BrowserSpy.dk reveals more than enough information

For discussions about security.
Post Reply
Message
Author
User avatar
Flash
Official Dog Handler
Posts: 13071
Joined: Wed 04 May 2005, 16:04
Location: Arizona USA

BrowserSpy.dk reveals more than enough information

#1 Post by Flash »

http://browserspy.dk/
When you surf around the internet your browser leaves behind a trail of digital footprints. Websites can use these footprints to check your system. BrowserSpy.dk is a service where you can check just what information it's possible to gather from your system, just by visiting a website.

bugman

#2 Post by bugman »

http://facebook.com/ No or unable to detect!
http://linkedin.com/ No or unable to detect!
http://twitter.com/ No or unable to detect!
http://microsoft.com/ No or unable to detect!
http://google.com/ Yes, you have been visiting the site lately!
http://yahoo.com/ No or unable to detect!
http://flickr.com/ No or unable to detect!
http://icq.com/ No or unable to detect!
http://slashdot.org/ No or unable to detect!
http://theregister.co.uk/ No or unable to detect!
http://ebay.com/ No or unable to detect!
http://excite.com/ No or unable to detect!
http://news.com.com/ No or unable to detect!
http://cnn.com/ No or unable to detect!
http://dell.com/ No or unable to detect!
http://mozilla.com/ No or unable to detect!
http://mozilla.org/ No or unable to detect!
http://tdconline.dk/ No or unable to detect!
http://ekstrabladet.dk/ No or unable to detect!
http://bt.dk/ No or unable to detect!
http://gemal.dk/ No or unable to detect!
i find "no ebay" especially funny, as i was there just a minute before doing the test, and for an hour or two earlier this morning . . .

User avatar
Pizzasgood
Posts: 6183
Joined: Wed 04 May 2005, 20:28
Location: Knoxville, TN, USA

#3 Post by Pizzasgood »

My NoScript extension just laughs. They could still find out some things by analyzing my HTTP headers though.
http://browserspy.dk/headers.php

HTTP headers can be accessed by the server itself without running client-side scripts, so NoScript does nothing to block them. They are a function of the browser though, so you could theoretically configure it to lie (for example, that's how people trick websites into thinking they use IE).

Not a huge reason to worry about it though. It's a good thing for people to know which browsers and OSes are used to view their sites, and fairly harmless to the users.

The IP address of course is not a function of the browser and is nearly essential for them to know (otherwise how do they send the page back to your browser?). Only good way around that is proxies.
Last edited by Pizzasgood on Sat 13 Feb 2010, 17:21, edited 1 time in total.
[size=75]Between depriving a man of one hour from his life and depriving him of his life there exists only a difference of degree. --Muad'Dib[/size]
[img]http://www.browserloadofcoolness.com/sig.png[/img]

amigo
Posts: 2629
Joined: Mon 02 Apr 2007, 06:52

#4 Post by amigo »

bugman, you must have started from somewhere besides the top/main page. It says that it only owrks if you have visited the main page as shown by the URL's it echos.

Post Reply