LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > LinuxQuestions.org > LQ Suggestions & Feedback
User Name
Password
LQ Suggestions & Feedback Do you have a suggestion for this site or an idea that will make the site better? This forum is for you.
PLEASE READ THIS FORUM - Information and status updates will also be posted here.

Notices


Reply
  Search this Thread
Old 06-28-2006, 06:29 AM   #16
prozac
Member
 
Registered: Oct 2005
Location: Australia
Distribution: slackware 12.1
Posts: 753

Rep: Reputation: 32

hey jeremy,
i think you should look at this more seriously.
this one [http://www.enterprisedb.com/] opened instead of my 'subscribed thread' when i clicked on it. I am using using mozilla firefox 1.5.0.3 in slackware 10.2 with 2.6.16.18 kernel and lately i did a slapt-get upgrade of all packages too. so it's not inside my machine AFAIK. somebody is trying to play smart as$. we need to kick somebody as$.

[edit]sorry for the lang![/edit]
 
Old 06-28-2006, 06:33 AM   #17
prozac
Member
 
Registered: Oct 2005
Location: Australia
Distribution: slackware 12.1
Posts: 753

Rep: Reputation: 32
i have heard of this kind of redirection before and that firefox and ie are primarily vulnerable to this kind of attack. opera is immune AFAIK and remember. So its basically firefox fault i guess. one thing though, i experienced this just some minutes ago and while i was in LQ. any particular reason they might be targeting lq. maybe its popular that's why or something else. i can't think of other reasons right now.
 
Old 06-28-2006, 08:11 AM   #18
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,597

Rep: Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080
FWIW, we have taken this seriously from the get go. In fact, we've even been removing ads. I'm surprised to hear it still happening now. When it happens again (I cannot replicate this here) please do the following, which will help immensely. Get a list of all three ads on the page and send them to me via email. This should allow me to track things down easier. Thanks for the patience.

--jeremy
 
Old 06-28-2006, 09:38 AM   #19
prozac
Member
 
Registered: Oct 2005
Location: Australia
Distribution: slackware 12.1
Posts: 753

Rep: Reputation: 32
Quote:
Originally Posted by jeremy
FWIW, we have taken this seriously from the get go. In fact, we've even been removing ads. I'm surprised to hear it still happening now. When it happens again (I cannot replicate this here) please do the following, which will help immensely. Get a list of all three ads on the page and send them to me via email. This should allow me to track things down easier. Thanks for the patience.

--jeremy
no jeremy i don't think you are getting it. its a firefox and ie flaw AFAIK and in no way concerned with LQ. just some few hours ago i have got several complaints from my user's abt the same and all of them were using either IE or FIREFOX and none of them were browsing LQ.
 
Old 06-28-2006, 10:11 AM   #20
mikieboy
Member
 
Registered: Apr 2004
Location: Warrington, Cheshire, UK
Distribution: Linux Mint 19.1 Xfce
Posts: 555

Rep: Reputation: 33
A few days ago while I was on LQ using Firefox I got a popup message saying that my registry might need cleaning and then a registry cleaner started downlaoding itself. Since I'm running a Linux box, clearly the trojan (or whatever) was intended for Windoze users but was directed via Firefox.
I think that now Firefox is popular as a browser, it is coming in for the same unwelcome attention as Internet Explorer.
 
Old 06-29-2006, 05:12 PM   #21
bernied
Member
 
Registered: Mar 2006
Location: Edinburgh, UK
Distribution: debian
Posts: 304

Original Poster
Rep: Reputation: 30
Just for the record, I've had no more hijacks, from anywhere, since my first post. And I've not cleaned anything, as far as I know. Whatever it is (or was), it is hiding now.
 
Old 06-29-2006, 05:36 PM   #22
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,597

Rep: Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080
Thanks for the update bernied.

--jeremy
 
Old 06-30-2006, 04:17 AM   #23
mikieboy
Member
 
Registered: Apr 2004
Location: Warrington, Cheshire, UK
Distribution: Linux Mint 19.1 Xfce
Posts: 555

Rep: Reputation: 33
Jeremy, you say
Quote:
We have a grand total of two advertisers on LQ and both of them (Google and O'Reilly) are extremely well respected technology companies
. Today I have this banner in the Google space to the right:

Quote:
If (salary<good)_
Then
'Go to Dice for
'great ASP jobs
url="http://www.dice.com"
Response.Redirect(url)
Else
suck_it_up
End IE

Dice
Look to the tech leader first
Is this a normal ad because it sure looks iffy to me?
 
Old 06-30-2006, 04:50 AM   #24
prozac
Member
 
Registered: Oct 2005
Location: Australia
Distribution: slackware 12.1
Posts: 753

Rep: Reputation: 32
@mikieboy
are you talking about these:
image
link
 
Old 06-30-2006, 07:09 AM   #25
mikieboy
Member
 
Registered: Apr 2004
Location: Warrington, Cheshire, UK
Distribution: Linux Mint 19.1 Xfce
Posts: 555

Rep: Reputation: 33
@prozac
That looks like the advertiser. If it's genuine what's with all the suck_it_up, close IE shit!
 
Old 06-30-2006, 07:45 AM   #26
mikieboy
Member
 
Registered: Apr 2004
Location: Warrington, Cheshire, UK
Distribution: Linux Mint 19.1 Xfce
Posts: 555

Rep: Reputation: 33
My browser was just redirected from LQ to www.dice.com. Just now!!!!!!!!
 
Old 06-30-2006, 08:27 AM   #27
jeremy
root
 
Registered: Jun 2000
Distribution: Debian, Red Hat, Slackware, Fedora, Ubuntu
Posts: 13,597

Rep: Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080Reputation: 4080
That's not a Google ad, but is a legit ad and one that you will see on almost every technical site on the Internet.

--jeremy
 
Old 06-30-2006, 11:44 AM   #28
bernied
Member
 
Registered: Mar 2006
Location: Edinburgh, UK
Distribution: debian
Posts: 304

Original Poster
Rep: Reputation: 30
I spoke too soon. Just got another redirect from LQ. Not as aggressive this time, no pop-ups or downloads, just directed to this site when I clicked on 'My LQ':
http://www.enterprisedb.com/
I hit the browser back button - should that give me the same ads? I've just tested it and it seems to work. So I've now got the page back that I was redirected from. What can I do with this? I'll do the following - screenshot, copy text, try to get html source (I'm not that clever at this bit). Any advice? Will have to close session before too long.
 
Old 07-02-2006, 07:29 PM   #29
JulienPDX
Member
 
Registered: Mar 2005
Location: Corvallis, OR USA
Distribution: Ubuntu 6.01 Dapper Drake
Posts: 57

Rep: Reputation: 15
This is the exact reason why I've gone 'Linux Happy'. Why do I need:
  • An antivirus with paid subscriptions?
  • A Spyware remover?
  • An Ad remover?
  • A Browser Hijack remover?
  • Three updates a week from Microsoft to fix their OS?
Of course, I do run ClamAV. But nothing else is needed, except a check once inna while for security updates....[/QUOTE]


Here here!!!! My sentiments exactly..I am sick and F-ing tired of keeping up with M$ security updates..!!!! :-)))
 
Old 07-02-2006, 07:32 PM   #30
JulienPDX
Member
 
Registered: Mar 2005
Location: Corvallis, OR USA
Distribution: Ubuntu 6.01 Dapper Drake
Posts: 57

Rep: Reputation: 15
how weird, i was just thinking as well that I got a pop-up on linux the other day....which I didn't expect, but I also know that I had mistyped this address...and dontcha just love those a**holes who buy up the domains that are one letter off from a real site and then they put in something malicious on the page??? GRRRRRRRRRRRRRRRRRRRR
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Spyware/Browser hijack problems joeclem111 Linux - Security 7 05-08-2006 09:29 AM
Using a Linux Browser I can't access Website Echo Kilo Linux - Software 13 12-05-2004 08:21 PM
Can't load one specific website using any browser Ilisdur Fedora 4 09-14-2004 04:59 PM
limit browser to one website tarheel92x Linux - Security 1 04-26-2004 05:19 PM
Problems with Linux Browser opening Website dolphans1 Mandriva 8 10-28-2003 07:50 PM

LinuxQuestions.org > Forums > LinuxQuestions.org > LQ Suggestions & Feedback

All times are GMT -5. The time now is 03:32 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration