Join the Stack Overflow Community
Stack Overflow is a community of 4.7 million programmers, just like you, helping each other.
Join them; it only takes a minute:
Sign up

As I was testing my web app in Chrome for iOS (both iPhone and iPad), I noticed a weird ID appended to user agent string, e.g.:

    alert(navigator.userAgent)

would produce something like this (note the "3810AC74-327F-43D7-A905-597FF9FDFEAB" part at the end):

    Mozilla/5.0 (iPhone; CPU iPhone OS 5_1_1 like Mac OS X; en-us) AppleWebKit/534.46.0 (KHTML, like Gecko) CriOS/21.0.1180.77 Mobile/9B206 Safari/7534.48.3 (3810AC74-327F-43D7-A905-597FF9FDFEAB)

This ID seems to be tab specific and persists even when going to a different site.

My question is, if anyone knows anything about this and what it may be used for?

Update:

This GUID was appended to overcome the limitations of UIWebView. Kudos to eric for pointing this out in the comments.

share|improve this question
up vote 1 down vote accepted

That ID is not related in any way to tracking.

There is a chromium bug that goes into the details of why it is necessary: basically, it's needed in order to implement tabs.

From the bug tracker:

There is no API in iOS to know, in the network layer, from which UIWebView a network request is coming from.

[...] the solution [...] all the UIWebViews get the tabID (which is only local to the device) added to the user agent string.

You might also want to check a few twitter threads discussing this with further info.

share|improve this answer

That really, really, looks like an evil 'super cookie' (spyware putting a GUID onto your user agent string).

Strange how it's happening on both your devices if so. Is that the User Agent received by the webserver too?

share|improve this answer
    
Nah, that ID is different on every device on every tab (incognito or normal). But it does persist through the session of each tab. New tabs get a new ID whether they have been created manually or not. – chromice Aug 29 '12 at 17:01
    
I wouldn't presume it has to be constant to track your windows/tabs (that depends on the purpose for adding it). There wouldn't be any other reason to add one, it doesn't have to be a malicious reason, but it looks like you have something that is trying to keep track of your tabs for some reason. There isn't any mention of one being appended by anything legit anywhere I can see e.g. developers.google.com/chrome/mobile/docs/user-agent – Lee Kowalkowski Aug 29 '12 at 18:59
    
I wouldn't immediately assume nefarious intent -- perhaps it was the only way to get iOS UIWebView to keep separate settings between tabs and incognito, or some other technical reason. But this is just speculation about a closed-source app :( – ephemient Aug 29 '12 at 19:04
1  
I managed to look at your test page on a friends device, it also contained the GUID! So it's starting to look like out-of-the-box behaviour. There's so little information about this out there, I don't like the potential vulnerability of its presence one bit, it's definitely open to abuse. – Lee Kowalkowski Aug 31 '12 at 8:04
1  
The bug concerning this issue is code.google.com/p/chromium/issues/detail?id=355541 – eric Mar 27 '14 at 16:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.