Wilders Security Forums  

Go Back   Wilders Security Forums > Privacy Related Topics > privacy problems
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old May 18th, 2002, 05:33 PM
Prince_Serendip's Avatar
Prince_Serendip Prince_Serendip is offline
Frequent Poster
 
Join Date: Apr 2002
Location: Canada
Posts: 808
Default My IE gives last address to next. How to stop it?

Basically, my question is all in the title. I had a full security check done on my system. Everything else is great except my Internet Explorer gives the last website address to the next website I visit. How do I stop it from doing that? I've checked my firewall, which is ZoneAlarm (not Pro) but it doesn't seem to have anything on this. Please advise. (Also, I use IE 5.5 SP1. Don't suggest I use IE 6.0 because it's incompatible with my very fussy OS.)

Any help will be much appreciated!
__________________
Author: Rootkits For Dummies 2007: Reviews
My Website: Windows Security Checklist
MVP - Windows Security - 2006 & 2007
  #2  
Old May 18th, 2002, 06:14 PM
luv2bsecure's Avatar
luv2bsecure luv2bsecure is offline
Privacy Moderator
 
Join Date: Feb 2002
Posts: 714
Default Re: My IE gives last address to next. How to stop

This is called a "referral".....there are products on the market that will prevent the referral from showing up in website stat programs. You can always just use a anonymizer service (many free ones) and they all remove the referrer (or give you the option to). You might check out GUARDSTER. They are new and do a very good job. www.guardster.com
It takes a minute to load the first page after you go to the free anonymous browser, but after that it's pretty dern speedy. It allows you to remove the referrer.

Good luck!
Mike

__________________
John
Luv2BSecure
  #3  
Old May 18th, 2002, 06:18 PM
spy1's Avatar
spy1 spy1 is offline
Massive Poster
 
Join Date: Dec 2002
Location: Charlotte, NC
Posts: 3,122
Default Re: My IE gives last address to next. How to stop

Programs such as Prox or Naviscope will block the referer if set correctly - a simpler (in a manner of speaking) way to do it (just when you actually want to, IOW) would be to set your homepage to 'blank' . When you go from one site to the next, simply stop by the 'blank' homepage, first.

Is that what you mean? Pete

__________________
"When fascism comes to America it will come wrapped in the flag and carrying a cross." Sinclair Lewis
  #4  
Old May 18th, 2002, 07:19 PM
Prince_Serendip's Avatar
Prince_Serendip Prince_Serendip is offline
Frequent Poster
 
Join Date: Apr 2002
Location: Canada
Posts: 808
Default Re: My IE gives last address to next. How to stop

Thanks to both luv2bsecure and Pete. I appreciate it and have added your suggestions to my inventory of answers to this problem. (I keep a personal record of problems I've had with their solutions for future reference.) I found a program at ZDNet Downloads which answers this and a few other problems. Please refer to my posting at Anti-Ad Blocking.

Thanks again--very speedy too!
__________________
Author: Rootkits For Dummies 2007: Reviews
My Website: Windows Security Checklist
MVP - Windows Security - 2006 & 2007
  #5  
Old May 18th, 2002, 07:19 PM
Checkout's Avatar
Checkout Checkout is offline
Security Rhinoceros
 
Join Date: Feb 2002
Posts: 1,227
Default Re: My IE gives last address to next. How to stop

I would recommend The Proxomitron. *Aside from dummying the Referrer field, it has many, many other useful functions besides.
__________________
My Novel
  #6  
Old May 18th, 2002, 08:54 PM
snowman
 
Posts: n/a
Default Re: My IE gives last address to next. How to stop



* * just a dime's worth of info....yesterday I briefly tryed MyIe......using proxies didn't prevent the refferrer....

* * an online proxy service would seem a good idea...also as Spy1 suggested..a blank page....

* * I also notice resource useage was the same as when using internet explorer.........one rather odd happening was that when I opened MyIe a pop-up appeared...its not suppose to allow pop"up's *is it??
just when first opening.....was this possibly some outside action? * *I didn't leave it installed long....the thing with the refferrer blew the show.

* * * * * * * * * * * snowman
  #7  
Old May 19th, 2002, 09:32 PM
FanJ
 
Posts: n/a
Default Re: My IE gives last address to next. How to stop

As for the initial question in this thread:

Have a look at IEClean at www.nsclean.com
If I have it right : it does what you asked for.
It's not free.
And no: I don't have any commercial interest in it * , I just love the program.
  #8  
Old May 20th, 2002, 10:15 AM
PrairieDog PrairieDog is offline
Infrequent Poster
 
Join Date: Apr 2002
Posts: 6
Default Re: My IE gives last address to next. How to stop

Here's a trivia item about referrers. They are not just Web pages. The referrer can be a file on your hard drive--for example, a local start page, a saved HTML page, or *an e-mail. These sometimes contain personal, identifying information. I've seen numerous referrers such as this one in SuperStats logs:
mailbox:/C|/Program%20Files/Netscape/Users/john_smith/mail/Inbox
  #9  
Old May 20th, 2002, 10:30 AM
spy1's Avatar
spy1 spy1 is offline
Massive Poster
 
Join Date: Dec 2002
Location: Charlotte, NC
Posts: 3,122
Default Re: My IE gives last address to next. How to stop

Hi, PrairieDog, and welcome!

