Phoning Home Javascript Removal - 4U

[Vortex]

Saving web pages to your hard drive does nothing to stop a
web pages from reporting back home that you are viewing the web page.

Web pages are riddled, top, bottom and middle, with JavaScript code from Google
as well as others that phone home and log your viewing web pages even if you saved it to your hard drive.

Some of this code is not on your hard drive but on a server
some where and can be changed at any time by anyone that
has access to it.

I grew tied of this never ending Risk.
I wrote some visual basic code contained in a Word document which hunts
down all *.html or *.htm files. It processes from where is it located upon your hard drive
or from it's parent directory downward only. Where you place the
Word document dictates from where is starts working from.
It rewrites the web pages, removing all JavaScript code and
requests to load external JavaScript files.
All *.js or requested external files found upon the hard drive are deleted.

Upon opening the word document you should, unless you turned it off,
see a dialog box pop up. My version has 3 buttons.
If you click the "Enable Macros" you will be able to remove JavaScrpt
code from web pages.

I'm only sorry I could not create a stand-alone program which
does not require Word to do this task, maybe someone else can.

I've run this code for 4 months now on a few hundred web pages
and I've seen no bad ill side effects. If you believe it is functioning
wrongly please let me know.

[roxaz]

cool stuff, but removing all java scripts might damage the content. did you apply any logic on what js scripts should be removed, or did you remove all scripts you found. if you applied any logic then post it and ill make an application in c# (standalone executable, .NET framework will be required however).

[Vortex]

unplugging the PHONE to Home

cool stuff, but removing all java scripts might damage the content. did you apply any logic on what js scripts should be removed, or did you remove all scripts you found. if you applied any logic then post it and ill make an application in c# (standalone executable, .NET framework will be required however).

This isn't just a Google thing, for example, a I found a government agency
(know by 3 letters) has included Google as well as a 3rd party code which
both are phoning home.

Does all sub-directories from where the document is or from the parent
it asks a question at the beginning from where it should start working.

Logic, nope .. Finds tags importing external javascript code removes those.
Finds <script>Code</script> tags anywhere within the web pages, removes those and
FLAT OUT deletes ALL *.js files found , web page related or not.
SO, don't go running upon a directory you are developing web pages in.

If you could compile it without .Net that would be of use to myself and others
that do not have .NET. .Net might work for that does not have WORD though.

Content of the page can't be damaged unless it is coming from an external
source via javascript and is not on your hard drive.
If the web page dynamically created internally, ok.. that's not done very much.
Generally it only would mess up code driven things like a menu or something like that.

Test it out, copy a few directories into a new one and run it upon
the copied directories and see.

have fun unplugging the PHONE to Home.. I know I do.
Randy

[amigo]

The fact that you have visited a webpage already reflects in the server log and whether a script inside a page "phones home" afterwards is irrelevant at that point. Your activity has already been logged and could potentially become part of your "on-line" profile.

Now, at least for the users of Firefox browser, there's an extension called NoScript which literally prevents ALL javascript from execution upon page load, unless approved by the user. This comes handy not because of "phoning home" but in case of more sinister activities that could potentially harm your system or your person in some way.

With NoScript you can setup trusted and untrusted sites and hosts etc, it is pretty flexible and I'd recommend it to anyone, regardless of "phone home" concerns.

On the other hand, to really be more anonymous one could switch to using TOR or some anonymizing proxy as your gateway to the Interweb.

[Vortex]

The fact that you have visited a webpage already reflects in the server log and whether a script inside a page "phones home" afterwards is irrelevant at that point. Your activity has already been logged and could potentially become part of your "on-line" profile.

Thank you Amigo,
So true,
Valid points and those are possible ways to deal with the problem
that others should be made aware of as options available to them.


I know of all those other ways and I choose to write code to do it
as the easiest way to deal with this issue, as it fit my needs.
I was concerned with the repeating "Phoning Home" after
I downloaded the web pages.

