SSL weakness affecting links from pa

[Adam Shostack]

Eric Murray wrote:


| User-Agent: Mozilla/3.0Gold (X11; U; Linux 6.6.6 i386)

| In order to maximally fuck up stats, what should be put into
| the windowing system/OS fields?  It has to be something that
| exists and is fairly common, so that its not able to be thrown out
| by the stats-gathers.  I could use "(X11; MVS; IBM MVS some version number)"
| but that'd be easy to throw out, even though ports of X to MVS really did
| exist.
|
| Maybe I'll just make every copy of Cookie Jar look like
| it's running on Linux.

	I think you should rotate through a list, in case they're
keeping track of it in conjunction with your other information.  Thus,
have the same cookies comeing from different user agents, say rotate
between Rhapsody on PowerPC and Linux on an Alpha.

	Alternately, have it come from Internet Exploder on various
UNIX boxes.  (Unless thats now generally available.)

Adam


-- 
"It is seldom that liberty of any kind is lost all at once."
					               -Hume