Alexa Toolbar Internal Disclosure

Intermediary transaction http://www.aliyun.com/zixun/aggregation/6858.html ">seo diagnose Taobao guest cloud host technology Hall

After October 6, the Alexa ranking rules have changed significantly and have been changing, so many sites are now ranked unstable (including cheating). What I've been revealing today is not enough to cheat.

Alexa toolbar A lot of code is implemented with HTML and JavaScript, the problem of resource leakage is serious ah, I really do not know what its designers think. Alexa Toolbar Program Implementation principle in my previous article also more or less mentioned, so today will not speak. Today to talk about Alexa toolbar sent HTTP request format.

The following is the part of the GET request sent by Alexa toolbar:

get/data/ezdy01doo100qi?cli=10&dat=snba&ver=7.0&cdt=alx_vw=20&wid=16865&act=00000000000 &ss=1024x768&bw=775&t=0&ttl=1125&vis=1&rq=2&url=http://20cn.net/~tabris17/http/1.1

Decoding the URL part to get:

/data/ezdy01doo100qi?cli=10&dat=snba&ver=7.0& cdt=alx_vw=20&wid=16865&act=00000000000& ss=1024x768& bw=775&t=0&ttl=1125&vis=1&rq=2&url=http://20cn.net/~tabris17/

"Ezdy01doo100qi" is aid.

The "cli=10&dat=snba&ver=7.0&cdt=alx_vw=20&" section is a fixed value.

WID is a random number.

Act data contains the use of the Alexa Toobar feature.

SS is obviously the screen resolution.

BW is the width of the IE window.

T takes a value of 0 or 1 and is related to the current IE window object and referrer.

The TTL is the current page opening speed and is related to the speed in site stats.

Vis indicates whether IE shows the sidebar.

RQ is an object counter.

As you can see, there is nothing mysterious about the URL part, it is easy to forge. In the past to cheat, as long as a large number of fake HTTP request, non-stop to send, now Alexa through improved ranking algorithm, to eliminate this cheating method.

The secret is the cookie part, which saved some of your browsing privacy, so Alexa put this part of the data encryption, through a similar to PGP encryption method, you can in the Alexa toolbar code to find this encryption with the public key " D9adyz93472kb63z521t6e80wqpi56znb16fya6im3dr3xwe "(So long, it looks hard to crack). The key only Alexa own Ah, depressed!