InformationWeek reports on privacy questions concerning Amazon’s new Silk Web browser:
Amazon’s most significant announcement on Wednesday was not the introduction of its Kindle Fire tablet. Rather, it was the Web browser that will ship with the Kindle Fire, Amazon Silk.
Amazon Silk is based on WebKit, the open source browser engine that forms the foundation of the Apple Safari and Google Chrome browsers. But Silk’s technical ancestry isn’t as important as its split personality: Silk can operate as a traditional browser, in “off-cloud mode,” but it also can take advantage of Amazon’s cloud computing infrastructure to optimize Web page files so they load more quickly.
In “cloud mode,” Silk relies on Amazon Web Services as a proxy service: Amazon becomes the middleman responsible for fulfilling the user’s Web page requests. Imagine how useful all that data will be to Amazon as business intelligence.
Chester Wisniewski, senior security advisor at Sophos Canada, says Silk presents an obvious privacy problem. “All of your Web surfing habits will transit Amazon’s cloud,” he wrote in a blog post. “If you think that Google AdWords and Facebook are watching you, this service is guaranteed to have a record of everything you do on the Web.” […]
Like an ISP, Amazon will have access to data about the Internet activities of Kindle Fire users. Indeed, Amazon compares Silk’s awareness of its users to that of an ISP. […]
But unlike an ISP, Amazon will also be presenting SSL certificates on behalf of users, and will thus have even more intimate knowledge of what users are doing online.
As Wisniewski observes, a U.S. court order would make it easy to monitor the online activities of a Kindle Fire user, at least in “cloud mode.” Other governments are also likely to see Amazon as a one-stop data shop for Kindle Fire users, to judge by RIM’s experience in India and the United Arab Emirates.