PDA

View Full Version : Browser leakage


nixie21
August 9th, 2006, 07:31 PM
How do you stop the browser leakage? I did a test at one of the sites and it knew where I had been and suck, how do i stop this with comodo?

Thanks

Stem
August 9th, 2006, 07:38 PM
-{ Quote: "How do you stop the browser leakage? I did a test at one of the sites and it knew where I had been and suck, how do i stop this with comodo?

Thanks" }-This is possibly "referers (http://en.wikipedia.org/wiki/Referer)", which browser do you use?

nixie21
August 9th, 2006, 08:51 PM
I am using firefox....how do i fix it?

THNAKS

Stem
August 9th, 2006, 08:57 PM
-{ Quote: "I am using firefox....how do i fix it?

THNAKS" }-Try this blocker link (https://addons.mozilla.org/search.php?q=referrer&app=firefox),(first one) set to block referer, then try your test again, please post back results.

Stem

storm119
August 9th, 2006, 09:18 PM
@ nixie21

(OT)Try this, set it in your user.js (as per-below) or at url bar type about:config and search for * network.http.sendRefererHeader * and set to 1. Once done you need to close/relaunch FF, clear your "private data" via Tools >>> clear private data and try the browser test again ;)

// Sending REFERRER Header
// 0=DON'T SEND ANY,
// 1=SEND ONLY ON CLICKS,
// 2=SEND ON IMAGE REQUESTS AS WELL
user_pref("network.http.sendRefererHeader", 1); // Default is 2


HTH

Stem
August 9th, 2006, 09:52 PM
I have split the post, so that full attention/answers can be given.

Hope this is O.K.

nixie21
August 9th, 2006, 10:12 PM
I installed the extension, and changed the item in about:config

still got:
Danger!
While visiting web sites your browser reveals private information about you and your computer. It sends information about previous sites you have visited. It may also save special cookies on your hard drive that have the purpose of directing advertising or finding out your habits while web surfing.

Recommendation:
We advise you to get personal firewall software. If you already have a firewall program adjust it to block the distribution of such information.

??

Thanks for the help!!

Stem
August 9th, 2006, 10:18 PM
Have you checked the "allow sites to set cookies"? in firefox:tools/options/privacy

nixie21
August 9th, 2006, 10:21 PM
yes, for the originating site only is checked.....

Stem
August 9th, 2006, 10:26 PM
You need to uncheck that (uncheck "allow sites to set cookies"), and make exceptions for only the sites you want to set cookies.

nixie21
August 9th, 2006, 10:26 PM
Thanks!!!!

Stem
August 9th, 2006, 10:28 PM
please check this, to see if now is O.K.

nixie21
August 9th, 2006, 10:34 PM
Ok, came up with this now:

The test checked if your web browser reveals any private information while you visit Web sites. Usually such information is: the last site visited, your locale and who your Internet Service Provider is.
At Risk!

Attention! Your browser is not private. Privacy is 50%
While visiting web sites your browser sends information about previous sites you have visited.

Recommendation:
Install a personal firewall program. If you already have a firewall, adjust it to block this information.

Stem
August 9th, 2006, 10:39 PM
Which site are you checking with?

Have you set the privacy options for cookies?(unticked "Allow sites to set cookies") Referer blocker to "block"?

nixie21
August 9th, 2006, 10:42 PM
hackerwhacker..

I unchecked the cookies and there is no option tab for the no referrer extension?

Thanks again

Stem
August 9th, 2006, 10:50 PM
-{ Quote: "there is no option tab for the no referrer extension?

Thanks again" }-Please check:

Alphalutra1
August 10th, 2006, 02:06 PM
Also install the noscript extension, then visit the website. I believe that javascript may be the culprit.

Cheers,

Alphalutra1

Stem
August 10th, 2006, 03:52 PM
-{ Quote: "Also install the noscript extension, then visit the website. I believe that javascript may be the culprit. " }-
Hackerwhacker needs script enabled or you cannot use the site.
Most of the sites I have visited that perform browser checks need scripts enabled/allowed.

duke1959
August 10th, 2006, 04:17 PM
I checked in my Firefox Browser 1.5.0.6, and the no referer option isn't anywhere to be seen in Tools. I was just wondering what version this is in, or do you need to add this? Thanks

Stem
August 10th, 2006, 04:28 PM
-{ Quote: "I checked in my Firefox Browser 1.5.0.6, and the no referer option isn't anywhere to be seen in Tools. I was just wondering what version this is in, or do you need to add this? Thanks" }-Yes, this is an extension that needs to be installed. Go to tools / extensions (bottom right of the window that appears, click "get more extensions" This will take you to the "firefox addons" page. In the seach box type "refcontrol".

Paranoid2000
August 11th, 2006, 03:05 PM
Blocking referers completely is not a good idea since some sites use them and will fail in non-obvious ways (i.e. you won't get any indicator that referers are the cause). Setting the referer to the root URL of the site (e.g. setting it to http://somesite when visiting http://somesite/somepath/somepage.html) is much less likely to cause problems and removes any privacy risks.

Online tests that fail to recognise spoofed referers and persist in giving warnings about them should be treated as false alarms.

Stem
August 11th, 2006, 03:09 PM
-{ Quote: "Blocking referers completely is not a good idea since some sites use them and will fail in non-obvious ways " }-This should be extended to include "cookies", and may need to be added to FAQ