Quote:
Originally Posted by Privacy_Matters
Now if you know of more folk who can swap info on Phorm and NeBuad Stateside, this would be mutually beneficial - and our ideas and uncovered materials could work together to make our causes stronger.
|
These do appear to be twins separated at birth. The Wikileaked Phorm results revealed that Phorm used appended javascript there as well. That was a surprise, as I had understood differently.
One of the reasons that I focused my report on the packet injection and forgery is because Phorm not only did it also, but when they switch to redirects they are going to have to perform an even more complicated series of interception and forgeries.
Packet forgery is the "smoking gun" in the Comcast case, our huge "Network Neutrality" controversy in the USA. Evesdropping and packet forgery strikes at the heart of the sanctitity of private communications and the end-to-end model that makes privacy and security work on the Internet.
If these two companies are linked somehow, what one does, the other will eventually do. If Phorm is going from spoofing the end of a HTTP/TCP conversation to the middle of one, eventually so will NebuAd. It will be seen as an even more severe intrusion onto the integrity of the network link, and hopefully stop it before its tried.