[145148] in North American Network Operators' Group
Re: facebook spying on us?
daemon@ATHENA.MIT.EDU (Keegan Holley)
Thu Sep 29 10:57:29 2011
In-Reply-To: <CAPLq3UOHKF3kSRkcqyjBJpJ3wLoJtrJG2ehqiiz1Mv3Sog8P=Q@mail.gmail.com>
From: Keegan Holley <keegan.holley@sungard.com>
Date: Thu, 29 Sep 2011 10:55:07 -0400
To: Glen Kent <glen.kent@gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Well what's making the connection? It looks like unencrypted http, if your
social security number and last known addresses are streaming by you should
be able to see them. It's a bit of a jump to say that FB (not that I'm
particularly fond of them) is spying on you from a single netstat command.
You probably clicked login with facebook for some site and it's just
autologging you in or overzealous prefetching. Either way, I think we can
all stop making tinfoil hats now...
2011/9/29 Glen Kent <glen.kent@gmail.com>
> Hi,
>
> I see that i have multiple TCP sessions established with facebook.
> They come up even after i reboot my laptop and dont login to facebook!
>
> D:\Documents and Settings\gkent>netstat -a | more
>
> Active Connections
>
> Proto Local Address Foreign Address State
> TCP gkent:3974 www-10-02-snc5.facebook.com:http ESTABLISHED
> TCP gkent:3977 www-11-05-prn1.facebook.com:http ESTABLISHED
> TCP gkent:3665
> a184-84-111-139.deploy.akamaitechnologies.com:http ESTABLISHED
>
> [clipped]
>
> Any idea why these connections are established (with facebook and
> akamaitechnologies) and how i can kill them? Since my laptop has
> several connections open with facebook, what kind of information is
> flowing there?
>
> I also wonder about the kind of servers facebook must be having to be
> able to manage millions of TCP connections that must be terminating
> there.
>
> Glen
>
>
>
