[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Another host in China which use persistant cookie to track Tor users
- To: or-talk@xxxxxxxxxxxxx
- Subject: Another host in China which use persistant cookie to track Tor users
- From: "s s" <silversword07@xxxxxxxxx>
- Date: Tue, 27 Nov 2007 00:45:33 -0800
- Delivered-to: archiver@xxxxxxxx
- Delivered-to: or-talk-outgoing@xxxxxxxx
- Delivered-to: or-talk@xxxxxxxx
- Delivery-date: Tue, 27 Nov 2007 03:45:43 -0500
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; bh=wy1Ah+6q3a8XDjFMUGZ0iBRil2qpxkgCGR9yPbKmRCo=; b=nm7nGjUBT0/U4m2HP4FrHbiVSprxPOh/UQeV6Yv+4Ge5aRruhFfu4zpYjT2ZQUcRAwx4Vljc5i1s++VekYwfwsUYGSLzJiPfT5tjq2slwUR4xaeQ7N72rzxL7xCJ+gBXGHdHWwjmy6HFvL4ekKLD5qAu14wqNLFYUBB/vKCKR+c=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=WI3vF+Lsvowy+LyU+hmWLFKimbUssPNay9k8dzw7/yHg+4FlsS4dHi2xTiEebGP8iqWf0hvhGnl3TRxiv2ZeHiocsgxHfZ1NI882heOB/C0pusz5iBXhjcEBzgEIsS0fZpR7I8G/ePQ3DA5xbOVXUIX/XlPOmmrFVp6wHoqINYc=
- Reply-to: or-talk@xxxxxxxxxxxxx
- Sender: owner-or-talk@xxxxxxxxxxxxx
I have observed my url changed automatically
from
http://www.google.cn/
to
http://60.16.34.94/RLOCATION069/?LOC=www.google.cn/
then the host 60.16.34.94 will send this:
HTTP/1.1 302 Moved Temporarily
Allow: GET,POST,HEAD
MIME-Version: 1.0
Server: MA5200 Server 2.0
Set-Cookie: BASSID##=[base64-encoded-timestamp]; Expires=Thu,
09-May-2041 00:00:00 GMT
Location: http://www.google.cn/
Connection: close
Whois query result for 60.16.34.94 from apnic.net :
inetnum: 60.16.0.0 - 60.23.255.255
netname: CNCGROUP-LN
country: CN
descr: CNCGROUP Liaoning province network
admin-c: CH455-AP
tech-c: GZ84-AP
status: ALLOCATED PORTABLE
mnt-by: APNIC-HM
mnt-lower: MAINT-CNCGROUP-LN
mnt-routes: MAINT-CNCGROUP-RR
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks: This object can only be updated by APNIC hostmasters.
remarks: To update this object, please contact APNIC
remarks: hostmasters and include your organisation's account
remarks: name in the subject line.
remarks: -+-+-+-+-+-+-+-+-+-+-+-++-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed: hm-changed@xxxxxxxxx 20040416
changed: hm-changed@xxxxxxxxx 20060124
source: APNIC
route: 60.16.0.0/13
descr: CNC Group CHINA169 Liaoning Province Network
country: CN
origin: AS4837
mnt-by: MAINT-CNCGROUP-RR
changed: abuse@xxxxxxxxxxx 20060118
source: APNIC