Puppy Linux Discussion Forum Forum Index Puppy Linux Discussion Forum
Puppy HOME page : puppylinux.com
"THE" alternative forum : puppylinux.info
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

The time now is Sun 23 Nov 2014, 11:08
All times are UTC - 4
 Forum index » Off-Topic Area » Security
Search query hijacks and redirection: What you need to know
Post new topic   Reply to topic View previous topic :: View next topic
Page 1 of 1 [4 Posts]  
Author Message
Flash
Official Dog Handler


Joined: 04 May 2005
Posts: 11156
Location: Arizona USA

PostPosted: Tue 06 Sep 2011, 23:32    Post subject:  Search query hijacks and redirection: What you need to know  

http://www.techrepublic.com/blog/security/search-query-hijacks-and-redirection-what-you-need-to-know/6459?tag=nl.e036
Quote:
....Netalyzr identified multiple ISPs that use DNS to redirect web searches for popular sites, such as www.google.com, search.yahoo.com, and www.bing.com [18]. Instead of visiting the intended search engines’ IP addresses, the user winds up redirected to proxy servers. Some ISPs only manipulate Yahoo and Bing, while others manipulate all three.”....


A botched configuration of this sort of packet redirection may explain why Barry and others have trouble staying logged into the forum. Who knows?
Back to top
View user's profile Send private message 
8-bit


Joined: 03 Apr 2007
Posts: 3393
Location: Oregon

PostPosted: Wed 07 Sep 2011, 01:21    Post subject:  

On my wife's PC running Win XP and using bing as the search engine, I was doing a search that evidently was redirected as I was taken to a Century Link search engine page. Century Link is the new name for Quest by the way.
But being greeted by that page instead of the one from Bing tells me my ISP is redirecting some if not all searches through it's own search engine.
Back to top
View user's profile Send private message 
Bruce B


Joined: 18 May 2005
Posts: 11131
Location: The Peoples Republic of California

PostPosted: Wed 07 Sep 2011, 02:20    Post subject:  

Flash,

I get that. I mean I got that.

Back to the value of using the hosts file to keep control.

Questions? Need I say more?

Bruce

~

_________________
New! Puppy Linux Links Page
Back to top
View user's profile Send private message 
Bruce B


Joined: 18 May 2005
Posts: 11131
Location: The Peoples Republic of California

PostPosted: Wed 07 Sep 2011, 03:07    Post subject: Re: Search query hijacks and redirection: What you need to know  

Flash wrote:
http://www.techrepublic.com/blog/security/search-query-hijacks-and-redirection-what-you-need-to-know/6459?tag=nl.e036
Quote:
....Netalyzr identified multiple ISPs that use DNS to redirect web searches for popular sites, such as www.google.com, search.yahoo.com, and www.bing.com [18]. Instead of visiting the intended search engines’ IP addresses, the user winds up redirected to proxy servers. Some ISPs only manipulate Yahoo and Bing, while others manipulate all three.”....



This is puported redirecting going to be extremely difficult to do. I don't think it technically possible. The browser needs to be configured for it.

In Firefox go Edit > Preferences > Advanced > Connection > Setting

Then one can see how to configure the browser to use a proxy server. The browser being redirected to a proxy server will run into a no go situation unless it has the name or address and the port for the proxy configured.

Being intellectually offended by the article, I took a glance at his supposed alarming 'white paper'

The paper says proxy DNS server. Only the author didn't say DNS, if he did, there wouldn't be cause for a significant alarm.

The ISP provides the DNS servers and can switch them without trouble. It can't switch them on me, because I decide what servers to use and they have zero control.

But for an ISP to configure a browser to use a proxy server, I've never heard of it and the white paper doesn't say it can.

Below is a list of addresses for two search engines I might use.

There is not an ISP in the world who can modify the addresses if you know how to protect them.

They can route, but not to another google or scroogle. But they route, but only if you don't take measures to defeat them.

67.199.36.109 www.scroogle.org
69.60.115.165 www.scroogle.org
69.60.115.168 www.scroogle.org
216.197.121.236 www.scroogle.org
64.251.14.80 www.scroogle.org
64.251.22.6 www.scroogle.org
64.251.22.7 www.scroogle.org
65.111.175.201 www.scroogle.org
65.111.175.205 www.scroogle.org
67.199.36.108 www.scroogle.org
74.125.224.147 www.google.com
74.125.224.144 www.google.com
74.125.224.145 www.google.com
74.125.224.148 www.google.com
74.125.224.146 www.google.com
74.125.224.147 google.com
74.125.224.144 google.com
74.125.224.145 google.com
74.125.224.148 google.com
74.125.224.146 google.com

Probably best to use in my geographical area, who knows?

~

_________________
New! Puppy Linux Links Page
Back to top
View user's profile Send private message 
Display posts from previous:   Sort by:   
Page 1 of 1 [4 Posts]  
Post new topic   Reply to topic View previous topic :: View next topic
 Forum index » Off-Topic Area » Security
Jump to:  

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001, 2005 phpBB Group
[ Time: 0.0672s ][ Queries: 12 (0.0202s) ][ GZIP on ]