| Author |
 Topic  |
|
eggyfarts
Junior Member
New Zealand
200 Posts |
 Posted - 25 September 2002 : 21:24:28
|
| Is it possible that they could be logging what we type as well? I was just talking to a friend and he said he found something in the program the sent them your keystrokes too, not just your count. I suppose it could happen, anyone else have any views on this? |
Cheers,
WeeVaa.
|
 |
|
|
Kenno
Average Member
Cambodia
846 Posts |
Posted - 25 September 2002 : 21:25:49
|
quote:
Originally posted by eggyfarts
Is it possible that they could be logging what we type as well? I was just talking to a friend and he said he found something in the program the sent them your keystrokes too, not just your count. I suppose it could happen, anyone else have any views on this?
That's my concern, and I'm waiting for someone to prove if it's right or wrong. Soon the reality will be revealed. I hope they didn't do such evil acts. |
If you don't want to be addicted to Linux, Never ever try using it. ~/home/kenno |
|
|
|
eggyfarts
Junior Member
New Zealand
200 Posts |
Posted - 25 September 2002 : 21:27:45
|
quote:
Soon the reality will be revealed
What do you mean by this? |
Cheers,
WeeVaa.
|
|
|
|
Kenno
Average Member
Cambodia
846 Posts |
Posted - 25 September 2002 : 21:31:56
|
quote:
Originally posted by eggyfarts
quote:
Soon the reality will be revealed
What do you mean by this?
I mean if this project does record more than just the number of keystrokes, then someone might prove it right. Sorry to confuse you.  |
If you don't want to be addicted to Linux, Never ever try using it. ~/home/kenno |
|
|
|
eggyfarts
Junior Member
New Zealand
200 Posts |
Posted - 25 September 2002 : 21:34:43
|
| I must admit, it would be a really good plan for them, get 1000's of people to download thier software and then record their every move. I am not saying that they do it, but it is a possibility.... |
Cheers,
WeeVaa.
|
|
|
|
Gremlin
General Help Moderator
New Zealand
7528 Posts |
Posted - 25 September 2002 : 21:45:31
|
| I'll do some packet traces on it and see what It's sending |
Kiwihosting.Net - The Forum Hosting Specialists
|
|
|
|
eggyfarts
Junior Member
New Zealand
200 Posts |
Posted - 25 September 2002 : 21:50:47
|
Pulse Privacy Policy
Dolphin involves itself with some pretty important privacy issues. The most obvious concern is that keystrokes are being logged and recorded and sent here, rather than simply counted. That is hardly the only danger with a project like this--in fact, ANY program that you have on your computer while it is connected to the internet may be capable of transmitting your keystrokes, information about the things you are doing on the internet, snapshots of your screen, et cetera. I feel a privacy policy is very necessary in an endeavour such as this one, so a formal policy follows, largely influenced by Steve Gibson's Code of Backchannel Conduct.
It is the intent of Pulse to transmit the following information to project-dolphin.net on a basis whose periodicity is decided by the user through Pulse's configuration menus:
user's account name as provided by user
user's password for Project Dolphin as provided by user
one integer that represents the total number of keys typed since last contact with project-dolphin.net for the same purpose
the current time (represented by the number of seconds elapsed since midnight, 1 Jan 1970 UTC), according to the system clock on the user's computer
What it is guaranteed Pulse does not record, collect, or transmit to this server or any other destination:
which keys the user types, with exception to the analysis of the very last key hit, in order to decide if it is a key that "counts" as a key being hit
the contents of the user's hard drive or any other attached or internal or external storage device that may hold any type of data
anything on the user's screen
There is no contact by Pulse to any server or entity on the internet besides the website project-dolphin.net
The user's email address as submitted by the user will never be transferred, sold, given, or in any way intentionally distributed to any entity on the internet.
Due to the nature of the internet, the following information is known about the user whenever the user visits any page on project-dolphin.net (any site you visit can glean information like this):
IP (Internet Protocol) address and name of computer used to access the page
the browser used to access the page, as well as the version of the browser
the operating system used on the user's computer
which pages on this site the user visits
the page that provided the user with the link to this site; ie: the page you were on before the page on project-dolphin.net
All sounds pretty standard, but the thing is, they could be lying, althought I don'treally think they could get away with it. All the people who have ripped open the source code of the program are bound to have noticed anything irregular anywhere, and I guess there are thousands who have done so, wether it be for cheating or educational purposes  .
|
Cheers,
WeeVaa.
