Microsoft/Unisys Unix-bashing Site Runs FreeBSD

Several people sent in variations on this: "Kind of ironic to see that the the site, dubbed WeHaveTheWayOut from Microsoft and Unisys runs on an Apache Web server powered by FreeBSD. This could have made a great April Fools joke, unfortunately for Microsoft, you can verify it by using Netcraft." This is a follow-up to the original story a few days ago. Other readers noted that there's already a WeHaveTheWayIn site up. Wehavethewayout.com was returning Apache headers yesterday; today it's returning "Server: Microsoft-IIS/5.0", so it appears they've dumped FreeBSD in a hurry, or maybe just changed the headers.

Comments

It's still unix...

[kzinti]

Wehavethewayout.com was returning Apache headers yesterday; today it's returning "Server: Microsoft-IIS/5.0"

Oh? I'm getting this from Netcraft:

The site www.wehavethewayout.com is running Rapidsite/Apa-1.3.14 (Unix) FrontPage/4.0.4.3 mod_ssl/2.7.1 OpenSSL/0.9.5a on FreeBSD

Rapidsite/Apa? Some mutant form of Apache? In any case, it's still reporting FreeBSD.

--Jim

Re:It's still unix...

[babbage]

[localhost Tue 9:45:50am ~]% curl -I http://www.wehavethewayout.com/
HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
MicrosoftOfficeWebServer: 5.0_Pub
Content-Location: http://www.wehavethewayout.com/index.html
Date: Tue, 02 Apr 2002 14:46:02 GMT
Content-Type: text/html
Accept-Ranges: bytes
Last-Modified: Mon, 01 Apr 2002 22:54:12 GMT
ETag: "575c4824d0d9c11:4a6b5"
Content-Length: 9766

[localhost Tue 9:46:03am ~]%

It was FreeBSD with FrontPage extensions through yesterday evening, but must have been moved to a different machine (or masked with fake server headers) over the night.

In other news...

[jonr]

Cisco PR company uses 3Com switches. Neither Cisco or their PR company spokesman were available to comment.
This is news? Who gives a shit what webserver propaganda is run on? People are not quite getting it around here, sometimes...

...maybe not...

[kzinti]

On the other hand:

bash$ telnet www.wehavethewayout.com 80
Trying 130.94.214.143...
Connected to www.wehavethewayout.com.
Escape character is '^]'.
GET / HTTP/1.1
Host: www.wehavethewayout.com

HTTP/1.1 200 OK
Server: Microsoft-IIS/5.0
MicrosoftOfficeWebServer: 5.0_Pub
Content-Location: http://www.wehavethewayout.com/index.html
Date: Tue, 02 Apr 2002 14:16:31 GMT
Content-Type: text/html
Accept-Ranges: bytes
Last-Modified: Mon, 01 Apr 2002 22:54:12 GMT
ETag: "575c4824d0d9c11:4a6b5"
Content-Length: 9766


Is Netcraft returning cached information?

--Jim

FreeBSD server still there

[MiniChaz]

The FreeBSD server that was originally hosting the site is still up. If you look at the Netcraft page here you can see the IP address of the new Win2K server is 130.94.214.143 where as the IP of the FreeBSD one is 198.63.57.204. Both are working at the moment though I doubt this will be the case for many more hours.

Someone also suggested earlier that the domain was being transfered from a hosting service to MS but you can see that the IPs are both in Verio's netblock so thats not the case. My guess would be that MS/Unisys saw/were told what was being used to host the site and said they wanted it moved to a Win2K box. We've just experienced the delay as the DNS updates.

How long until they get hacked then? A high profile campaign like this is bound to bring out all the kiddies and some of the not-so-kiddies. Maybe we should have a sweekstake? :-)

Cheers...

nmap

[PicassoJones]

nmap V. 2.54BETA7 doesn't know what OS it is, (maybe I should upgrade to Beta32)

But, it does report a bunch of open ports. ftp www.wehavethewayout.com returns:

Connected to www.wehavethewayout.com.
220 w2k1405 Microsoft FTP Service (Version 5.0).

I'm betting it is a Windows server.

It's also running vnc--uh-oh

And in other news...

[KilljoyAZ]

...it was revealed there are slashdotters posting comments bashing Microsoft using Internet Explorer on their Windows boxes.