Home page logo

bugtraq logo Bugtraq mailing list archives

Re: Anonymous Surfing Via Gmail Login Window - Poor Sanitization
From: Markus Ackermann <maol () symlink ch>
Date: Thu, 26 Aug 2004 19:32:12 +0200

Am Mittwoch, 25. August 2004 15.14 schrieb Punabi MC:
Anonymous Surfing Via Gmail Login Window - Poor

User can do anonymous surfing (apart form other cool
tricks) from Gmail login window. The window is small,
still checking your mails via google is phun. :)

No way this is anonymous. The webserver still logs your IP, Referrer, Browser, 
etc... just see the two following lines from my access_log: - - [26/Aug/2004:17:24:43 +0000] "GET / HTTP/1.1" 200 5221 
eta=" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.6) Gecko/20040114"                                                
                  - - [26/Aug/2004:17:24:43 +0000] "GET /onebox.css HTTP/1.1" 200 
2303 "http://www.maol.ch/"; "Mozilla/5.0 (X11; U; Linux x86_64; en-US
; rv:1.6) Gecko/20040114"

Markus Ackermann.

PS: the trick requires a GMail authorized browser: 
Symlink - News für die Welt http://symlink.ch/
maol symbolisch http://maol.ch/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]