[AusNOG] Telstra's Texan Teaser - Tin Foil Stetsun anyone?

[Matt Perkins]

Could it be that telstra are passing your browsing history in real time 
to a marketing company who are then looking at the site to gather some 
sort of marking info on the site you were just looking at.
Would explain why they are not looking at there own cache.


On 25/06/12 2:40 PM, Matthew Moyle-Croft wrote:
> FYI:
>
> https as well - although it's just touching the root of the website 
> but then follows a redirect.
>
> MMC
>
> On 25/06/2012, at 9:20 AM, Eric Pinkerton wrote:
>
>> Ausnoggers..
>> Whilst there is a lot of tin foil hattery and other spasticity on 
>> this WP Thread,http://forums.whirlpool.net.au/archive/1935438- the 
>> questions it throws up have made me curious, esp given Telstra's 
>> official response in the following article "
>> http://www.scmagazine.com.au/News/305928,telstra-says-its-not-spying-on-users.aspx
>> //
>> /"But in a short statement, Telstra's senior media boss Craig 
>> Middleton said the company's wireless network management assured that 
>> "there is nothing untoward in what the Whirlpool member has observed 
>> -*it is a normal network operation"*NOTHING TO SEE HEAR MOVE ALONG./
>> //
>> In short, if you make a request to a web server on port 80 from a 
>> Telstra mobile, you'll see a request immediately after your legit 
>> request from the Telstra gateway that originates from a US IP address 
>> hosted at Rackspace.
>> */Legit request../*
>> /58.163.xxx.xxx - - [24/Jun/2012:23:12:09 +0000] "GET /test101 
>> HTTP/1.1" 404 464 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like 
>> Mac OS X) AppleWebKit/534.46 (KHTML, like Gecko) Version/5.1 
>> Mobile/9B206 Safari/7534.48.3"/
>> *//*
>> */Curious identical request follows.../*
>> /50.57.190.97 - - [24/Jun/2012:23:12:09 +0000] "GET /test101 
>> HTTP/1.0" 404 526 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; 
>> en-US; rv:1.9) Gecko/2008052906 Firefox/3.0"/*//*
>> Whilst I accept this is probably benign, and can think of several 
>> reasons why the output of such a process might be of value to 
>> Telstra, I find myself less convinced than a certain senior media 
>> boss seems to be that this is "/a normal network operation"./To me 
>> normal would be to say pull this info straight from the proxy server.//
>> Also, just to be awkward, I am curious as to why a cloud provider, 
>> would be using what looks a lot like a cluster of VPS's in someone 
>> else's cloud based out of Texas ;-)
>> Also why is there a black helicopter hovering above me?
>> So many questions....
>> Discuss!
>> E
>>
>> Message protected by MailGuard: e-mail anti-virus, anti-spam and 
>> content filtering.
>> http://www.mailguard.com.au/mg
>>
>>
>>
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net <mailto:AusNOG at lists.ausnog.net>
>> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog


-- 
/* Matt Perkins
         Direct 1300 137 379     Spectrum Networks Ptd. Ltd.
         Office 1300 133 299     matt at spectrum.com.au
         Fax    1300 133 255     Level 6, 350 George Street Sydney 2000
         SIP 1300137379 at sip.spectrum.com.au
         PGP/GNUPG Public Key can be found at  http://pgp.mit.edu
*/

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20120625/c96bd960/attachment.html>