Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]

[Florence]

It all boils down to selective use of information which isnt always best since this selective use can make it impossible for customers to give inphormed consent due to the lack of information to begin with.

[bigsanta11]

"Questions raised about the security of EV-SSL

Sintonen demonstrated how the use of cross-site scripting could be used to prompt users for their login credentials and then send the credentials to an unauthorised server. Sintonen also injected code that caused a pop-up window to appear on the page and said the flaw could be used to steal user cookies."

http://www.pcadvisor.co.uk/news/index.cfm?newsid=13109&

Why steal cookies,seeing as the phorm pr has stated that nothing can be gained from them ?

[Florence]

Originally Posted by bigsanta11

"Questions raised about the security of EV-SSL

Sintonen demonstrated how the use of cross-site scripting could be used to prompt users for their login credentials and then send the credentials to an unauthorised server. Sintonen also injected code that caused a pop-up window to appear on the page and said the flaw could be used to steal user cookies."

http://www.pcadvisor.co.uk/news/index.cfm?newsid=13109&

Why steal cookies,seeing as the phorm pr has stated that nothing can be gained from them ?

It has already been posted that a yahoo cookie has the persons postcode in it. There is plenty in the cookie which phnorm wish to make those unaware think it is nothing but your cookie can fingerprint you down to town street and small number of houses...

[Kursk]

Originally Posted by thebarron

Just received a letter from Tesco's who said they will bear my comments in mind at their next review meeting.

I wrote to them as a concerned ecommerce web developer and sugested that Phorm had the potential of informing Sainsbury's of their customers habits.

It would be good to get some of the big retailers on our side I think.

There might be more mileage in this. A bit of Corporate muscle in the crusade might provide oomph. How about boycotting the goods or services of a selected big Company and tell them the reason is Phorm? That could put the cat amongst the pigeons. When the going gets tough, the tough will get going. After all, Amazon and the Guardian got the willies up when a backlash looked like hitting them where it hurts i.e. in the wallet.

[popper]

Originally Posted by rogermevans

BT seem to have been a bit flustered by the last article about them and PHORM in "MICRO MART" and asked for some retractions

but the also offered to answer any questions "micro mart" puts to them about it and "micro mart" have asked for ideas on what to ask to be mailed to editorial@micromart.co.uk

what exactly are they saying, and what is being asked to be retracted ?...

for those that havent got the mag we cant know what has already been covered and offer other points to put to them.

it seems Micro Mart is very light on the Phorm subject and they dont seem to even know about its Deep Packet Inspection potential.
http://forum.micromart.co.uk/Search1...=1&SortOrder=1

[icsys]

Originally Posted by thebarron

Just received a letter from Tesco's who said they will bear my comments in mind at their next review meeting.

I wrote to them as a concerned ecommerce web developer and sugested that Phorm had the potential of informing Sainsbury's of their customers habits.

It would be good to get some of the big retailers on our side I think.

I thought that ebay was the same. All the site pages, sellers and buyers details, details of what you are selling/buying, your personal information and addresses pages in 'My eBay' are in plain html.
Only the login page and pages to change bank info are secure.

I posted a thread in the community forums about phorm and the possible implications of the whole site being phormed.
After going back to see how the discussion is progressing it appears to have been deleted as I can find no trace of it.

[Sirius365]

Hello all

I've been a lurker around these forums for some time now & thought I'd pop by & say hi & thank you to all involved in the debate.

the posts in this thread are a real good read & very informitive.

its nice to read whats REALY going on with all this phorm crap & get the REAL in's & outs on what this is going to mean to us as customers as well as webmasters rather than all the spin & crap that k^nt & all the marketing types provide.

I'd like to thank Alex & pete for their work & also R Jones for keeping the presure on BT & keeping the thread on the beta forums alive.

its brilliant to be able to read a free & open forum thats not edited constantly (read the bt beta forums (server problems permitted) its full of MESSAGE Edited by blah blah blah)

Thanks all

[bluecar1]

tracert from a zen connection, a lot less pinging round before making out onto the net


Tracing route to www.l.google.com [64.233.183.99]
over a maximum of 30 hops:

1 2 ms 1 ms 1 ms 192.168.1.1
2 36 ms 37 ms 36 ms gay-dsl1.wh.zen.net.uk [62.3.83.20]
3 36 ms 35 ms 36 ms erazmus-ae-0-200.wh.zen.net.uk [62.3.80.201]
4 44 ms 42 ms 46 ms leibniz-so-0-1-0-0.te.zen.net.uk [62.3.80.45]
5 44 ms 42 ms 44 ms 195.66.224.125
6 42 ms 50 ms 42 ms 209.85.252.42
7 54 ms 53 ms 53 ms 216.239.43.123
8 54 ms 53 ms 54 ms 72.14.233.79
9 64 ms 57 ms 53 ms 209.85.249.133
10 54 ms 53 ms 53 ms nf-in-f99.google.com [64.233.183.99]

Trace complete.

got one zen connection over the mother in laws, just got to get out of my BT contract at home the it will "phorm free, as free as the wind blows" (sung to the theme from born free movie)

[Florence]

Originally Posted by bluecar1

tracert from a zen connection, a lot less pinging round before making out onto the net


Tracing route to www.l.google.com [64.233.183.99]
over a maximum of 30 hops:

1 2 ms 1 ms 1 ms 192.168.1.1
2 36 ms 37 ms 36 ms gay-dsl1.wh.zen.net.uk [62.3.83.20]
3 36 ms 35 ms 36 ms erazmus-ae-0-200.wh.zen.net.uk [62.3.80.201]
4 44 ms 42 ms 46 ms leibniz-so-0-1-0-0.te.zen.net.uk [62.3.80.45]
5 44 ms 42 ms 44 ms 195.66.224.125
6 42 ms 50 ms 42 ms 209.85.252.42
7 54 ms 53 ms 53 ms 216.239.43.123
8 54 ms 53 ms 54 ms 72.14.233.79
9 64 ms 57 ms 53 ms 209.85.249.133
10 54 ms 53 ms 53 ms nf-in-f99.google.com [64.233.183.99]

Trace complete.

got one zen connection over the mother in laws, just got to get out of my BT contract at home the it will "phorm free, as free as the wind blows" (sung to the theme from born free movie)

Cant understand why BT customers have so many hops to get to google it is almost as if BT don't want them to arrive at google or they don't know how to do a fast network

Originally Posted by Florence

Cant understand why BT customers have so many hops to get to google it is almost as if BT don't want them to arrive at google or they don't know how to do a fast network

Geographic location?

How do you get www.l.google.com to resolve as any IP other than 216.239.59.103?

Anyway...

I'm on ADSL24 (Entanet Reseller)

Tracing route to nf-in-f99.google.com [64.233.183.99]
over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms mygateway.ar7 [192.168.1.1]
2 32 ms 32 ms 32 ms ironwood.dsl.enta.net [87.127.229.6]
3 32 ms 32 ms 33 ms vlan4002.telehouse-east.dsl.enta.net [87.127.229.1]
4 31 ms 32 ms 31 ms te5-2.telehouse-east.core.enta.net [62.249.192.121]
5 32 ms 31 ms 32 ms te4-3.global-switch.core.enta.net [87.127.236.82]
6 32 ms 32 ms 32 ms te4-3.telehouse-north.core.enta.net [87.127.236.41]
7 32 ms 30 ms 31 ms 72.14.198.46
8 31 ms 31 ms 32 ms 209.85.252.42
9 51 ms 51 ms 52 ms 216.239.43.123
10 52 ms 53 ms 52 ms 72.14.233.77
11 66 ms 63 ms 62 ms 216.239.43.34
12 56 ms 51 ms 50 ms nf-in-f99.google.com [64.233.183.99]

Trace complete.

Norfolk - no not the one in Virginia...






EDIT: Just looked a few pages back at your trace Florence - virtually the same as mine (on Entanet)

[Dephormation]

X-posted from Badphorm

Hello all,

pleased to announce a new prerelease version of Dephormation is available to download.

It includes a significant new feature, developed by Narcosis, that records evidence of redirects by Phorm (or Nebuad) to a log file. This data could be used to support Fraud/Computer Misuse/RIPA complaints, or simply for technical analysis of DPI systems like Phorm and Nebuad. (I've checked every contributed line of code, and found only pure genius).

I've tested this on Windows XP/FF2, and Linux/FF1.5. Narcosis has tried it on a Mac.

http://www.dephormation.org.uk/prere...phormation.xpi
(nb; right click, save as, and drag into Firefox to install).

Please feel free to give it a try (and revert back to the current public v1.6 if you encounter problems).

Please note, with logging enabled, there is a trivial but discernable performance hit. The code probably needs some file handling optimisation. I'd suggest keeping the feature off, unless you suspect you are being redirected and want to capture a log.

On Windows, the log file is best viewed in Wordpad, not Notepad (due to carriage return/line feed layout issues).

PS... forgot to mention, the options can be accessed from the new Tools/Dephormation... menu item.

regards
Pete

[roadrunner69]

http://news.bbc.co.uk/1/hi/health/7412438.stm

kent to isp's
"Hang on, lads; I've got a great idea"



thank Pete, giving it a go to create 'before' logs to compare
seems to be working ok

[mark777]

Following on from the BBC blog yeserday :-

http://www.8020thinking.com/news/2-l...n-consent.html

Announced today, but dated 2 months ago? Berlin appears to be a nation state.

PhormUKPRteam appears to be running the web site, no one else could mess it up so much. £££££Â £Â£Â£Â£Â£Â£à ƒâ€šÃ‚£Ã‚£Â£Â£Â£Âà ‚£Ã‚£Â£Â£Â£Â£Ã ‚£Â£Â£Â£Â£Â £Ã‚£Â£Â£Â£Â£Ã⠀šÃ‚£Ã‚£Â£Â£Â£Â £Ãƒâ€šÃ‚£Ã‚£Â£Â£Â£ÆšÃ‚£Ã‚£Â£

Your expectations have been managed in this time of tectonic shifts. Trade war with the US looms. (Not a quote from the link above, but paraphrasing a discredited privacy advocate. You don't have to search very far for the source)

[AlexanderHanff]

This working group is a very good thing, I don't understand why people are getting bent out of shape over it. I knew about it some time ago but I was asked to keep it quiet as they wanted to announce it at the launch party on Tuesday.

What 80/20 Thinking will be doing is working with the entire industry, regulators and information commissioners to build a framework which will allow the industry to make a very big shift from opt-out to opt-in. The result of Article 29 means that this has to be done and Informed Consent is now mandatory across Europe. This -includes- Phorm, Google, MS, Yahoo, BT, AOL and every other big player in the industry.

This is a -good- thing so please lets not ruin it with baseless attacks?

Alexander Hanff

[bluecar1]

Originally Posted by AlexanderHanff

This working group is a very good thing, I don't understand why people are getting bent out of shape over it. I knew about it some time ago but I was asked to keep it quiet as they wanted to announce it at the launch party on Tuesday.

What 80/20 Thinking will be doing is working with the entire industry, regulators and information commissioners to build a framework which will allow the industry to make a very big shift from opt-out to opt-in. The result of Article 29 means that this has to be done and Informed Consent is now mandatory across Europe. This -includes- Phorm, Google, MS, Yahoo, BT, AOL and every other big player in the industry.

This is a -good- thing so please lets not ruin it with baseless attacks?

Alexander Hanff

do we know who else is on the working group, because 80/20 obviously have possible conflict of interest due to phorm being a client and phorm will want the least informed options enshrined in law not the best for the public, do any others on the working group have similar possible conflicts of interest issues

peter