On Thu, 2003-08-21 at 03:22, James Sparenberg wrote: > On Wed, 2003-08-20 at 23:31, Alex Fisher wrote: > > Daniel Anderson wrote: > > > > >> > Any ideas why this redirection is happening or how to fix it? > > >> > > >> Question here. Do you, > > >> 1. Accept cookies > > >> 2. Accept cookies from a 3rd party server. > > >> > > >> I wasn't doing either one. > > >> > > >> James > > > > > > I have disabled cookies in both konqueror and mozilla, and deleted all > > > cookies and history, still the same response. > > > > > > Thanks, > > > Dan > > > > It's not a cookie problem. I have the same requirement in all my browsers, > > that requires all cookies to be displayed for acceptance or rejection. I > > had no cookies from any site when I was redirected. > > > > I suspect a CGI or javascript is involved, which hijacks your connection. It > > would seem that it might be browser-specific, and also have a random factor > > built in to it's execution. > > > > What I found interesting was that the site I eventually ended up at (yes I > > clicked to see where it led) wanted me to download an executable. I have no > > need of windows to know what this executable does. Briefly, when you > > install it, it disconnects your modem, mutes the speaker and redials to a > > 1900 number. The first most users know of it is when they get a phone bill > > showing a call to an overseas location, which was charged to them at a rate > > of roughly $10 (US) per minute... > > > > I think bandwidthplace needs to check their servers (and javascript code). > > Could well be a rouge man in the middle hijack. In other words it's not > your browser but rather your DNS. Although I don't understand the > methodology I'm told that it is possible to "fake" or otherwise override > DNS so that people are redirected who don't want to be. (This may > explain why I get the right site and others don't) Other option is > that if they have their load balancing hosed it could be like a phone > system we had. 6 lines and if line one was busy it went to 2 then 3 etc > etc. And all of our numbers where sequential. One day we got a call > from a gentleman. Yep, he had the next number after us, and the phone > company system was sending our calls to him when all 6 numbers where > busy. > > James > > > I have looked into (slightly) the type of redirect Alex was mentioning, (see http://www.wsbtv.com/video/2005705/detail.html and www.alyon.net) as this second one is one of the 'billing' resources this scam uses)and I am pretty sure they can _not_ redirect IP blocks that they are sure are from certain areas, where the law is already wise to them.
I also recommend every time a URL comes to your attention like this, fire off an e-mail to with the URL to your LOCAL State Attorney General. almost every state has ongoing investigations into this scam. and offer to help them use linux.
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
