ABE it's a spyware? [No!]

Discussions about the Application Boundaries Enforcer (ABE) module
marc80
Posts: 3
Joined: Wed Dec 08, 2010 12:54 pm

ABE it's a spyware? [No!]

Post by marc80 »

I noticed some strange behavior with ABE active.
Several unauthorized connections to strange sites.
Several collecting and reporting information.
With ABE off, this seems to be no.

My question is: ABE is a spyware?
Last edited by marc80 on Wed Dec 08, 2010 6:39 pm, edited 1 time in total.
Mozilla/5.0 (X11; U; Linux i686; it; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12
dhouwn
Bug Buster
Posts: 968
Joined: Thu Mar 19, 2009 12:51 pm

Re: ABE it's a spyware?

Post by dhouwn »

Mozilla/5.0 (Windows NT 6.1; WOW64; rv:2.0b8pre) Gecko/20101207 Firefox/4.0b8pre
marc80
Posts: 3
Joined: Wed Dec 08, 2010 12:54 pm

Re: ABE it's a spyware?

Post by marc80 »

Thanks.
I suppose NoScript could (optionally) lookup the public ip and include it in the abe LOCAL pseudo-list. NoScript detects your public (WAN) IP by sending a completely anonymous.
I understand https: //secure.informaction.com/ ipecho.

But.
I not understand.

http:/ /www.valicert. com/
http:/ /certificates. godaddy.com

What do they mean?
What they do with my data?

My data, because "completely anonymous" it's false.
My IP, my user agent, my platform... all my settings are transmitted.

1. ABE it's a (also) spyware.
2. ABE is not transparent.
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE it's a spyware?

Post by Giorgio Maone »

marc80 wrote:
I understand https: //secure.informaction.com/ ipecho.

But.
I not understand.

http:/ /www.valicert. com/
http:/ /certificates. godaddy.com

What do they mean?
They are automatically asked by Firefox to validate the security.informaction.com SSL certificate:
http://en.wikipedia.org/wiki/Online_Cer ... s_Protocol

Side-requests like this happen for almost any secure web site you contact.
marc80 wrote: What they do with my data?
Absolutely nothing. They just tell your browser that the SSL certificate is not expired and is not in a revocation blacklist.
marc80 wrote: My data, because "completely anonymous" it's false.
My IP, my user agent, my platform... all my settings are transmitted.
You're wrong. Only your IP (obviously, otherwise TCP/IP couldn't work) is transmitted (not stored).
ABE carefully strips away all your other data normally transmitted by the browser, such as user agent, cookies and any other traceable HTTP header.

If you really have a privacy requirement so high to need your IP to be concealed, you should really use an anonymous proxy (this feature would be automatically disabled anyway, since it's useless behind a proxy).
On the other hand, your IP alone (unless you've got a static IP and your PC is the only device natted behind it) is never enough to uniquely track you.
marc80 wrote: 1. ABE it's a (also) spyware.
2. ABE is not transparent.
3. This is defamation :)
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12
marc80
Posts: 3
Joined: Wed Dec 08, 2010 12:54 pm

Re: ABE it's a spyware?

Post by marc80 »

I understand, thanks.

If I turn off "WAN IP() LOCAL" this traffic is stopped? (whitout turn off all ABE)
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
User avatar
Giorgio Maone
Site Admin
Posts: 9524
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ABE it's a spyware?

Post by Giorgio Maone »

marc80 wrote:I understand, thanks.

If I turn off "WAN IP() LOCAL" this traffic is stopped? (whitout turn off all ABE)
Yes it is.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.2.12) Gecko/20101026 Firefox/3.6.12
Post Reply