From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00,FREEMAIL_FROM, REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,aeb51c4713246b4c X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2002-12-23 05:35:35 PST Path: archiver1.google.com!news1.google.com!newsfeed.stanford.edu!bloom-beacon.mit.edu!nycmny1-snh1.gtei.net!cambridge1-snf1.gtei.net!news.gtei.net!bos-service1.ext.raytheon.com!bos-service2.ext.raytheon.com.POSTED!not-for-mail From: Wes Groleau Reply-To: wesgroleau@despammed.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.1) Gecko/20020826 X-Accept-Language: en,es-MX,es,pt,fr-CA,fr MIME-Version: 1.0 Newsgroups: comp.lang.ada Subject: Re: It's all like that References: <1040231512.158234@master.nyc.kbcfp.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Message-ID: Date: Mon, 23 Dec 2002 08:35:20 -0500 NNTP-Posting-Host: 151.168.133.155 X-Complaints-To: news@ext.ray.com X-Trace: bos-service2.ext.raytheon.com 1040650535 151.168.133.155 (Mon, 23 Dec 2002 08:35:35 EST) NNTP-Posting-Date: Mon, 23 Dec 2002 08:35:35 EST Organization: Raytheon Company Xref: archiver1.google.com comp.lang.ada:32230 Date: 2002-12-23T08:35:20-05:00 List-Id: > the trickery going on on the internet to invade my privacy. HTML, I > believe, is passive and cannot do things without my knowledge. The > other "web enhancements" allow the servers to do things without my > permission. "without your knowledge" is a key. It is possible, and I have done it, to do what cookies do without Javascript or cookies. It is generally obvious, however, that it is happening to one who is paying attention. It doesn't happen often because it is so much easier to do it with cookies. For an example, turn off cookies and Javascript, and go to http://www.acpl.lib.in.us Hover over "Library Catalog" and note what the link URI is. Click it and note that you get something different. Something like: ..../uhtbin/cgisirsi/cUj3y3f4tp/97370270/60/61/X The stuff after the 'cgisirsi' is functionally identical to a cookie. Since (unless you have disabled this also) any http GET reveals the URI of the referring page, putting the codes there can track you just as well as if it were done with cookies. And nothing but honor prevents them from sharing the info.