WARNING to GOOGLE users...

[bozo299]

Google is now including among search results, links like:

search words::jacob.exeis.com::search words
and
search words::silver.odoid.com::search words

Do NOT click on these links !!!! It will trash your computer.

I've emailed Google, but they are still there.

Beware of any link containing ::name.name.com:: (known as
double dots).

[SammyWinstonJack]

1. I use Yahoo but thanks for the warning. nt

[xultar]

3. I'm a Yahoo-er too. I don't see why so many people are googlie eyed

[ProudToBeLiberal]

4. google pride world wide!! nt

[Ioo]

20. Mainly because Yahoo has 1000 ads

BANNER FLASH FLASH FLASH

B
A
N
N
E
R

AD AD AD AD AD

FLASH

LOOK HERE NOW, MORE ADS!


this is why I use google, just a few links on the side, not 23 flash ads!

[SammyWinstonJack]

23. I use firefox and don't have a problem when using Yahoo.

[xultar]

45. That's cuz there are google ads every where else. I use FF with no issues

[SammyWinstonJack]

72. me too! nt

[niyad]

43. are you familiar with this little action of yahoo's?

Did Yahoo Help Send a Chinese Journalist to Jail?


A media watch group alleged this week that Yahoo gave the Chinese government access to e-mails sent from a journalist's personal Web account, helping land him a 10-year jail sentence.


Shi Tao, an editorial department head at the Contemporary Business News in China's Hunan Province, was convicted of divulging state secrets by a court in the provincial capital, Changsha, last April, according to Reporters Without Borders, a French press freedom organization.

The Yahoo e-mails were used as material evidence in the conviction, according to information provided by the group.

"We already knew that Yahoo collaborates enthusiastically with the Chinese regime in questions of censorship, and now we know it is a Chinese police informant as well," the group says.

Yahoo was not immediately ready to respond to the allegations, and a representative in the company's Hong Kong office said it might issue a statement late Wednesday or early Thursday morning.

. . . . . . . . . . . .


http://www.pcworld.com/news/article/0,aid,122436,00.asp

[SammyWinstonJack]

82. Well no I wasn't. I use Yahoo because my web browser Firefox for some

reason of late won't allow me to use Google. Granted I am 'puter challenged, so I don't know what the problem is. I like firefox because it blocks pop up like IE doesn't.

[Walt Starr]

2. I CALL BULLSHIT

:eyes:

[lonestarnot]

5. I don't like google spies anyway.

[Ioo]

24. What Spies?

I use google all the time in a very secure computer lab (Think DOD or DHS) we are not allow to place anything on the most of the HD at all. Google has never dropped a cookie or anything?

So what are you talking about.

[0007]

31. I like google and certainly don't understand the folks that use yahoo,

but what do I care, ya have do what's comfortable for yourself.

[lonestarnot]

33. Couple of months MSM reported a change in google enabling them to

follow and spy on searches. Pissed me off. You can google for the info. LOL

[alfredo]

73. I wonder how a text only browser like Links handles

spybots?

[proud2BlibKansan]

6. Me too Walt

:eyes:

[kliljedahl]

27. I second that BULLSHIT

sounds like one of those "E-mail to everyone you know" urban legends

[Wrinkle_In_Time]

32. Thirded... and about to be reported to DU admins. n/t

[Moochy]

55. Agreed

I call BS as well!

But the important thing is:

STOP USING INTERNET EXPLORER!!!!! GO GET FIREFOX!!!

http://www.mozilla.org/projects/firefox/

http://ptech.wsj.com/archive/ptech-20041230.html

Download Firefox with the latest security and stability updates. Available for Windows, Mac OS X and Linux. “Security, Cool Features Of Firefox Web Browser Beat Microsoft’s IE” - Walt Mossberg, Wall Street Journal

[H2O Man]

7. Does neatness count? n/t

[Crandor]

8. I'm not seeing any of those

Could you give an example of a search phrase that makes them show up?

(edit: never mind, found some)

[WiseButAngrySara]

22. Found What? I Google all the time. I made it into an adverb before it

was legit. an adverb or verb. What are you talking about?

[bozo299]

26. see my revised post

nt

[bozo299]

9. would someone explain what nt or n/t means?

I was just trying to be helpful.

[Blue_In_AK]

11. no text

Meaning that the subject is the message.

[Hokie]

13. Ha, beat me by a minute, Blue. (NT)

[Hokie]

12. nt = no text

This means there is no text in the message. The subject is all there is.

[bozo299]

17. thank you

I should have checked the box

I'll resubmit. It's important.

[qnr]

16. Telling you that there is no further text, aside from what you see in

the subject line. Especially useful if you are looking at responses to your post inside "My Posts" - so you know that that is all the response contains.


Edit: Deleted a welcome to DU, since you've been here for 3 years :)

[951-Riverside]

10. Is this some sort of a poorly constructed prank that "I" just don't get?

[bozo299]

15. this is no prank

try it (don't)

[Lex]

14. Have you got some sort of verification on this allegation?

I've never seen a link like the one you described.

[bozo299]

19. I fell for it

My computer hung while the site downloaded a dozen malware
programs and trojan horse files. Took 2 hours to clean up.

Want to test it?

Type "silver odoid" into the google search box and
click on any link, but stand back !

[jmowreader]

25. And why would I DO this?

I have no idea what a silver odoid is, nor why I'd want to search for one.

Is it some new kind of computer device?

[Lex]

29. That's what I was thinking too.

I'm sure there's a bunch of crap on the internet that I could search on Google that would bring back links to viruses and spyware.

[bozo299]

30. your search words are included in the link name

you may see a link to a web site which contains your search
words, then the ::silver.odoid.com:: name, then your own
search words.

Looks valid. Looks harmless because it contains your exact
search words. But Beware.

[Feron]

37. Sounds fishy ,but...

if your computer is being hit with malware from a website, then you need to tighten your computer's security.

Helpful link: http://www.dslreports.com/faq/8463

[Crandor]

21. try searching for "prakritic"

The 5th result from the top is one like bozo299 described. It's one of those stupid sites that has a ton of gibberish that makes it show up on all sorts of search terms, and they probably spam links to it on people's blogs to get it high up. It wouldn't surprise me if it had viruses and/or spyware but I'm not about to test that out :x

[bozo299]

18. revised WARNING to GOOGLE users... (plain text)

Google is now including among search results, links like:

search words::jacob.exeis.com::search words
and
search words::silver.odoid.com::search words

Do NOT click on these links !!!! It will trash your computer.

I've emailed Google, but they are still there.

Beware of any link containing ::name.name.com:: (known as
double dots).

[0007]

28. Now I know what happened the other day. Thanks for the tip my friend.

[IDemo]

34. This has 'internets' urban myth all over it

Why not send me a check for my Jato rocket-powered Chevy Impala instead of worrying about still another urban legend?

Use firewall, antivirus, and anti-spyware programs. Otherwise, expect mischief to eventually occur on your pc, generally sooner than later.

[bozo299]

36. OK, go blindly into the night...

This one goes right thru firewalls.

Try it!

[IDemo]

41. I don't go blindly, I prefer to arm myself with at least some knowledge

Try spinning some of this crap to those who still feel AOL is the ultimate of online experiences. Or better yet, don't.

[Garbo 2004]

50. If you're downloading a web page with an exploit, of course it will go

through your firewall....just as this very web page "goes right through your firewall" when you download it.

[bozo299]

76. Question ?

How would such a site get a Gooooogle ranking using my search
words and build a site name with them?

[Garbo 2004]

93. I think Moochy's answered your question. It's like google bombing,

a way to influence the ranking on google. Your search terms are already there, along with many other potentially used search terms. No magic. No "penetration" of your firewall required.

[bozo299]

77. Question ?

How would such a site get a Gooooogle ranking using my search
words and build a site name with them?

[Moochy]

102. Check your hosts file

On the machine that is automagically getting your new search terms maybe the malware might have done something like map google to a specific IP:

google.com 78.23.34.66

The number I just pulled out of the air, but lets say they had a DNS server that would just automagicaly create faked out "google hacked" blog entries, or postings based on what you're searching for.

Some hacker running the computer at 78.23.34.66, just redirects to google after snarfing your values, and replacing the search results with links back to the server, which when clicked through give weight to that keyword/fake hit.

Try searching using FF and tell us if the same thing happens.
If it does, something is compromised

This is similar in some ways to coolwebsearch's about:blank hijack in that every http request goes first through another site, since IE starts all http sessions at about:blank the next link is sent to the malware site. You'll know if a machine has been hacked with the coolwebsearch variant since about:blank will have a special character on it, instead of being actually blank.

[qanda]

47. Honestly...

I'm not sure which links I clicked on a few months ago while using google, but it literally shut down my computer from all the malware that was deposited on my machine. If I remember correctly, it was something for my children.

[shenmue]

35. How would a google search 'trash your computer'?

This doesn't even pass the laugh test.

Nice try.

And those aren't even links!

:thumbsdown:

:dunce:

[blogslut]

39. bingo

I'm thinking that it's the site links that have the problem not Google. Probably it's a case of a webmaster that is creating subdomain pages with these keywords in the URL. IE: www.crashmachine.odoid.com: HTTP PROTOCOL = www /SUBDOMAIN = crashmachine /DOMAIN = odoid /TLD = com.

The user clicks one of the search result links and the offending site crashes the computer.

[bozo299]

42. Thank You

Guess I didn't explain it right. You nailed it.

[WiseButAngrySara]

91. Go "odoid" yourself! BOZO. Delete this entire thread, or explain

yourself better. What in the world are you trying to say? Why would anyone do a Google search on any of the terms that you have listed as examples? Are you trying to create paranoia?

:: ::

[bozo299]

100. explaining

hope this font works...I'm getting flamed for some font fault...

This site (name surrounded by ::) uses your search words to create a fake link, which includes your search words in it's name.

It somehow reads your search words, puts them in front of

::fake.name.com::

and after also, to sucker you into clicking on it.

then your computer is toast

I guess I'm not explaining this well, or maybe I'm dumb. I've only been working with computers since 1967, and have always mistrusted them.

[WiseButAngrySara]

109. I guess people around here are paranoid of fonts, since RatherGate...

especially Courier. I'm a complete idiot when it comes to computer jargon, but I've used Google for years, without complaint, and now you are alerting everyone here, to some potential danger in using Google as a search engine, and from what I've read, you have not been able to explain yourself. So explain better, or delete this entire thread, because it worries people unnecessarily! I'm not saying you don't have a claim, and are intentionally trying to harm us, but :wtf: are you talking about?

What does this mean? It's your 'explanation.'

This site (name surrounded by ::) uses your search words to create a fake link, which includes your search words in it's name.

For starters, WHAT site is 'this site?' DU? Google? Any site? You are not making any sense to me. No offense. I'm no computer geek, but if you are you should be able to explain yourself better, or your thread is useless.

[Ioo]

38. I did a google Search for "Double Dots", I see nothing related to links...

I would think that if this is as horrid as we are to think, that others would have written about it...

[jim3775]

40. First off, this has nothing to do with google. Second, there are a million

websites that have activex scripts and other stuff that exploit all sorts of browser vulnerabilities and try to download trojans and spyware. This is nothing new. There are gigantic botnets that constantly scan for vulnerable ports all day long. Millions of emails containing viruses and scams are arriving in inboxes all the time.

Third, google doesn't care about a bunch of things on the internet that could affect your computer, it is none of google's concern how secure your computer is.

There are many, many searches on google that will allow you view other peoples webcams, get administrator access to bulletin boards, access to network printers and get root access to servers.

Get a firewall, learn how to use it. Get a robust anti-virus. Patch your system and dump Internet Explorer. And stop posting alarmist messages on bulletin boards you probably copied from some email you got.

[bozo299]

46. Second off,

This one shows up on ANY search and goes right thru firewalls.
And it was not a stupid cut/paste.

But, don't worry about it, unless you click on a link with ::
before and after your search words.

Just trying to help.

[jim3775]

49. This is probably an buffer overflow exploit

It sends a bunch of junk to your browser in an attempt to crash it and execute code on your system. Again this is nothing new.

[bozo299]

51. What's new about this...

...is that it shows up on ANY search. How can a web site get
ranked on ANY search? That's what's new.

[jim3775]

57. I see what you mean about the ::

Who ever has done this has created 297,000 websites that link to each other. It seems to run a nasty java script. A good browser and robust anti-virus will protect against this.

[Moochy]

54. Stop using Internet Exploder

IF you really want to be better off on a PC, stop using IE, disable it. and delete the shortcuts to it from your desktop, program menu and quicklaunch. Make Firefox 1.5 your default browser.

Also I wanted to second the fact that this "problem" is totally unrelated to google, you would likely be able to get to these malicious sites via other search engines as well.

FF doesnt crash on these links. go figure? Who needs OS integration with a browser? I sure don't. IE is a gaping hole in your computer. close it.

[IDemo]

61. I've been using Firefox for some time at home and work

There is currently a '1.7' upgrade available. Can't imagine going back to IE. Strongly recommended.

Pointing to Google or any other search site as the source of a potential online security threat is ludicrous.

The internet is a dangerous place, but it's not Kirkuk (yet).

1) Install firewall software, and download updates often.
2) Install antivirus software, and download software upgrades and virus signatures often.
3) Install anti-spyware software.
4) Don't provide personal information on newsgroups or bulletin boards.

[Garbo 2004]

69. Please understand that your browser connection goes through your firewall.

Thus, if you download a malicious script or exploit via your browser to which your browser/OS is vulnerable OF COURSE it goes through your firewall. Your browser is the open door.

Which is why PC and browser security is important. Not just having a firewall but updated decent AV, even an antitrojan program and fairly strict browser settings. Which, frankly, generally means not using IE or using it buttoned up so that "fun" functionalities like ActiveX, etc are not available except for only the most trusted sites that require them.

I use Opera myself as my personal preference. But Firefox is good also, extremely popular and the price is right.

[Berserker]

44. Google is a very powerful search engine

or I should say Google is Very powerful if you know what you are doing with it. Doing common searches is one thing but if you know what you are doing you can find almost ANYTHING on the web.
Google is tracking your clicks!

This is what happens:
you see the link http://somewhere.com, you hover over it, see in your statusbar
"http://somewhere.com", so you think you will go to http://somewhere.com and you click on it, BUT THEN! the event fires and quickly ReWriTes this url to:
/url?sa=t&ct=res&cd=5&url=http://somewhere.com&ei=3427ABCDbla
("ei" is probably some kind of tracking identification code uniquely connected
to your cookie or search-query)
so your browser fires a GET request to www.google.com for this url, google
kindly saves all the (extra! and unnecessary) information your browser is
spewing, and the google.com server gives you back a 302 FOUND header:
More:
http://www.searchlore.org/ritz_google_anti_snoop.htm

[northzax]

48. yes, Google knows everything you search for

big deal. So does everyone else you use for searches. At this time, google is the best place to find stuff, as you note. and the more you use it, the better you get at it. I honestly don't search for anything that I wouldn't want my grandmother to know about anyway.

[jim3775]

52. This is one of the ways google determines search ranks

This is a "tracking link" that keeps track of incoming hits. Every other ad company, search engine and commercial website does this.

[A-Schwarzenegger]

53. Can people see me through my computer screen?

If they can, if I painted the screen black could they still
see through it? Also, is the internet have electricity in it?

[bozo299]

56. you didn't know?

Answers:
1. no
2. would we want to?
3. no. yes. maybe. think so.

[BiggJawn]

58. WTF is "silver odoid"?

I see that there are a lot of random subjects all linked to a "silver odoid-dot-com".
I have never seen anything like that in any other Google search.

Perhaps silverodoid.com is a place where the virii live and you, my friend, are some script-kiddie doofus thinks he's gonna get his rocks off watching a whole lot of people get infected from your latest creation.

But then again, this may be something you just HAPPENED to stumble across in a mis-typed search for silver Colloid, in which case in the spirit of friendship, I have to warn you that colloidial silver is some pretty nasty Woo-Woo shit that's supposed to be a cure-all but isn't.

What it will cure is your social life, after it turns your skin and teeth a bluish-grey colour.

[RoyGBiv]

59. Not exactly ...

This has nothing to do with the name of the site, nor Google for that matter. Google archives links to sites that exist. It can't monitor the content of each and every one of those sites, nor should it. That puts them in the position of being editors, and I don't want them as editors. Some of the way they (any search engine actually) rank things is bad enough.

I'm not sure where you're getting this "double dot" thing, but the naming conventions don't preculde any combination of this variety from being a legitimate site. Indeed the way some blog sites work is to affix a name to the beginning of a name.com construction, such as blogname.blogcompany.com. Corporate sites do this a lot for internal continuity. My ISP is cox.net. Different sections of the site are central.cox.net or webmail.central.cox.net (the dreaded triple dots).

As others have noted, countless sites exist that, if your system is not secure, will trash things on it when you connect. Some of the ones you're talking about use ActiveX to download and install a trojan on your computer. If you have a decent firewall running that blocks unsecure outbound traffic, even that isn't going to cause the damage it could, although it will eat up system resources while it tries to do its business and will need to be removed.

I hit some of the sites you mention here for testing. (NOTE: I do NOT recommend others do so unless you are fully aware of your own security level and how your computer might interact with these sites.) They all tried to execute a script my browser and/or OS wouldn't let them execute. Nothing happened, although it would if you hit the site using Windoze and Internet Explore with ActiveX enabled. One I think was a Java script, but still.

It's good that you're trying to help people be aware, but try to understand what your warning is really about before giving it. Leading people to the wrong conclusion can be just as dangerous as no warning at all. If this were a mass e-mail I would interpret it as an attempt by some fan of another search engine trying to scare me away from Google, which might lead others to assume that that other engine is safe while Google is not. Any of the major search engines are fine. The sites you can hit from them, however, are another story, but be clear that *all* search engines have links to dangerous sites.

[Moochy]

60. Well said.. it has gotten worse in the past 3 years

I do know people who think that they can run IE securely.

I was one of them, who got all kinds of plug-ins and adaware spyware blaster, you name it. I had all the "best of breed" security suite, and yet... I still had a coolwebsearch browser hijack.

As soon as my computer was back in order I stopped using IE, and haven't had a problem since. MS should be sued into releasing a secure product, I can't beleive that a class action lawsuit has'nt been started.

The security flaw is willful ignorance on MS' part, in order to allow their intranet suites of software development and what not to use IE as an application platform with OS hooks. Ugh. I've known this for 2-4 years, about the BHO and the gaping security hole that is Active X.

Used to be, being smart was enough, never clicking on attachments,and disabling activeX, but there are enough demand for slave spam farms that many many more sites are malicious.

Firefox for the win!

[bozo299]

63. OK, 'splain me this

How can a link get ranked on any search without reading the
search words?

Does this site read all of googles incoming requests?

Took me a long time to get a good ranking, now this site gets
ranked on ANY search. Can't be using every keyword.

That is what's bothering me. Somehow this site intercepts
search words and builds a link to them.

How would that work?

[Moochy]

67. It's called googlehacking

The proprietor of jevil.com and odoid.com have created thousands of links to eachother referring to 297,000 pages of "fake blogs" which link around to eachother.

This is why malicious fake blogs like this need to be pruned from the google store. I think I'd heard that Google's automatic pruning software broke down two years back, and its apparently trivial to do this kind of thing as a site administrator.

This is how "miserable failure" goes to the whitehouse site of GWB.

[RoyGBiv]

98. As mentioned, googlehacking ...

Just to add a bit more to what has already been explained, look at some of those sites, or at least what appears on Google's page of returned links. The pages have hundreds of words in them that are common in various searches. The words themselves are nonsense. If you could go to the page and read it you'd see something like:

Internet Explorer of the Republican traitor Democrat liberal girls who like girls large breasts virus scan makes downloads free porn.

And then links are made to legitimate sites and link backs are created with hundreds of other pages elsewhere, and it all works together to increase a site's ranking in the search results.

[jim3775]

62. Here is what the the poster is talking about

http://www.google.com/search?hl=en&lr=&q=%22odoid%22&btnG=Search

[bozo299]

64. Thank you...

I seem to be having trouble getting this point across.

It's just not a random site. It's on any search.

Beware.

[Moochy]

65. Well I can click on these awesome sites

in Firefox. So I can give this spammer/squatter/internet scumbag more hits on his fucked up site. yay.

Maidalnaa Ursulola is the purveyor of odoid.com, as well as jevil.com.


Whois.Net



Registration Service Provided By: ESTDOMAINS
Contact: +372.55647646
Website: http://www.estdomains.com

Domain Name: ODOID.COM

Registrant:
Mongolian State University
Maidalnaa Ursulola ([e-mail])
Baga Toiruu Street
Main Campus 49
Post Office-46
Ulaanbaatar
,210646
MN
Tel. [phone]

Creation Date: 10-Nov-2005
Expiration Date: 10-Nov-2006

Domain servers in listed order:
ns1.l00phost.com
ns2.l00phost.com


Administrative Contact &
Technical Contact & Billing Contact
Mongolian State University
Maidalnaa Ursulola ([e-mail])
Baga Toiruu Street
Main Campus 49
Post Office-46
Ulaanbaatar
,210646
MN
Tel. [phone]

[bozo299]

74. thanks for the research

But how does that site read my search words?

[jim3775]

75. It doesnt read your search words

The person that has set this up has 290,000 different websites with 290,000 different search terms. Whatever you searched for was the same as one of those fake websites.

[Moochy]

79. Just stop using IE

Really, if anything good comes of this thread, that will be that you download firefox. :)

For me, when I search for things on Google, I dont see the "silver odoid" site, unless i search for the prakritic. The fifth item down is indeed a googlehacked blog keyword.

They at ovoid.com are not reading your search words. they entered 297,000 pages that google ate up, and is confused. As to how they got so far up in the page rank, well they've "google hacked" it.

By having hundreds of pages that link keywords to eachother, the site can climb in the rankings, who knows perhaps they've got hundreds of thousands of hijacked machines with "cool web search" type Browser Helper Objects that intercept your search results and put them high up on the list.

Count how many rational sounding posters have urged you to stop using IE, and consider it strongly.

[Skip Intro]

66. every result is "posted by administrator" - ?

I have no clue what any of this means.

[Moochy]

84. It means nothing

"posted by administrator" is just content from that site which is a hacker/ googlehacker /malicious spammer who is intent on getting clickthroughs to drive up his banner ad revenue or to distribute his malware in an effort to create farms of compromised PC's suitable for sending spam, or other malicious criminal acts.

Administrator or wherever this fuckwad is in the world, since bozo299 has driven countless IE users to his site, and added a few more compromised machines to his server farm. :sarcasm:

[Codeine]

68. So just what is silver odoid?

Because this whole thing seems suspicious. And what's up with your font?

[Moochy]

70. Courier for the win

:rofl: bozo299's got mono-spaced fever! :hi:

[bozo299]

71. what's wrong with my font?

Looks ok when I post it?

[Codeine]

78. It's not the standard DU font

And what is silver odoid?

[bozo299]

80. silver odoid is a fake web site name

this site reads your search words

then puts them in front of, and behind, ::silver.odoid.com::
to create a friendly looking link, which they hope you will
click on.

My warning is that it doesn't matter what your search words
are, they read them and build a fake link.

[Moochy]

86. No no no.

Not here, just stop using IE, and please stop using Courier! :)

your box is hacked. you probably are helping him build links by having a Browser helper object/ Active X thing installed from his site.

You think you are clean, but chances are you are getting some kind of server redirection from a hacked up hosts file, or a rootkit kind of thing.. Do you have any Sony BMG music CD's you recently played on your PC? ;-)

[Garbo 2004]

99. But if that were true they would come up on my searches and they don't.

So yes, it apparently does matter what your search terms are.

You simply don't understand, web links are not being made up on the fly as you apparently think they are. The sites are not "reading" your search words. They already contain your search words or they wouldn't be showing up at all. Again, think google bombing or google hacking.

[bozo299]

81. silver odoid is a fake web site name

this site reads your search words

then puts them in front of, and behind, ::silver.odoid.com::
to create a friendly looking link, which they hope you will
click on.

My warning is that it doesn't matter what your search words
are, they read them and build a fake link.

