Ask HN: Would like a 2nd set of eyes to look over some http traffic captures
I had 1 open chrome window set to the new tab page, but network activity was blinking pretty steady. Paranoia leads to inspection and I found this strange connection posting back and forth from facebook. It appears it opened while I was reading a story on money.cnn.com but it never closed. Note that the capture start time is after i closed all browser windows and cleared all browsing data in chrome (habit of mine to do that before i close chrome completely).
I wasnt aware this was possible, to keep the connection going completely outside the context of any webpage, and beyond that theres some strange data thats a bit new to me. Specifically the X-Cnction: field that they put in, and some of the options placed in the Cache: field (must-revalidate?).
This is mostly a curiousity as im trying to decipher purpose, and also generally if my concept of JavaScript security is way off (I was under the impression closing a website where the JavaScript was loaded would terminate it?). My best guess so far is that theyre trying to compile data on what people read, whatever they can wring the browser into telling them via JS, but i may be way off so if youre familiar with HTTP traffic and ajax/xmlhttp id appreciate your thoughts. I put it up on pastebin - http://pastebin.com/bzKeMtJi