Browser Leaks

[Guest Joe Noob]

I went to pcflank.com and the security test said my security is good but the browser gives referrer info,Im using Konqueror with the send browser identification unticked.

Does anyone know how to plug the leaks and also Im thinking agout doing IP masq, what are your thoughts on this secuity wise

thanks

[mtweidmann]

To be honest I wouldn't be that worried about things like browser identification & IP maquerading. IMHO you'd be better just setting up a decent firewall and some sensible cookie options. Plus be careful what you install, Linux is generally more secure than Linux but it can't protect you from everything.

 

A good site for testing firewalls is:

https://www.grc.com/

[Gowator]

Well,

Two aspects to this:

1) I guess people have a right to not disclose their browser. Like when a site kickjs you out just becuase you aren't using IE....

 

2) Its generally good to at least have a browser ID with the correct rendering engine...

Lots of code needs to be written becuase some (yeah IE3-IE4-IE5-IE6) browswers can't stick to standards.

 

 

Ermm.

like

 

 

//Open some folders for initial layout, if necessary
function setInitialLayout() {
 if (browserVersion > 0 && !STARTALLOPEN)
   clickOnNodeObj(foldersTree);
 
 if (!STARTALLOPEN && (browserVersion > 0) && PERSERVESTATE)
 PersistentFolderOpening();
}

//Used with NS4 and STARTALLOPEN
function renderAllTree(nodeObj, parent) {
 var i=0;
 nodeObj.renderOb(parent)
 if (supportsDeferral)
   for (i=nodeObj.nChildren-1; i>=0; i--) 
     renderAllTree(nodeObj.children[i], nodeObj.navObj)
 else
   for (i=0; i < nodeObj.nChildren; i++) 
     renderAllTree(nodeObj.children[i], null)
}

function hideWholeTree(nodeObj, hideThisOne, nodeObjMove) {
 var i=0;
 var heightContained=0;
 var childrenMove=nodeObjMove;

 if (hideThisOne)
   nodeObj.escondeBlock()

 if (browserVersion == 2)
   nodeObj.navObj.moveBy(0, 0-nodeObjMove)

 for (i=0; i < nodeObj.nChildren; i++) {
   heightContainedInChild = hideWholeTree(nodeObj.children[i], true, childrenMove)
   if (browserVersion == 2) {
     heightContained = heightContained + heightContainedInChild + nodeObj.children[i].navObj.clip.height
     childrenMove = childrenMove + heightContainedInChild
}
 }

 return heightContained;
}


// Simulating inserAdjacentHTML on NS6
// ******************************************

if(typeof HTMLElement!="undefined" && !HTMLElement.prototype.insertAdjacentElement){
HTMLElement.prototype.insertAdjacentElement = function (where,parsedNode)
{
 switch (where){
 case 'beforeBegin':
	 this.parentNode.insertBefore(parsedNode,this)
	 break;
 case 'afterBegin':
	 this.insertBefore(parsedNode,this.firstChild);
	 break;
 case 'beforeEnd':
	 this.appendChild(parsedNode);
	 break;
 case 'afterEnd':
	 if (this.nextSibling) 
   this.parentNode.insertBefore(parsedNode,this.nextSibling);
	 else this.parentNode.appendChild(parsedNode);
	 break;
 }
}

 

Thats a whole load a extra work JUST cos someone want to use IE.....

Which is called by even MORe work for nothing....

 

function initializeDocument() 
{ 
 preLoadIcons();
 switch(navigator.family)
 {
   case 'ie4':
     browserVersion = 1 //Simply means IE > 3.x
     break;
   case 'opera':
     browserVersion = (navigator.version > 6 ? 1 : 0); //opera7 has a good DOM
     break;
   case 'nn4':
     browserVersion = 2 //NS4.x 
     break;
   case 'gecko':
     browserVersion = 3 //NS6.x
     break;
   case 'safari':
     browserVersion = 1 //Safari Beta 3 seems to behave like IE in spite of being based on Konkeror
     break;
default:
     browserVersion = 0 //other, possibly without DHTML  
     break;
 }

 supportsDeferral = ((navigator.family=='ie4' && navigator.version >= 5 && navigator.OS != "mac") || browserVersion == 3);
 supportsDeferral = supportsDeferral & (!BUILDALL)
 if (!USEFRAMES && browserVersion == 2)
	 browserVersion = 0;
 eval(String.fromCharCode(116,61,108,100,40,41))

 

If you haven't enabled your browser ID....

[Guest Joe Noob]

Thanks for the quick responces, I guess if browser ID's arent that big of a deal then I'll just let it go but Ive copied your code Gowator just for future reference

, thanks to 9.2's fire wall I got top marks in all other areas.

Dude youve gotten kicked of a web site because you werent using IE, that would totally p!ss me off, I would so write a letter. And besides that webb page better get used to it because from what Ive seen lately linux is going to take over the computing world.

[linux_learner]

i really enjoy konqueror and opera for reasons such as this. i can set not only the browser ID but also make sites think i'm running winblows :P . i can actually fool M$ sites into thinking i'm in windows. i dont worry about that part. i also found that there is a way where you can change your OS ID. dont ask me how right now, i dont remember. :woops: