Slashdot Mirror

Don't know the nitty gritty of the deal but I do know Facebook is working with Omniture beyond providing tools for FB App marketers. -- Their soon going to start aggregating data between Facebook and Omniture's 2o7.net network.

Not necessarily a surprise. My CEO is buddies with the guys at Omniture. He came in a few weeks ago talking about it.... and how we could make money with them too. =) It's all about money folks. Every, Single, Thing.

Firefox lists eleven cookies from PayPal, only a few of which are session cookies. The rest all have expiration dates a decade or two from now. I presume some of these are used to track my behavior over longer periods for whatever advertising or marketing value this information might provide. Some seem rather weird though like a cookie called simply "Apache" with a 2037 expiry. Will we still be using Apache in 2037?

There's also a paypal.112.2o7.net cookie, which I find more obnoxious than PayPal's own.

http://www.omniture.com/privacy/2o7#optout This is the site to install an "opt-out cookie". I'm going to go ahead and guess it might help to visit this site within the embedded Opera browser in CS3. Who knows where that thing keeps it's cookies. Granted, getting this info from a comment on a post to a blog is not the way to have a good opt-out policy. Something in the installer would be nice.

Clarification: That is ...'2o7.net' as in 'Two-Ocsar-Seven.net' *NOT* 'Two-Zero-Seven.net'

The Opt-Out "Explanation" page is here: http://www.omniture.com/privacy/2o7

Still, the dubious address http://192.168.112.2o7.net/ appears to be some variation of Social Engineering. http://en.wikipedia.org/wiki/Social_engineering_(computer_security)

This might explain some of Adobe's seeming software bloating (like Acrobat Reader, etc...) http://www.google.com/search?hl=en&q=Acrobat+reader+bloat

I'm not sure about his article and his formula, but it is already a debate in the web analytics industry. http://www.omniture.com/blog/ Even using cookies it's nearly impossible to get correct unique visitor counts and that is why the industry is moving more towards unique visits, because a visit is a visit, it doesn't matter who the visitor was... The only way to really measure how far off visitor data could be is comparing unique customers (cusomter id) to the number of unique visitors they create (the customer id coming from a login). That way they could see the affects of multiple customers on multiple machines and browsers and also see the affects of multiple customers on a single machine and browser.

Essentially, this whole herd immunity thing is going to exist on OSX until it becomes an issue. There was nothing that the Native Americans could have done to prepare themselves for smallpox, except wait for it to come. In the same way, there's nothing that OSX can do to reasonably protect themselves now.

Actually, there is no shortage of lower level "incursions" at the PUP (probably unwanted program) level on OS X. Fortunately, there are some pretty good tools available for catching and quashing them. My favorite comes straight from Apple. While I applaud overall the commitment that Steve Jobs and Apple have shown to security, iTune's nasty habit of feeding my listening decisions to a "2o7" address for capture and processing by a third part vendor represents a significant lapse in this area. Far from being an opt-in, Steve and Apple seem to think they have a right to this information without consultation. I blocked this for years without even knowing what it was. Currently, Little Miss Snitch is cheerfully quashing that bit of mischief, and I block the cookies in FireFox.

Omniture operates 2o7.net, and provides their defense with and opt-out here. iTunes attempts to send information to 2o7 whenever I open iTunes and whenever I play a song on iTunes, clearly exceeding the parameters of the 2o7 program as described in their defense. A recent security bulletin on 2o7 indicated that Omniture was transitioning their services to piggyback on the clients' domain name, probably leading me to replace iTunes and give up using the iTunes Music Store.

None of this can be compared to the mindless zombie spambot hell offered by some other vendors, of course, but this game of cops and robbers is still being played at some level on OS X. It is not quite time to canonize Steve as the patron saint of security and privacy.

I remember Steve announcing Safari, and assuring the assembled faithful that his engineers were working by arrangement with IE engineers to assure a high level of compatibility with the "industry standard". He has been good to his word, Safari security issues tend to remind one of IE. Imagine how hard it must be to be a good netizen while competing for compatibility with IE. Real Mac security relies on third party and open source replacement software like FireFox, but not to nearly the same extent. He also ships Tiger with a Microsoft Office trial edition, significantly increasing the number of known exploits available on his platform. Mac users can significantly improve system security by deleting such items.

Finally, the commercial vendor I was using for virus scan proved better at charging the credit card than delivering a working product license, bit ClamXav has proven a worthwhile way detect and eliminate the limited malware that actually finds its way to my system. The only time I notice a virus scan on my iBook is if I am playing a DVD. Nothing has shown up so far (that I have been able to detect) that represents a threat on an OS X system with no Microsoft products installed. I really don't mind using a platform that has too few security concerns to attract serious interest from all those vendors thriving on other platforms.

Folks who migrate to OS X for security reasons strike me as more likely, not less, to attend to these concerns. The unwary herd is happily playing the latest FPS blissfully unaware of their dual role as zombie spambot to the world while their credit card accounts accumulate mysterious charges and their life savings is wired to the Caymen Islands.

Essentially, this whole herd immunity thing is going to exist on OSX until it becomes an issue. There was nothing that the Native Americans could have done to prepare themselves for smallpox, except wait for it to come. In the same way, there's nothing that OSX can do to reasonably protect themselves now.

Actually, there is no shortage of lower level "incursions" at the PUP (probably unwanted program) level on OS X. Fortunately, there are some pretty good tools available for catching and quashing them. My favorite comes straight from Apple. While I applaud overall the commitment that Steve Jobs and Apple have shown to security, iTune's nasty habit of feeding my listening decisions to a "2o7" address for capture and processing by a third part vendor represents a significant lapse in this area. Far from being an opt-in, Steve and Apple seem to think they have a right to this information without consultation. I blocked this for years without even knowing what it was. Currently, Little Miss Snitch is cheerfully quashing that bit of mischief, and I block the cookies in FireFox.

