An Appeal To Hosting Providers and Domain Registrars

[DangerX !!!]

Tell me something, why serious companies like you do this:

<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
var pageTracker = _gat._getTracker("UA-FUCK-OFF-1");
pageTracker._trackPageview();
</script>

Even big hosting and domain registrars:

Reality Check Network
NationalNet
Moniker
Dotster
Webair
ISPRIME
NetworkSolutions
Rackspace
Namecheap
Hostgator
Another Company
Another Company
Another Company
Another Company
Another Company
Another Company
Another Company
Another Company
Another Company
Another Company
Another Company


Really, almost all, all top ones!

I am of course not noob and it does not affect me. I also do nothing that I would have to worry about but... what the fuck?! Even in domain panel? Even in the hosting control panel? Cannot a man feel not "googled" even in home?! I also do not understand why such great hosting companies would use JavaScript extension like jQuery hosted with another company like Google? Common! Do not be cheap assess! Use your own hosted statistics and scripts! You can afford it, can't you?!
__________________

[rowan]

I agree, as well as the big brother factor I think it looks quite unprofessional to be relying on third party javascript for analytics... including inside protected member areas!!

FWIW, I have google-analytics.com blocked.

[V_RocKs]

I guess I need to wake the fuck up...

[Markul]

Uhhhhh

[darksoul]

so, Reality Check Network is back ?
weren't they bankrupt or something ?

[woj]

a bit paranoid?

[Coup]

Yeah? What the fuck hosting companies?

[u-Bob]

Originally Posted by rowan

I agree, as well as the big brother factor I think it looks quite unprofessional to be relying on third party javascript for analytics... including inside protected member areas!!

true!

Originally Posted by rowan

FWIW, I have google-analytics.com blocked.

same here.

[DangerX !!!]

Originally Posted by woj

a bit paranoid?

Paranoid... not, I'm just a free man that is aware of the rules.

But for the purpose of further explanation let's assume I am a noob and I have a gmail or another service with Google associated with my personal data or let's say that I visit a specific page not necessarily Google's but using Google's scripts with my personal data and after that I visit other sites frequently like the ones mentioned above whose also have Google Analytics or other Google's scripts..
Automatically Google associates my personal page with all other websites I visit. Perhaps I don't want Google or any other third party company to know what websites I visit. Presuming that I have not Google features in my browser (geo location, safebrowsing, antiphish check when bookmarking etc.) the only way Google knows what websites I visit is their scripts embedded on websites I visit. Google already messes with user privacy changing the rules and claiming the right to keep personal data in their backup system for x period. I don?t know future and perhaps I don't want in 10 years all my personal data and the list of all the websites I have visited stored by them for a reason I'm not aware today.
Domain registrars, hosting providers and payment processors are specific type of online services with very sensitive business data, I wouldn't like a third party to know about my business activities.

Many of you already stated that you block Google Analytics and I can bet that big fish also do because they value their privacy so, perhaps Google Analytics isn?t the most accurate statistics as it doesn?t cover many of your clients.

A quick example:

Home page (favorite and most frequently visited website cough cough)-> Porn site with some ugly and embarrassing fetish -> My hosting provider -> News websites and clicks on specific pages that interest me the most -> A personal profile somewhere (web forum or social network or something like this) -> Google -> I search to buy something -> Again my favorite porn site with some ugly embarrassing fetish -> My Domain Registrar -> A photos of my friend or family member on Picassa or Blogger -> Back To my personal page (web forum or social network or something like this)

And all those pages with Google Analytics and other Google hosted scripts. Now this is only an example I've created on a fly, you could add much more and if you are on static IP address or you don't clean your cookies the list would be enormously long.

So, I appeal, if you read this you are the CEO and you can make a change, at least throw it out of member area please. Respect your clients privacy! I don't mind you using your own statistics inside but please cut off third parties!

Now I have nothing I should be afraid of, I'm aware of my online security, I'm righteous and I have my hands clean. But when a man is young he may do many mistakes, everyone does also everyone is a noob once, I also was.

__________________

[CYF]

Firefox + noscript works wonders.

[rowan]

Don't forget that google acquired recaptcha, that's like an instant analytics-like device all of its own...

[papill0n]

you raise some good points there

[DangerX !!!]

Originally Posted by CYF

Firefox + noscript works wonders.

Yeah, it probably does the job if you disable other Google stuff in the config file as well.

Originally Posted by rowan

Don't forget that google acquired recaptcha, that's like an instant analytics-like device all of its own...

Yes, I know, however I have never used it for myself, I have custom built protection forms by myself and standard yet customized on-board captcha, I have never had spam problems, at least not caused by bad bots. Unfortunately, Recaptcha is just a small drop in a great ocean of services that currently belong to Google. What Google cannot build better Google buys.

Originally Posted by papill0n

you raise some good points there

Many of those companies don't post here but some do that's why I have posted it here.

Here are some more:
Phatservers aka AmeriNOC
Dynadot
Softlayer
Yellowfiber
Cyberwurx
Register.com
PacificRack
Another Company
Another Company
Another Company
...

I haven't checked all control panels, though many do have it inside and of course all the mentioned above have it on landing pages, that's for sure, I've checked.

I post your names so perhaps you will find this thread while searching for customer issue threads.

I feel uncomfortable with third party hosted scripts in your control panels, login forms and order forms and that's why I call for a change.

I believe those companies are not only big enough to afford their own hosted scripts but I think they could also go even step further and have a custom solution that will suit their needs best.
__________________

[DangerX !!!]

Bump!

Let's be honest how many of you going to domain registrar or host page examine what's going on in the page code?

Well, I was talking a lot about Google but Google is not the only one shady third party present in the source code of registrars and hosting providers websites. For example you can find something like this embedded in an iframe:

<Iframe src="http://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2FXXXr emovednameXXX&amp;layout=button_count&amp;show_fac es=false&amp;width=80&amp;action=like&amp;font=ver dana&amp;colorscheme=dark&amp;height=21" scrolling="no" frameborder="0" style="border:none; overflowdden; width:80px; height:21px;" allowTransparency="true"></iframe>

How cool is that? It's well known whose cock FB sucks, perhaps it's even more shady than big G. Iframe basically makes you FB's slave if you know what I mean lol. =)

Ok. I've gave a shot and I’ve checked out "sign in" page of one of the biggest domain registrars Moniker.com

Here is what I’ve found:

http://www.veruta.com/scripts/trackmerchant.js
http://www.bbb.org/south-east-florida/click-to-check.js
http://www.google-analytics.com/ga.js

Should I go after all? Starting from control panels (the most important) through forms and ending on homepages?

I think about doing it and then presenting the detailed list of all bigger domain registrars and hosts and posting it on all major webmaster boards just for the informational purposes to make less-aware folks aware of that they are not alone when registering a domain or messing with their servers.

__________________

[ThatOtherGuy - BANNED FOR LIFE]

I am betting most of you have no idea what its for.

[yabate]

Originally Posted by ThatOtherGuy

I am betting most of you have no idea what its for.

I agree..

[rowan]

Originally Posted by DangerX !!!

Yes, I know, however I have never used it for myself, I have custom built protection forms by myself and standard yet customized on-board captcha, I have never had spam problems, at least not caused by bad bots.

If you've loaded a page with recaptcha on it then you've already "used" it. They set a cookie so they can track you from site to site just as they can with google-analytics.

Since I can't block recaptcha without losing functionality on many sites, I force it to be loaded via tor. (Same with google.com)

[DangerX !!!]

Originally Posted by rowan

If you've loaded a page with recaptcha on it then you've already "used" it. They set a cookie so they can track you from site to site just as they can with google-analytics.

Since I can't block recaptcha without losing functionality on many sites, I force it to be loaded via tor. (Same with google.com)

Oh crap, man you are right. You realize to how serious level it grows. But common people (read sheep) will call us "paranoid". If trying to be a free man means "paranoid" then I'm paranoid. But then webmasters? I've always though they are more advanced users of computers and the web, but what do I know, I see "Google site verification code" on almost every site. Orwell must have nice fun in his grave. Fuck, do you know that GFY.com added Google Analytics to the board code as well? Yes, Welcome to World of 1984, Welcome to the Google's World!
__________________

[cooldude7]

analytics are best free solutions for web sites.,

[mpahlca]

Google Analytics isnt free if your of any decent size. So if you are using it and you are a big company it costs money.

[cooldude7]

Originally Posted by mpahlca

Google Analytics isnt free if your of any decent size. So if you are using it and you are a big company it costs money.

where is says , that u have to pay for google analytics ???

