Free Republic
Browse · Search
News/Activism
Topics · Post Article

On August 4, a poster at Politijab analyzed the problem and confirmed a Chinese malware code was installed on Dr. Orly Taitz, Esq.’s website. What the code was doing was creating an iframe that pulled content from security-alerts.cn/cyber/in.cgi?4.

The poster explained:

It’s trying to run a shockwave flash movie that is 1pixel by 1 pixel in size. This is a well known attack vector to try and take advantage of a known flaw in flash that allows code to be run on your computer… These operations work by creating essentially disposable websites. They try to infect as many computers as possible before their address is flagged, then redirect to a new site.

1 posted on 08/09/2009 5:56:47 AM PDT by SvenMagnussen
[ Post Reply | Private Reply | View Replies ]


To: SvenMagnussen

It’s likely that the malware was not added with her knowledge or consent, or that of her web master.


2 posted on 08/09/2009 5:58:36 AM PDT by Artemis Webb
[ Post Reply | Private Reply | To 1 | View Replies ]

To: CodeToad

General info ping.


3 posted on 08/09/2009 5:59:36 AM PDT by Travis McGee (---www.EnemiesForeignAndDomestic.com---)
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen

Interesting... thanks. Do “the usual” anti-spyware / anti-virus software packages detect these exploits?

Cheers
*DieHard*


4 posted on 08/09/2009 6:00:14 AM PDT by DieHard the Hunter (Is mise an ceann-cinnidh. Cha ghéill mi do dhuine. Fàg am bealach.)
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen

Does this affect Mac computers as well as PC’s?

Been running anti-virus program but not detected anything (as yet).


5 posted on 08/09/2009 6:02:30 AM PDT by ScaniaBoy (Part of the Right Wing Research & Attack Machine)
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen

OK, assuming that Google did find something nasty on the Taitz site, how did Google manage to make that warning message appear? Did Google infect the site too with their own code, or has Google infected Firefox (since IE supposedly didn’t show the warning)?

Google might be right about the infection, but I don’t trust Google’s motives.


8 posted on 08/09/2009 6:09:31 AM PDT by Fresh Wind ("Prosperity is just around the corner." Herbert Hoover, 1932)
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen

There is a way to help reduce these threats.

http://www.opendns.com

You change your DNS settings to theirs, create an account and block .cn .ru .biz .info top level domains(I blocked the middle east and india too). By doing this you’ll eliminate 95% of all the malware domains. It’s 100% free and not a gimmick.


11 posted on 08/09/2009 6:25:09 AM PDT by Malsua
[ Post Reply | Private Reply | To 1 | View Replies ]

To: ShadowAce

Malware ping.


16 posted on 08/09/2009 6:33:01 AM PDT by Born Conservative (Working hard so those on public assistance don't have to.)
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen

Last weekend, about every time I came to FR, I would get a notice of a Trojan from my antivirus software. This might explain those results. I haven’t had the problem since then, but I’ve been avoiding the birth certificate stories since then.


22 posted on 08/09/2009 7:18:06 AM PDT by PAR35
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen; John Robinson
Just maybe you folks really ought to learn how to use Free Republic's Search feature, especially the Comments of our resident guru - JohnRob:

As someone else said - the Wild Wooly Web is NOT anonymous nor without potholes - and as the LDot info shows, it's not just the site itself you have to worry about. I run all over the place with my Firefox and AdblockPlus & NoScript plugins, and have AVG, SuperAntiSpyware, and AdAware running on the system. I don't use Infernal Exploder except to visit Micro$oft, and so far have not had any infection since I brought this system live on XP-SP2 in Sept, 2007; but a lot of nasty stuff has been blocked.

Be careful out there. By the way, the offending exploit in Orly Taitz site has been taken off - for now. Considering Obama has his Acorn IT team in the White House I'm sure it's all coincidence that the 'anti-Obama' sites are getting hammered!

25 posted on 08/09/2009 7:25:33 AM PDT by brityank (The more I learn about the Constitution, the more I realise this Government is UNconstitutional !!)
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen
It’s trying to run a shockwave flash movie that is 1pixel by 1 pixel in size. This is a well known attack vector to try and take advantage of a known flaw in flash that allows code to be run on your computer

I am creating a Flash-based websites. What countermeasures of inoculations can one install?

28 posted on 08/09/2009 8:04:12 AM PDT by FreepShop1
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen
It’s trying to run a shockwave flash movie that is 1pixel by 1 pixel in size. This is a well known attack vector to try and take advantage of a known flaw in flash that allows code to be run on your computer

I am creating a Flash-based websites. What countermeasures or inoculations can one install?

29 posted on 08/09/2009 8:04:19 AM PDT by FreepShop1
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen
It’s trying to run a shockwave flash movie that is 1pixel by 1 pixel in size. This is a well known attack vector to try and take advantage of a known flaw in flash that allows code to be run on your computer

I am creating a Flash-based websites. What countermeasures or inoculations can one install?

30 posted on 08/09/2009 8:04:31 AM PDT by FreepShop1
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen

I visited her website during the time it was supposedly contagious. Is it likely my machine got infected and if so what would the effects be?


38 posted on 08/09/2009 2:27:52 PM PDT by Yardstick
[ Post Reply | Private Reply | To 1 | View Replies ]

To: SvenMagnussen

Are you saying FR posters were infected or the FR website is now infected? I went to that site with Firefox and none of my programs detected anything. However, it’s possible my spyware doctor that runs all the time blocked it because I have it set to block automatically and not to notify me. It blocks and takes care of it automatically.


54 posted on 08/10/2009 10:33:59 AM PDT by mojitojoe (All tyranny needs to gain a foothold is for the people to remain silent.)
[ Post Reply | Private Reply | To 1 | View Replies ]

Free Republic
Browse · Search
News/Activism
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson