Still on the Quest

Hmmm. "Noarchive" is part of a standard meta tag that tells search engines not to archive a page. That is what you are telling LJ to insert into your pages when you tell it not to let search engines access your site. It's a standard way of communicating with Google, Yahoo, etc. and asking them to bugger off. Without seeing the code I can't be sure, but "noarchive" might be a perfectly innocent part of your own security.

From:

I also may be looking at the wrong thing with the html, I just realized. *headdesk* I am a complete amateur at computers...

But I still don't know why a gif would be blocked for being too large in my flist and then not have anything in it!

GAAAAHHH!!!

From:

Hmmm. Could be one of those little web bugs I was telling you about. If you insert a hotlink to a single-pixel transparent GIF into someone's journal entry, and the gif is located on a third party server, then the third party server can keep track of hits to the journal entry by counting the number of hits to the gif on its own server. All this without the end user seeing a graphic, because the graphic is invisible.

This may be the way lj-toys does most of its stats collection. Each hit to the embedded invisible gif would tell the lj-toys server a) the referrer, that is, from whose friends' list the journal entry was being read; b) the IP number of the person reading the page, c) the geographical location of the person reading the page (this is deducible from the IP number), and sometimes d) the name and address of the person reading the page (if they have a fixed IP registered to themselves).

No, web bugs are no one's friend. And web counters like LJ toys have the capacity not only to report this information back to their users but to log it, and potentially sell it to marketers and any other interested parties. Don't know if they log their data or not -- it would cost money, for one thing. But any info that's collected can be logged and resold. Best to do everything you can to keep your data from being logged in the first place. (Of course LJ itself collects all this stuff, as does any other web site. You can't go anywhere on line without leaving traces. But it seems like a good idea to limit the logging to companies you've evaluated yourself and decided to do business with, not random third parties that are along for the ride.)

From:

I also may be looking at the source for my own flist page *headdesk headdesk headdesk*

But why is the image that isn't an image popping up? Why? Could it be one of those web-bugs of which you speak?

From:

I *think* (if I understand correctly - and that's a pretty big IF), that ljtoys is, by definition a "webbugs" site...it "bugs" your lj (through your mood icons) so that you can track your hits. Maybe.

From:

Oops! We crossed messages in the ether; I answered this above. In short: yes, probably an invisible gif being used as a web bug. You can block those with NoScript too.

LJ will let you block mood icons that are being used as web bugs -- set LJ to show your own mood icon set on other people's pages. That way you won't be able to see other people's cute mood icons, but, erm, you'll be a little more secure.

From:

"noarchive" might be a perfectly innocent part of your own security.

*prays*

Please, Lord, let it be that...and not that I have unwittingly been compromising LJ security for a very long time. D'oh!

From:

I'm hoping that I'll end up pulling a Rosannadanna and saying "Never Mind..."

From:

LOL - That made me laugh! I'm hoping you do, too.

From:

If what showed up in RSF's html was this:

meta name="robots" content="noindex, nofollow, noarchive"

then it is absolutely nothing to worry about and completely standard operating procedure. It's just LJ telling Google et al not to archive people's friends pages. LJ puts this in themselves; lj-toys has nothing to do with it.

lj-toys does try to run js of some kind, but that could be all about counting hits to people's journals, which can definitely be done without hacking into people's friends-locked posts. RSF, is that what you saw? If so, this is probably a false alarm; I'm not a huge fan of web bugs, but they don't show anyone friends-locked posts.

From:

*goes to look at the html -- finds the right stuff!*

Hooray hooray hooray! I am an idiot! Hoooooorrrraaayyy!!!

Err... thank you.

From:

LOL! I'm so glad you're an idiot!! (j/k!!)

*dances*

From:

I know we've never met but...

*squishes you with a hug*

Thank you for knowing this! I've been miserable most of the day thinking I'd unwittingly unlocked f-locked posts!

*hugs you again*

From:

*hugs back*

Glad to help! And I'm relieved, too -- I know four people on my own flist use LJ-toys, and they're all really nice people. Unknown javascript always makes me anxious, but it looks like they're just letting you know who's reading your LJ -- information that all web sites automatically record anyway, and all you wanted to know. :)

From: