Slashdot Mirror
Identifying Compromised Websites
linuxwrangler writes "'An infectious disease broke out recently in a number of communities. We'd like to tell which communities they were, just in case you were visiting one at the time, but we can't. It would be bad for business, after all.' Thus begins an interesting column in InfoWorld's Gripe Line in which Ed Foster discusses the astonishing secrecy surrounding the identity of the sites that were compromised by Scob/Download.ject and spreading malicious code to their visitors. As Foster notes, when food-poisoning is traced to a store or restaurant the health-department makes every effort to inform those who may be affected. Shouldn't we demand the same when a business's server poisons our computer?"
The following web sites were infected: http://www.a=20 ]} } } }&..}=3Dr}'}"}[NO CARRIER]
The question is, what is the most effective way to do so? Legislation? I prefer to keep as much power away from politicians as possible, and since companies have deeper pockets than I do it doesn't often work. Customer protest is effective, but you have to find out who caused the problem. The same with email campaigns.
Posts on Slashdot with links to the offending site might be the most effective because they can take down the infected server directly under the bombardment of thousands of page requests all at once.
is cya.
So what he's trying to say is that Infoworld's servers were among the infected, right?
The Spanish variant is worse. It turns those funckey upside-down question-marks at the beginnings of the sentence into little Microsoft MSN butterfly-man icons.
Can you imagine that. I know it makes me fearful.
fifth sigma, inc.
Then I can easily guess why you are most certainly not a lawyer.
Which we identified from our logs (and blocked) has the following text on its home page:
"THE TRUSTED RESOURCE"
"OVER 75 YEARS OF TRUST"
Not any more...
Makes me wonder about your diet.
"So which is more serious? Death of body or death of personality" Are you serious? DEATH is more serious moron. God damn man, "death of personality" isn't even a real problem. You write a few letters, make a few calls, maybe at the worst get a lawyer and spend some money. DEATH is non-fucking-negotiable. You're dead? Good luck getting that undone. How about this, I'll let you have all my personal details if I can chop your head off afterward. What, you're not interested?
I knew that recent "downtime" wasn't just for "upgrades". It's an imposter! It's a Phisher site! Its of the body! One of the pod people! :)
...in Tijuana and don't wear a condom, you deserve what you get. Surfing the Internet with Internet Explorer is no less risky than unprotected sex in a cheap Tijuana whorehouse.
Serial Meta Moderator
That sounds a lot like spy ware to me.
I can see a scenario where somebody announces thier web site was hacked. Then a greedy ambulance chaser threatens to sue for neglegence. In order to "prove" negligence, he'll supoena all you computer systems, drown you in bad press, and lock you in expensive legal battle. It'll be easier to pay him off, and thus a new industry is born.
"Your superior intellect is no match for our puny weapons!"
No... I scanned your hard drive too.
Just don't conceal it.
How would you go about concealing a katana?
No. And you are entitled to be informed that someone beat you up and stole your money.
You don't need to conceal a katana. I saw in this film once, they'll just let you take it right onto the plane with you.
Real Daleks don't climb stairs - they level the building.