[iwar] [fc:Mistype.a.URL?.M$N.knows.what.you.typed.]

From: Fred Cohen (fc@all.net)
Date: 2002-03-06 21:06:46

Next message: Fred Cohen: "[iwar] [fc:U.S..Reviewing.Cuba,.Cyberattacks]"
Previous message: Fred Cohen: "[iwar] [fc:Stop.Him.Before.He.Hacks.Again]"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Message-Id: <200203070506.g2756lP05704@red.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
From: Fred Cohen <fc@all.net>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Precedence: bulk
Date: Wed, 6 Mar 2002 21:06:46 -0800 (PST)
Subject: [iwar] [fc:Mistype.a.URL?.M$N.knows.what.you.typed.]
Reply-To: iwar@yahoogroups.com
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

This feature is known as "Autosearch".  Even a cursory search for details on
it through Microsoft's site or Google would have returned this knowledge
base article (Q221754):

	http://support.microsoft.com/default.aspx?scid=kb;EN-US;q221754

The article details how it works, why they have it, and how to configure it.
If you want to disable its pretty simple: open the search paine in IE, click
the 'Customize' button, click click the 'Autosearch' button and choose 'Do
Not Search from the Address bar'.  This will eliminate the traffic.  You can
confirm this by using snort or any decent personal firewall.

Many people (especially newbies) find this feature very handy.
Additionally, you can configure this handy feature to go to your favorite
search engine.

--dan heskett
...
Subject: Mistype a URL? M$N knows what you typed.

If you've ever used IE and typed in "ww.foo.com" into the path, you
will end up at a web page generated by an MSN web site.  How did I
get this, you ask?  Well, you definately cannot find anything in the
"Internet Options" panels which lets you configure this.  If you
fire up regedit, under

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Search

you will find "CustomizeSearch" and "SearchAssistant".  Unless you
want all of the URLs which fail to resolve in domain names to be
handed off to MSN.  Furthermore, there are cookies involved with
these web sites.  These "helpers" appear to only be used when there
are no proxies enabled but it would be a nice if there was an easier
way to stop Microsoft knowing every bad URL that gets typed, etc,
by those with no proxy.

FWIW, for me CustomizeSearch defaults to:
<a href="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm">http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm>
and SearchAssistant to:
<a href="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm">http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm>

Darren

------------------------ Yahoo! Groups Sponsor ---------------------~-->
Tiny Wireless Camera under $80!
Order Now! FREE VCR Commander!
Click Here - Only 1 Day Left!
http://us.click.yahoo.com/nuyOHD/7.PDAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/

Next message: Fred Cohen: "[iwar] [fc:U.S..Reviewing.Cuba,.Cyberattacks]"
Previous message: Fred Cohen: "[iwar] [fc:Stop.Him.Before.He.Hacks.Again]"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.2 : 2002-12-31 02:15:04 PST