Is Https Url/link Logging Safe ?

[bangali_beta 11]

Ubotters,

 

I've mentioned in another thread that I'm building a web browser that logs what you're watching so your fans/subscribers/followers can follow you around online from website to website and webpage to webpage and while they do you'll earn money from clicks for every link following.

Now, I programmed the bot/browser (to make things easier let's call the bot a "browser") not to log the https urls since https is for secure server and on secure server you submit your credit card or sensitive data. Some webforms use the GET method in php and inject your form inputs (your credit card details maybe) into the url (https url). I didn't want the browser logging the https url that contains your sensitive data and then announcing it to your fans/followers/subscribers.

Another example, if you login to your paypal account or your gmail account then the pages you see after you login to your accounts carry the https in their urls. I thought if the bot starts logging the https urls then it would start logging the first pages inside your accounts and announce it to your fans/followers/subscribers and they'd enter your accounts if the PASSWORD is injected in the url of the first page (through GET method). But now I'm thinking I've been misunderstanding things because even if the first pages' urls inside your accounts get logged and announced to your fans/followers/subscribers then when they click those https links then your fans/followers/subscribers won't have access to your accounts since they won't have the logging in cookies (that you usually get dumped onto your hdd once you enter your accounts). And so, they won't get logged-in.

Am I correct ? In that case, I may now program the browser to start logging https urls too. One other reason why I want to log https urls/links is because a lot of websites use https such as the SERPs which I do want logged as from the SERP urls your fans/followers/subscribers can learn what keywords you're searching:

 

https://twitter.com/search?q=bachchan

 

https://www.google.com.bd/search?q=what+is+GET+method+%3F&oq=what+is+GET+method+%3F&aqs=chrome..69i57j69i60j69i65j69i60l2.3841j0j7&sourceid=chrome&ie=UTF-8

 

 

I want the browser to log what TRENDS the user is viewing and these sites that show trends (their SERPS) carry the httpS. Therefore, missing out on logging httpS urls/links sort of makes us a great loss.

Any advice on this ?

 

 

Thanks

Edited July 16, 2016 by bangali_beta

[Macster (UBotter Labs) 112]

I recommend avoiding to log anything that can be used to track and disclose sensitive information or your browser can easily be used for hack attempts. By simply knowing the pages where people navigate along with other information you can easily construct scam and hack attacks

 

If you log full URL and HTTP requests, it may be possible to reconstruct the request and login to an account so i recommend to NOT log full urls regardless if SSL is used or not.

 

In short your are trying to create a "spyware" browser and i doubt anyone would like that regardless if they earn money or not

[bangali_beta 11]

I recommend avoiding to log anything that can be used to track and disclose sensitive information or your browser can easily be used for hack attempts. By simply knowing the pages where people navigate along with other information you can easily construct scam and hack attacks

 

If you log full URL and HTTP requests, it may be possible to reconstruct the request and login to an account so i recommend to NOT log full urls regardless if SSL is used or not.

 

In short your are trying to create a "spyware" browser and i doubt anyone would like that regardless if they earn money or not

 

Nah! Not a spyware browser. A follower browser. You're like a celebrity and your fans follow you from website to website (forums, blogs, searchengines, etc.) to larn things from your browsing such as what keywords you use to find things and what websites you usually read and so on. Like children or students looking over the teacher's/guru's/master's shoulder to gain experience. I reckon other browsers will catch on with this idea sooner or later. Plus, the user has to click the "start logging" button whenever he wants to be logged (followed bi his fans or the world) and click "stop logging" when he no longer wants the world to follow him so he can surf the next websites privately. The the browser only logs those websites that the user wants to announce to the world he is browsing. User in full control. That's nothing illegal. User has free will. This is not that different than social bookmarks. Only difference is that, users are not uploading their social bookmarks but their "social browsing histories".

Right this minute, if you visit a website and 1k follow you to it then you earn $5 and if in the 2nd min you visit a 2nd site and 10k follow you there then you earn $50 on the 2nd min and ofcourse if 1m follow you every min to a new webpage then you earn $1k per min until they stop following you. You earn $5 for every 1k trailing clicks to links you visit. Visit your own website if you want and earn $5 for every 1k trailing clicks to your pages. That's the basic money making concept.

Edited July 18, 2016 by bangali_beta