Might be a more important issue than I realized!

Does that just happen with Netscape? Pete
__________________
"When fascism comes to America it will come wrapped in the flag and carrying a cross." Sinclair Lewis
  #10  
Old May 20th, 2002, 10:45 AM
PrairieDog PrairieDog is offline
Infrequent Poster
 
Join Date: Apr 2002
Posts: 6
Default Re: My IE gives last address to next. How to stop

Quote:
Hi, PrairieDog, and welcome!

Might be a more important issue than I realized!

Does that just happen with Netscape? Pete

Pete, thanks. I am not an expert, and I stopped reading logs because they gave me the creepy feeling of being a peeping Tom. The only mailer I can remember now is Netscape, but I would guess that every HTML-enabled mail viewer could be sending out standard HTTP headers (including referrer).
  #11  
Old May 20th, 2002, 05:27 PM
Prince_Serendip's Avatar
Prince_Serendip Prince_Serendip is offline
Frequent Poster
 
Join Date: Apr 2002
Location: Canada
Posts: 808
Default Re: My IE gives last address to next. How to stop

I took up Pete's suggestion to get Naviscope. It works GREAT! And yeah, it has a lot of other features I like just as much. Wilders is one of my TRUSTED sites, and that's a huge compliment. I do "trust" as probability percentages (learned the hardway in old school of hard knocks). You guys are way up there. Thanks for your help and understanding. I visit this site often, so I'll see you around.

With best regards from Larry.
__________________
Author: Rootkits For Dummies 2007: Reviews
My Website: Windows Security Checklist
MVP - Windows Security - 2006 & 2007
  #12  
Old May 20th, 2002, 06:34 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Administrator
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: My IE gives last address to next. How to stop

It gets worse.

As far as email tracking goes, If i mail you some spam, and that spam has a picture, and that picture is hosted on my server, when you see the picture, my server would have had to send it to you, and I will log that. Now I have your IP, and I know you are home. Stealth or no stealth I will not be fooled.

I can also link your email address to your ip by knowing what pic I sent you specifically. This pic can be an invisible pixel, and I could have the same pic with a thousand names, one for each email addy.

So if you preview a message, you have given more than enough to ensure you stay added to any databases, and to invite the black hats over. Webmail too.

Solution? Plain text for one, don't preview messages for another, deny mail client from connecting to any server port other than 25,110 and restrict its access to your mail server only.

PS by including this picture:

http://24.69.117.89/ipdefault/images/demot8.jpg

I will log the IPs of all who have loaded this page, by the requests for the pic.

Yikes eh? Don't worry, I am too lazy to read logs. It got old fast.

__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #13  
Old May 21st, 2002, 09:36 AM
Checkout's Avatar
Checkout Checkout is offline
Security Rhinoceros
 
Join Date: Feb 2002
Posts: 1,227
Default Re: My IE gives last address to next. How to stop

Quote:
Now I have your IP, and I know you are home. Stealth or no stealth I will not be fooled.
Congratulations on logging my remote proxy's IP address... *
__________________
My Novel
  #14  
Old May 21st, 2002, 01:56 PM
spy1's Avatar
spy1 spy1 is offline
Massive Poster
 
Join Date: Dec 2002
Location: Charlotte, NC
Posts: 3,122
Default Re: My IE gives last address to next. How to stop

Unicron - As far as the email part goes, that doesn't apply if you preview using a program like MailWasher, correct? Since you're 'pre-viewing' in plain text?

Just needing that clarified. Pete
__________________
"When fascism comes to America it will come wrapped in the flag and carrying a cross." Sinclair Lewis
  #15  
Old May 21st, 2002, 03:20 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Administrator
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: My IE gives last address to next. How to stop

Checkout, yes very true. Remote proxies are great for that. It wouldn't be difficult to determine whether your IP was a proxie or not.

Pete, if you can see the picture, then it had to come from somewhere. A GET request had to be issued to my webserver, and my webserver would have to sent it to you. For that you must offer an IP. Now remember that you must view a message in HTML to let this happen. Plain text and you are OK.

As checkout stated above, a remote proxy makes this relatively useless for websurfers (and webmail), but does your mail client use the proxy too? I know that when I routed lan traffic through proxo in the connections settings of IE, that didn't apply to Outlook. I think for a pre-viewer to work, it would have to be on a different machine, and cache all the images, css, and other embedded objects. That way your machine would not be communicating with me directly.

If you want we could test it out. I'll send you a email with a picture from my webserver in it. Then, when you read it, I'll see if I log it. I think it works like a read receipt without asking I'll make sure no one else could possible issue a GET for this pic. Then we will know.

