[swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
http://news.ycombinator.com/item?id=3508857 did anyone test this for Swiss operators? ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Orange seems fine to me Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3 Accept-Encoding: gzip,deflate,sdch Accept-Language: de-DE,de;q=0.8,en-US;q=0.6,en;q=0.4 Host: lew.io User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.75 Safari/535.7 x-bearer-type: UMTS x-forwarded-for: 10.157.85.200, 213.55.184.167 x-roaming: NO x-up-bearer-type: UMTS That explains why I can't use Google Maps on my Laptop anymore. the mobile version does not work in the desktop chrome Am 25.01.2012 12:59, schrieb Stanislav Sinyagin: http://news.ycombinator.com/item?id=3508857 did anyone test this for Swiss operators? ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk8f9CYACgkQC82WwYR1u2ryFgCfdpnLcsTWTrSbpIv/G5avn+Vd mvYAn1osY6fFxCw8zFZnAbF5dnZ2kIcU =wM2D -END PGP SIGNATURE- ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sorry for follow up, but funny... their twitter account is swamped as everyone asks them. https://twitter.com/o2 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk8f91sACgkQC82WwYR1u2q7PwCgk4eSZOXmsO5DLvuX9ek/2Ohn pdIAnjTlciMjwT1i0zkkj8+AU5BjkTWM =FbAL -END PGP SIGNATURE- ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
Lol, I think they are investigating it... at least thats what the 3 or 4 canned messages repeated over and over say. There's some pretty heavy penalties for breaching personal data in the UK.. will be interesting to see if the law is put to proper use. Steve On Wed, Jan 25, 2012 at 12:36 PM, Silvan Gebhardt gebha...@openfactory.chwrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sorry for follow up, but funny... their twitter account is swamped as everyone asks them. https://twitter.com/o2 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk8f91sACgkQC82WwYR1u2q7PwCgk4eSZOXmsO5DLvuX9ek/2Ohn pdIAnjTlciMjwT1i0zkkj8+AU5BjkTWM =FbAL -END PGP SIGNATURE- ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Director / Founder IX Reach Ltd E: steve.wil...@ixreach.com M: +44 7966 048633 35 Jackson Court, High Wycombe, UK. HP15 7TZ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
Hi, I just did a dump of packets reaching a website from Swisscom, and no phone number nor other identification data is inserted. Guillaume 2012/1/25 Stanislav Sinyagin ssinya...@yahoo.com http://news.ycombinator.com/item?id=3508857 did anyone test this for Swiss operators? ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
Someone created this.. altho its just printing the http headers so not rocket science.. http://lew.io/headers.php On Wed, Jan 25, 2012 at 12:55 PM, Guillaume Leclanche guilla...@leclanche.net wrote: Hi, I just did a dump of packets reaching a website from Swisscom, and no phone number nor other identification data is inserted. Guillaume 2012/1/25 Stanislav Sinyagin ssinya...@yahoo.com http://news.ycombinator.com/item?id=3508857 did anyone test this for Swiss operators? ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Director / Founder IX Reach Ltd E: steve.wil...@ixreach.com M: +44 7966 048633 35 Jackson Court, High Wycombe, UK. HP15 7TZ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
[swinog] What GeoIP Locator service do srf.ch, bluewin.ch and iTunes use?
Hello World Some of our customer within our 31.11.0.0/19 allocation, get blocked while trying to access streaming content from drs.ch, bluewin.ch and iTunes, because somehow those sites think they are located outside switzerland. (I suppose it mainly affects content hosted as srf.ch) http://www.ipaddresslabs.com and http://www.maxmind.com Do locate the ip addresses correctly to switzerland. So I suppose SRF uses some other service. Does somebody know what GeoIP Locator services srf.ch uses? The SRF IT Helpdesk was not able to tell me. Kind regards Benoit Panizzon -- I m p r o W a r e A G- __ Zurlindenstrasse 29 Tel +41 61 826 93 07 CH-4133 PrattelnFax +41 61 826 93 02 Schweiz Web http://www.imp.ch __ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
On Wed, Jan 25, 2012 at 1:16 PM, Rene Luria opera...@infomaniak.ch wrote: On 25. 01. 12 14:03, Stephen Wilcox wrote: Someone created this.. altho its just printing the http headers so not rocket science.. http://lew.io/headers.php And you would take this as a definitive answer ? Look closely on what this page shows and you will see headers your browser did not send (x-forwarded-for even without a proxy) and will miss some your browser did send (connection, cache-control). Why ? Because it's certainly hosted behind some reverse proxy. At the end of the day, you have no clue about what headers you did really send or not. Guillaume's point is a good one, get back to what you know. And on a network oriented mailing list, a dump of packets never looks like rocket science :) I for one do not have a webpage ready to output headers, although it would only take me 1 minute to login to a box and create one. It seems easier to forward something.. no? Yes, I understand headers and issues with them, but it does show the offending headers if they are present, which was the point (x-forwarded is not of interest).. Steve -- Rene Luria ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Director / Founder IX Reach Ltd E: steve.wil...@ixreach.com M: +44 7966 048633 35 Jackson Court, High Wycombe, UK. HP15 7TZ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
