Olympus-OM
[Top] [All Lists]

Re: [OM] OT: Hijacked Browsers

Subject: Re: [OM] OT: Hijacked Browsers
From: Chris Trask <christrask@xxxxxxxxxxxxx>
Date: Sat, 17 Dec 2016 13:30:32 -0700 (GMT-07:00)
     It was an interesting investigation.  I tried using the same approach with 
the annoying ads on the right side of Facebook pages, but it didn't work.

>
>Good!
>
>>     I found the culprit in the Earthlink webmail page, thanks to a burp in 
>> viewing yesterday evening.  There are two instances where the HTML code is 
>> calling "Google_ad" for the top banner, left tower, and right tower:
>> 
>> /wam/brand/earthlink/google_ad_top_banner.jsp
>> 
>> and
>> 
>> /wam/brand/earthlink/google_ad_left_tower.jsp
>> 
>> and
>> 
>> /wam/brand/earthlink/google_ad_right_tower.jsp
>> 
>>     This is a somewhat innocuous function, the real culprit being 
>>Google_Ads, which is downloading malware that bypasses ad blocking.  
>>Yet another piece of evidence that justifies the efforts in removing 
>>anything related to Google (deGoogleisation) from my machines, the 
>>only exception being Google Earth on the laptop I'm presently using.
>> 
>>     What worries me about this is that the activity indicator for my 
>>dialup dialer showed that my machine was sending data as well as 
>>receiving during these periods of activity.  That could very likely 
>>mean that Google was using the pubads.js script as a means of harvesting 
>>data, for which Google has long been suspected.
>> 
>

Chris

When the going gets weird, the weird turn pro 
     - Hunter S. Thompson
-- 
_________________________________________________________________
Options: http://lists.thomasclausen.net/mailman/listinfo/olympus
Archives: http://lists.thomasclausen.net/mailman/private/olympus/
Themed Olympus Photo Exhibition: http://www.tope.nl/

<Prev in Thread] Current Thread [Next in Thread>
Sponsored by Tako
Impressum | Datenschutz