[Moochy]

83. It's a malicious site setup by a hacker in mongolia

It's some hacker guy in Mongolia's site. He's got access to DNS servers at the Mongolian state university in Ulaanbaatar.

Maidalnaa Ursulola is the jackass scumbag's name.

[Codeine]

87. D'oh!

For some reason I had the impression that it was the original search criteria. I need a nap!

[jim3775]

85. "od" is Croatian for "with"

Maybe its two Croatian hackers calling themselves "'silver' with 'oid'"

I figured this out thanks to internet language identification and online translation.

[Moochy]

89. Makes sense

They've probably got that mongolian admin guy to give over his default password, or they've hacked his servers in Mongolia State University.

Clearly there's some monkeybusiness going on, since that domain admin is listed from ulaanbaatar. I hate googlehackers!

[jim3775]

88. whats wrong with his font is that bozo299 has the "plain text" box...

checked. See where it says "Check here if you want to format your message in plain text. Use for posting code snippets."

[Moochy]

90. Ahh

Sorry for the jibe then bozo, but you really should stop using that hacked pc of yours :)

[bozo299]

92. not hacked, sorry

the pc i'm using now was not the pc that got hacked. But even
that one had a firewall, antivirus, lavasoft, malware
blocker...all the standard stuff.

[Moochy]

95. Well

speaking from personal experience and having all of the same precautions you listed, does not stop the coolwebsearch type BHO stuff. IE should be avoided at all costs, no ifs ands or buts.

[bozo299]

94. wtf? tell me what you see

when I didn't check that box, I got flamed with a bunch of n/t messages.

then I check the box, text goes thru, but now I get flamed for fonts

I'm new. Apparently need help.

[Moochy]

96. Start a thread on gun control!

These are merely cigarette burns, not true flames :-)

And welcome! :hi:

[WiseButAngrySara]

97. Hey Bozo. Please quit clowning with us and Go " ::silver.odoid.com::"

yourself. You aren't helping anyone.

[insane_cratic_gal]

101. Just Crt Alt Delete

end task.. gets you out of it.

Hey I'm a curious person! I had to see for myself

It does look like a google bomb though.. use anything in front of it.. socks "odoid", urban legend odoid .. and it pulls you to the site

[Moochy]

106. speaking of which... this thread helps his pagerank

Oh and as a good idea, we should get the admins to delete this entire thread before it makes it into google. :)

We'll just be adding more hits to his pagerank.

Silly mongol hackers!

[Lithos]

103. You are talking about 302 redirects

Plus probably an existing instance of hijackware on your system.

The 302 redirect is not Google's deliberate fault, but rather people scamming Google to try and get their fake pages ahead of the valid page.

http://clsc.net/research/google-302-page-hijack.htm

But if you are suffering page downloads, then you definitely have a badly setup browser and/or a cooperating piece of hijack/malware software.

The suggestions about using Firefox 1.5 are highly appropriate as MS has quite a few known and unpatched (and likely to remain unpatched) versions of IE running around. I think for instance MS IE 5.5 (out of date I know, but it is still supported) has something like 42 known compromises to it with 15 or so of a critical nature.

L-

On Edit: I do wish to add that a fully updated, patched version of MS IE 6 coupled with good firewall and a good Internet security package to control scripting issues is fairly secure. The main thing about security though is to make sure you control what you download and/or execute for even the most secure Windows bastion is much less secure if something is hacking at it from the inside. If you do not need to run as Administrator, then consider creating a standard user account for most of your surfing and use that instead. NEVER surf as someone with Administrator (or Root for the Unix geeks) privileges - Security 101.

L-

[Moochy]

108. Thanks, very informative

Spot on

[bozo299]

104. OK, I surrender. Good Luck...

...maybe I can't explain it correctly, but all you anti-IE
folks can go pound sand. You were no help. But there is
something wrong with Google. After working with computer for a
mere 37 years, I can smell a bad deal.

Be careful out there. 

FUGWB

Bye

[Moochy]

107. Pound Sand?

You act as if the "anti-IE" people are full of shit..
Because for 37 years in computers, you should have stumbled across a computer security site or a magazine article about it, and actually check out the Active X Security model, Browser helper objects. etc.

