Quote:
Originally Posted by lucevans
According to Richard Clayton's analysis of the system, the unique identifier portion of the cookie is stripped-out by the Phorm hardware in your ISP before it gets to the website, so the website doesn't actually get to see your UID. The decision of what ad to serve you from their website is made by Phorm based on your UID and the ad is then passed to the website by Phorm's hardware for them to serve to you. However, there is an additional, apparently redundant piece of kit in the middle between the Layer 7 intercept hardware and the Phorm-owned ad channel server kit which does not relay your IP address to the Phorm kit. It seems that the only reason for introducing this extra machine into the pathway is to prevent your IP address "going outside the ISP's network" - almost as if they anticipated the legal attacks on their spyware system...
|
Thanks. Must pay more attention and not read late at night...
Section E 65-66 of the analysis explains it.
Still very unhappy with it though. ('Trust me, I'm anonymising everything...')