Detecting and Defending Against Third-Party Tracking on the Web (2012 paper)

From https://www.usenix.org/conference/nsdi12/detecting-and-defending-against-third-party-tracking-web:

 

There's a simple solution.

Consider everything that you do online. Sort it all into bins, such that you don't care about associations, tracking, etc among everything in a given bin. If there are activities using your true name that you don't want linked, you can use multiple bins, but you must assume that they'll eventually be linked. You cannot have activities using your true name in the same bin with activities that you don't want associated with your true name.

Then use a different identity for each bin. Each identity/bin should have its own VM, and its own public IP address (using arrangements of VPNs, Tor, etc). If there are multiple bins using your true name, use different VMs with different public IP addresses and different email addresses. And ensure that they're not associated with any of your other identities/bins.

OK, maybe it's not so simple, but it works