I hearded of this service before..
A popular privacy service that promises anonymous Web surfing has pledged to fix a bug that could expose users' online identity. Anonymizer.com, the oldest anonymous-browsing service on the Internet, gives Internet users the ability to visit Web sites without revealing such private information as their Internet protocol (IP) address, browser type and operating system. The Web-based service, which requires no special software downloads, uses technology called a proxy server to fetch Web pages on users' behalf, shielding their online identity. |
But a new flaw in the service's handling of JavaScript, a scripting language developed by Netscape, enables a snoopy site to defeat Anonymizer's cloaking ability. By adding a few lines of special code, a site could force a new browser frame to be spawned without the proxy server. As a result, the site could capture the visitor's true IP address, cookies and other browser data.
Anonymizer founder and president Lance Cottrell told Newsbytes Thursday that the company will correct the new flaw by Friday.
Anonymizer has been afflicted with JavaScript bugs in the past. In 1999, privacy advocate Richard M. Smith discovered a similar flaw, which was subsequently patched by the company.
It's important from the quality standpoint that Anonymizer addresses these issues as they come up. If somebody is motivated, they can in most cases match up an IP address to a person,said Smith.
Besides the free, ad-supported version of its online privacy service, the company provides a premium offering that costs $50 per year.
Check the full story on it here
Source: Antionline
