new header: Weferer

Kristin Spinn and Damien Morton kspinn@nyc.rr.com
Sat, 19 Jan 2002 14:06:11 -0500


This is a multi-part message in MIME format.

------=_NextPart_000_0009_01C1A0F2.731E2610
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Doing some packet sniffing.

Looks like the browser helper object that Google uses for its Toolbar =
adds a new HTTP header.

Weferer: HJEXXIMQZUIVOTQNQEMSFDULHPQQWOYIYZUNNYCGPKYLEJGDGVCJVTLBXFGGM

Im guessing this is an encrypted referer field?

Anyone else seen this?

------=_NextPart_000_0009_01C1A0F2.731E2610
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4912.300" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Doing some packet =
sniffing.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Looks like the browser helper object =
that Google=20
uses for its Toolbar adds a new HTTP header.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Weferer:=20
HJEXXIMQZUIVOTQNQEMSFDULHPQQWOYIYZUNNYCGPKYLEJGDGVCJVTLBXFGGM</FONT></DIV=
>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Im guessing this is an encrypted =
referer=20
field?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Anyone else seen =
this?</FONT></DIV></BODY></HTML>

------=_NextPart_000_0009_01C1A0F2.731E2610--