It's a one time fix, kinda like taking your pet to the vet to be FIXED.

Doesn't effect your online browser setup or require configuration of it,
only effects the downloaded web pages.
It's an alternative way to deal with the issue without much though required or learning involved.

Randy

[roxaz]

If you could compile it without .Net that would be of use to myself and others
that do not have .NET.

come on, .NET is essential these days, just like java. anyway making it in c/c++ takes longer as native windows api should be used. that brings work to much lower level and takes more time. i spend enough time coding stuff in asm and thats quite enough for me so dont be lazy ass and download .NET ill be a nice guy and include links for ya

.NET 2.0 x86
.NET 2.0 x64

2.0v will be just enough, but if there are some update-crazy ppl - google will get you v3.5!

EDIT:
Compiled binaries are located in \JSRapist\JSRapist\bin\Relase and \JSRapist\JSRapist\bin\Debug. Source code included ofcourse Dont forget to rename archive to JSRapist.rar (delete .doc ending). Stupid forum attachment rules...

[Vortex]

roxaz,

You kinda missed the whole point.
It's the security issues.
Yes I AM lazy, I'll walk that extra mile if it means,
I'll never have to walk it again. That's why I wrote the code.

Last time I thought not very long and not very hard about it
I concluded any and all software could be suspect. YES
you could call that paranoid or you could call it waking up.
There's two sides to every fence, I'd prefer to stay on the
side of the fence that is not enclosed.

All window$ OS starting with XP (it might be in ME) has build in to it a
subscription feature where *they* decide to charge you, oh, yearly,
monthly or by the hour, whatever .. you are not going to be accessing
the internet without paying your dues. This fact missed the news,
but wait.. that would be news worth reporting, it seems.

I, personally, don't load any software I can live without.
When I get really hard pressed I use a virtual machine to load
software upon when I am expecting to rarely use it. All I do
is delete the virtual hard drive and I've removed that puppy.
No failed uninstall for me.

Yes, phoning home is an issue and it isn't just javascript.
I suggest that everyone turn off automatic updating of their OS
if you have not already done so and get a non-OS firewall installed.

Trying to stay awake.
Randy

[Matthew Jones]

1 word...

Opera

IE creates as many problems as it causes.

Matt

[roxaz]

Vortex i bet you are from USA

[amigo]

As Vortex outlined above, everyone should be more conscientious about their on-line activities because many people get their identities stolen, or worse, in today's world.

Yes, most think it will not happen to them until it does and so being observant is important part of prevention. Getting educated about handling possible risks is also important and if you are not aware of those risks, how do you get educated about them at the first place...

[roxaz]

it does not take a lot to be safe... just get a hardware firewall (im behind 2 lol), dont watch porn unless you have good antivirus, and get a proxy. this however wont save anyone from social engineering..

[Vortex]

Security Education

As Vortex outlined above, everyone should be more conscientious about their on-line activities because many people get their identities stolen, or worse, in today's world.

Yes, most think it will not happen to them until it does and so being observant is important part of prevention. Getting educated about handling possible risks is also important and if you are not aware of those risks, how do you get educated about them at the first place...

Hi amigo,

Creator of SpinRite and Leo Laporte do weekly security tech issues internet radio broadcasts
Currently has 177 weeks of shows archived for your FREE listening pleasure
(ah, I mean .. education!)
GRC*|*Security Now!* I give it two
WARNING: some of the topics are pretty technical, even if you don't
understand what they are talking about, it gives you heads up on issues you
can further research in a more not technical manner else where and then go back if you need those hard to find technical stuff.

Oh, don't go loading software just because you heard about it on the radio
shows or Leo has it, Leo loads EVERYTHING! These guys are experts,
know what they are doing and have already secured their computers ..
That's your first task, securing your computer, before loading anything else.

Firefox older version can be obtained here.
Stop phoning home to fix IE and supporting the M$
security issue creation machine

Just trying not to be evil (see quote below)
Randy