[DangerX !!!]

No comment from any hosting company?

I appeal one more time, throw it out from log-in forms and members area. There is really no need for adverts and third party analytics inside members area and on log-in page.

Bump for Freedom !!!

Perhaps I'm standing on the lost position, I guess I should concentrate more on my tiny ass instead of fighting for another man's rights to privacy and freedom.

That's my last post on this topic.

Remember ppl, you still have a choice and it all depends on you how you care about your online privacy, at least for now, in future you may be forced and you may have no choice. Deep packet inspection is coming soon, good luck everyone.
__________________

[InfoGuy]

Did you know that Google also uses tracking codes for all the links in their SERPs and hides them by changing the text in the status bar? With this information, Google can determine bounce rates for sites without Google Analytics, by checking how long it takes for a user to click on another search result.

Let's also not forget that Google has their own domain registry which gives them access to WHOIS data. It's very easy for them to put all the pieces together for a complete profile on webmasters.

[Spudstr]

I'm failing to see where the problem is? So we want to know/keep track see whats being used/access the most inside the panels? Is it wrong to collect stats? I am highly confused.

If its in regards with the js files being hosted somewhere what matter does it make? Less stuff to keep track of on our own server, were not trying to break speed records for page loads within our own CMS's.

[Spudstr]

Originally Posted by DangerX !!!

Yeah, it probably does the job if you disable other Google stuff in the config file as well.



Yes, I know, however I have never used it for myself, I have custom built protection forms by myself and standard yet customized on-board captcha, I have never had spam problems, at least not caused by bad bots. Unfortunately, Recaptcha is just a small drop in a great ocean of services that currently belong to Google. What Google cannot build better Google buys.






Many of those companies don't post here but some do that's why I have posted it here.

Here are some more:
Phatservers aka AmeriNOC
Dynadot
Softlayer
Yellowfiber
Cyberwurx
Register.com
PacificRack
Another Company
Another Company
Another Company
...

I haven't checked all control panels, though many do have it inside and of course all the mentioned above have it on landing pages, that's for sure, I've checked.

I post your names so perhaps you will find this thread while searching for customer issue threads.

I feel uncomfortable with third party hosted scripts in your control panels, login forms and order forms and that's why I call for a change.

I believe those companies are not only big enough to afford their own hosted scripts but I think they could also go even step further and have a custom solution that will suit their needs best.
__________________

fwiw, we only have google stuff on our actual website, not in our CMS.

[DangerX !!!]

Originally Posted by InfoGuy

Did you know that Google also uses tracking codes for all the links in their SERPs and hides them by changing the text in the status bar? With this information, Google can determine bounce rates for sites without Google Analytics, by checking how long it takes for a user to click on another search result.

Let's also not forget that Google has their own domain registry which gives them access to WHOIS data. It's very easy for them to put all the pieces together for a complete profile on webmasters.

Yeah, I know it. I use my own self-coded browser and I visit favourite websites from bookmarks. I bet most ppl do it from bookmarks, all in all that's what bookmarks are for. Ppl just need to remember that by default certain browsers like Opera, FF or Chrome do so called safe browsing website check when playing with bookmarks and the info is passed on to Google.

Originally Posted by Spudstr

I'm failing to see where the problem is? So we want to know/keep track see whats being used/access the most inside the panels? Is it wrong to collect stats? I am highly confused.

If its in regards with the js files being hosted somewhere what matter does it make? Less stuff to keep track of on our own server, were not trying to break speed records for page loads within our own CMS's.

Originally Posted by Spudstr

fwiw, we only have google stuff on our actual website, not in our CMS.

Sorry, as mentioned above I haven't checked all logging forms and control panels. I wouldn't also like to list some certain hosts that I've checked not posting all, someone could take it as and offense. That's very good that you don't have it inside members area. Well, there is nothing wrong with tracking your clients, the problem is when third party is involved.





Ok. to clear up thoughts of some of you. I'm not a noob and as stated before it doesn't affect me. I'm not paranoid, at least if it comes to websites. I know how those scripts function and what information is passed on. There is also no single connection in or out of my PC I wouldn't be aware of it and this is no about me. But I don't know future and I would like to save your asses because I do business with many of you that's why I was thinking to myself that perhaps it was a good idea to post it here.
__________________