Quick follow-up:

There was a javadoc comment in userprefs.js that pointed to the
apache.orgserver. MySpace believes that some in browser utilities to
prevent phishing
in a small percentage of MySpace's userbase was reading the comment and then
pinging apache.org.

Their removing the source code doc in the next code deployment & will go
live later this week, I'll keep an eye on the apache logs to verify this
does indeed resolve the issue.

   -- Chris

On Tue, Nov 11, 2008 at 8:52 AM, Chris Chabot <[EMAIL PROTECTED]> wrote:

> MySpace has been able to locate which apps have been causing this 404
> traffic and their communicating with them now.
>
> We expect this to be resolved just before the end of the week, will ping
> again once that's done & thanks for your patience!
>
>    -- Chris
>
>
>
> On Mon, Nov 10, 2008 at 1:57 PM, Chris Chabot <[EMAIL PROTECTED]> wrote:
>
>> myspace has looked at it, but it seems it's one of the opensocial gadgets
>> that's available in their (sizable) gadget index that's causing it and not
>> their code.
>>
>> investigation is still ongoing.
>>
>>    -- Chris
>>
>>
>> On Thu, Nov 6, 2008 at 5:25 AM, Chris Chabot <[EMAIL PROTECTED]> wrote:
>>
>>> Took a quick look @ the log files, and indeed all the requests seem to
>>> come from http://api.msappspace.com/apprendering/<foo>, which is
>>> myspace's opensocial server.
>>>
>>> If i look at the html and javascript source of the rendered apps, I only
>>> see a documentation reference to the given url:
>>> ...
>>>  *   &lt;script src="http://apache.org/shindig/prefs.js
>>> "&gt;&lt;/script&gt;
>>>  *   &lt;script&gt;
>>>  *   gadgets.Prefs.parseUrl();
>>>  *   var prefs = new gadgets.Prefs();
>>>  *   var name = prefs.getString("name");
>>>  *   &lt;/script&lg;
>>> ...
>>>
>>> and no live references, also when i load up one of those app url's I
>>> don't see any requests going to apache.org ... however the coincidence
>>> is a bit to large that there's a doc reference and so many 404's, so i
>>> expect at some point (or even currently) there's some code on myspace or in
>>> one of the gadgets that is a cut & paste from that comment?
>>>
>>> Looking at the log files on people.apache.org this does indeed still
>>> seem to going on.
>>>
>>> Scott and/or Paul, can you please relay this internally @ myspace to
>>> someone who could see if this is some odd gadget or something in myspace's
>>> code that causes this?
>>>
>>>    -- Chris
>>>
>>>
>>> On Thu, Nov 6, 2008 at 1:24 AM, Paul Querna <[EMAIL PROTECTED]> wrote:
>>>
>>>> Hi shindig-dev@,
>>>>
>>>> Over in infrastruture land, we are noticing quite a few 404s being
>>>> generated with shindig in the URL, for example:
>>>>
>>>> $ bzcat /x1/logarchive/eos/2008/11/04.bz2 | grep /shindig/prefs.js |
>>>> grep -c www.apache.org
>>>>
>>>> 322822
>>>>
>>>> (potentially private ip addreses from the 3rd party are in this, so
>>>> figured I shouldn't share those here :-) )
>>>>
>>>> Full details on these requests can be found on people.apache.org.
>>>>
>>>> But they are all with the referrer of "
>>>> http://api.msappspace.com/apprendering/"; as a base.
>>>>
>>>> I'm not really sure if this is something from shindig, or from the 3rd
>>>> party, but I figure someone on this list has better chance of knowing who 
>>>> to
>>>> talk to than me emailing random people from DNS addresses.
>>>>
>>>> Thanks,
>>>>
>>>> Paul
>>>>
>>>
>>>
>>
>

Reply via email to