[liberationtech] Trackography

[Aymeric Vitte]

Le 08/01/2015 15:45, ɣęƈƞą a écrit :
>
>
>     I forgot something: things that browsers are sending out without
>     telling you, cf
>     https://s3.amazonaws.com/ksr/assets/000/690/973/f9a25528976205dff93e60fc40dfa91f_large.jpg?1371808994
>
>     You don't take it into account?
>
>
> I don't understand, my browser don't send these things :) or, I've to 
> say "depends from the website". we are mapping that for every website 
> under analysis.

It does, it sends things without telling you, for safebrowsing, 
certificates check or just tracking or services you did not ask for if 
you did not deactivate them, the image comes from [1] project which was 
proxying to a server, you can check this with your browser using a proxy 
or just with something like wireshark.

It's not marginal and I think should be included in the stats.

>
>     I think the best would be to launch trackography from the browsers
>     directly (makes me think to Collusion/LightBeam, but this plugin
>     forgets to tell you about some links) and to proxy it to a server.
>
>
> no, I avoid that on purpose. we are running traceroute (and probably I 
> can't manage it properly from a browser add-ons) for every included 
> third party, and the collection script will grow up to be more like a 
> service. once a while, fetch the list, perform test, send results.
>
> browser add-ons are good to show how many trackers are present on your 
> navigation, there are some listed between our solutions page: 
> https://myshadow.org/trackography-solutions

I was not suggesting to use something like Collusion/LightBeam and do 
the traceroute from the browser, I don't see any easy means to emulate 
normal browsing inside the browser for different sites, so maybe a 
plugin can be developed for this (or, easier, if you trust it and it 
appears that it behaves really like a browser, you can use a Chrome app [2])

Then the connexion requests go to the proxy which proceeds with the 
traceroute, etc

The Testers will have to install two things but the results will be more 
realistic than with a server only solution.

[1] http://www.ianonym.com
[2] https://developer.chrome.com/apps/about_apps

-- 
Peersm : http://www.peersm.com
torrent-live: https://github.com/Ayms/torrent-live
node-Tor : https://www.github.com/Ayms/node-Tor
GitHub : https://www.github.com/Ayms

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20150108/e42963d6/attachment.html>