Google tracked me anyway

teguh123 · Oct 26, 2009

I use webproxy to create youtube and blogspots.

I notice that every time I run the program, the first and second effort work.

Then I got sms locked.

And then I notice something else.

The blogspot page is in Indonesian language!

The program run on US computer, using american proxy, and the webproxy is used by american. Cookies submitted are cookies in the webproxy and that's cleared after every account.

To safe guard, I also ensure that mail.gmail.com cannot insert flash cookies though I have no idea how in the earth google can inject flash cookies through my webproxies. Google sites are accessed via php curl.

Somehow they tracked me. But how?

guruslayer23 · Oct 26, 2009

Yeah I went through the same thing. I created like 20 gmails accounts and thought I was in the clear until I tried to log into one and got a SMS verify notification.

I haven't figured it out yet, are you just trying to create gmail accounts?

ForeverNever · Oct 26, 2009

Google knows everything. yeah they're pretty annoying. Sometimes you just have to not think about it and move on while assuming Google knows your every thought.

nuntium · Oct 26, 2009

harrimann said:
[QUOTE

how in the earth google

can inject flash cookies through my webproxies.

?? google sucks[/QUOTE]

The most pointless post of the week.

Sometimes proxy server pass your real ip in header. Make sure you use high-private ones.
Posted via Mobile Device

SpazzyMcSpazz · Oct 26, 2009

1 .webproxies? you mean that phpproxies like hidemyass.com???? what webproxies?
2. it's in indonesian because the porxy was from indonesia
3. maybe you should disable javascript, java, flash and other plugins
4. google will get you anyways in the end (they're probably doing this right now), they will make a list of all the proxies, you will only be able to access them with a signed copy of your ID, fingerprint and DNA sample, eventually they will take over everything. And as soon as you make a wrong move, as soon as you one day decide to walk across the street a couple of inches outside the pedestrian crossing zone... ACCOUNT CANCELLED
5. Sorry for no. 4.

NoSuchAgency · Oct 27, 2009

Curl can leak your real IP if proxy authentication fails. So in some cases, it directly connects to the site if the proxy doesn't work. Which is completely stupid, but it happens.

If you're using web proxies (through a form), keep in mind that any Google javascript is run on your browser, which leaks your real IP.

Also, DNS leak is something that isn't handled by HTTP proxies when using browsers like Firefox. It's a retarded problem with Firefox that most people don't know about.

teguh123 · Oct 27, 2009

guruslayer23 said:
Yeah I went through the same thing. I created like 20 gmails accounts and thought I was in the clear until I tried to log into one and got a SMS verify notification.

I haven't figured it out yet, are you just trying to create gmail accounts?

Sometimes is not an issue. Always is.Anyway, I start programming again.

How do you create 20? I created 150 and things seem fine.

We should talk. Can you create them without javascript? Somebody need to go through the javascript and figure out what google did with that mass up code.

ilessays · Oct 27, 2009

terrible.... hope you figure it out

teguh123 · Oct 28, 2009

Webproxy. I use my own modification of phpmyproxy. I tried to give it away for free but people are not interested.

Anyway, things used to work very well till about a week ago.

I used to create lots and lots of yahoo and blogspot with no problem.

There is a slight light on the tunnel. I see my browser store cookies, even though cookies should have been stored in the webserver.

Man4u · Oct 28, 2009

google is an amazing technology. you cant hide anything from it.

justone · Oct 28, 2009

webproxies are not real proxies.
They do not provide any sort of anonymity you could trust into.

Well:
If you disable java, activex, flash, javascript and any other objects/languages in your browser it's likely that google can not track you anymore.

But to be back in the real world: You can deactivate a lot but javascript .. This is an essential part of almost all websites. You'll need it and javascript finally is a great security risk against web-proxies.
I once wrote an advisory about webproxies during the development of Cloakfish

Code:

http://www.cloakfish.com/?tab=advisories

Google tracked me anyway

teguh123

BANNED

guruslayer23

Junior Member

ForeverNever

Power Member

nuntium

BANNED

SpazzyMcSpazz

Regular Member

NoSuchAgency

Junior Member

teguh123

BANNED

ilessays

Newbie

teguh123

BANNED

Man4u

Newbie

justone

BANNED

Main Menu

Marketplace

Making Money

BlackHatWorld

Other