Slashdot Mirror


Opera to Start Phoning Home?

An anonymous reader writes "Near the end of a story about Opera's determination to stay in the game: 'Earlier this week, Opera announced an addition that will keep it in step with its rivals. Johan Borg, a developer working on the browser, said Tuesday in a blog that the next edition, Opera 9.1, will include beefed up anti-phishing and anti-fraud features. Rather than simply indicate that a site is secure with a notation in the address bar, Opera 9.1 will also query Opera-owned servers for information on any site visited. Those that Opera has identifies as fraudulent will be automatically blocked by the browser.'"

13 of 197 comments (clear)

  1. Hmm Suits in the waiting? by ackthpt · · Score: 5, Insightful

    Those that Opera has identifies as fraudulent will be automatically blocked by the browser.'"

    Seems to recall this can lead Opera to trouble, like what happened with Spamhaus.

    --

    A feeling of having made the same mistake before: Deja Foobar
  2. Great feature realy. by Kenja · · Score: 5, Insightful

    I relay like this idea, so long as it can be turned off. Based on my experiance with Opera so far I'd say that not only will it be able to be turned off, but that you can disable it on a server by server baises.

    There's a reason I was willing to pay for Opera when it was still a commercial product. Now if only they would make a Symbian native version, the Java version has a hard time in landscape mode on my Nokia N93.

    --

    "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    1. Re:Great feature realy. by Ksevio · · Score: 5, Interesting

      Another thing mentioned in the blog posting is this: --- The requests go over HTTP, but the replies will be signed by the server to make sure they are genuine. We prefer to send information between the browser and ourselves in plain text, so our users can inspect the data we send "home". --- So it's not like they're sending everything back to opera without telling you what it is.

  3. secure...says opera? by otacon · · Score: 5, Insightful

    Well the fact that opera will check EVERY site someone goes to against their own server might work in theory...but does anyone really want all their web use data to be tracked by a server?

    --
    In a world of acronyms, the words are the real victims.
    1. Re:secure...says opera? by sammydee · · Score: 5, Informative
      RTFA:

      "When you browse to a site you have not visited before, the browser sends a request for site information to our server. The requests contains the domain name of the site and a hash value of the URL. We don't send the full URL, but we need a fingerprint of the full URL in case you visit a dangerous page on a site that is otherwise harmless."

      It only sends a hash of the web address. It would be difficult to extrapolate the whole address from a hash.

  4. I'm sure that... by justinbach · · Score: 5, Funny

    the Opera users among us will have some interesting things to say about this. Both of them!

    --
    I left my wallet in El Sigundo!
  5. why wouldn't i trust him by Anonymous Coward · · Score: 5, Funny

    Well, with a name like Borg, I can't think of a reason why I wouldn't trust what he has to say...

  6. dont they all do this now? by Deathlizard · · Score: 5, Informative

    I know IE7 phones home, and fireefox 2 does too for anti-phishing. They both can also be disabled by the user.

    I don't see how this is any different than what MS or mozilla is doing. As long as it can be disabled by the user it should be ok.

  7. Re:Someone please cry foul by hkmwbz · · Score: 5, Insightful

    Your ISP can track everything you do. That must mean that they are abusing their position. Why get Opera to track your surfing when your ISP could do so much more efficiently?

    --
    Clever signature text goes here.
  8. Re:Someone please cry foul by bestinshow · · Score: 5, Insightful

    That's if they log the requests - given that they're a Norwegian company, they have some pretty tough privacy laws to content with.

    I expect that it will depend on the terms and conditions in the end, and that they will say 'we will not log or use your data in a user-specific manner (not even AOL style 'user == number' obfuscation, hehe), however we may use it to compile statistics on accesses to phishing sites', which could prove quite useful in anti-phisher court trials.

    It's no different to IE7 or the next version of Safari. The best way to check a website is authentic is to check the URL against a blacklist and then tell the user in big red text in a way they'd be retarded to ignore about the threat. I do think it would be better to download the blacklist to the client and resync it often however.

    How do the Firefox add-ins, IE7 and Safari 3 handle anti-phishing?

  9. Does anyone read anymore? by scoobrs · · Score: 5, Informative

    Does anyone bother reading before commenting anymore? The feature will be able to be switched off at will, even on a site-by-site basis, and they will toss out source IPs at Opera if you choose to use it. The main reason they do it this way instead of downloading lists like mozilla and IE is that lists can be obsolete and phishers can be onto promoting their next scam by the time the lists are updated on clients. Besides, Opera is in Norway and outside Department of Justice jurisdiction for spying requests. If you don't like it or are sophisticated enough that you don't need it, turn it off.

    --
    -Those who would give up essential liberty to purchase temporary safety deserve neither. -Ben Franklin
  10. Re:I'd like it better.... by Shemmie · · Score: 5, Insightful

    Isn't this against everything we say when it comes to Microsoft? We're meant to be protecting Joe Six-Pack. Various features should ship with the default to 'on', so that those in the know are free to turn it off, but it still protects those who it would most likely benefit?

  11. Re:I'd like it better.... by foamrotreturns · · Score: 5, Insightful

    One problem with your argument:
    Joe Sixpack will not use Opera; he'll use IE. That's why we harp on MS for being so lax in security. They're targeting the lowest common denominator.