{"article":{"id":139959,"heading":"SF-IMC has been allowing Google to track you","author":"security culture?","created":"2005-11-26 09:33:54","modified":"2005-11-29 15:30:58","last_modified":"Tue, 29 Nov 2005 22:30:58","article":"\n

the following is from http:\/\/lists.indymedia.org\/pipermail\/imc-tech\/2005-November\/1124-9a.html<\/a>

[IMC-Tech] Google user and IP tracking on sf.indymedia.org

A at indymedia.org

Thu Nov 24 12:40:05 PST 2005

* Previous message: [IMC-Tech] access to contact database

* Next message: [IMC-Tech] Google user and IP tracking on sf.indymedia.org

* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

Hi!

I just browsed the San Francisco IMC website at http:\/\/sf.indymedia.org\/<\/a>

I realized that it uses so-called Google Analytics, which is basically a

remotely hosted (by Google) statistic and user tracking software called

Urchin which Google recently acquired. Seemingly most of the web pages

(not the main page, though) on sf.indymedia.org contain this tracking code:

script src=\"http:\/\/www.google-analytics.com\/urchin.js&quot<\/a>;

type=\"text\/javascript\">

\/script

script type=\"text\/javascript\">

_uacct = \"UA-83072-1\";

urchinTracker();

\/script

I do not consider Google a trustable party organization, I would not

give away statistical information to them, especially not users' IP

addresses, even more so not those of an Indymedia website.

If I was planning to do anything similar to this, I would definately

make sure that all the users of the web site know about their access to

the web site being tracked, their IP addreses being stored, in

externally controlled databases, by an enterprise size company which is

known to have had and still has repeated cooperations with governmental

organizations and which the web sites users would possibly decide not to

trust and even more so not want to give their IP address, time of visit

and, web browser, clickpath and additional information to.

I assume this must have been a mislead decision, probably caused by lack

of understanding of how this system works. I cannot imagine any other

good reason for why this code was added to the site.

Maybe there has been an informational campaign on this decision, and -

being no regular visitor of this site - I just missed it. But even then

it should probably be noted in bold type on the website that

sf.indymedia.org is now a user behaviour and IP address sniffing tool

working for Google, its advertisers (whoever that is) and possibly

others which would be very much against the lately proposed (and now

blocked) PoU addition about not even logging IP addresses on IMC servers.

I know I should have calmed down more before sending this email, but I

think even though the above words may sound lurid, this doesn't change

the facts. This makes me sad and disappointed, and I'd love to learn

that I'm somehow mistaken. In any case I'd like to see any statement on

this by the people running the sf.indymedia.org site.

Thanks for reading,

A

[IMC-Tech] Google user and IP tracking on sf.indymedia.org

g at linefeed.org

Thu Nov 24 13:01:03 PST 2005

* Previous message: [IMC-Tech] Google user and IP tracking on sf.indymedia.org

* Next message: [IMC-Tech] Google user and IP tracking on sf.indymedia.org

* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> I realized that it uses so-called Google Analytics, which is basically a

> remotely hosted (by Google) statistic and user tracking software called

> Urchin which Google recently acquired. Seemingly most of the web pages

> (not the main page, though) on sf.indymedia.org contain this tracking code:

As already explained to A in irc (not sure why its not reflected

here), I put that on there so I could see the interface (I've used

Urchin a lot professionally and wanted to see Google's adaptation of

it). In the end, it took over 12 hours to start collecting stats so I

just never activated it. The Javascript code is no longer on the site.

To the extent that it was never working, I think you'd have to be kind

of paranoid to assume that the stats were being recorded without our

knowledge (also explained to A in irc).

-g\/sfimc

[IMC-Tech] Google user and IP tracking on sf.indymedia.org

A at indymedia.org

Thu Nov 24 13:24:13 PST 2005

* Previous message: [IMC-Tech] Google user and IP tracking on sf.indymedia.org

* Next message: [IMC-Tech] Google user and IP tracking on sf.indymedia.org

* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1

g:

>>I realized that it uses so-called Google Analytics, which is basically a

>>remotely hosted (by Google) statistic and user tracking software called

>>Urchin which Google recently acquired. Seemingly most of the web pages

>>(not the main page, though) on sf.indymedia.org contain this tracking code:

>

>

> As already explained to A in irc (not sure why its not reflected

> here),

This is both because

- - I wrote the email before we had the chat

- - I thought that it would be just fair to give you some more time to

decided whether or not and which answer you send than you had when

replying to me on IRC

> I put that on there so I could see the interface (I've used

> Urchin a lot professionally and wanted to see Google's adaptation of

> it). In the end, it took over 12 hours to start collecting stats so I

> just never activated it. The Javascript code is no longer on the site.

>

> To the extent that it was never working, I think you'd have to be kind

> of paranoid to assume that the stats were being recorded without our

> knowledge (also explained to A in irc).

I do not think that Google anonymizes its web server logs.

The point here is this: sf.indymedia.org currently contains a HTML

instrcution which causes the website visitors' browsers to download and

execute javascript code from a google.com webserver.

This means that as long as this code remains there (and yes, I have read

that you intend to remove this code)

- - the IP addresses, web browser versions, and serveral other information

about the users of the sf.indymedia.org web site will be sent to a

google.com server, and will assumeably be stored on their web server

logs, possibly on their data mining database (that's what Google

Analytics is to me), too.

- - the web browsers of the users visiting the sf.indymedia.org web site

will download and run javascript code from a file on a Google web

server. The javascript code on this file is run silently and may change

any time without the user nor the server admins noticing it.

Just think of what would happen if Google got subponaed right now

because of an article published on sf.indy which the government of the

country Google happens to have their company central in dislikes the

articles' contents... they would probably be asked to give away their IP

logs.

Maybe I *am* a little bit paranoid, and I'd really prefer if more IMC

techs were if that results in saving 'our' users from dangers they are

not neccessarily aware of.

A

[IMC-Tech] Google user and IP tracking on sf.indymedia.org

g at linefeed.org

Thu Nov 24 13:48:57 PST 2005

* Previous message: [IMC-Tech] Google user and IP tracking on sf.indymedia.org

* Next message: [IMC-Tech] Google user and IP tracking on sf.indymedia.org

* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> The point here is this: sf.indymedia.org currently contains a HTML

> instrcution which causes the website visitors' browsers to download and

> execute javascript code from a google.com webserver.

As I wrote, I took the javascript code out.

> - - the IP addresses, web browser versions, and serveral other information

> about the users of the sf.indymedia.org web site will be sent to a

> google.com server, and will assumeably be stored on their web server

Again, it wasn't collecting the data that I could tell, so you would

have to be paranoid to assume that the data was being collected but

kept secret from the account holder.

-g

[IMC-Tech] Google user and IP tracking on sf.indymedia.org

T indymedia at machine.org.uk

Thu Nov 24 14:14:01 PST 2005

* Previous message: [IMC-Tech] Google user and IP tracking on sf.indymedia.org

* Next message: [IMC-Tech] Google user and IP tracking on sf.indymedia.org

* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thursday 24 Nov 2005 21:24, A wrote:

> G:

> > I put that on there so I could see the interface (I've used

> > Urchin a lot professionally and wanted to see Google's adaptation of

> > it). In the end, it took over 12 hours to start collecting stats so I

> > just never activated it. The Javascript code is no longer on the site.

> >

> > To the extent that it was never working, I think you'd have to be kind

> > of paranoid to assume that the stats were being recorded without our

> > knowledge (also explained to A in irc).

Personally, I wonder if such a thing is entirely sensible. I'd suggest a

separation of personal and indymedia interests. I certainly wouldn't modify

content on the web servers I host Indymedia sites on for personal reasons,

despite the fact that as high traffic sites, it might be interesting to do

so.

Cheers,

T

[IMC-Tech] Google user and IP tracking on sf.indymedia.org

j at indymedia.org

Thu Nov 24 14:32:44 PST 2005

* Previous message: [IMC-Tech] Google user and IP tracking on sf.indymedia.org

* Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

g wrote:

[chop]

>In the end, it took over 12 hours to start collecting stats so I

> just never activated it. The Javascript code is no longer on the site.

What do you mean it took 12 hours? Doesn't the javascript go out to

their site each hit? And then go to apache logs or whatever? Does it

read any google cookies? Or give any? I'm just curious what the urchin

did to folks visiting the site during those 12 hours.

> To the extent that it was never working, I think

What wasn't working? Were people not directed to google's site? Or the

web interface that aggregates the site for google's customer didn't

display the stats?

> you'd have to be kind of paranoid

yep, thankfully no one 'round these parts has reason to be paranoid.

> to assume that the stats were being recorded without our

> knowledge (also explained to A in irc).

Uh, so the people that visited sfimc during those 12 hours were not

tracked? It seems to me if their browser made \/any\/ connection

whatsoever to google's site after they hit sfimc they were tracked.

Methinks google logs all hits...

I'm really surprised g inserted this code into sfimc, fwiw. \/spank

-J

http:\/\/lists.indymedia.org\/pipermail\/imc-tech\/2005-November\/1124-9a.html<\/a>

--------------------------------------------

on 11\/24\/05 the following code was from http:\/\/www.google-analytics.com\/urchin.js<\/a>

\/\/-- Google Analytics Urchin Module

\/\/-- Copyright 2005 Google, All Rights Reserved.

\/\/-- Urchin On Demand Settings ONLY

var _uacct=\"\";\t\t\t\/\/ set up the Urchin Account

var _userv=1;\t\t\t\/\/ service mode (0=local,1=remote,2=both)

\/\/-- UTM User Settings

var _ufsc=1;\t\t\t\/\/ set client info flag (1=on|0=off)

var _udn=\"auto\";\t\t\/\/ (auto|none|domain) set the domain name for cookies

var _uhash=\"on\";\t\t\/\/ (on|off) unique domain hash for cookies

var _utimeout=\"1800\"; \t\/\/ set the inactive session timeout in seconds

var _ugifpath=\"\/__utm.gif\";\t\/\/ set the web path to the __utm.gif file

var _utsp=\"|\";\t\t\t\/\/ transaction field separator

var _uflash=1;\t\t\t\/\/ set flash version detect option (1=on|0=off)

var _utitle=1;\t\t\t\/\/ set the document title detect option (1=on|0=off)

var _ulink=0;\t\t\t\/\/ enable linker functionality (1=on|0=off)

\/\/-- UTM Campaign Tracking Settings

var _uctm=1;\t\t\t\/\/ set campaign tracking module (1=on|0=off)

var _ucto=\"15768000\";\t\t\/\/ set timeout in seconds (6 month default)

var _uccn=\"utm_campaign\";\t\/\/ name

var _ucmd=\"utm_medium\";\t\t\/\/ medium (cpc|cpm|link|email|organic)

var _ucsr=\"utm_source\";\t\t\/\/ source

var _uctr=\"utm_term\";\t\t\/\/ term\/keyword

var _ucct=\"utm_content\";\t\/\/ content

var _ucid=\"utm_id\";\t\t\/\/ id number

var _ucno=\"utm_nooverride\";\t\/\/ don't override

\/\/-- Auto\/Organic Sources and Keywords

var _uOsr=new Array();

var _uOkw=new Array();