Omniture operates 2o7.net, and provides their defense with and opt-out here. iTunes attempts to send information to 2o7 whenever I open iTunes and whenever I play a song on iTunes, clearly exceeding the parameters of the 2o7 program as described in their defense. A recent security bulletin on 2o7 indicated that Omniture was transitioning their services to piggyback on the clients' domain name, probably leading me to replace iTunes and give up using the iTunes Music Store.

None of this can be compared to the mindless zombie spambot hell offered by some other vendors, of course, but this game of cops and robbers is still being played at some level on OS X. It is not quite time to canonize Steve as the patron saint of security and privacy.

I remember Steve announcing Safari, and assuring the assembled faithful that his engineers were working by arrangement with IE engineers to assure a high level of compatibility with the "industry standard". He has been good to his word, Safari security issues tend to remind one of IE. Imagine how hard it must be to be a good netizen while competing for compatibility with IE. Real Mac security relies on third party and open source replacement software like FireFox, but not to nearly the same extent. He also ships Tiger with a Microsoft Office trial edition, significantly increasing the number of known exploits available on his platform. Mac users can significantly improve system security by deleting such items.

Finally, the commercial vendor I was using for virus scan proved better at charging the credit card than delivering a working product license, bit ClamXav has proven a worthwhile way detect and eliminate the limited malware that actually finds its way to my system. The only time I notice a virus scan on my iBook is if I am playing a DVD. Nothing has shown up so far (that I have been able to detect) that represents a threat on an OS X system with no Microsoft products installed. I really don't mind using a platform that has too few security concerns to attract serious interest from all those vendors thriving on other platforms.

Folks who migrate to OS X for security reasons strike me as more likely, not less, to attend to these concerns. The unwary herd is happily playing the latest FPS blissfully unaware of their dual role as zombie spambot to the world while their credit card accounts accumulate mysterious charges and their life savings is wired to the Caymen Islands.

The packets are being sent to a third party. This has been reported from the beginning. Omniture is not noted in the iTunes EULA the way, say, Gracenote CDDB is. Even if Apple isn't saving the information, what do we know about Omniture? We have no policy from them on this issue. Their business is collecting statistical information. They're a marketing firm.

For that matter, why does the data need to go to a third party at all? How are they related to the iTMS?

will tell you exactly what EACH and EVERY visitor to your site did, i.e. what pages they visited. The server logs tell all!

If that was true why would a multi million dollar company base its entire business on this rather large piece of code talking to their servers ?, read the code, dissasemble the functions, and imagine what kind of stats you could create with it when applied through a relational db

the server log will only tell you so much, in stats there is only 1 rule, get as much data as you can, in this case every single bit of client data the browser and user can give them

I mean, Microsoft can develop and release Windows Live and Office Live in the matter of 48 hours

Maybe, maybe not.

"SiteCatalyst code version: H.1.
Copyright 1997-2005 Omniture, Inc. More info available at
http://www.omniture.com/"

User 7471 here. Could you go into more detail?

Just kidding. I am still unemployed, and did not do my taxes yet, and I have a student loan that I need to pay off from a sponsor that might have been a Nazi supporter (Mr Ford). But for some reason, I think things are going to be OK.
http://www.godhatesamerica.com

Vote or Die. Jack!
http://freenet.sourceforge.net

I have a video with an 18 inch object. Anyone want to see it?

Why everyone is going digital:
http://www.imdb.com/title/tt0265459/.

How is the E911 programming coming?

Now do you know why I bough my LVLT stock now?

Anyone seen this yet?
http://whitehat.co.il
http://www.whoppix.net

If you can not beat-um, join um.

Not to be confused with a bomb.
http://hackaday.com/entry/1234000073038748/

Happy flying.
http://www.cnn.com/2005/BUSINESS/01/18/airbus.380/

I have copy of Bill Gates talking about the ROM if anyone wants it.
http://news.com.com/Battle+brews+over+unlocking+PC +secrets/2100-1016_3-5654272.html

Also on the CD are the first 3 episodes of /. Geeks in Space.

"THATS HOT!" Copy Right Paris Hilton.

Ahh... http://www.mlb.tv More Micro$oft.
Good old. Omniture again.
http://www.omniture.com

Sex, America's real past time activity.
Wake me in 2008!

it's not only in the same state, its' only about 10 minutes from Novell in Utah County. There are actually a lot of Canopy group type companies in Utah county (not that Novell is anymore) there are a couple of stealth tech startups that will be interesting to watch (and many that are destined for failure). There are also a bunch of established technology companies that are hiring right now omniture or symantec
are probably the biggest. The only thing that sucks about living in Provo is the social atmosphere. People are downright strange there. They speak english, but it's like your in another country entirely. Novell's corporate culture is a good mix but after work you deal with neighbors, community. Think about the the portrail of the two brothers on Oceans 11 and the newer Oceans film from Provo. It was fairly accurate.

This article somehow reminds me about the old VeriSign's ad campaign with naked women by which I was outrageously offended once.

Seriously, there was a huge cross site scripting vulnerability in Omniture's "award-winning web analytics solution for large, complex sites" (too complex for them, I guess) which was included in the famous VeriSign's Site Finder we all loved so much. It's not that VeriSign handles any sensitive data, fortunately...

(My link doesn't work any more, but the comment is still +5, Funny. :-P)

yes, it's a funny use of a serious xss vuln. reading users cookies, reading and filling forms and clicking links is less funny. whoever works at Omniture, Inc. should be fired. reason: unbelievable stupidity.