Re: service and user-agent disclosure - please consider privacy

2012-01-11 Thread Genes MailLists
On 01/11/2012 10:11 AM, Tomasz Torcz wrote: > On Wed, Jan 11, 2012 at 10:03:39AM -0500, Genes MailLists wrote: >> Odd as it is, IP6 reduces privacy - it was not designed with privacy >> in mind. > > http://ipv6int.net/systems/linux-ipv6.html#privacy > Good point thank you - indeed that h

Re: service and user-agent disclosure - please consider privacy

2012-01-11 Thread Tomasz Torcz
On Wed, Jan 11, 2012 at 10:03:39AM -0500, Genes MailLists wrote: > On 01/11/2012 09:21 AM, Emanuel Rietveld wrote: > > On 01/11/2012 12:43 PM, Richard wrote: > >> On Tue, Jan 10, 2012 at 10:53:52PM +0100, nodata wrote: > >> > >>> Fonts are a bigger threat to privacy, see here: > >>> http://panopt

Re: service and user-agent disclosure - please consider privacy

2012-01-11 Thread Genes MailLists
On 01/11/2012 09:21 AM, Emanuel Rietveld wrote: > On 01/11/2012 12:43 PM, Richard wrote: >> On Tue, Jan 10, 2012 at 10:53:52PM +0100, nodata wrote: >> >>> Fonts are a bigger threat to privacy, see here: >>> http://panopticlick.eff.org/ > > Maybe I am missing something, but isn't this only releva

Re: service and user-agent disclosure - please consider privacy

2012-01-11 Thread Reindl Harald
Am 11.01.2012 15:21, schrieb Emanuel Rietveld: > On 01/11/2012 12:43 PM, Richard wrote: >> On Tue, Jan 10, 2012 at 10:53:52PM +0100, nodata wrote: >> >>> Fonts are a bigger threat to privacy, see here: >>> http://panopticlick.eff.org/ > > Maybe I am missing something, but isn't this only releva

Re: service and user-agent disclosure - please consider privacy

2012-01-11 Thread Emanuel Rietveld
On 01/11/2012 12:43 PM, Richard wrote: On Tue, Jan 10, 2012 at 10:53:52PM +0100, nodata wrote: Fonts are a bigger threat to privacy, see here: http://panopticlick.eff.org/ Maybe I am missing something, but isn't this only relevant if your IP is not visible to the web server? Otherwise, you

Re: service and user-agent disclosure - please consider privacy

2012-01-11 Thread Richard
On Tue, Jan 10, 2012 at 10:53:52PM +0100, nodata wrote: > > Fonts are a bigger threat to privacy, see here: > http://panopticlick.eff.org/ that apparently can be worked around at least partially with noscript but the user agent string is insanely revealing (I do not even use lynx most of the

Re: service and user-agent disclosure - please consider privacy

2012-01-10 Thread Bruno Wolff III
On Tue, Jan 10, 2012 at 22:50:53 +0100, Richard wrote: > > the privacy issue is a topic for Fedora because Fedora desktop users > have a substantial disadvantage compared to users of more frequently > used desktops. Intercepting a Fedora version string will in most > regions of the world ide

Re: service and user-agent disclosure - please consider privacy

2012-01-10 Thread Bill Nottingham
nodata (l...@nodata.co.uk) said: > Fonts are a bigger threat to privacy, see here: > http://panopticlick.eff.org/ > > Privacy conscious users are able to install a user agent switching > extension. ... which (at least according to the referenced paper there) makes you actually *more* trackable

Re: service and user-agent disclosure - please consider privacy

2012-01-10 Thread nodata
On Tue 10 Jan 2012 22:50:53 CET, Richard wrote: > On Tue, Jan 10, 2012 at 03:24:14PM +0100, Thomas Spura wrote: > >> Why is that a topic for fedora? I don't think, we should patch >> programs and remove the versions printing everywhere. You are free to >> discuss this with upstream and that's it (o

Re: service and user-agent disclosure - please consider privacy

2012-01-10 Thread Richard
On Tue, Jan 10, 2012 at 03:24:14PM +0100, Thomas Spura wrote: > Why is that a topic for fedora? I don't think, we should patch > programs and remove the versions printing everywhere. You are free to > discuss this with upstream and that's it (or do a foo-privacy fork of > course ;)). the privacy

Re: service and user-agent disclosure - please consider privacy

2012-01-10 Thread Thomas Spura
On Tue, Jan 10, 2012 at 1:22 AM, Reindl Harald wrote: > > Am 10.01.2012 00:13, schrieb Richard: >> many of the different user agent and service banners are way >> too detailed for my taste > > thank you for supporting my opinion that a software should > per default disclose as less informations as

Re: service and user-agent disclosure - please consider privacy

2012-01-09 Thread Reindl Harald
Am 10.01.2012 00:13, schrieb Richard: > many of the different user agent and service banners are way > too detailed for my taste thank you for supporting my opinion that a software should per default disclose as less informations as possible SAMBA is currently my hate candidate in a LAN Nessus/

Re: service and user-agent disclosure - please consider privacy

2012-01-09 Thread Richard
Hi, many of the different user agent and service banners are way too detailed for my taste. It sucks privacy wise - disclosing Fedora version, CPU, kernel version, browser version and a few other details mindlessly included in many user agent/service banners would in many cases allow near foolp