Full Disclosure mailing list archives

Re: googlesyndication.com cookies


From: security snot <booger () unixclan net>
Date: Sat, 11 Oct 2003 14:26:21 -0700 (PDT)

This list is for security related topics.  KF's exploration into spam that
appears to be GPG signed was borderline, but this?  This I don't see any
importance to, whatsoever.  Many users of this list are tired of you and
your attempts to solicit our community for ideas for your horribly written
stories; please go troll a different forum for your information.

We have better things to do than to witness your comments about writing
"javascript debuggers", and now your discovery that companies will offer
new services in an attempt to make money.

I bet you look just like that first poor lost soul that got arrested for
his Blaster varient... please move on.

-----------------------------------------------------------
"Whitehat by day, booger at night - I'm the security snot."
- CISSP / CCNA / A+ Certified - www.unixclan.net/~booger/ -
-----------------------------------------------------------

On Sat, 11 Oct 2003, Richard M. Smith wrote:

Hi,

Google is now serving ads for other Web sites.  These Google ads typically
appear as text links on a Web page for products related to the content of
the page.  Google has created a new domain, googlesyndication.com, for
serving these text link ads inside of IFRAMEs.  Google is attempting to set
a cookie for this domain, but in my experiments, they are using the standard
google.com domain name in the Set-Cookie HTTP response header.  I believe
this is a bug.

Here's an example:

C:\>geturl http://pagead2.googlesyndication.com
HTTP/1.0 200 OK
Cache-control: private
Content-Type: text/html
Set-Cookie:
PREF=ID=43229c4f74f9288f:TM=1065889171:LM=1065889171:S=l68-x3buIwBBl
3rF; expires=Sun, 17-Jan-2038 19:14:07 GMT; path=/; domain=.google.com
Server: GWS/2.1
Content-length: 2690
Date: Sat, 11 Oct 2003 16:19:31 GMT
Connection: Keep-Alive

Richard M. Smith
http://www.ComputerBytesMan.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: