-> X-PGP-Key-Fingerprint: 46 B5 DA C5 C5 6F AB 1E C8 FC 3B 02 71 7A 03 A4
-> Date: Thu, 2 Oct 1997 12:13:06 -0400
-> Reply-To: VOXERS-AT-LARGE@list.iex.net
-> Sender: Voxers At Large <VOXERS-AT-LARGE@list.iex.net>
-> From: greg <greg@CYPHER.NET>
-> Subject: IE4 and channels (fwd)
-> To: Multiple recipients of list VOXERS-AT-LARGE
-> <VOXERS-AT-LARGE@list.iex.net>
->
-> -----BEGIN PGP SIGNED MESSAGE-----
->
-> Forwarded message:
-> >
-> > Just a teaser to start with: Most folks will remember the netscape java
-> > bug that allowed you to snoop on what people where visiting. Well IE4.0
-> > goes a bit further than this - Logging of your actions, even when you
-> > would otherwise be shielded by proxies is _BUILT_ _IN_
-> >
-> > The channel definition format (.CDF)
-> > http://www.microsoft.com/standards/cdf-f.htm
-> >
-> > includes a LOGTARGET feature that allows a web site provider to make
-> > your browser deliver logs of your usage via an http post or put. Even hits
-> > from cache are logged.
-> >
-> > This is all not so good and getting worse. Not only is the information
posted
-> > material you wouldn't want to give to a provider it also being http
post/put
-> > normally is spoofable anyway.
-> >
-> > Unanswered question for next time - or for folks with more time than me
-> > to follow up
-> >
-> > o Can you put other sites in your channel definition and get logs of
-> > when they read your competitor site
->
->
-> - --
-> Greg Vassie C y p h e r N e t
-> greg@cypher.net -tH3 r3v0lUt10n w1lL b3 3n[rYpT3d-
-> finger for PGP key
->
-> -----BEGIN PGP SIGNATURE-----
-> Version: 2.6.2
->
-> iQCVAwUBNDPID5UJ8q9eE2KBAQFwigP/Wvr1el/FGygMOC5AJKutnHLjAmVOnApI
-> sT6+cdyigpcImcz4TxyZtsJcU8d/T1+67JBXVs/LwPuDY0D4vJUTsSbZdvkti3KV
-> WUwiX97jMpz1gx5i+3NNh7q3WvEyfWnc9i8haF+M27Wh7teYtKqcyixaAGRsbgG0
-> RVglTlF2bd0=
-> =wurP
-> -----END PGP SIGNATURE-----
->
-> =:o =:o =:o =:o =:o o:= o:= o:= o:= o:= o:=
->
<< end of forwarded material >>
--The eyes are the whores of the senses, they'll go to anything. Keith Richards
<> tbyars@earthlink.net <>