On Wed, Jan 31, 2007 at 02:26:16PM +0100, Jan Engelhardt wrote:
> Hi list.
> 
> 
> Just when I wanted to debug a web problem, I saw tcpdump 
> showing Firefox making silent requests to Google. (wtf at this point!)
> To reproduce: Open a random webpage (preferably one that does not 
> reference external content, e.g. http://jengelh.hopto.org/ ; local 
> files don't trigger it)
> 
> 
> 14:23:03.581788 IP 10.10.106.161.50386 > 134.76.10.66.3128: P 1:691(690) 
> ack 1 win 5840
> [EMAIL PROTECTED]@...
> 
> j..L
> B...8"..%.g..P.......GET 
> http://sb.google.com/safebrowsing/update?client=navclient-auto-ffox2.0.0.2pre&mozver=1.8.1.2pre-2006102300&version=goog-white-domain:1:19,goog-white-url:1:371,goog-black-url:1:8400,goog-black-enchash:1:17514
>  HTTP/1.1
> Host: sb.google.com
> User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.2pre) 
> Gecko/20061023 SUSE/2.0.0.1-0.1 Firefox/2.0.0.2pre
> Accept: 
> text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
> Accept-Language: en-us,en;q=0.5
> Accept-Encoding: gzip,deflate
> Accept-Charset: UTF-8,*
> Keep-Alive: 300
> Proxy-Connection: keep-alive
> Cookie: 
> PREF=ID=b81b7fa78ae17cf1:TM=1168225067:LM=1168225067:S=xIIiZGyQbydqdfSG
> 
> 
> Can I _please_ get information why there's spyware like this in Firefox? 
> Added by SUSE?
> 
> (I don't have the Google Toolbar installed, which, in itself, already 
> transmits data unwanted, leading to congestion on modem lines.)

We did not add this code.

I suspect the anti phishing filter or similar.

Ciao, Marcus
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to