_uOsr[0]=\"google\";\t_uOkw[0]=\"q\";

_uOsr[1]=\"yahoo\";\t_uOkw[1]=\"p\";

_uOsr[2]=\"msn\";\t\t_uOkw[2]=\"q\";

_uOsr[3]=\"aol\";\t\t_uOkw[3]=\"query\";

_uOsr[4]=\"lycos\";\t_uOkw[4]=\"query\";

_uOsr[5]=\"ask\";\t\t_uOkw[5]=\"q\";

_uOsr[6]=\"altavista\";\t_uOkw[6]=\"q\";

_uOsr[7]=\"search\";\t_uOkw[7]=\"q\";

_uOsr[8]=\"netscape\";\t_uOkw[8]=\"query\";

_uOsr[9]=\"earthlink\";\t_uOkw[9]=\"q\";

_uOsr[10]=\"cnn\";\t_uOkw[10]=\"query\";

_uOsr[11]=\"looksmart\";\t_uOkw[11]=\"key\";

_uOsr[12]=\"about\";\t_uOkw[12]=\"terms\";

_uOsr[13]=\"excite\";\t_uOkw[13]=\"qkw\";

_uOsr[14]=\"mamma\";\t_uOkw[14]=\"query\";

_uOsr[15]=\"alltheweb\";\t_uOkw[15]=\"q\";

_uOsr[16]=\"gigablast\";\t_uOkw[16]=\"q\";

_uOsr[17]=\"voila\";\t_uOkw[17]=\"kw\";

_uOsr[18]=\"virgilio\";\t_uOkw[18]=\"qs\";

_uOsr[19]=\"teoma\";\t_uOkw[19]=\"q\";

\/\/-- Auto\/Organic Keywords to Ignore

var _uOno=new Array();

\/\/_uOno[0]=\"urchin\";

\/\/_uOno[1]=\"urchin.com\";

\/\/_uOno[2]=\"www.urchin.com\";

\/\/-- Referral domains to Ignore

var _uRno=new Array();

\/\/_uRno[0]=\".urchin.com\";

\/\/-- **** Don't modify below this point ***

var _uff, _udh, _udt, _ubl=0, _udo=\"\", _uu, _ufns=0, _uns=0, _ur=\"-\", _ufno=0, _ust=0, _ubd=document, _udl=_ubd.location, _utcp=\"\/\", _uwv=\"1\";

var _ugifpath2=\"http:\/\/www.google-analytics.com\/__utm.gif&quot<\/a>;;

if (_udl.protocol==\"https:\") _ugifpath2=\"https:\/\/ssl.google-analytics.com\/__utm.gif&quot<\/a>;;

if (!_utcp || _utcp==\"\") _utcp=\"\/\";

function urchinTracker(page) {

if (_udl.protocol==\"file:\") return;

if (_uff && (!page || page==\"\")) return;

var a,b,c,v,z,k,x=\"\",s=\"\",f=0;

var nx=\" expires=Sun, 18 Jan 2038 00:00:00 GMT;\";

var dc=_ubd.cookie;

_udh=_uDomain();

_uu=Math.round(Math.random()*2147483647);

_udt=new Date();

_ust=Math.round(_udt.getTime()\/1000);

a=dc.indexOf(\"__utma=\" + _udh);

b=dc.indexOf(\"__utmb=\" + _udh);

c=dc.indexOf(\"__utmc=\" + _udh);

if (_udn && _udn!=\"\") { _udo=\" domain=\" + _udn + \";\"; }

if (_utimeout && _utimeout!=\"\") {

x=new Date(_udt.getTime() + (_utimeout*1000));

x=\" expires=\" + x.toGMTString() + \";\";

}

if (_ulink) {

s=_udl.search;

if(s && s!=\"\" && s.indexOf(\"__utma=\")>=0) {

if (!(_uIN(a=_uGC(s,\"__utma=\",\"&\")))) a=\"-\";

if (!(_uIN(b=_uGC(s,\"__utmb=\",\"&\")))) b=\"-\";

if (!(_uIN(c=_uGC(s,\"__utmc=\",\"&\")))) c=\"-\";

v=_uGC(s,\"__utmv=\",\"&\");

z=_uGC(s,\"__utmz=\",\"&\");

k=_uGC(s,\"__utmk=\",\"&\");

if ((k*1) != ((_uHash(a + b + c + z + v)*1) + (_udh*1))) {_ubl=1;a=\"-\";b=\"-\";c=\"-\";z=\"-\";v=\"-\";}

if (a!=\"-\" && b!=\"-\" && c!=\"-\") f=1;

else if(a!=\"-\") f=2;

}

}

if(f==1) {

_ubd.cookie=\"__utma=\" + a + \"; path=\" + _utcp + \";\" + nx + _udo;

_ubd.cookie=\"__utmb=\" + b + \"; path=\" + _utcp + \";\" + x + _udo;

_ubd.cookie=\"__utmc=\" + c + \"; path=\" + _utcp + \";\" + _udo;

} else if (f==2) {

a=_uFixA(s,\"&\", _ust);

_ubd.cookie=\"__utma=\" + a + \"; path=\" + _utcp + \";\" + nx + _udo;

_ubd.cookie=\"__utmb=\" + _udh + \"; path=\" + _utcp + \";\" + x + _udo;

_ubd.cookie=\"__utmc=\" + _udh + \"; path=\" + _utcp + \";\" + _udo;

_ufns=1;

} else if (a>=0 && b>=0 && c>=0) {

_ubd.cookie=\"__utmb=\" + _udh + \"; path=\" + _utcp + \";\" + x + _udo;

