<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: pixel]]></title>
    <link>http://securityratty.com/tag/pixel</link>
    <description></description>
    <pubDate>Sat, 12 Jan 2008 15:10:21 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[Event Tracking Google Style]]></title>
      <link>http://securityratty.com/article/a5b468293fadc0c14c36f87d590c1e0e</link>
      <guid>http://securityratty.com/article/a5b468293fadc0c14c36f87d590c1e0e</guid>
      <description><![CDATA[Most readers who operate a web site are familar with Google Analytics (GA). GA users add a bit of Javascript on their web pages. The Javascript has tracking code that executes when visitors request...]]></description>
      <content:encoded><![CDATA[<p>Most readers who operate a web site are familar with <a href="http://code.google.com/apis/analytics/docs/gaConceptsOverview.html" target="_blank">Google Analytics</a> (GA). GA users add a bit of Javascript on their web pages. The Javascript has tracking code that executes when visitors request web pages. The GA tracking code basically sets or updates cookies on the user&#8217;s browser and requests a single-pixel image from the GA servers.</p>
<p>In the last release of the GA code, Google added Event Tracking.   In Google-speak, events are actions that visitors take on a web page that do not generate new pageviews. Examples of these events are, interacting with a Flash player, a AJAX widget or an audio player. In the old GA, webbies could track event-data as a pageview.  However, because event tracking using crude pageviews is not very effective, GA added new functionality they refer to as <em>Event Tracking</em>.</p>
<p>There are 4 components in the GA events data model; <em>Objects</em>, <em>Actions</em>, <em>Labels</em> and <em>Values</em>. GA <em>Objects </em>are areas of web pages that visitors interact with, for example a video player or an Ajax widget.  The second part of the GA event tracking data model is <em>Actions</em>.  <em>Actions</em> are related to an <em>Object, </em>representing <em>Actions</em> that visitors perform on the <em>Object</em>.  <em>Labels</em> further describe <em>Actions,</em> associating context with <em>Actions</em>.   Last, but not least, <em>Values</em> are quantities associated with <em>Labels.</em></p>
<p>Notice how Google defines this event processing model as <em>Event Tracking. </em>  Similar to the reference architecture we described in <a title="What is Complex Event Processing?" rel="bookmark" href="http://www.thecepblog.com/what-is-complex-event-processing/"><span style="color: #105cb6;">What is Complex Event Processing?</span></a>,  operations on single event objects are generally tracking-oriented, often referred to as <em>Event Refinement</em>  in the art-and-science of multisensor data fusion (MSDF). </p>
<p>The GA event tracking model does not (yet) incorporate <em>Situation Refinement</em>, which in MSDF-speak, would be object-to-object processing, representing a higher level of interaction modelling.   </p>
<p>Can you provide examples where object-to-object interaction between various objects on a single web site represents a real-world situational (complex event) model? </p>
<p>Taking this one step further, can you think of some examples where object-to-object interaction between various objects on different web sites represents a real-world situational model?</p>
]]></content:encoded>
      <pubDate>Tue, 22 Jul 2008 15:46:05 +0000</pubDate>
      <category domain="http://securityratty.com/tag/event">event</category>
      <category domain="http://securityratty.com/tag/data model">data model</category>
      <category domain="http://securityratty.com/tag/events data model">events data model</category>
      <category domain="http://securityratty.com/tag/track event-data">track event-data</category>
      <category domain="http://securityratty.com/tag/complex event">complex event</category>
      <category domain="http://securityratty.com/tag/google">google</category>
      <category domain="http://securityratty.com/tag/single event objects">single event objects</category>
      <category domain="http://securityratty.com/tag/model">model</category>
      <category domain="http://securityratty.com/tag/objects">objects</category>
      <source url="http://www.thecepblog.com/2008/07/22/event-tracking-google-style/">Event Tracking Google Style</source>
    </item>
    <item>
      <title><![CDATA[Wee-Fi: Sprint Treo 800w, New Wireless in Portland (Ore.), Hartford (Conn.) Fail]]></title>
      <link>http://securityratty.com/article/f1981ba4dac94faf8437d40c4aeb2ef4</link>
      <guid>http://securityratty.com/article/f1981ba4dac94faf8437d40c4aeb2ef4</guid>
      <description><![CDATA[Palm Treo 800w released: Sprint is offering the EVDO/Wi-Fi phone with Windows Mobile 6.1 and built-in GPS. The phone is $250 with a two-year contract. This is apparently the phone that Palm should...]]></description>
      <content:encoded><![CDATA[<p><img src="http://wifinetnews.com/images/muni_icon.jpg" align="right" border="0" hspace="5" /><a href="http://reviews.cnet.com/smartphones/palm-treo-800w-sprint/4505-6452_7-33142476.html"><strong>Palm Treo 800w released:</strong></a> Sprint is offering the EVDO/Wi-Fi phone with Windows Mobile 6.1 and built-in GPS. The phone is $250 with a two-year contract. This is apparently the phone that Palm should have released a couple of years ago; now, it's unfavorably compared to the iPhone except for keyboard entry and the ability to subscribe ($10/mo) for turn-by-turn live navigation. You'll note that applications are scarcely mentioned, which is one of the linchpins of the iPhone. This is a business phone with productivity tools--unlike the iPhone, you can use on-board apps to create and edit Word and Excel documents, not just view them. There's also no store mentioned for purchasing video and audio, or software for synchronizing them. The reviewer finds the video quality washed out as well, and the 320-by-320-pixel touchscreen is a bit small compared to other smartphones that focus on video.</p>

<p><a href="http://ir.proxim.com/releasedetail.cfm?ReleaseID=321784"><strong>Stephouse steps into Portland, Ore., void:</strong></a> Local firm <a href="http://www.stephouse.net/Enterprise"><strong>Stephouse</strong></a> has built out 5 sq mi of business-grade wireless availability in downtown Portland and 2 sq mi in an underserved part of north Portland using Proxim gear for both Wi-Fi and WiMax service. Wi-Fi use is $20 per month or 1 free hour per day up to 10 free hours per month. The offering seems to focus on the business side, though, in competition with services like Towerstream. Prices aren't listed on the company's site.</p>

<p><a href="http://www.hartfordbusiness.com/news6031.html"><strong>Hartford drops Wi-Fi effort:</strong></a> Connecticut's trouble capital city has given up on city-wide Wi-Fi. No surprise. No firms ready to build for free, no money, no tangible goals. My wife grew up in the suburb to the west--West Hartford, prosaically enough--and speculates that the lack of county-oriented government in Connecticut has doomed Hartford to be a civic wasteland. It's recovering a bit as housing affordability goes up, and there's more going on in the city than there used to be. But there won't be Wi-Fi. Incidentally, the <a href="http://www.marktwainhouse.org/"><strong>Mark Twain House & Museum in Hartford</strong></a>, home of one of the world's first bloggers, is near financial ruin. It's a great piece of American history; I'm hoping it's saved again--it's had many lives since Twain built it and went bankrupt.</p>]]></content:encoded>
      <pubDate>Mon, 14 Jul 2008 06:45:41 +0000</pubDate>
      <category domain="http://securityratty.com/tag/hartford">hartford</category>
      <category domain="http://securityratty.com/tag/portland">portland</category>
      <category domain="http://securityratty.com/tag/city-wide wi-fi">city-wide wi-fi</category>
      <category domain="http://securityratty.com/tag/city">city</category>
      <category domain="http://securityratty.com/tag/business phone">business phone</category>
      <category domain="http://securityratty.com/tag/phone">phone</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/business-grade wireless availability">business-grade wireless availability</category>
      <category domain="http://securityratty.com/tag/free hour">free hour</category>
      <source url="http://wifinetnews.com/archives/008394.html">Wee-Fi: Sprint Treo 800w, New Wireless in Portland (Ore.), Hartford (Conn.) Fail</source>
    </item>
    <item>
      <title><![CDATA[Web Bug Article Updated With PHP/MySQL Source Code]]></title>
      <link>http://securityratty.com/article/e9d239360ab8d539ed4c5a1f2d3f93ab</link>
      <guid>http://securityratty.com/article/e9d239360ab8d539ed4c5a1f2d3f93ab</guid>
      <description><![CDATA[I've updated my very old article on web bugs/web beacons to straighten out some bad formatting and to add an example of a web bug that uses PHP and MySQL. For those that don't know, Web Bugs are...]]></description>
      <content:encoded><![CDATA[I've updated my very old article on
<a href="http://www.irongeek.com/i.php?page=security/webbugs">web bugs/web beacons</a> to straighten out some bad formatting and to add an example of a web bug that uses PHP and MySQL. For those that don't know, Web Bugs are images (Gifs, Jpegs, PNGs, etc.) that companies and organizations put into web pages,  e-mails and other HTML supporting documents to track information about the viewer. These images are sometime know by other names such as tracking bugs, pixel tags, web beacons or clear gifs. What ever the name, their function is largely the same.
<p><a href="http://feeds.feedburner.com/~a/IrongeeksSecuritySite?a=SGSmHv"><img src="http://feeds.feedburner.com/~a/IrongeeksSecuritySite?i=SGSmHv" border="0"></img></a></p><img src="http://feeds.feedburner.com/~r/IrongeeksSecuritySite/~4/326961881" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 04 Jul 2008 14:25:10 +0000</pubDate>
      <category domain="http://securityratty.com/tag/web bug">web bug</category>
      <category domain="http://securityratty.com/tag/bugs">bugs</category>
      <category domain="http://securityratty.com/tag/web bugs">web bugs</category>
      <category domain="http://securityratty.com/tag/web bugsweb beacons">web bugsweb beacons</category>
      <category domain="http://securityratty.com/tag/pixel tags">pixel tags</category>
      <category domain="http://securityratty.com/tag/php">php</category>
      <category domain="http://securityratty.com/tag/web pages">web pages</category>
      <category domain="http://securityratty.com/tag/article">article</category>
      <category domain="http://securityratty.com/tag/track information">track information</category>
      <source url="http://feeds.feedburner.com/~r/IrongeeksSecuritySite/~3/326961881/i.php">Web Bug Article Updated With PHP/MySQL Source Code</source>
    </item>
    <item>
      <title><![CDATA[Web Bug Article Updated With PHP/MySQL Source Code]]></title>
      <link>http://securityratty.com/article/e31ff0cd5a1fc5f561c05c15dff17acc</link>
      <guid>http://securityratty.com/article/e31ff0cd5a1fc5f561c05c15dff17acc</guid>
      <description><![CDATA[I've updated my very old article on web bugs/web beacons to straighten out some bad formatting and to add an example of a web bug that uses PHP and MySQL. For those that don't know, Web Bugs are...]]></description>
      <content:encoded><![CDATA[I've updated my very old article on
<a href="http://www.irongeek.com/i.php?page=security/webbugs">web bugs/web beacons</a> to straighten out some bad formatting and to add an example of a web bug that uses PHP and MySQL. For those that don't know, Web Bugs are images (Gifs, Jpegs, PNGs, etc.) that companies and organizations put into web pages,  e-mails and other HTML supporting documents to track information about the viewer. These images are sometime know by other names such as tracking bugs, pixel tags, web beacons or clear gifs. What ever the name, their function is largely the same.<img src="http://feedproxy.google.com/~r/IrongeeksSecuritySite/~4/fmvxY3VEJ74" height="1" width="1"/>]]></content:encoded>
      <pubDate>Fri, 04 Jul 2008 14:25:10 +0000</pubDate>
      <category domain="http://securityratty.com/tag/web bug">web bug</category>
      <category domain="http://securityratty.com/tag/bugs">bugs</category>
      <category domain="http://securityratty.com/tag/web bugs">web bugs</category>
      <category domain="http://securityratty.com/tag/web bugsweb beacons">web bugsweb beacons</category>
      <category domain="http://securityratty.com/tag/pixel tags">pixel tags</category>
      <category domain="http://securityratty.com/tag/php">php</category>
      <category domain="http://securityratty.com/tag/web pages">web pages</category>
      <category domain="http://securityratty.com/tag/article">article</category>
      <category domain="http://securityratty.com/tag/track information">track information</category>
      <source url="http://feedproxy.google.com/~r/IrongeeksSecuritySite/~3/fmvxY3VEJ74/i.php">Web Bug Article Updated With PHP/MySQL Source Code</source>
    </item>
    <item>
      <title><![CDATA[Web Bug Article Updated With PHP/MySQL Source Code]]></title>
      <link>http://securityratty.com/article/2179c0d353def58de7a0a74ce22576d0</link>
      <guid>http://securityratty.com/article/2179c0d353def58de7a0a74ce22576d0</guid>
      <description><![CDATA[I've updated my very old article on web bugs/web beacons to straighten out some bad formatting and to add an example of a web bug that uses PHP and MySQL. For those that don't know, Web Bugs are...]]></description>
      <content:encoded><![CDATA[I've updated my very old article on
<a href="http://www.irongeek.com/i.php?page=security/webbugs">web bugs/web beacons</a> to straighten out some bad formatting and to add an example of a web bug that uses PHP and MySQL. For those that don't know, Web Bugs are images (Gifs, Jpegs, PNGs, etc.) that companies and organizations put into web pages,  e-mails and other HTML supporting documents to track information about the viewer. These images are sometime know by other names such as tracking bugs, pixel tags, web beacons or clear gifs. What ever the name, their function is largely the same.]]></content:encoded>
      <pubDate>Fri, 04 Jul 2008 14:25:10 +0000</pubDate>
      <category domain="http://securityratty.com/tag/web bug">web bug</category>
      <category domain="http://securityratty.com/tag/bugs">bugs</category>
      <category domain="http://securityratty.com/tag/web bugs">web bugs</category>
      <category domain="http://securityratty.com/tag/web bugsweb beacons">web bugsweb beacons</category>
      <category domain="http://securityratty.com/tag/pixel tags">pixel tags</category>
      <category domain="http://securityratty.com/tag/php">php</category>
      <category domain="http://securityratty.com/tag/web pages">web pages</category>
      <category domain="http://securityratty.com/tag/article">article</category>
      <category domain="http://securityratty.com/tag/track information">track information</category>
      <source url="http://www.irongeek.com/i.php?page=security/webbugs">Web Bug Article Updated With PHP/MySQL Source Code</source>
    </item>
    <item>
      <title><![CDATA[Moto Q9 DoS and Fingerprinting]]></title>
      <link>http://securityratty.com/article/1884eec59e2c39fbe9481febcc0dbcd8</link>
      <guid>http://securityratty.com/article/1884eec59e2c39fbe9481febcc0dbcd8</guid>
      <description><![CDATA[So I got a new smart phone, which has been highly entertaining when Im stuck in airports, or waiting for meetings or whatever. Its a Moto-Q9 . Boy is it sexy - lots of features, fairly fast. It kinda...]]></description>
      <content:encoded><![CDATA[<p>So I got a new smart phone, which has been highly entertaining when I&#8217;m stuck in airports, or waiting for meetings or whatever.  It&#8217;s a <A HREF="http://www.unwiredview.com/2007/04/20/moto-q-q9-becomes-moto-q-9h-tries-digg-and-delicious-for-marketing">Moto-Q9</a>.  Boy is it sexy - lots of features, fairly fast.  It kinda reminds me of what Windows95 used to be - usable but not fast.  It has the new version of Microsoft&#8217;s mobile operating system on there with direct push on there (similar to Blackberry which saves battery life, I&#8217;m sure, for real time email), a 2mega pixel camera, etc&#8230; etc&#8230;  Fun little toy.  So <A HREF="http://ha.ckers.org/blog/about/">id and I</a> were driving around town and I was messing with my phone as he drove and it suddenly occurred to me, I had never really toyed with the browser.  So I start messing around with the settings, and of course turn off JavaScript.  But then I realized, I had never tested it with JavaScript turned on.  That&#8217;s when I went to <A HREF="http://ha.ckers.org/mr-t/">Mr. T</A>.  What did Mr. T do to the Moto Q9 (which is running Opera, by the way)?  It crashed it immediately.</p>
<p>So then I start messing around with it, and I narrow it down to one of the things that&#8217;s more legacy than anything, the <A HREF="http://ha.ckers.org/weird/mhtml.html">now fixed, MS mhtml bug</a>.  Uh oh.  Yup, the mhtml bug appears to crash mobile Opera instantly.  So back to keeping JS turned off, I guess (I haven&#8217;t tested if there is another way to cause the crash using a redirection or an iframe, but it takes a long time to test, so I&#8217;ll leave that to another day).</p>
<p>Then I start messing with the other options, like the &#8220;Identify as&#8221; function.  With it turned to &#8220;handheld device&#8221; the user agent reads, &#8220;MOT-Q9/01.04.35R Mozilla/4.0 (compatible; MSIE 6.0; Windows CE; Smartphone; 320&#215;240) Opera 8.65 UP.Link/6.3.1.17.0&#8243;.  Eesh!  It gives my actual device type! So then I turn the setting to &#8220;desktop computer&#8221; it turns to &#8220;Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Opera 8.65 [en] UP.Link/6.3.1.17.0&#8243;.  Okay, fair enough, that appears to be the more secure setting as at least it doesn&#8217;t say the revision and model number of the phone.</p>
<p>That is, of course, until you look at the rest of the headers:</p>
<p>
<blockquote><B>HTTP_ACCEPT</B> = application/xhtml+xml, application/vnd.wap.xhtml+xml, text/html, text/vnd.wap.wml, application/vnd.wap.wmlc, */*,text/x-hdml,image/mng,image/x-mng,video/mng,video/x-mng,image/bmp,text/html<br />
<B>HTTP_ACCEPT_CHARSET</B> = iso-8859-1, utf-8, utf-16, *;q=0.1,*<br />
<B>HTTP_ACCEPT_ENCODING</B> = deflate, gzip<br />
<B>HTTP_ACCEPT_LANGUAGE</B> = en<br />
<B>HTTP_CACHE_CONTROL</B> = no-cache<br />
<B>HTTP_USER_AGENT</B> = Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) Opera 8.65 [en] UP.Link/6.3.1.17.0<br />
<B>HTTP_VIA</B> = 1.1 alnmagr1fe09WAP2-mbl<br />
<B>HTTP_X_UP_DEVCAP_ACCEPT_LANGUAGE</B> = en<br />
<B>HTTP_X_UP_DEVCAP_CHARSET</B> = utf-8,ISO-8859-1,US-ASCII,UTF-16,GB2312,BIG5<br />
<B>HTTP_X_UP_DEVCAP_ISCOLOR</B> = 1<br />
<B>HTTP_X_UP_DEVCAP_NUMSOFTKEYS</B> = 2<br />
<B>HTTP_X_UP_DEVCAP_SCREENDEPTH</B> = 16<br />
<B>HTTP_X_UP_DEVCAP_SCREENPIXELS</B> = 320,240<br />
<B>HTTP_X_UP_DEVCAP_SMARTDIALING</B> = 1<br />
<B>HTTP_X_UP_SUBNO</B> = ppu_105cb54061e_vmag.mycingular.net<br />
<B>HTTP_X_WAP_PROFILE</B> = &#8220;<A HREF="http://uaprof.motorola.com/phoneconfig/q-umts/Profile/mot-q9.rdf">http://uaprof.motorola.com/phoneconfig/q-umts/Profile/mot-q9.rdf</A></p></blockquote>
<p>Okay, so now we know my provider how big my screen is, that it&#8217;s a mobile device of course (the reference to wap), but more importantly we get the actual profile of the phone in the RDF file with all the settings, so you know exactly what may or may not work against the phone!  Geez!  Talk about giving up too much info!  I hardly consider myself a cell phone hacker (for that you&#8217;ll need to talk with the Flexillis guys) but in 5 minutes I found all that - that&#8217;s not a good start.  Whelp, so much for surfing from my phone!</p>
<!--Sat, 12 January 2008 14:01:42 +000-->]]></content:encoded>
      <pubDate>Sat, 12 Jan 2008 15:10:21 +0000</pubDate>
      <category domain="http://securityratty.com/tag/accept language">accept language</category>
      <category domain="http://securityratty.com/tag/accept">accept</category>
      <category domain="http://securityratty.com/tag/devcap">devcap</category>
      <category domain="http://securityratty.com/tag/devcap charset">devcap charset</category>
      <category domain="http://securityratty.com/tag/devcap numsoftkeys">devcap numsoftkeys</category>
      <category domain="http://securityratty.com/tag/accept charset">accept charset</category>
      <category domain="http://securityratty.com/tag/devcap screenpixels">devcap screenpixels</category>
      <category domain="http://securityratty.com/tag/cell phone hacker">cell phone hacker</category>
      <category domain="http://securityratty.com/tag/phone">phone</category>
      <source url="http://ha.ckers.org/blog/20080112/moto-q9-dos-and-fingerprinting/">Moto Q9 DoS and Fingerprinting</source>
    </item>
  </channel>
</rss>