Hey, what a great way to tell if the support staff for a product has even read your email yet! You can send them another email saying: "I know you read my email last tuesday! WTF?"
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #16  
Old May 21st, 2002, 04:04 PM
spy1's Avatar
spy1 spy1 is offline
Massive Poster
 
Join Date: Dec 2002
Location: Charlotte, NC
Posts: 3,122
Default Re: My IE gives last address to next. How to stop

Sure, send me something, mister! Pete
__________________
"When fascism comes to America it will come wrapped in the flag and carrying a cross." Sinclair Lewis
  #17  
Old May 21st, 2002, 04:11 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Administrator
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: My IE gives last address to next. How to stop

I sent it.
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #18  
Old May 21st, 2002, 05:57 PM
spy1's Avatar
spy1 spy1 is offline
Massive Poster
 
Join Date: Dec 2002
Location: Charlotte, NC
Posts: 3,122
Default Re: My IE gives last address to next. How to stop

Haven't seen it yet, Unicron. Did it per chance bounce? Pete
__________________
"When fascism comes to America it will come wrapped in the flag and carrying a cross." Sinclair Lewis
  #19  
Old May 21st, 2002, 10:00 PM
UNICRON's Avatar
UNICRON UNICRON is offline
Administrator
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: My IE gives last address to next. How to stop

I sent it to the account you gave me the other day to test if it was working.
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #20  
Old May 21st, 2002, 11:53 PM
spy1's Avatar
spy1 spy1 is offline
Massive Poster
 
Join Date: Dec 2002
Location: Charlotte, NC
Posts: 3,122
Default Re: My IE gives last address to next. How to stop

Check my profile and re-send. Pete
__________________
"When fascism comes to America it will come wrapped in the flag and carrying a cross." Sinclair Lewis
  #21  
Old May 22nd, 2002, 12:19 AM
spy1's Avatar
spy1 spy1 is offline
Massive Poster
 
Join Date: Dec 2002
Location: Charlotte, NC
Posts: 3,122
Default Re: My IE gives last address to next. How to stop

Got it and previewed it in MailWasher (still on server, supposedly).

Itdid say something about how it had d/l'ed the first 400 lines when I previewed it, which I thought was odd since nothing was showing except the sentence you wrote. Pete
__________________
"When fascism comes to America it will come wrapped in the flag and carrying a cross." Sinclair Lewis
  #22  
Old May 22nd, 2002, 12:27 AM
UNICRON's Avatar
UNICRON UNICRON is offline
Administrator
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: My IE gives last address to next. How to stop

I botched that one. The pic was actually embedded in the email (not my intention) and wouldn't be logged in any case.

I'll send you a new one later tonight, I have to go out now.
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #23  
Old May 22nd, 2002, 01:50 AM
UNICRON's Avatar
UNICRON UNICRON is offline
Administrator
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: My IE gives last address to next. How to stop

New mail is away.

This one does not contain the pic, but a src link to GET and display. It is all in simple HTML. nothin fancy

__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #24  
Old May 22nd, 2002, 02:05 AM
UNICRON's Avatar
UNICRON UNICRON is offline
Administrator
 
Join Date: Feb 2002
Location: Nanaimo BC Canada
Posts: 1,935
Default Re: My IE gives last address to next. How to stop

from what you said about previewing in plain text should keep me from logging the event. This assumes you'll never actually open this with HTML parsing on, just text. That is the real key (and solution here)

Also folowing hyperlinks in email (plain text or not) is a bad idea unless you trust the site not be tracking you. The urls can be carefully made to identify you. You can hide all you want with proxy stuff, *but if the url was sent ONLY to you, it really doesn't matter what IP you pretend to use, you have been detected and linked to the email. This is done with a bunch of giberish added to the end of an url. The giberish is a querystring that can be your encrypted email address (encrypted so you can't read it) or an ID num assigned to your account. When the mass mailer sends out its spam, it uses a script to tack-on this ID so they are different fro every person. A query string is not part of the url, but info been posted to that url, so it is not nessessary to create thousands of pages, just one. The stats parser does the rest.
__________________
Not every thing that can be counted counts, and not everything that counts can be counted.
  #25  
Old May 22nd, 2002, 02:07 AM
spy1's Avatar
spy1 spy1 is offline
Massive Poster
 
Join Date: Dec 2002
Location: Charlotte, NC
Posts: 3,122
Default Re: My IE gives last address to next. How to stop

Got the 'retrieved first 440 lines' message again when previewing w/MW (MW doesn't use HTML for its' preview, it's all plain text).

Calling it a night here. Pete
__________________
"When fascism comes to America it will come wrapped in the flag and carrying a cross." Sinclair Lewis
 

Wilders Security Forums > Privacy Related Topics > privacy problems « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -5. The time now is 07:21 PM.


Powered by vBulletin® Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2009, Wilders Security Forums