} else {

if (a>=0) a=_uFixA(_ubd.cookie,\";\", _ust);

else a=_udh + \".\" + _uu + \".\" + _ust + \".\" + _ust + \".\" + _ust + \".1\";

_ubd.cookie=\"__utma=\" + a + \"; path=\" + _utcp + \";\" + nx + _udo;

_ubd.cookie=\"__utmb=\" + _udh + \"; path=\" + _utcp + \";\" + x + _udo;

_ubd.cookie=\"__utmc=\" + _udh + \"; path=\" + _utcp + \";\" + _udo;

_ufns=1;

}

if (_ulink && v && v!=\"\" && v!=\"-\") {

v=unescape(v);

if (v.indexOf(\";\")==-1) _ubd.cookie=\"__utmv=\" + v + \"; path=\" + _utcp + \";\" + nx + _udo;

}

_uInfo(page);

_ufns=0;

_ufno=0;

_uff=1;

}

function _uInfo(page) {

var p,s=\"\",pg=_udl.pathname + _udl.search;

if (page && page!=\"\") pg=escape(page);

_ur=_ubd.referrer;

if (!_ur || _ur==\"\") { _ur=\"-\"; }

else {

p=_ur.indexOf(_ubd.domain);

if ((p>=0) && (p<=8)) { _ur=\"0\"; }

if (_ur.indexOf(\"[\")==0 && _ur.lastIndexOf(\"]\")==(_ur.length-1)) { _ur=\"-\"; }

}

s + =\"&utmn=\" + _uu;

if (_ufsc) s + =_uBInfo(page);

if (_uctm && (!page || page==\"\")) s + =_uCInfo();

if (_utitle && _ubd.title && _ubd.title!=\"\") s + =\"&utmdt=\" + escape(_ubd.title);

if (_udl.hostname && _udl.hostname!=\"\") s + =\"&utmhn=\" + escape(_udl.hostname);

if (!page || page==\"\") s + =\"&utmr=\" + _ur;

s + =\"&utmp=\" + pg;

if (_userv==0 || _userv==2) {

var i=new Image(1,1);

i.src=_ugifpath + \"?\" + \"utmwv=\" + _uwv + s;

i.onload=function() {_uVoid();}

}

if (_userv==1 || _userv==2) {

var i2=new Image(1,1);

i2.src=_ugifpath2 + \"?\" + \"utmwv=\" + _uwv + s + \"&utmac=\" + _uacct + \"&utmcc=\" + _uGCS();

i2.onload=function() { _uVoid(); }

}

return;

}

function _uVoid() { return; }

function _uCInfo() {

if (!_ucto || _ucto==\"\") { _ucto=\"15768000\"; }

var c=\"\",t=\"-\",t2=\"-\",t3=\"-\",o=0,cs=0,cn=0;i=0;z=\"-\";

var s=_udl.search;

var x=new Date(_udt.getTime() + (_ucto*1000));

var dc=_ubd.cookie;

x=\" expires=\" + x.toGMTString() + \";\";

if (_ulink && !_ubl) {

z=unescape(_uGC(s,\"__utmz=\",\"&\"));

if (z!=\"-\" && z.indexOf(\";\")==-1) { _ubd.cookie=\"__utmz=\" + z + \"; path=\" + _utcp + \";\" + x + _udo; return \"\"; }

}

z=dc.indexOf(\"__utmz=\" + _udh);

if (z>-1) { z=_uGC(dc,\"__utmz=\" + _udh,\";\"); }

else { z=\"-\"; }

t=_uGC(s, _ucid + \"=\",\"&\");

t2=_uGC(s, _ucsr + \"=\",\"&\");

t3=_uGC(s,\"gclid=\",\"&\");

if ((t!=\"-\" && t!=\"\") || (t2!=\"-\" && t2!=\"\") || (t3!=\"-\" && t3!=\"\")) {

if (t!=\"-\" && t!=\"\") c + =\"utmcid=\" + _uEC(t);

if (t2!=\"-\" && t2!=\"\") { if (c != \"\") c + =\"|\"; c + =\"utmcsr=\" + _uEC(t2); }

if (t3!=\"-\" && t3!=\"\") { if (c != \"\") c + =\"|\"; c + =\"utmgclid=\" + _uEC(t3); }

t=_uGC(s, _uccn + \"=\",\"&\");

if (t!=\"-\" && t!=\"\") c + =\"|utmccn=\" + _uEC(t);

else c + =\"|utmccn=(not + set)\";

t=_uGC(s, _ucmd + \"=\",\"&\");

if (t!=\"-\" && t!=\"\") c + =\"|utmcmd=\" + _uEC(t);

else c + =\"|utmcmd=(not + set)\";

t=_uGC(s, _uctr + \"=\",\"&\");

if (t!=\"-\" && t!=\"\") c + =\"|utmctr=\" + _uEC(t);

else { t=_uOrg(1); if (t!=\"-\" && t!=\"\") c + =\"|utmctr=\" + _uEC(t); }

t=_uGC(s, _ucct + \"=\",\"&\");

if (t!=\"-\" && t!=\"\") c + =\"|utmcct=\" + _uEC(t);

t=_uGC(s, _ucno + \"=\",\"&\");

if (t==\"1\") o=1;

if (z!=\"-\" && o==1) return \"\";

}

if (c==\"-\" || c==\"\") { c=_uOrg(); if (z!=\"-\" && _ufno==1) return \"\"; }

if (c==\"-\" || c==\"\") { if (_ufns==1) c=_uRef(); if (z!=\"-\" && _ufno==1) return \"\"; }

if (c==\"-\" || c==\"\") {

if (z==\"-\" && _ufns==1) { c=\"utmccn=(direct)|utmcsr=(direct)|utmcmd=(none)\"; }

if (c==\"-\" || c==\"\") return \"\";

}

if (z!=\"-\") {

i=z.indexOf(\".\");

if (i>-1) i=z.indexOf(\".\",i + 1);

if (i>-1) i=z.indexOf(\".\",i + 1);

if (i>-1) i=z.indexOf(\".\",i + 1);

t=z.substring(i + 1,z.length);

if (t.toLowerCase()==c.toLowerCase()) cs=1;

t=z.substring(0,i);

if ((i=t.lastIndexOf(\".\")) > -1) {

t=t.substring(i + 1,t.length);

cn=(t*1);

}

}

if (cs==0 || _ufns==1) {

t=_uGC(dc,\"__utma=\" + _udh,\";\");

if ((i=t.lastIndexOf(\".\")) > 9) {

_uns=t.substring(i + 1,t.length);

_uns=(_uns*1);

}

cn + + ;

if (_uns==0) _uns=1;

_ubd.cookie=\"__utmz=\" + _udh + \".\" + _ust + \".\" + _uns + \".\" + cn + \".\" + c + \"; path=\" + _utcp + \"; \" + x + _udo;

}

if (cs==0 || _ufns==1) return \"&utmcn=1\";

else return \"&utmcr=1\";

}

function _uRef() {

if (_ur==\"0\" || _ur==\"\" || _ur==\"-\") return \"\";

var i=0,h,k,n;

if ((i=_ur.indexOf(\":\/\/\"))<0) return \"\";

h=_ur.substring(i + 3, _ur.length);

if (h.indexOf(\"\/\") > -1) {

k=h.substring(h.indexOf(\"\/\"),h.length);

if (k.indexOf(\"?\") > -1) k=k.substring(0,k.indexOf(\"?\"));

h=h.substring(0,h.indexOf(\"\/\"));

}

h=h.toLowerCase();

n=h;

if ((i=n.indexOf(\":\")) > -1) n=n.substring(0,i);

for (var ii=0;ii<_uRno.length;ii + + ) {

if ((i=n.indexOf(_uRno[ii].toLowerCase())) > -1 && n.length==(i + _uRno[ii].length)) { _ufno=1; break; }

}

if (h.indexOf(\"www.\")==0) h=h.substring(4,h.length);

return \"utmccn=(referral)|utmcsr=\" + _uEC(h) + \"|\" + \"utmcct=\" + _uEC(k) + \"|utmcmd=referral\";

}

function _uOrg(t) {

if (_ur==\"0\" || _ur==\"\" || _ur==\"-\") return \"\";

var i=0,h,k;

if ((i=_ur.indexOf(\":\/\/\")) < 0) return \"\";

h=_ur.substring(i + 3, _ur.length);

if (h.indexOf(\"\/\") > -1) {

h=h.substring(0,h.indexOf(\"\/\"));

}

for (var ii=0;ii<_uOsr.length;ii + + ) {

if (h.indexOf(_uOsr[ii]) > -1) {

if ((i=_ur.indexOf(\"?\" + _uOkw[ii] + \"=\")) > -1 || (i=_ur.indexOf(\"&\" + _uOkw[ii] + \"=\")) > -1) {

k=_ur.substring(i + _uOkw[ii].length + 2, _ur.length);

if ((i=k.indexOf(\"&\")) > -1) k=k.substring(0,i);

for (var yy=0;yy<_uOno.length;yy + + ) {

if (_uOno[yy].toLowerCase()==k.toLowerCase()) { _ufno=1; break; }

}

if (t) return _uEC(k);

else return \"utmccn=(organic)|utmcsr=\" + _uEC(_uOsr[ii]) + \"|\" + \"utmctr=\" + _uEC(k) + \"|utmcmd=organic\";

}

}

}

return \"\";

}

function _uBInfo(page) {

var sr=\"-\",sc=\"-\",ul=\"-\",fl=\"-\",je=1;

var n=navigator;

if (self.screen) {

sr=screen.width + \"x\" + screen.height;

sc=screen.colorDepth + \"-bit\";

} else if (self.java) {

var j=java.awt.Toolkit.getDefaultToolkit();

var s=j.getScreenSize();

sr=s.width + \"x\" + s.height;

}

if (n.language) { ul=n.language.toLowerCase(); }

else if (n.browserLanguage) { ul=n.browserLanguage.toLowerCase(); }

je=n.javaEnabled()?1:0;

if (_uflash) fl=_uFlash();

return \"&utmsr=\" + sr + \"&utmsc=\" + sc + \"&utmul=\" + ul + \"&utmje=\" + je + \"&utmfl=\" + fl;

}

function __utmSetTrans() {

var e;

if (_ubd.getElementById) e=_ubd.getElementById(\"utmtrans\");

else if (_ubd.utmform && _ubd.utmform.utmtrans) e=_ubd.utmform.utmtrans;

if (!e) return;

var l=e.value.split(\"UTM:\");

var i,i2,c;

if (_userv==0 || _userv==2) i=new Array();

if (_userv==1 || _userv==2) { i2=new Array(); c=_uGCS(); }

for (var ii=0;ii<\/l.length>
l[ii]=_uTrim(l[ii]);

if (l[ii].charAt(0)!='T' && l[ii].charAt(0)!='I') continue;

var r=Math.round(Math.random()*2147483647);

if (!_utsp || _utsp==\"\") _utsp=\"|\";

var f=l[ii].split(_utsp),s=\"\";

if (f[0].charAt(0)=='T') {

s=\"&utmt=tran\" + \"&utmn=\" + r;

f[1]=_uTrim(f[1]); if(f[1]&&f[1]!=\"\") s + =\"&utmtid=\" + escape(f[1]);

