full-disclosure - googlesyndication.com cookies

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.58.0310111421380.27056@cia.zemos.net>
From: booger at unixclan.net (security snot)
Subject: googlesyndication.com cookies

This list is for security related topics.  KF's exploration into spam that
appears to be GPG signed was borderline, but this?  This I don't see any
importance to, whatsoever.  Many users of this list are tired of you and
your attempts to solicit our community for ideas for your horribly written
stories; please go troll a different forum for your information.

We have better things to do than to witness your comments about writing
"javascript debuggers", and now your discovery that companies will offer
new services in an attempt to make money.

I bet you look just like that first poor lost soul that got arrested for
his Blaster varient... please move on.

-----------------------------------------------------------
"Whitehat by day, booger at night - I'm the security snot."
- CISSP / CCNA / A+ Certified - www.unixclan.net/~booger/ -
-----------------------------------------------------------

On Sat, 11 Oct 2003, Richard M. Smith wrote:

> Hi,
>
> Google is now serving ads for other Web sites.  These Google ads typically
> appear as text links on a Web page for products related to the content of
> the page.  Google has created a new domain, googlesyndication.com, for
> serving these text link ads inside of IFRAMEs.  Google is attempting to set
> a cookie for this domain, but in my experiments, they are using the standard
> google.com domain name in the Set-Cookie HTTP response header.  I believe
> this is a bug.
>
> Here's an example:
>
> C:\>geturl http://pagead2.googlesyndication.com
> HTTP/1.0 200 OK
> Cache-control: private
> Content-Type: text/html
> Set-Cookie:
> PREF=ID=43229c4f74f9288f:TM=1065889171:LM=1065889171:S=l68-x3buIwBBl
> 3rF; expires=Sun, 17-Jan-2038 19:14:07 GMT; path=/; domain=.google.com
> Server: GWS/2.1
> Content-length: 2690
> Date: Sat, 11 Oct 2003 16:19:31 GMT
> Connection: Keep-Alive
>
> Richard M. Smith
> http://www.ComputerBytesMan.com
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>