cryptoanarchy.wiki

Arise, you have nothing to lose but your barbed wire fences!

1996-08-07 - Re: Stealth cookies

Header Data

From: jfricker@vertexgroup.com (John F. Fricker)
To: jsw@netscape.com
Message Hash: 498fe6093e6b56df1d502220a72cb6991cd47641b642f8d2d60f0ec8a36b3a5e
Message ID: <2.2.32.19960806171618.00a52aec@vertexgroup.com>
Reply To: N/A
UTC Datetime: 1996-08-07 13:29:30 UTC
Raw Date: Wed, 7 Aug 1996 21:29:30 +0800

Raw message

From: jfricker@vertexgroup.com (John F. Fricker)
Date: Wed, 7 Aug 1996 21:29:30 +0800
To: jsw@netscape.com
Subject: Re: Stealth cookies
Message-ID: <2.2.32.19960806171618.00a52aec@vertexgroup.com>
MIME-Version: 1.0
Content-Type: text/plain


At 12:10 AM 8/6/96 -0700, you wrote:
>John F. Fricker wrote:
>> Solution?
>> 
>> 1) Don't put your name in the netscape configuration (d'oh)
>
>  No, no, no.  Netscape navigator does not reveal your name or
>put it into cookies.  The only way to get your name or other
>personal information about you into a cookie is for you to type
>it into a web site, and have that site send you back a cookie.
>
>  The only time we reveal your name is in e-mail headers, and
>when doing anonymous FTP when you have manually disabled the default
>of sending 'mozilla@' as the anon ftp password.
>
>	--Jeff
>

Oh I was just being paranoid I guess. There used to be JavaScript that would
automatically send email from a page. something like 

<html>
<body onLoad="document.mailme.submit()">
<form method=post name="mailme"
action="mailto:john@vertexgroup.com?subject=user address">
<input type=hidden name="userAddress" value="done">
</form>
</body>
</html>

But even if that still works it would be a good trick to associate it with a
cookie.

Thread