Cable Forum - View Single Post - Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]

popper · 13-03-2008, 11:49

its interesting when you say "We've broken the link between targeting and personal information" thats what your pay masters are telling your PR firm i take it !

this post by an AC
http://www.theregister.co.uk/2008/03...rket/comments/
is also interesting, infact it shows you/they have not infact broken the link at all should they chose to use this simple tieing capability.

"
How is it anonymous exactly.

By Anonymous Coward
Posted Wednesday 12th March 2008 02:37 GMT
firstly even if we opt out (As BT customers) the profiler still sees all our traffic. if we are opted out, we have to have a cookie set to say that. this cookie will be set to .webwise.net which is owned by phorm
(http://a.webwise.net/services/OO?op=out).
if you are opted in then the cookie you get is
(http://a.webwise.net/services/OO?op=in) of course.

so if a person opts in..then BT webwise equipment at BT premisess owned by Phorm (assuming they are ONLY doing what they say they are doing) have your UID + browsing history "digest" and not your IP address.

when you visit in "infected" page, then the webserver will have a advert served by webwise.net..so your opt in cookie (which has the UID in it of course) is sent from YOUR machine right to webwise..and of course, you cant help but send your IP address with the TCP data now can you..so how is it that Phorm cannot use the data from BT WEBWISE plus the data from its WEBSITE PARTNERs (by way of html included advert tags) to correlate IP address to UID then?!?

example opt out cookie
HTTP/1.1 200 OK
Date: Wed, 11 Mar 2008 01:31:19 GMT
Server: Apache
Set-Cookie: OPTED_OUT=YES; expires=Fri, 12-Mar-2010 02:33:02 GMT; domain=.webwise.net; path=/
P3P: CP="NOI DSP LAW CURa DEVa TAIa PSAa PSDa OUR STP BUS UNI COM NAV INT"
Content-Length: 0
Connection: close
Content-Type: text/plain
example opt in cookie
HTTP/1.1 200 OK
Date: Wed, 11 Mar 2008 01:31:19 GMT
Server: Apache
Set-Cookie: uid=9sRe3AeRcDDwA2ASDYXXLg||; expires=Thu, 12-Mar-2009 02:33:39 GMT; path=/services/
P3P: CP="NOI DSP LAW CURa DEVa TAIa PSAa PSDa OUR STP BUS UNI COM NAV INT"
Content-Length: 0
Connection: close
Content-Type: text/plain
"

13-03-2008, 11:49	#1157
popper Inactive Join Date: Jan 2006 Posts: 3,270	Re: Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797] its interesting when you say "We've broken the link between targeting and personal information" thats what your pay masters are telling your PR firm i take it ! this post by an AC http://www.theregister.co.uk/2008/03...rket/comments/ is also interesting, infact it shows you/they have not infact broken the link at all should they chose to use this simple tieing capability. " How is it anonymous exactly. By Anonymous Coward Posted Wednesday 12th March 2008 02:37 GMT firstly even if we opt out (As BT customers) the profiler still sees all our traffic. if we are opted out, we have to have a cookie set to say that. this cookie will be set to .webwise.net which is owned by phorm (http://a.webwise.net/services/OO?op=out). if you are opted in then the cookie you get is (http://a.webwise.net/services/OO?op=in) of course. so if a person opts in..then BT webwise equipment at BT premisess owned by Phorm (assuming they are ONLY doing what they say they are doing) have your UID + browsing history "digest" and not your IP address. when you visit in "infected" page, then the webserver will have a advert served by webwise.net..so your opt in cookie (which has the UID in it of course) is sent from YOUR machine right to webwise..and of course, you cant help but send your IP address with the TCP data now can you..so how is it that Phorm cannot use the data from BT WEBWISE plus the data from its WEBSITE PARTNERs (by way of html included advert tags) to correlate IP address to UID then?!? example opt out cookie HTTP/1.1 200 OK Date: Wed, 11 Mar 2008 01:31:19 GMT Server: Apache Set-Cookie: OPTED_OUT=YES; expires=Fri, 12-Mar-2010 02:33:02 GMT; domain=.webwise.net; path=/ P3P: CP="NOI DSP LAW CURa DEVa TAIa PSAa PSDa OUR STP BUS UNI COM NAV INT" Content-Length: 0 Connection: close Content-Type: text/plain example opt in cookie HTTP/1.1 200 OK Date: Wed, 11 Mar 2008 01:31:19 GMT Server: Apache Set-Cookie: uid=9sRe3AeRcDDwA2ASDYXXLg\|\|; expires=Thu, 12-Mar-2009 02:33:39 GMT; path=/services/ P3P: CP="NOI DSP LAW CURa DEVa TAIa PSAa PSDa OUR STP BUS UNI COM NAV INT" Content-Length: 0 Connection: close Content-Type: text/plain "