[Am-info] [Fwd: Mistype a URL? M$N knows what you typed.]

[Geoffrey]

What other information is M$ tracking of yours?  How about mistyped urls...

-------- Original Message --------
Subject: Mistype a URL? M$N knows what you typed.
Date: Wed, 6 Mar 2002 11:42:02 +1100 (Australia/ACT)
From: Darren Reed <avalon@coombs.anu.edu.au>
To: bugtraq@securityfocus.com


If you've ever used IE and typed in "ww.foo.com" into the path, you
will end up at a web page generated by an MSN web site.  How did I
get this, you ask?  Well, you definately cannot find anything in the
"Internet Options" panels which lets you configure this.  If you
fire up regedit, under

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search

you will find "CustomizeSearch" and "SearchAssistant".  Unless you
want all of the URLs which fail to resolve in domain names to be
handed off to MSN.  Furthermore, there are cookies involved with
these web sites.  These "helpers" appear to only be used when there
are no proxies enabled but it would be a nice if there was an easier
way to stop Microsoft knowing every bad URL that gets typed, etc,
by those with no proxy.

FWIW, for me CustomizeSearch defaults to:
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
and SearchAssistant to:
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm

Darren



-- 
Until later: Geoffrey		esoteric@3times25.net

I didn't have to buy my radio from a specific company to listen
to FM, why doesn't that apply to the Internet (anymore...)?