL and Harvard are creating a tool named Veil, which you could employ on a public computer -- or even on a private one on top of utilizing incognito mode as well as Tor if you have big secrets to keep or perhaps when you've just become paranoid after years of hearing about hacks and cyberattacks.
"Veil was inspired by all this research which was carried out formerly in the security community that said, 'Private-browsing modes are leaky -- Here are 10 various ways which they leak. We asked, 'What is the basic problem?' And the basic concern is that [the browser] accumulates this information, after which the browser does its best effort to correct it. However all in all, regardless of browser's best effort is, it still collects it. We might as well not really gather that information in the first place."
MIT explained that data has a tendency to shift between different cores in multicore chips and caches, which attackers could possibly access by taking advantage of imperfections. Once those memory banks are full, computers might transfer data to their hard drive, and browsers cannot usually remove them. Veil functions by encrypting a website prior to showing it on your screen. You will need to type out a URL on Veil's website rather than your address bar, however it will work whatever internet browser you use. The encrypted Veil-version of a website will look like its ordinary counterpart, except it has a decryption algorithm inlayed in the page. Without having that algorithm, the website will be unintelligible -- with it, the website's data will only be loaded so long as it's displayed on screen.
If that isn't enough, Veil was created to have the ability to offer you much more security features. Its "blinding" server can also add a bunch of nonsense code to each page, and no two pages along with meaningless codes would be the same. Additional, it can take an image of the website you would like to visit and serve you that picture. The image won't have any executable code, but when you click on parts you want to see, Veil will send you an updated image.
It's not clear whether you will need to endure a considerable lag to load encrypted websites or even their pictures. Programmers will need to create Veil versions of their websites first, so we can check it out. Wang and his team created a compiler that can instantly do that, but that means you are able to just use Veil along with websites that actively want to support it.
