Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 29 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Web Applicationsarrow Google tracking Firefox users?
EH-Net
May 23, 2013, 08:26:21 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Google tracking Firefox users?  (Read 8698 times)
0 Members and 1 Guest are viewing this topic.
Andrew Waite
Hero Member
*****
Offline Offline

Posts: 928



View Profile WWW
« on: August 19, 2008, 10:25:15 AM »

Hi all,

I've just come across an interesting (to me anyway) discovery and was wondering if anyone had more information before I stick myself head-first in to my web traffic.

The scenario,

I'm coding a new version of an old web-based app (wanted to be a developer before I saw the light, now I'm responsible for my old apps...). I'm running TamperData under Firefox 3 to fake some of my input to see how the system responds. Up pops a post request I wasn't expecting passing a cookie ID to static.cache.l.google.com.

Now I can't find the referenced cookie on my system to see what info is held, likewise I can't find any information on the web (in hindsight using Google may not be the smartest move I've made today). This request has only been sent once so I can't determine how regularly I am/have been providing this info to Google but it has me slightly miffed. I'm sure that this would have been mentioned in the extensive and readable license agreement I read thoroughly before signing my life away agreeing to the conditions.  Roll Eyes

If anyone has any info or knowledge of this I'd be interested to here from you, might save me a few hours that could be put to more productive use (Like Lego Star Wars......)

Thanks in advance,
RR
Logged

BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #1 on: August 19, 2008, 11:11:48 AM »

First, Lego Star Wars is sweet! Smiley

Second, could it be the standard google tracking cookie that G-Zapper is meant to block?
Logged
Andrew Waite
Hero Member
*****
Offline Offline

Posts: 928



View Profile WWW
« Reply #2 on: August 19, 2008, 01:20:58 PM »

Second, could it be the standard google tracking cookie that G-Zapper is meant to block?

I haven't come across gzapper before, looking through the site I think you may have hit the nail on the head. The bit that throw me was that I wasn't using google at the time (and hadn't in the current firefox session) so I'm assuming that this is linked through from the integrated search bar.

Panic over (although I may go looking for a new browser....)

Cheers BillV
Logged

sgt_mjc
Sr. Member
****
Offline Offline

Posts: 294


View Profile
« Reply #3 on: August 19, 2008, 01:46:50 PM »

As nice as the Google bar and others can be, I just don't trust them. I'm not paranoid (well any more paranoid than most security guys), but I don't like the idea of my surfing habits being tracked just so they can supposedly send me span that their filter will have to catch. Does that make sense to any one? Any ways, this is just one more reason to stay away form tool bars. Thanks, RR.
Logged

Mike Conway
CISSP
CompTia Security +
C|EH
g00d_4sh
Sr. Member
****
Offline Offline

Posts: 394



View Profile
« Reply #4 on: August 19, 2008, 01:51:42 PM »

Tool bars "are the devil" as I say.  I stick to Opera as my browser... and lock that shit down generally.  I actually just broke Opera for the first time, and had to reinstall it.  Kind of cracked me up. 
Logged

"Bad.. Good?  I'm the guy with the gun"
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #5 on: August 19, 2008, 03:41:38 PM »

Second, could it be the standard google tracking cookie that G-Zapper is meant to block?
Panic over (although I may go looking for a new browser....)

Cheers BillV

Cool Smiley

I think I have an older (free) version of that tool laying around somewhere if you want it. As far as I know it still does the job.
Logged
dalepearson
Sr. Member
****
Offline Offline

Posts: 357


View Profile WWW
« Reply #6 on: August 19, 2008, 03:45:03 PM »

If your in the infosec field google is great as it tracks everything.

Time to try what is supposed to be the more private google - www.cuil.com
Logged

Andrew Waite
Hero Member
*****
Offline Offline

Posts: 928



View Profile WWW
« Reply #7 on: August 19, 2008, 04:07:23 PM »

Time to try what is supposed to be the more private google - www.cuil.com

Cheers Dale, I haven't seen cuil before so I'll take a look. Although the fact that their privacy statement claims that thy don't track you by cookie and then explain why they need cookies to track your preference I think I might do a bit of digging into the cookie contents before I trust them completely (as I'm generally more paranoid than the next security guy Wink )

Tool bars "are the devil" as I say.  I stick to Opera as my browser...
added to list of possible replacements, cheers for the tip...

I think I have an older (free) version of that tool laying around somewhere if you want it. As far as I know it still does the job.
If you've got a free version handy I'd appreciate a look-see to figure out how it ticks, no biggy if you can't find it, wouldn't want to put you out.

Cheers for the assistance guys.

RR
Logged

Otter
Newbie
*
Offline Offline

Posts: 41


View Profile
« Reply #8 on: August 21, 2008, 01:34:59 AM »

If your in the infosec field google is great as it tracks everything.

Time to try what is supposed to be the more private google - www.cuil.com

Unfortunately though, despite the huge press splash cuil.com got a month or so ago,  people came quickly to the same conclusion I had when trying it that day:   gee these search results suck! 

http://www.theregister.co.uk/2008/07/31/inside_cuil/

I agree with those who avoid toolbars like the plague and google desktop.  They know enough about me from search terms and IP address only-- I don't need to be logging in, letting them index all my email, or given them a chance to blithely index my hard drive to tune ad delivery to me.    Minority Report anyone?



Logged
dalepearson
Sr. Member
****
Offline Offline

Posts: 357


View Profile WWW
« Reply #9 on: August 21, 2008, 01:57:18 AM »

I saw the article on REG, and I guess they are right.
Its a double edged sword though, as it wont get better unless people use it more, but they wont use it as the results are not all that.

The other issues I cant see how to submit or recommend a site.
Logged

Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.068 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.