Be Careful When Visiting Scratch's Blog
Posted: Tue May 17, 2011 9:57 pm
The Scratchpologists will come to the rescue, but all right minded people will understand the seriousness of what I am about to say. This has long been known to a few here, including myself, but I feel that it needs to be known to a wider audience -- especially to those who wish their information to be kept secret.
Scratch has installed an IP address tracker on his blog, hidden from view. I know this because I can interpret the code on the page. The relevant piece is this:
Which appears on lines 1806 - 1809 (you can view this by viewing the page source code).
Let's dissect this snippet of code:
So, what is Sitemeter? The description on the front page reads (emp. mine):
Now, I did a little experiment and set up a test website with a test account on Sitemeter. What I found out was astounding: Sitemeter had logged my IP address, my Internet provider, my location, and more!
But, perhaps the most troubling thing about this: why does Scratch feel it necessary to hide Sitemeter on his blog? Why the subterfuge? Why the lurking in dark shadows to view personal information about the site's visitors? A counter I could understand, but this... this is outrageous!
Scratch has installed an IP address tracker on his blog, hidden from view. I know this because I can interpret the code on the page. The relevant piece is this:
Code: Select all
<!-- Site Meter XHTML Strict 1.0 -->
<script src='http://s49.sitemeter.com/Joseph Smith/counter.Joseph Smith?site=s49simonfuchshasafilthymouth' type='text/javascript'>
</script>
<!-- Copyright (c)2009 Site Meter --> Which appears on lines 1806 - 1809 (you can view this by viewing the page source code).
Let's dissect this snippet of code:
- The first line is an HTML comment. It doesn't do anything other than inform the reader what the following code is going to do.
Code: Select all
<!-- --> - The second line opens with the tag and a link to where the script (more code) is stored. According to this, it is stored on the URL
Code: Select all
<script>It also tells us what type of script this is: Javascript.Code: Select all
http://s49.sitemeter.com/Joseph Smith - The third line is the closing tag, which, obviously, closes the script.
Code: Select all
</script> - The fourth line is another comment line.
So, what is Sitemeter? The description on the front page reads (emp. mine):
Site Meter's comprehensive real time website tracking and counter tools give you instant access to vital information and data about your sites audience. With our detailed reporting you'll have a clear picture of who is visiting your site, how they found you, where they came from, what interests them and much more.
Now, I did a little experiment and set up a test website with a test account on Sitemeter. What I found out was astounding: Sitemeter had logged my IP address, my Internet provider, my location, and more!
But, perhaps the most troubling thing about this: why does Scratch feel it necessary to hide Sitemeter on his blog? Why the subterfuge? Why the lurking in dark shadows to view personal information about the site's visitors? A counter I could understand, but this... this is outrageous!