On the Wed, Jan 25, 2012 at 03:59:29AM -0800, Stanislav Sinyagin blubbered: Hi all. http://news.ycombinator.com/item?id=3508857 did anyone test this for Swiss operators? Since I have an O2 (Germany) prepaid card which I use for mobile Internet access when in Germany: Are O2 UK and O2 Germany different companies just operating under the same brand? Anyway, I think I will test tonight, if this happens for O2 Germany too if nobody else does it until then. And I will happily ignore the fact that roaming fees will probably cost me an arm and a leg, maybe even my own! CU, Venty -- ASAP DO $liste_mit_zeugs @once UNTIL yesterday! BUT DO NOT ask_back() IF unclear ELSE END with_coredump = 3GB! LIE All done.! PROCRASTINATE UNTIL year=year + 1! ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
On Wed, Jan 25, 2012 at 2:04 PM, Martin Ebnoether ventila...@semmel.chwrote: On the Wed, Jan 25, 2012 at 03:59:29AM -0800, Stanislav Sinyagin blubbered: Hi all. http://news.ycombinator.com/item?id=3508857 did anyone test this for Swiss operators? Since I have an O2 (Germany) prepaid card which I use for mobile Internet access when in Germany: Are O2 UK and O2 Germany different companies just operating under the same brand? The O2 brand is owned by Telefonica... Steve Anyway, I think I will test tonight, if this happens for O2 Germany too if nobody else does it until then. And I will happily ignore the fact that roaming fees will probably cost me an arm and a leg, maybe even my own! CU, Venty -- ASAP DO $liste_mit_zeugs @once UNTIL yesterday! BUT DO NOT ask_back() IF unclear ELSE END with_coredump = 3GB! LIE All done.! PROCRASTINATE UNTIL year=year + 1! ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog -- Director / Founder IX Reach Ltd E: steve.wil...@ixreach.com M: +44 7966 048633 35 Jackson Court, High Wycombe, UK. HP15 7TZ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] What GeoIP Locator service do srf.ch, bluewin.ch and iTunes use?
Hi Benoit, Can`t say for sure how srf do it but in most cases this is done based on internet registry queries (RIPE db for example). Maybe you checked this already but it is possible that the specific IPs having the issue are not directly related to the /19 you mentionned but to a smaller more specific subnet which is assigned to a different country (or was recently as most of these applications do not make real time queries and only synchronise from time to time). Could you possibly provide one or two of the impacted IPs to see if they are part of the /19 or a smaller subnet? In addition to this I also read that some content providers perform more checks on top of the IP layer, for example related to browser or media application settings, at this level only srf can give you more details. Anyway in my experience similar problems were almost always related to the subnet information in the internet registry... Regards, Fadi On 1/25/12, Benoit Panizzon benoit.paniz...@imp.ch wrote: Hello World Some of our customer within our 31.11.0.0/19 allocation, get blocked while trying to access streaming content from drs.ch, bluewin.ch and iTunes, because somehow those sites think they are located outside switzerland. (I suppose it mainly affects content hosted as srf.ch) http://www.ipaddresslabs.com and http://www.maxmind.com Do locate the ip addresses correctly to switzerland. So I suppose SRF uses some other service. Does somebody know what GeoIP Locator services srf.ch uses? The SRF IT Helpdesk was not able to tell me. Kind regards Benoit Panizzon -- I m p r o W a r e A G- __ Zurlindenstrasse 29 Tel +41 61 826 93 07 CH-4133 PrattelnFax +41 61 826 93 02 Schweiz Web http://www.imp.ch __ ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Re: [swinog] O2 (UK) sends your mobile number in HTTP header to every website you visit
On 1/25/12 3:12 PM, Stephen Wilcox wrote: On Wed, Jan 25, 2012 at 2:04 PM, Martin Ebnoether ventila...@semmel.ch mailto:ventila...@semmel.ch wrote: On the Wed, Jan 25, 2012 at 03:59:29AM -0800, Stanislav Sinyagin blubbered: Hi all. http://news.ycombinator.com/item?id=3508857 did anyone test this for Swiss operators? Since I have an O2 (Germany) prepaid card which I use for mobile Internet access when in Germany: Are O2 UK and O2 Germany different companies just operating under the same brand? The O2 brand is owned by Telefonica... Hi all, And the article about it here: http://www.bbc.co.uk/news/technology-16725531 seems it was only UK related. -- Mihai ___ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