Unless you are some dittohead IE/MS can do no wrong type.. equally ignorant. so, to throw it back at ya, you can go pound sand, you ignorant bozo. :hi:

[Garbo 2004]

110. You may have been working with computers for 37 years, but apparently

you don't understand how the internet or google works. You've apparently found genuine malicious sites, but fail to understand the mechanism at work. And are not willing to listen to those who do.

I've been an MS MVP on computer security but I haven't used IE as my primary browser in years. And I take additional precautions in regards to scripting, no matter what browser I use. So "pound sand" yourself since you're the one who has had to clean his computer after an apparent major compromise. Hardly a recommendation for your computer security practices/knowledge.

Someone above recommended dslreports aka broadbandreports.com for PC security/internet security information. I too would recommend it as a good resource: http://www.broadbandreports.com/forum/security

[Moochy]

111. He's partially right, in that the problem is real, and is inside google

Another poster below found the google side of the issue, and it's real.

http://clsc.net/research/google-302-page-hijack.htm#012

Recommended fix
This can not and should not be fixed by webmasters. It is an error that is generated by the search engines, it is only found within the search engines, and hence it must be fixed by the search engines.

The fix I personally recommend is simple: treat cross-domain 302 redirects differently that same-domain 302 redirects. Specifically, treat same-domain 302 redirects exactly as per the RFC, but treat cross-domain 302 redirects just like a normal link.

Meta redirects and other types of redirects should of course be treated the same way: Only according to RFC when it's within one domain - when it's across domains it must be treated like a simple link.

Added: A Slashdot reader made me aware of this:

RFC 2119 (Key words for use in RFCs to Indicate Requirement Levels) defines "SHOULD" as follows:

3. SHOULD This word, or the adjective "RECOMMENDED", mean that there may exist valid reasons in particular circumstances to ignore a particular item, but the full implications must be understood and carefully weighed before choosing a different course.

So, if a search engine has a valid reason not to do as the RFC says it SHOULD, it will actually be conforming to the same RFC by not doing it.

"Hardly a recommendation for your computer security practices/knowledge. " :rofl:

from http://clsc.net/research/google-302-page-hijack.htm#012

[bozo299]

113. Thank you for sharing that...

I've checked this on 4 different computers.

the ::name.name2.com:: link is there, reading your google search words.

I'll check your links.

Hope I'm wrong, but this "feels" different. Not your usual.

click on one and tell me.

[RoyGBiv]

112. Oh, that's rich ...

You were told, explicitly, what was wrong with your analysis, and somehow us "anti-IE" people are the problem. I tried to be understanding of your apparent attempt to help, but I'm coming to the conclusion that might not necessarily have been the intent.

I didn't say it before, but I will now. This is hardly noteworthy news in the sense of it being new information. People have known of and both manipulated and tried to find ways to prevent manipulation of search engine results since the advent of web search engines. I find it somewhat amusing you'd think it noteworthy enough to offer such a dire warning considering your pronouncement of having worked with computers for 37 years. Have you ever, in those 37 years, once explored how a search algorithm works? Hell, this was rudimentary stuff when I was in highschool basic computer science, some 18 years ago. Even back in the early days of the web, before search engines were sophisticated enough to ignore such simple manipulations, people knew that basic search using common words could create results that didn't jibe with what you were trying to find.

You've heard of the "miserable failure" google bomb, I assume? Despite what many of us here think, I'm sure the first people to encounter it accidentally weren't really looking for the Shrub's bio when they entered those search terms.

In any event, yeah, there's something "wrong" with Google in the same way there is something wrong with every search algorithm in existence that can't interact directly with the human mind. You enter words, and you get results. Those results can be and are manipulated. The *sites* you hit when you're not paying attention and thus not noticing that the link is to some bizarre page with a collection of bizarre phrases that have nothing to do with anything along with using inherently broken software is the real problem.

[upi402]

105. www.dogpile.com

google tracks you too, asked notice-given record of permission in order to use google. But not anymore I notice.

[Moderator]

114. Locking

The technical issues have been solved. To continue discussion would continue the inflammatory and often personal remarks which are highly inappropriate.