f[2]=_uTrim(f[2]); if(f[2]&&f[2]!=\"\") s + =\"&utmtst=\" + escape(f[2]);

f[3]=_uTrim(f[3]); if(f[3]&&f[3]!=\"\") s + =\"&utmtto=\" + escape(f[3]);

f[4]=_uTrim(f[4]); if(f[4]&&f[4]!=\"\") s + =\"&utmttx=\" + escape(f[4]);

f[5]=_uTrim(f[5]); if(f[5]&&f[5]!=\"\") s + =\"&utmtsp=\" + escape(f[5]);

f[6]=_uTrim(f[6]); if(f[6]&&f[6]!=\"\") s + =\"&utmtci=\" + escape(f[6]);

f[7]=_uTrim(f[7]); if(f[7]&&f[7]!=\"\") s + =\"&utmtrg=\" + escape(f[7]);

f[8]=_uTrim(f[8]); if(f[8]&&f[8]!=\"\") s + =\"&utmtco=\" + escape(f[8]);

} else {

s=\"&utmt=item\" + \"&utmn=\" + r;

f[1]=_uTrim(f[1]); if(f[1]&&f[1]!=\"\") s + =\"&utmtid=\" + escape(f[1]);

f[2]=_uTrim(f[2]); if(f[2]&&f[2]!=\"\") s + =\"&utmipc=\" + escape(f[2]);

f[3]=_uTrim(f[3]); if(f[3]&&f[3]!=\"\") s + =\"&utmipn=\" + escape(f[3]);

f[4]=_uTrim(f[4]); if(f[4]&&f[4]!=\"\") s + =\"&utmiva=\" + escape(f[4]);

f[5]=_uTrim(f[5]); if(f[5]&&f[5]!=\"\") s + =\"&utmipr=\" + escape(f[5]);

f[6]=_uTrim(f[6]); if(f[6]&&f[6]!=\"\") s + =\"&utmiqt=\" + escape(f[6]);

}

if (_userv==0 || _userv==2) {

i[ii]=new Image(1,1);

i[ii].src=_ugifpath + \"?\" + \"utmwv=\" + _uwv + s;

i[ii].onload=function() { _uVoid(); }

}

if (_userv==1 || _userv==2) {

i2[ii]=new Image(1,1);

i2[ii].src=_ugifpath2 + \"?\" + \"utmwv=\" + _uwv + s + \"&utmac=\" + _uacct + \"&utmcc=\" + c;

i2[ii].onload=function() { _uVoid(); }

}

}

return;

}

function _uFlash() {

var f=\"-\",n=navigator;

if (n.plugins && n.plugins.length) {

for (var ii=0;ii<\/n.plugins.length>
if (n.plugins[ii].name.indexOf('Shockwave Flash')!=-1) {

f=n.plugins[ii].description.split('Shockwave Flash ')[1];

break;

}

}

} else if (window.ActiveXObject) {

for (var ii=10;ii>=2;ii--) {

try {

var fl=eval(\"new ActiveXObject('ShockwaveFlash.ShockwaveFlash.\" + ii + \"');\");

if (fl) { f=ii + '.0'; break; }

}

catch(e) {}

}

}

return f;

}

function __utmLinker(l) {

if (!_ulink) return;

var p,k,a=\"-\",b=\"-\",c=\"-\",z=\"-\",v=\"-\";

var dc=_ubd.cookie;

if (l && l!=\"\") {

if (dc) {

a=escape(_uGC(dc,\"__utma=\" + _udh,\";\"));

b=escape(_uGC(dc,\"__utmb=\" + _udh,\";\"));

c=escape(_uGC(dc,\"__utmc=\" + _udh,\";\"));

z=escape(_uGC(dc,\"__utmz=\" + _udh,\";\"));

v=escape(_uGC(dc,\"__utmv=\" + _udh,\";\"));

k=(_uHash(a + b + c + z + v)*1) + (_udh*1);

p=\"__utma=\" + a + \"&__utmb=\" + b + \"&__utmc=\" + c + \"&__utmz=\" + z + \"&__utmv=\" + v + \"&__utmk=\" + k;

}

if (p) {

if (l.indexOf(\"?\")<=-1) { document.location=l + \"?\" + p; }

else { document.location=l + \"&\" + p; }

} else { document.location=l; }

}

}

function __utmLinkPost(f) {

if (!_ulink) return;

var p,k,a=\"-\",b=\"-\",c=\"-\",z=\"-\",v=\"-\";

var dc=_ubd.cookie;

if (!f || !f.action) return;

if (dc) {

a=escape(_uGC(dc,\"__utma=\" + _udh,\";\"));

b=escape(_uGC(dc,\"__utmb=\" + _udh,\";\"));

c=escape(_uGC(dc,\"__utmc=\" + _udh,\";\"));

z=escape(_uGC(dc,\"__utmz=\" + _udh,\";\"));

v=escape(_uGC(dc,\"__utmv=\" + _udh,\";\"));

k=(_uHash(a + b + c + z + v)*1) + (_udh*1);

p=\"__utma=\" + a + \"&__utmb=\" + b + \"&__utmc=\" + c + \"&__utmz=\" + z + \"&__utmv=\" + v + \"&__utmk=\" + k;

}

if (p) {

if (f.action.indexOf(\"?\")<=-1) f.action + =\"?\" + p;

else f.action + =\"&\" + p;

}

return;

}

function __utmSetVar(v) {

if (!v || v==\"\") return;

var r=Math.round(Math.random() * 2147483647);

