News for hackers. Stuff that matters.

A comment on You can’t buy Congress’s web history – that's not how any of this works. Parent comment

Re:You can’t buy Congress’s web history – that's not how any... by thinkling on Thursday March 30, 2017 @01:36AM (#13993175)
Buy aggregate browsing history for users in DC and nearby area codes. Look for browsing of .gov websites that are effectively government intranet tools. Correlate with access to RNC sites, Infowars, FoxNews, etc. While I'm sure you would both miss people and have some false positives, you'll likely also identify many members of congress and their staff.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by hackinthebochs on Thursday March 30, 2017 @01:58AM (#13993259)
Google searches have the query in the URL... probably most "important" people google themselves occasionally.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by tedunangst on Thursday March 30, 2017 @02:00AM (#13993267)
Why are important people searching google without https?
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by daenney on Thursday March 30, 2017 @04:26AM (#13993766)
Important doesn't equal or imply smart nor being good at what you do.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by AnkhMorporkian on Thursday March 30, 2017 @06:53AM (#13994316)
They aren't. Google upgrades to HTTPS automatically, and the old method of overriding the DNS to an unsecured Google server stopped working years ago. Same with Bing, Yahoo, DDG, etc. No SSL, no search in today's world.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by hexadec0079 on Thursday March 30, 2017 @08:33AM (#13994784)
HTTPS will not protect the URL of the request, just the contents though.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by temprature on Thursday March 30, 2017 @09:54AM (#13995334)
This is wrong. The domain name is revealed through SNI but the path of the URL is sent as part of the encrypted HTTP request.
[ Parent | on HN ]
Re:You can’t buy Congress’s web history – that's not how any... by UncleMeat on Thursday March 30, 2017 @05:10PM (#13998885)
HTTPS protects URL parameters. That stuff doesn't go to the DNS request.
[ Parent | on HN ]