full-disclosure - Re: [funsec] eBay redirects: next step in fake blogs and web searchabuse

Open Source and information security mailing list archives

Message-ID: <0273B67044957C41BD71D12EBA2E00AE1A26F3@becca.LarrySeltzer.local>
Date: Sat, 3 Nov 2007 10:20:46 -0400
From: "Larry Seltzer" <Larry@...ryseltzer.com>
To: "Gadi Evron" <ge@...uxbox.org>, <funsec@...uxbox.org>,
	<full-disclosure@...ts.grok.org.uk>
Subject: Re: [funsec] eBay redirects: next step in fake
	blogs and web searchabuse

The redirect is in this from the blogspot page. No real attempt to hide
it. 

	<iframe
src="http://homeoflove.selfip.com/ads/ads.php?src=hushmail"  width="468"
height="60" scrolling=no frameborder=0></iframe> 

selfip.com is owned by Dyndns and I guess it's used for customers with
no static IP or DNS

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.eweek.com/cheap_hack/
Contributing Editor, PC Magazine
larry.seltzer@...fdavisenterprise.com

-----Original Message-----
From: funsec-bounces@...uxbox.org [mailto:funsec-bounces@...uxbox.org]
On Behalf Of Gadi Evron
Sent: Saturday, November 03, 2007 9:41 AM
To: funsec@...uxbox.org; full-disclosure@...ts.grok.org.uk
Subject: [funsec] eBay redirects: next step in fake blogs and web
searchabuse

You try and go here:
http://hushmail-901.blogspot.com/2007/11/hushmail-tryig-to-delet-contact
s-in.html

You get here:
http://search-desc.ebay.com/hushmail_W0QQ_trksidZm37QQcatrefZC6QQfromZR1
0QQftsZ2QQsacatZQ2d1QQsargnZQ2d1QQsaslcZ2QQsbrftogZ1QQsofocusZunknown
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives