Publications - Pervasive Computing Laboratory

Access control anotacionsemantica authentication Cloud computing coap compromise cryptography cynamon emadrid emrisco home network I-Shaper identity management inrisco inteligenciafuentesabiertas Internet of Things intrusion detection system IoT magos middleware Pervasive computing privacy Protocols Qursa raudo2 Security Smart Card Trust management Ubisec VANETs 
Show all
2024
 Callejo, Patricia;  Gómez-Fernandez, Ignacio;  Bagnulo, Marcelo
“Animation” URL in NFT marketplaces considered harmful for privacy Journal Article 
In: International Journal of Information Security, 2024, ISSN: 1615-5270.
Abstract | Links | BibTeX | Tags: Blockchain, I-Shaper, NFT, privacy
@article{marcelo001,

title = {“Animation” URL in NFT marketplaces considered harmful for privacy},

author = {Patricia Callejo and Ignacio Gómez-Fernandez and Marcelo Bagnulo},

doi = {https://doi.org/10.1007/s10207-024-00908-x},

issn = {1615-5270},

year  = {2024},

date = {2024-09-17},

journal = {International Journal of Information Security},

abstract = {Non-Fungible Tokens (NFTs) are becoming increasingly popular as a way to represent and own digital property. However, the usage of NFTs also prompts questions about privacy. In this work, we show that it is possible to use NFTs to retrieve enough information to fingerprint users. By doing so, we can uniquely associate users with blockchain accounts. This would allow linking several blockchain accounts to the same user. This work focuses on the vulnerabilities presented by some popular NFT marketplaces. Since NFTs may have HTML files embedded, they allow the use of fingerprinting techniques if not handled carefully. Finally, we provide recommendations and countermeasures for the different actors in this ecosystem to avoid these kinds of tracking methods and, in doing so, safeguard user privacy.},

keywords = {Blockchain, I-Shaper, NFT, privacy},

pubstate = {published},

tppubtype = {article}

}

Close
Non-Fungible Tokens (NFTs) are becoming increasingly popular as a way to represent and own digital property. However, the usage of NFTs also prompts questions about privacy. In this work, we show that it is possible to use NFTs to retrieve enough information to fingerprint users. By doing so, we can uniquely associate users with blockchain accounts. This would allow linking several blockchain accounts to the same user. This work focuses on the vulnerabilities presented by some popular NFT marketplaces. Since NFTs may have HTML files embedded, they allow the use of fingerprinting techniques if not handled carefully. Finally, we provide recommendations and countermeasures for the different actors in this ecosystem to avoid these kinds of tracking methods and, in doing so, safeguard user privacy.
Close
doi:https://doi.org/10.1007/s10207-024-00908-x
Close