Slashdot Mirror
FTC Shuts Down 'Pop-Up Trapping' Sites
Masem writes: "The FTC today ordered the shutdown of 5,500 sites owned by John Zuccarini, all of them the so-called 'typo' sites that common mis-entered URLs for popular sites (such as Annakurnikova.com); when the user visits these sites, their back button behavior in most popular browsers is modified as to open multiple pop-ups featuring ads for adult entertainment and gambling sites when pressed, and uses other technology to basically 'trap' the browser until the entire application has to be closed. While some sites are still operating, the FTC is going to take this matter to court, which may decide exactly how much control a web site can take over the end browser using JavaScript and ActiveX. CNet has the full story." Le Marteau contributes a link to the same story at the Washington Post.
This is a great thing. The FTC protects people from fraud and other illegal business practices. That is what they are doing in this instance. The FCC regulates the airwaves, television, and so forth.
The government isn't "getting involved in the internet" in any new creative way. They are just protecting consumers (us) from fraudulent illegal business practices
Next time get the FCC FTC thing correct before you post, it completely changes the context of the article.
looking for a bug in some Javascript (we maintain
our own web browser), and after delving down
through the deliberately obfuscated javascript
code, it became obvious what it was trying to do:
it went through all links in the document, attaching
a javascript "front-end" to each link that did an http GET request
informing the remote site what had been clicked on,
before actually following the link. the technique
used seemed fairly dodgy (the request was purporting
to be for a non-displayed image), but it's interesting
to see what a fairly reputable site is prepared
to do in order to get as much information off you as possible (without your knowledge).
how reasonable is that? i don't like it, but is that sort
of subterfuge the kind of thing we'd like to stop too?
[PS. apologies if this appears twice - it looked like
had rejected the previous ones; and then the whole
server seemed to crash: what was going on there then?]
The site www.annakurnikova.com is running Apache/1.3.6 - 448 user - IKM 11211999 (Unix) on FreeBSD.
They go on to say the netblock he is using belongs to CWIE LLC.
main(c,r){for(r=32;r;) printf(++c>31?c=!r--,"\n":c<r?" ":~c&r?" `":" #");}
But noone's blaming Microsoft, Netscape, Mozilla, or Konq
Really?
(and you really can't blame the last 2, they're implementing things to take care of this junk).
I don't know about Konq, because its authors chose not to release a version that runs on my platform of choice, but Mozilla doesn't yet ship to block pop-up advertisements (or even "hydras", the most annoying type) by default. It has a hidden pref to disable the window.open() function while a page is loading or unloading, which should become a visible pref once bugs are worked out. I hope the pref is eventually turned on by default, at least for the case of hydras.
The shareholder is always right.
There are no user-visible options for what web sites are allowed to do in Mozilla, so I don't find it surprising that users complain that they're given an all-or-none choice.
You can get some documentation on Mozilla's configurable security policies here, and you can also test the new hidden pref to prevent web pages from opening new windows while they are loading or while the user is leaving the page. Note that the new hidden pref is still buggy: it catches some things it shouldn't, such as clicking a javascript: link in a page while the page is still loading, and fails to catch cases like onmouseover and onfocus.
The shareholder is always right.
When you backclick or close, the next site(s) will attempt to pop up, but no further code will be loaded and hence the hell will eventually end.
I always click "work offline" before trying to exit or back out of any of these questionable sites now BEFORE the cascading crap starts...
Okay - I'll probally get flammed for this. But if you are using Internet Explorer you can start up IE with the -new command and have each browser open in a seperate process. That way, your main browser won't lock up or be forced to 'end task' if your popup windows get out of control.