Is it possible to track/save Google searches that were never submitted?Where do suspect requests from logged-in users to my website come from?How are Google searches intercepted when they are supposed to be encrypted with https?Does Google use the ISP's IP addresses as a frontdoor for their services/servers?How google track phone data for trafficOpening browser with already authenticated user in other appGoogle searches seen by ISP
A jazzy one-liner
Countering an uncounterable spell, triggers, and state-based actions
Mutate my DNA sequence
Parents suppressing the teaching
What set of notes can be used as a scale?
Company asks (more than once) if I can involve family members in project
How to inflict ESD-damage on a board?
How to answer to the "We do not want to create any precedent" argument in salary negotiation?
Novel about immortality being kept secret by world leaders
Protecting Seals from Forgery
Why is Robin Hood French in Shrek?
Is the ''yoi'' meaning ''ready'' when doing karate the same as the ''yoi'' which means nice/good?
What can I use for input conversion instead of scanf?
Does animal blood, esp. human, really have similar salinity as ocean water, and does that prove anything about evolution?
Are these 2 resistors in parallel?
As tourist in China do I have to fear consequences for having publicly liked South Park?
Do European politicians typically put their pronouns on their social media pages?
A word/phrase means "a small amount" (of a color)
Trying to draw a circle with nodes
Why is a Lockheed MC-130J Commando II creating such a loud droning sound?
responsibility for arrangement of elements - Frontend or Backend?
What are modes in real world?
Asimov's story where a man's speech contains no information
Moisture leaking out of chip in floor tile
Is it possible to track/save Google searches that were never submitted?
Where do suspect requests from logged-in users to my website come from?How are Google searches intercepted when they are supposed to be encrypted with https?Does Google use the ISP's IP addresses as a frontdoor for their services/servers?How google track phone data for trafficOpening browser with already authenticated user in other appGoogle searches seen by ISP
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty
margin-bottom:0;
When you start typing out a google search, it lists a bunch of options to autocomplete your search. This made me wonder how that autocomplete works. Is there a cache stored somewhere in the browser? That seems inefficient to me, so does it actually send a request to Google? If so, are these unfinished search requests stored or logged anywhere like typical searches?
web-browser google
|
show 1 more comment
When you start typing out a google search, it lists a bunch of options to autocomplete your search. This made me wonder how that autocomplete works. Is there a cache stored somewhere in the browser? That seems inefficient to me, so does it actually send a request to Google? If so, are these unfinished search requests stored or logged anywhere like typical searches?
web-browser google
Track/save/stored/logged by whom? Your title and your body do not really match.
– schroeder♦
May 29 at 18:54
There is a really easy way to test the one part of your question: disconnect the network and enter a search
– schroeder♦
May 29 at 18:55
Tracked or stored anywhere. I guess what I'm really asking is if there is any difference in communication between a browser/server when you actually submit a search vs. getting autocompletion results.
– Calvin Godfrey
May 29 at 18:55
Assuming you have the feature turned on...actually submitting a search will store that search completion (your account-bound copy of which you can later delete)
– DarkMatter
May 29 at 18:57
@DarkMatter the question is about unsubmitted entries
– schroeder♦
May 29 at 18:59
|
show 1 more comment
When you start typing out a google search, it lists a bunch of options to autocomplete your search. This made me wonder how that autocomplete works. Is there a cache stored somewhere in the browser? That seems inefficient to me, so does it actually send a request to Google? If so, are these unfinished search requests stored or logged anywhere like typical searches?
web-browser google
When you start typing out a google search, it lists a bunch of options to autocomplete your search. This made me wonder how that autocomplete works. Is there a cache stored somewhere in the browser? That seems inefficient to me, so does it actually send a request to Google? If so, are these unfinished search requests stored or logged anywhere like typical searches?
web-browser google
web-browser google
asked May 29 at 18:33
Calvin GodfreyCalvin Godfrey
1234 bronze badges
1234 bronze badges
Track/save/stored/logged by whom? Your title and your body do not really match.
– schroeder♦
May 29 at 18:54
There is a really easy way to test the one part of your question: disconnect the network and enter a search
– schroeder♦
May 29 at 18:55
Tracked or stored anywhere. I guess what I'm really asking is if there is any difference in communication between a browser/server when you actually submit a search vs. getting autocompletion results.
– Calvin Godfrey
May 29 at 18:55
Assuming you have the feature turned on...actually submitting a search will store that search completion (your account-bound copy of which you can later delete)
– DarkMatter
May 29 at 18:57
@DarkMatter the question is about unsubmitted entries
– schroeder♦
May 29 at 18:59
|
show 1 more comment
Track/save/stored/logged by whom? Your title and your body do not really match.
– schroeder♦
May 29 at 18:54
There is a really easy way to test the one part of your question: disconnect the network and enter a search
– schroeder♦
May 29 at 18:55
Tracked or stored anywhere. I guess what I'm really asking is if there is any difference in communication between a browser/server when you actually submit a search vs. getting autocompletion results.
– Calvin Godfrey
May 29 at 18:55
Assuming you have the feature turned on...actually submitting a search will store that search completion (your account-bound copy of which you can later delete)
– DarkMatter
May 29 at 18:57
@DarkMatter the question is about unsubmitted entries
– schroeder♦
May 29 at 18:59
Track/save/stored/logged by whom? Your title and your body do not really match.
– schroeder♦
May 29 at 18:54
Track/save/stored/logged by whom? Your title and your body do not really match.
– schroeder♦
May 29 at 18:54
There is a really easy way to test the one part of your question: disconnect the network and enter a search
– schroeder♦
May 29 at 18:55
There is a really easy way to test the one part of your question: disconnect the network and enter a search
– schroeder♦
May 29 at 18:55
Tracked or stored anywhere. I guess what I'm really asking is if there is any difference in communication between a browser/server when you actually submit a search vs. getting autocompletion results.
– Calvin Godfrey
May 29 at 18:55
Tracked or stored anywhere. I guess what I'm really asking is if there is any difference in communication between a browser/server when you actually submit a search vs. getting autocompletion results.
– Calvin Godfrey
May 29 at 18:55
Assuming you have the feature turned on...actually submitting a search will store that search completion (your account-bound copy of which you can later delete)
– DarkMatter
May 29 at 18:57
Assuming you have the feature turned on...actually submitting a search will store that search completion (your account-bound copy of which you can later delete)
– DarkMatter
May 29 at 18:57
@DarkMatter the question is about unsubmitted entries
– schroeder♦
May 29 at 18:59
@DarkMatter the question is about unsubmitted entries
– schroeder♦
May 29 at 18:59
|
show 1 more comment
2 Answers
2
active
oldest
votes
As inefficient as it sounds, that's exactly how it works.
Head on over to google.com, bring up your developer tools in your browser (CTRL+SHIFT+I or CTRL+OPTION+I in Chrome), click the network tab, and then start typing in the search box. You'll see a series of GET requests to to the /complete/search
url path, like this:
https://www.google.com/complete/search?client=psy-ab&q=he
https://www.google.com/complete/search?client=psy-ab&q=hel
https://www.google.com/complete/search?client=psy-ab&q=hell
https://www.google.com/complete/search?client=psy-ab&q=hello
You'll probably have a bunch of other query parameters in there, but the client identifier and the query are the two required ones. The return from that request contains the autocomplete list for the substring you typed.
This means that autocomplete queries follow the same storage rules as not-autocomplete queries; if you have a proxy or cache or whatever, they'd appear there.
There's a couple of special rules at play, though: since they're XHR queries sent in the background rather than queries you type into the URL bar, the browser doesn't put them in your navigation history. And (IIRC) Google only uses this feature if you're on TLS, so it won't ever send these queries over plain text. And finally, since Google knows that they're autocomplete requests instead of actual searches, they don't appear in your stored search history associated with your account.
In terms of efficiency, this is why Google is investing so much in protocols like SPDY and QUIC (variations of which are now being standardized as HTTP/2 and HTTP/3). These allow extremely low-overhead HTTP traffic, getting it down to as low as one UDP packet in each direction for one of these autocomplete requests.
add a comment
|
Is there a cache stored somewhere in the browser?
This is really easy to test: enter a search term in the search bar, then disconnect the network and try the same search term.
I just tried this to confirm again, and there is no autocomplete without a network.
Every character you type is sent to Google to auto-suggest completions.
If so, are these unfinished search requests stored or logged anywhere like typical searches?
We can only go with what is publicly disclosed to us. We cannot know what might be done on the backend. As for what is publicly disclosed, if you go into your Google account and look up the stored search data, only the submitted searches are stored.
From a practical point of view, it makes sense that only submitted searches are logged for any amount of time. That's the only data that will have any long term value. There is potential that unsubmitted queries are logged temporarily to improve the auto-suggest features in the short term.
add a comment
|
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "162"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/4.0/"u003ecc by-sa 4.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsecurity.stackexchange.com%2fquestions%2f211017%2fis-it-possible-to-track-save-google-searches-that-were-never-submitted%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
As inefficient as it sounds, that's exactly how it works.
Head on over to google.com, bring up your developer tools in your browser (CTRL+SHIFT+I or CTRL+OPTION+I in Chrome), click the network tab, and then start typing in the search box. You'll see a series of GET requests to to the /complete/search
url path, like this:
https://www.google.com/complete/search?client=psy-ab&q=he
https://www.google.com/complete/search?client=psy-ab&q=hel
https://www.google.com/complete/search?client=psy-ab&q=hell
https://www.google.com/complete/search?client=psy-ab&q=hello
You'll probably have a bunch of other query parameters in there, but the client identifier and the query are the two required ones. The return from that request contains the autocomplete list for the substring you typed.
This means that autocomplete queries follow the same storage rules as not-autocomplete queries; if you have a proxy or cache or whatever, they'd appear there.
There's a couple of special rules at play, though: since they're XHR queries sent in the background rather than queries you type into the URL bar, the browser doesn't put them in your navigation history. And (IIRC) Google only uses this feature if you're on TLS, so it won't ever send these queries over plain text. And finally, since Google knows that they're autocomplete requests instead of actual searches, they don't appear in your stored search history associated with your account.
In terms of efficiency, this is why Google is investing so much in protocols like SPDY and QUIC (variations of which are now being standardized as HTTP/2 and HTTP/3). These allow extremely low-overhead HTTP traffic, getting it down to as low as one UDP packet in each direction for one of these autocomplete requests.
add a comment
|
As inefficient as it sounds, that's exactly how it works.
Head on over to google.com, bring up your developer tools in your browser (CTRL+SHIFT+I or CTRL+OPTION+I in Chrome), click the network tab, and then start typing in the search box. You'll see a series of GET requests to to the /complete/search
url path, like this:
https://www.google.com/complete/search?client=psy-ab&q=he
https://www.google.com/complete/search?client=psy-ab&q=hel
https://www.google.com/complete/search?client=psy-ab&q=hell
https://www.google.com/complete/search?client=psy-ab&q=hello
You'll probably have a bunch of other query parameters in there, but the client identifier and the query are the two required ones. The return from that request contains the autocomplete list for the substring you typed.
This means that autocomplete queries follow the same storage rules as not-autocomplete queries; if you have a proxy or cache or whatever, they'd appear there.
There's a couple of special rules at play, though: since they're XHR queries sent in the background rather than queries you type into the URL bar, the browser doesn't put them in your navigation history. And (IIRC) Google only uses this feature if you're on TLS, so it won't ever send these queries over plain text. And finally, since Google knows that they're autocomplete requests instead of actual searches, they don't appear in your stored search history associated with your account.
In terms of efficiency, this is why Google is investing so much in protocols like SPDY and QUIC (variations of which are now being standardized as HTTP/2 and HTTP/3). These allow extremely low-overhead HTTP traffic, getting it down to as low as one UDP packet in each direction for one of these autocomplete requests.
add a comment
|
As inefficient as it sounds, that's exactly how it works.
Head on over to google.com, bring up your developer tools in your browser (CTRL+SHIFT+I or CTRL+OPTION+I in Chrome), click the network tab, and then start typing in the search box. You'll see a series of GET requests to to the /complete/search
url path, like this:
https://www.google.com/complete/search?client=psy-ab&q=he
https://www.google.com/complete/search?client=psy-ab&q=hel
https://www.google.com/complete/search?client=psy-ab&q=hell
https://www.google.com/complete/search?client=psy-ab&q=hello
You'll probably have a bunch of other query parameters in there, but the client identifier and the query are the two required ones. The return from that request contains the autocomplete list for the substring you typed.
This means that autocomplete queries follow the same storage rules as not-autocomplete queries; if you have a proxy or cache or whatever, they'd appear there.
There's a couple of special rules at play, though: since they're XHR queries sent in the background rather than queries you type into the URL bar, the browser doesn't put them in your navigation history. And (IIRC) Google only uses this feature if you're on TLS, so it won't ever send these queries over plain text. And finally, since Google knows that they're autocomplete requests instead of actual searches, they don't appear in your stored search history associated with your account.
In terms of efficiency, this is why Google is investing so much in protocols like SPDY and QUIC (variations of which are now being standardized as HTTP/2 and HTTP/3). These allow extremely low-overhead HTTP traffic, getting it down to as low as one UDP packet in each direction for one of these autocomplete requests.
As inefficient as it sounds, that's exactly how it works.
Head on over to google.com, bring up your developer tools in your browser (CTRL+SHIFT+I or CTRL+OPTION+I in Chrome), click the network tab, and then start typing in the search box. You'll see a series of GET requests to to the /complete/search
url path, like this:
https://www.google.com/complete/search?client=psy-ab&q=he
https://www.google.com/complete/search?client=psy-ab&q=hel
https://www.google.com/complete/search?client=psy-ab&q=hell
https://www.google.com/complete/search?client=psy-ab&q=hello
You'll probably have a bunch of other query parameters in there, but the client identifier and the query are the two required ones. The return from that request contains the autocomplete list for the substring you typed.
This means that autocomplete queries follow the same storage rules as not-autocomplete queries; if you have a proxy or cache or whatever, they'd appear there.