|
|
|
|
eggyfarts
Junior Member
New Zealand
200 Posts |
Posted - 25 September 2002 : 21:52:31
|
quote:
Originally posted by Gremlin
I'll do some packet traces on it and see what It's sending
Great, please let me know of the results. Good to see a fellow New Zealander on the net, always a good sign. If you don't mind, what part of NZ are you from. I'm from Whangarei. |
Cheers,
WeeVaa.
|
|
|
|
Gremlin
General Help Moderator
New Zealand
7528 Posts |
Posted - 25 September 2002 : 22:03:49
|
Wellington, originally from Hastings :)
ok heres the packet it sends when doing a pulse
GET /cgi-bin/pulse.cgi?
jh8=pp
&an=Gremlin
&pwd=lhqmlRnmBpkQmj2dahecW
&kc=jqqmhRmjBmlQmw2djhecWfcZglZgqJio5jhdkhdlqrmw5geAgpWhqAjjY
&tsec=1033004673
It looks harmless, but I would be slightly concered about that &kc string (which I assume stands for KeyCount) it *could* be a digested copy of your keystrokes, but it is *most likely* just encrpyted to prevent people from setting up scripts to pulse in a random number of key strokes.
The only way to conifrm I guess is ask the Project Dolphin team, and their Statement above seems to imply its all kosha |
Kiwihosting.Net - The Forum Hosting Specialists
|
Edited by - Gremlin on 25 September 2002 22:11:00 |
|
|
|
Bookie
Average Member
USA
856 Posts |
|
|
BWJM
Junior Member
Canada
193 Posts |
Posted - 25 September 2002 : 22:23:40
|
quote:
Originally posted by Jeepaholic
Yeah, I didn't like how long it took to load doing it correctly (your way)...so, I figured a couple numbers off wasn't going to kill anyone. One hit to their API is much quicker... I see you guys have made some changes though, so maybe I'll put 'em back in!
Also, couple of suggestions:
1) New members will error out (divide by zero) because of the way the average keystrokes is calculated. You need to add 1 to the difference in days.
'### Determine Average Keys Per Day
Dim intNumDays As Integer = Math.Abs(DateDiff(DateInterval.Day, Now, CDate(strDateJoined))) + 1
strAvgKeysPerDay = CStr(FormatNumber(CLng(strTotalKeyCount) \ intNumDays, 0, , , TriState.True))
Fixed.
quote:
Originally posted by Jeepaholic
2) This code is nice for those that don't understand and want to put their actual username in the URL...Had it happen a number of times, and the page will hang because of it...
Try
UserID = Convert.ToInt16(UserID)
Catch
UserID = ""
End Try
If UserID = "" Then 'Default: 24763 (BWJM)
UserID = "24300"
End If
Dim UserID As String = Request.QueryString("UserID") 'USERID {Integer}
If Not IsNumeric(UserID) Then 'Default: 24763 (BWJM)
UserID = ""
End If
If UserID = "" Then
UserID = "24763"
End If
This should fix it.
quote:
Originally posted by Jeepaholic
BWJM, just thought of 1 more stat ;) how many members on a team, I know how to handle that one, just thought you'd be interested with that thought.
Yeah, I can do that I suppose.
Another small tweak: Where specifically casting numbers to the Integer type, especially "large" numbers, I have changed to the Long type which will hopefully postpone any overflow errors.
Yet another tweak: I've added the caching code that Jeeps provided:
<%@ OutputCache Duration="300" VaryByParam="*" %>
Latest version emailed to those who have requested it. |
 |
|
|
|
Gremlin
General Help Moderator
New Zealand
7528 Posts |
Posted - 25 September 2002 : 22:42:07
|
| Can you send me a copy also please :) |
Kiwihosting.Net - The Forum Hosting Specialists
|
|
|
|
Gremlin
General Help Moderator
New Zealand
7528 Posts |
Posted - 25 September 2002 : 22:43:02
|
sheesh it works in preview mode, but not when posting.
email address is brangwyn!clear@net@nz !=@ @=. |
Kiwihosting.Net - The Forum Hosting Specialists
|
|
|
|
RichardKinser
Snitz Forums Admin
USA
16655 Posts |
Posted - 25 September 2002 : 22:46:17
|
| Gremlin, is it wise to have your pwd showing above? I know it's not the actual password, but... |
|
|
|
eggyfarts
Junior Member
New Zealand
200 Posts |
Posted - 25 September 2002 : 22:53:30
|
Could you please send me a copy of the revised version thanks. My email address is eggyfarts2000_@_hotmail.com (remove the two underscores _)
Thanks a bunch. |
Cheers,
WeeVaa.
|
|
|
|
Topic |
|
Topic Locked