_ubd.cookie=\"__utmv=\" + _udh + \".\" + escape(v) + \"; path=\" + _utcp + \"; expires=Sun, 18 Jan 2038 00:00:00 GMT;\" + _udo;

var s=\"&utmt=var&utmn=\" + r;

if (_userv==0 || _userv==2) {

var i=new Image(1,1);

i.src=_ugifpath + \"?\" + \"utmwv=\" + _uwv + s;

i.onload=function() { _uVoid(); }

}

if (_userv==1 || _userv==2) {

var i2=new Image(1,1);

i2.src=_ugifpath2 + \"?\" + \"utmwv=\" + _uwv + s + \"&utmac=\" + _uacct + \"&utmcc=\" + _uGCS();

i2.onload=function() { _uVoid(); }

}

}

function _uGCS() {

var t,c=\"\",dc=_ubd.cookie;

if ((t=_uGC(dc,\"__utma=\" + _udh,\";\"))!=\"-\") c + =escape(\"__utma=\" + t + \"; + \");

if ((t=_uGC(dc,\"__utmb=\" + _udh,\";\"))!=\"-\") c + =escape(\"__utmb=\" + t + \"; + \");

if ((t=_uGC(dc,\"__utmc=\" + _udh,\";\"))!=\"-\") c + =escape(\"__utmc=\" + t + \"; + \");

if ((t=_uGC(dc,\"__utmz=\" + _udh,\";\"))!=\"-\") c + =escape(\"__utmz=\" + t + \"; + \");

if ((t=_uGC(dc,\"__utmv=\" + _udh,\";\"))!=\"-\") c + =escape(\"__utmv=\" + t + \";\");

if (c.charAt(c.length-1)==\" + \") c=c.substring(0,c.length-1);

return c;

}

function _uGC(l,n,s) {

if (!l || l==\"\" || !n || n==\"\" || !s || s==\"\") return \"-\";

var i,i2,i3,c=\"-\";

i=l.indexOf(n);

i3=n.indexOf(\"=\") + 1;

if (i > -1) {

i2=l.indexOf(s,i); if (i2 < 0) { i2=l.length; }

c=l.substring((i + i3),i2);

}

return c;

}

function _uDomain() {

if (!_udn || _udn==\"\" || _udn==\"none\") { _udn=\"\"; return 1; }

if (_udn==\"auto\") {

var d=_ubd.domain;

if (d.substring(0,4)==\"www.\") {

d=d.substring(4,d.length);

}

_udn=d;

}

if (_uhash==\"off\") return 1;

return _uHash(_udn);

}

function _uHash(d) {

if (!d || d==\"\") return 1;

var h=0,g=0;

for (var i=d.length-1;i>=0;i--) {

var c=parseInt(d.charCodeAt(i));

h=((h << 6) & 0xfffffff) + c + (c << 14);

if ((g=h & 0xfe00000)!=0) h=(h ^ (g >> 21));

}

return h;

}

function _uFixA(c,s,t) {

if (!c || c==\"\" || !s || s==\"\" || !t || t==\"\") return \"-\";

var a=_uGC(c,\"__utma=\" + _udh,s);

var lt=0,i=0;

if ((i=a.lastIndexOf(\".\")) > 9) {

_uns=a.substring(i + 1,a.length);

_uns=(_uns*1) + 1;

a=a.substring(0,i);

if ((i=a.lastIndexOf(\".\")) > 7) {

lt=a.substring(i + 1,a.length);

a=a.substring(0,i);

}

if ((i=a.lastIndexOf(\".\")) > 5) {

a=a.substring(0,i);

}

a + =\".\" + lt + \".\" + t + \".\" + _uns;

}

return a;

}

function _uTrim(s) {

if (!s || s==\"\") return \"\";

while ((s.charAt(0)==' ') || (s.charAt(0)=='n') || (s.charAt(0,1)=='r')) s=s.substring(1,s.length);

while ((s.charAt(s.length-1)==' ') || (s.charAt(s.length-1)=='n') || (s.charAt(s.length-1)=='r')) s=s.substring(0,s.length-1);

return s;

}

function _uEC(s) {

var n=\"\";

if (!s || s==\"\") return \"\";

for (var i=0;i<\/s.length>
return n;

}

function __utmVisitorCode() {

var r=0,t=0,i=0,i2=0,m=31;

var a=_uGC(_ubd.cookie,\"__utma=\" + _udh,\";\");

if ((i=a.indexOf(\".\",0))<0) return;

if ((i2=a.indexOf(\".\",i + 1))>0) r=a.substring(i + 1,i2); else return \"\";

if ((i=a.indexOf(\".\",i2 + 1))>0) t=a.substring(i2 + 1,i); else return \"\";

var c=new Array('A','B','C','D','E','F','G','H','J','K','L','M','N','P','R','S','T','U','V','W','X','Y','Z','1','2','3','4','5','6','7','8','9');

return c[r>>28&m] + c[r>>23&m] + c[r>>18&m] + c[r>>13&m] + \"-\" + c[r>>8&m] + c[r>>3&m] + c[((r&7)<<2) + (t>>30&3)] + c[t>>25&m] + c[t>>20&m] + \"-\" + c[t>>15&m] + c[t>>10&m] + c[t>>5&m] + c[t&m];

}

function _uIN(n) {

if (!n) return false;

for (i=0;i<\/n.length>
var c=n.charAt(i);

if ((c<\"0\" || c>\"9\") && (c!=\".\")) return false;

}

return true;

}

http:\/\/www.google-analytics.com\/urchin.js<\/a>

Email SF-IMC at sf@indymedia.org<\/a> and let them know how you feel about this or go to http:\/\/sf.indymedia.org\/news\/hidden.php?id=1722251<\/a> and do the same. See if they offer a full explanation for allowing Google to acquire and aggregate data obtained from their site's users.

<\/p>\n<\/body><\/html>\n","contact":"","link":"sf.indymedia.org","address":"","phone":"","parent_id":0,"mime_type":"text\/plain","summary":"SF-IMC for an unknown period of time has included code in their web pages that allowed the capitalists at Google to track their site visitors, as well as allowing Google to set and read cookies on users' machines. Other Indymedia tech people called this out on Thanksgiving day. SF-IMC tried to play it off like those who questioned allowing a giant internet company to track their site's users were "paranoid", but SF-IMC does appear to have come to its senses and deleted the offending code. Still, there remain many unanswered questions as to the sum of the information Google was allowed to acquire through this code and for how long this tracking had been going on. As SF-IMC displays open hostility toward what they call the "fetishization of local control and autonomy of individual indymedia sites" and hopes to impose their vision of editorial policy network-wide, an explanation for such cooperation with a corporate entity should be forthcoming. ","numcomment":10,"fileurl":"\/uploads\/","filesize":null,"article_url":"\/news\/2005\/11\/139959.php"},"attachments":[],"comments":[{"id":139968,"heading":"How do people who use Google protect from this?","article":"How do people who use Google protect from this?\r\n\r\nAlso how did the code get there in the first place?\r\n\r\nHow do we find out if other IMCs are infected?","author":"?","parent_id":139959,"mime_type":"text\/plain","created":"2005-11-26 19:05:24","modified":"2005-11-26 19:05:24","fileurl":""},{"id":139969,"heading":"don't USE Google","article":"Dogpile ( my personal favorite) and AltaVista are more powerful, in my opinion.","author":"Sheepdog","parent_id":139959,"mime_type":"text\/plain","created":"2005-11-26 19:21:30","modified":"2005-11-26 19:21:30","fileurl":""},{"id":139973,"heading":""how did the code get there in the first place?"","article":"You haven't actually read the article, have you? ","author":"just wondering","parent_id":139959,"mime_type":"text\/plain","created":"2005-11-26 20:44:09","modified":"2005-11-26 20:44:09","fileurl":""},{"id":139980,"heading":"blah, blah, blah","article":"http:\/\/www.radio4all.org\/aia\/sec_cointelpro.html\r\n\r\nSecurity Practices and Security Culture\r\n\r\nFrom "COINTELPRO: The Danger We Face"\r\n\r\n(snip)\r\n\r\nAn actual agent will often point the finger at a genuine, non-collaborating and highly valued group member, claiming that he or she is the infiltrator. The same effect, known as a "snitch jacket", has been achieved by planting forged documents . . .\r\n\r\n(snip)","author":"heard it before","parent_id":139959,"mime_type":"text\/plain","created":"2005-11-26 23:41:42","modified":"2005-11-26 23:41:42","fileurl":""},{"id":139981,"heading":""achieved by planting forged documents"","article":"Even the feds aren't immune.\r\n\r\nSee:\r\n\r\nhttp:\/\/www.bahamasb2b.com\/news\/wmview.php?ArtID=6432","author":"pointer","parent_id":139959,"mime_type":"text\/plain","created":"2005-11-26 23:45:13","modified":"2005-11-26 23:45:13","fileurl":""},{"id":139986,"heading":"Summary","article":"Google has several hours of SF-IMC's traffic logged. If the police want that data, the would have to subpoena Google to get it.\r\n\r\nThis is a security hole that's been closed. Had it remained open.\r\n\r\nThe logs, if they were collected, would reveal the IP addresses of the people using the site. These could be traced back to individual users, if the police would do the research (and get warrants to search for specific users).\r\n\r\nI believe there are laws that require websites to keep logs. I don't think they're constitutional.","author":"johnk","parent_id":139959,"mime_type":"text\/plain","created":"2005-11-27 01:53:59","modified":"2005-11-27 01:53:59","fileurl":""},{"id":140117,"heading":"you could always use Proxomitron","article":"I block such hostile\/nosey java code upstream using a local proxy\r\n\r\nhttp:\/\/www.spamblocked.com\/proxomitron\/\r\n\r\nlately the number and types of hostile websites have been getting worse - adware\/malware\/spyware is now the biggest security problem on the web..\r\n\r\nI suggest an ad warehouse "black hole", a firewall and proxomitron as a min level of security, along with regular scans using ad-aware, spybot S&D and "hijack this"\r\n\r\nhttp:\/\/www.unixhub.com\/block.html\r\nhttp:\/\/www.lavasoft.com\/\r\nhttp:\/\/www.safer-networking.org\/\r\nhttp:\/\/www.spywareinfo.com\/~merijn\/downloads.html\r\n\r\nthe average computer is infected with dozens of spywares and BHO's, plus CWS trojans, and a new threat that uses "rootkits" to hide and resist discovery\r\n\r\nhttp:\/\/www.sysinternals.com\/Utilities\/RootkitRevealer.html\r\n\r\nSheepdog speaks from blind ignorance - Linux does NOT make you immune -\r\n\r\nhttp:\/\/antivirus.about.com\/od\/linuxunixviruses\/\r\n\r\n\r\nand notice the standard "cointelpro\/agent" disclaimer from our never-can-be-wrong buddy, even with the raw code proving it staring us in the face above...\r\n\r\nhe gets to be as paranoid as he wants to yet attempts to cite us when anyone else is concerned - especially when his dirty little fingers are found to be in the pie\r\n\r\n\r\nare you surprised ? I'm not, the same thing was going on years ago, security, proxies, DIRT...\r\n\r\nYou can lead a horse to water - I posted the URL's\r\n\r\n\r\n","author":"Hex","parent_id":139959,"mime_type":"text\/plain","created":"2005-11-29 08:25:28","modified":"2005-11-29 08:25:28","fileurl":""}]}