There's a couple of special rules at play, though: since they're XHR queries sent in the background rather than queries you type into the URL bar, the browser doesn't put them in your navigation history. And (IIRC) Google only uses this feature if you're on TLS, so it won't ever send these queries over plain text. And finally, since Google knows that they're autocomplete requests instead of actual searches, they don't appear in your stored search history associated with your account.
In terms of efficiency, this is why Google is investing so much in protocols like SPDY and QUIC (variations of which are now being standardized as HTTP/2 and HTTP/3). These allow extremely low-overhead HTTP traffic, getting it down to as low as one UDP packet in each direction for one of these autocomplete requests.
edited May 29 at 19:08
answered May 29 at 19:03
tylerltylerl
73.9k24 gold badges134 silver badges218 bronze badges
73.9k24 gold badges134 silver badges218 bronze badges
add a comment
|
add a comment
|
Is there a cache stored somewhere in the browser?
This is really easy to test: enter a search term in the search bar, then disconnect the network and try the same search term.
I just tried this to confirm again, and there is no autocomplete without a network.
Every character you type is sent to Google to auto-suggest completions.
If so, are these unfinished search requests stored or logged anywhere like typical searches?
We can only go with what is publicly disclosed to us. We cannot know what might be done on the backend. As for what is publicly disclosed, if you go into your Google account and look up the stored search data, only the submitted searches are stored.
From a practical point of view, it makes sense that only submitted searches are logged for any amount of time. That's the only data that will have any long term value. There is potential that unsubmitted queries are logged temporarily to improve the auto-suggest features in the short term.
add a comment
|
Is there a cache stored somewhere in the browser?
This is really easy to test: enter a search term in the search bar, then disconnect the network and try the same search term.
I just tried this to confirm again, and there is no autocomplete without a network.
Every character you type is sent to Google to auto-suggest completions.
If so, are these unfinished search requests stored or logged anywhere like typical searches?
We can only go with what is publicly disclosed to us. We cannot know what might be done on the backend. As for what is publicly disclosed, if you go into your Google account and look up the stored search data, only the submitted searches are stored.
From a practical point of view, it makes sense that only submitted searches are logged for any amount of time. That's the only data that will have any long term value. There is potential that unsubmitted queries are logged temporarily to improve the auto-suggest features in the short term.
add a comment
|
Is there a cache stored somewhere in the browser?
This is really easy to test: enter a search term in the search bar, then disconnect the network and try the same search term.
I just tried this to confirm again, and there is no autocomplete without a network.
Every character you type is sent to Google to auto-suggest completions.
If so, are these unfinished search requests stored or logged anywhere like typical searches?
We can only go with what is publicly disclosed to us. We cannot know what might be done on the backend. As for what is publicly disclosed, if you go into your Google account and look up the stored search data, only the submitted searches are stored.
From a practical point of view, it makes sense that only submitted searches are logged for any amount of time. That's the only data that will have any long term value. There is potential that unsubmitted queries are logged temporarily to improve the auto-suggest features in the short term.
Is there a cache stored somewhere in the browser?
This is really easy to test: enter a search term in the search bar, then disconnect the network and try the same search term.
I just tried this to confirm again, and there is no autocomplete without a network.
Every character you type is sent to Google to auto-suggest completions.
If so, are these unfinished search requests stored or logged anywhere like typical searches?
We can only go with what is publicly disclosed to us. We cannot know what might be done on the backend. As for what is publicly disclosed, if you go into your Google account and look up the stored search data, only the submitted searches are stored.
From a practical point of view, it makes sense that only submitted searches are logged for any amount of time. That's the only data that will have any long term value. There is potential that unsubmitted queries are logged temporarily to improve the auto-suggest features in the short term.
answered May 29 at 18:59
schroeder♦schroeder
87.8k36 gold badges198 silver badges235 bronze badges
87.8k36 gold badges198 silver badges235 bronze badges
add a comment
|
add a comment
|
Thanks for contributing an answer to Information Security Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsecurity.stackexchange.com%2fquestions%2f211017%2fis-it-possible-to-track-save-google-searches-that-were-never-submitted%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Track/save/stored/logged by whom? Your title and your body do not really match.
– schroeder♦
May 29 at 18:54
There is a really easy way to test the one part of your question: disconnect the network and enter a search
– schroeder♦
May 29 at 18:55
Tracked or stored anywhere. I guess what I'm really asking is if there is any difference in communication between a browser/server when you actually submit a search vs. getting autocompletion results.
– Calvin Godfrey
May 29 at 18:55
Assuming you have the feature turned on...actually submitting a search will store that search completion (your account-bound copy of which you can later delete)
– DarkMatter
May 29 at 18:57
@DarkMatter the question is about unsubmitted entries
– schroeder♦
May 29 at 18:59