NODE 498fe609Re: Stealth cookies
jfricker@vertexgroup.com (John F. Fricker)Wed, 7 Aug 1996 21:29:30 +0800
At 12:10 AM 8/6/96 -0700, you wrote:
>John F. Fricker wrote:
>> Solution?
>>
>> 1) Don't put your name in the netscape configuration (d'oh)
>
> No, no, no. Netscape navigator does not reveal your name or
>put it into cookies. The only way to get your name or other
>personal information about you into a cookie is for you to type
>it into a web site, and have that site send you back a cookie.
>
> The only time we reveal your name is in e-mail headers, and
>when doing anonymous FTP when you have manually disabled the default
>of sending 'mozilla@' as the anon ftp password.
>
> --Jeff
>
Oh I was just being paranoid I guess. There used to be JavaScript that would
automatically send email from a page. something like
<html>
<body onLoad="document.mailme.submit()">
<form method=post name="mailme"
action="mailto:john@vertexgroup.com?subject=user address">
<input type=hidden name="userAddress" value="done">
</form>
</body>
</html>
But even if that still works it would be a good trick to associate it with a
cookie.
NODE 86a5ef7aRe: Stealth cookies
Jeff Weinstein <jsw@netscape.com>Wed, 7 Aug 1996 12:23:48 +0800
John F. Fricker wrote:
> Oh I was just being paranoid I guess. There used to be JavaScript that would
> automatically send email from a page. something like
>
> <html>
> <body onLoad="document.mailme.submit()">
> <form method=post name="mailme"
> action="mailto:john@vertexgroup.com?subject=user address">
> <input type=hidden name="userAddress" value="done">
> </form>
> </body>
> </html>
>
> But even if that still works it would be a good trick to associate it with a
> cookie.
This was a bug that existed for a short time, and was fixed about
6 months ago. Javascript can not submit mailto: forms at all, and
all mailto: forms now cause a warning dialog to come up(the dialog
can be turned off in preferences).
--Jeff
--
Jeff Weinstein - Electronic Munitions Specialist
Netscape Communication Corporation
jsw@netscape.com - http://home.netscape.com/people/jsw
Any opinions expressed above are mine.