A browser add-on that stops targeted advertising systems tracking web user's online activities has been developed by a Harvard University student.

The Targeted Advertising Cookie Opt-Out (TACO) enables its users to opt out of 27 advertising networks that are employing behavioural advertising systems, said developer Christopher Soghoian, on his website.

Soghoian, a fellow at the Berkman Center for internet and society at Harvard and a doctoral candidate at Indiana University, modified a browser extension Google released under an Apache 2 open-source licence.

Google's opt-out plugin for Internet Explorer and Firefox blocks cookies delivered by its Doubleclick advertising network. A cookie is a small data file stored in a browser that can track a variety of information, such as websites visited and search queries, and transmit that information back to the entity that placed the cookie in the browser.

Microsoft Internet Explorer 8 review

Mozilla Firefox 3.1 beta 2 review

Google's opt-out plug-in comes as the company announced plans last week to target advertisements based on the sites people visit. Targeted advertising is seen as a way for advertisers to more precisely find potential customers as well as for website publishers to charge higher advertising rates.

But the behavioural advertising technologies have raised concerns over how consumers get enrolled in the programmes, what data is being tracked and how the data is protected.

Many advertising networks will let consumers add an opt-out cookie to their browser, which means their web activity won't be traced. But Soghoian wrote that if someone clears cookies from their browser, they'd have to go through the opt-out process again, which can be complicated if a couple of dozen opt-out cookies have already been set. Firefox, for example, has a privacy setting that will clear cookies automatically when a browser is closed.

"This is obviously not a reasonable thing to expect," he said.

Soghoian's TACO extension sets permanent opt-out cookies for Google's network and 26 others, even if the cookies are flushed from the browser. Since some websites use multiple advertising cookies, TACO puts a total of 41 opt-out cookies on a machine, Soghoian said.

Ultimately, TACO is temporary fix for a long-term issue. Ideally, there would be a single, universal opt-out cookie which would be honoured by marketers, said Soghoian. The problem is that for privacy reasons, cookies can't be accessed by domains that didn't set the cookie in the first place.

Another solution would be adding a way for browsers to send an opt-out HTTP header that is respected by online advertisers. But browser makers such as Microsoft, Google, Apple, Mozilla would have to agree on a technical specification, Soghoian said. That may not be in those companies' best interests.

"If the browser vendors went through the hard work of designing and implementing such a system, they'd likely also turn it on by default, as they did with pop-up blockers," Soghoian added.

That could mean a nail in the coffin for behavioural advertising systems. TACO can be downloaded on Mozilla's extensions site, but users must have a free developer account. Soghoian's website also has TACO, where it can be downloaded without signing up.

PC security advice

Broadband speed tester

See also: Phorm signs up to new advertising guidelines