June 2009 - Posts

MVPS HOSTS File Update June-21-2009

The MVPS HOSTS file was recently updated [June-21-2009]
http://www.mvps.org/winhelp2002/hosts.htm

Download: hosts.zip (146 kb)
http://www.mvps.org/winhelp2002/hosts.zip

How To: Download and Extract the HOSTS file
http://www.mvps.org/winhelp2002/hosts2.htm

HOSTS File - Frequently Asked Questions
http://www.mvps.org/winhelp2002/hostsfaq.htm

Note: the "text" version makes a great resource for determining possible culprits ...
http://www.mvps.org/winhelp2002/hosts.txt (599 kb)

Posted by winhelp2002 with 14 comment(s)

A disturbing new report on your Internet Privacy

A UC Berkeley report provides an in-depth look into the Internet Privacy issue and to what amount you are really being tracked ... several media outlets have reported on this issue. Register | NyTimes | BizJournals  All with their own take on the report ... a few key excerpts from their study ...

Dominance of Google
"From our analysis, it is apparent that Google is the dominant player in the tracking market. Among the top 100 websites this project focused on, Google Analytics appeared on 81 of them. When combined with the other trackers it operates, such as DoubleClick, Google can track 92 of the top 100 websites. Furthermore, a Google-operated tracker appeared on 348,059 of 393,829 distinct domains tracked by Ghostery in March 2009 (over 88%)."

This is one of the main reasons why the majority of these "trackers" are included in the MVPS HOSTS file ...

"Among the top 100 websites" this was obtained from Quantcast ... however the "Top 100" are not really individual sites since many are owned by the same company ... so you can see how these big companies can compile quite a lot of info ...

[Example of the Big 3 - ranking]
microsoft.com (7), live.com (3), msn.com (4), windows.com (19)
Not counting their ad servers: Atlas DMT (atdmt.com) aQuantive (adbureau.net)

google.com (1), youtube.com (6), blogspot.com (14), blogger.com (40)
Not counting DoubleClick which ranks #37 at Alexa

yahoo.com (2), flickr.com (30), geocities.com (47)
Not counting their ad servers: Overture, RightMedia, BlueLithium
---------------------------------------------------------

SHARING
"Websites make distinctions between sharing with affiliates, contractors, and third parties. Of the top 50 sites, 29 stated that they do NOT share user data with unrelated third parties. However, 45 affirmatively state that they share data with affiliates, and 36 affirmatively state that they allow third-party tracking. The average consumer might assume an affiliate or tracker to be a third party, but given the actual usage of these terms in privacy policies, that assumption would be mistaken.  Of the top 50 sites, 43 state affirmatively that they share data with third-party contractors, including all 29 of the sites who state that they do not share with unrelated parties."

This is why I recommend turning off Cookies and "whitelist" (allow) only those that are needed ...

NO ACCOUNTABILITY FOR THIRD-PARTY TRACKING
"In our analysis of privacy policies, 36 of the websites affirmatively acknowledged the presence of third-party tracking. However, each of these policies also stated that the data collection practices of these third parties were outside the coverage of the privacy policy. This appears to be a critical loophole in privacy protection."

"This appears to be a critical loophole" ... and they sure do word their Privacy Policy pages to take advantage of this loophole.

In the Register article they state: "Omniture and Quantcast cookies appeared on 57 per cent of the top 100 and less than 6 per cent of the 400,000" ... I would offer that this figure is actually much higher, since Omniture (112.2o7.net) also makes extensive use of clones to disguise their 3rd party trackers ...
[Example]
om.symantec.com is actually symanteccom.112.2o7.net
std.o.webmd.com is actually webmdglobal.122.2o7.net
stats.adobe.com is actually adobe.com.112.2o7.net

Using the Register as an example you can see the extent of tracking from third parties that goes on ...

All the entries in red above are blocked by the HOSTS file ... but the above is just from visiting one page on that site. However I must give them kudos for the Privacy Policy ... which they explain in very plain language of what they are doing and from who. Compare that to the BizJournal's statement:

"Adobe’s privacy policy, for example, when analyzed for readability, was written at an equivalent grade level of 17.29. The average privacy policy in the study was written at a grade level of 13.83."

I'm not sure what grade level 17.29 is ... but I'm sure I didn't go to school that long! ...

Posted by winhelp2002 with 1 comment(s)

More fake PornTube sites

I see plenty of these fake PornTube sites everyday ... however several sites are trying to trick visitors (nothing unusual) into thinking they need to update their (Adobe) Flash Player ... by first displaying an image then it blurs out and the bogus message appears ... same type as I spotted here 

The "Load Now" button redirects to "update-flash. com" and serves up "FlashPlayer.v9.014.exe" which my Antivirus (NOD32 v4) detects as "Win32/Kryptik.QY" or visiting a similar site (see below) you get just a blank area with a clickable link ...

 (image edited for display)

Do you see the common denominator in all these type sites? ... Look at the page title "PornTube: best movies collection." Usually about once a week I use the page title as a search term and find about 10-20 new sites ...

Google: 1 - 20 of about 6,080 for "PornTube: best movies collection.".

Yahoo: 1 - 10 of 10,100 for "PornTube: best movies collection."

Microsoft Live/Bing: 1-10 of 325 results - With "SafeSearch" turned off: 1-30 of 565 results

Yes Microsoft's Live search in your (Internet Explorer 8) browser now redirects to their new search service Bing ... as with Google and Yahoo (with Cookies enabled) you can define/tweak the results page as well as enable/disable SafeSearch which will filter adult images, text and videos ... I would suggest users that share an account with underage children that you enable SafeSearch in all three search engines (or any others that you may use) ...

What I noticed new in Bing - Video was the ability to play the video right from the results page without actually visiting the site ... kids are not stupid ... once they figure this out (with SafeSearch disabled) they can view most anything they want and leave no trace that they were there ... (see example below)

Posted by winhelp2002 with 1 comment(s)