homeGeek CultureWebstoreeCards!Forums!Joy of Tech!AY2K!webcam

The Geek Culture Forums


Post New Topic  New Poll  Post A Reply
my profile | directory login | | search | faq | forum home
  next oldest topic   next newest topic
» The Geek Culture Forums   » All about the comics!   » The Joy of Tech   » Archive weirdness?

 - UBBFriend: Email this page to someone!    
Author Topic: Archive weirdness?
Snaggy

Sir Snaggalot!
Member # 123

Member Rated:
5
Icon 5 posted April 23, 2013 11:40      Profile for Snaggy   Author's Homepage     Send New Private Message       Edit/Delete Post   Reply With Quote 
A reader writes..

-----------------
I've been going through the archives after a friend put me on to Joy of Tech.

For some reason starting with comic 1220 http://www.geekculture.com/joyoftech/joyarchives/1220.html I keep getting redirected to http://searchtermresults.com … etc. just after the comic graphic loads.

It appears to stop after 1261

Any ideas?

---------------

and

----
Ok, no problem with the archive on a fully updated Mountain Lion iMac at work.

But I get the redirect under updated Lion on both my Mac Pro and Mac mini. Safari 6.0.2 is ok on my Lion equipped work laptop. Updated it and it's still working.

Weird. What's so different about my home machines?


---------------

Weird indeed. I can't reproduce this. Anyone have any ideas?

Posts: 8111 | From: Canada | Registered: Jan 2000  |  IP: Logged
GrumpySteen

Solid Nitrozanium SuperFan
Member # 170

Icon 1 posted April 23, 2013 12:31      Profile for GrumpySteen     Send New Private Message       Edit/Delete Post   Reply With Quote 
There's some malware for Windows that redirects links to that site. Perhaps they've created a trojan version for Mac and bundled it with something else that was installed on the home computers.

--------------------
Worst. Celibate. Ever.

Posts: 6364 | From: Tennessee | Registered: Jan 2000  |  IP: Logged
dragonman97

SuperFan!
Member # 780

Member Rated:
4
Icon 1 posted April 23, 2013 21:45      Profile for dragonman97   Author's Homepage     Send New Private Message       Edit/Delete Post   Reply With Quote 
Snaggy: The reason is almost certainly because of this line which is added in 1220.html but not present in 1219.html:
code:
<script src="http://tweetrooster.com/rooster.js.php"></script>

I like my computer far too much to find out what evil lurks behind that site presently. Odds are this is an include that's quite dated (the JoT seems to be from March 2009) and the site has either:
a) Been breached by a na'er-do-well
-or-
b) The domain lapsed and the site has been taken over by another site that has [a] or is actually run by a na'er-do-well.

Hurray for curl, diff, and vim. (Also for Smultron - something was funky with the encoding of the original files.)

P.S. A search for tweetrooster includes a blurb about a plugin for it being untouched for 2 years...and another describes the domain as being lapsed:
https://duckduckgo.com/?q=tweetrooster

I'm 'off the clock' now and don't quite feel like doing forensics/safe review to see what's behind some of those pages.

P.P.S. In case anyone see the above and doesn't read between the lines - I DO NOT recommended visiting any of this stuff unless you know what you're doing and how to stay safe when visiting evil sites.

--------------------
There are three things you can be sure of in life: Death, taxes, and reading about fake illnesses online...

Posts: 9332 | From: Westchester County, New York | Registered: May 2001  |  IP: Logged
Snaggy

Sir Snaggalot!
Member # 123

Member Rated:
5
Icon 14 posted May 09, 2013 13:08      Profile for Snaggy   Author's Homepage     Send New Private Message       Edit/Delete Post   Reply With Quote 
Thanks Dragon, you are awesome!

It's so looooog ago I don't even remember that code!

Posts: 8111 | From: Canada | Registered: Jan 2000  |  IP: Logged


All times are Eastern Time  
Post New Topic  New Poll  Post A Reply Close Topic    Move Topic    Delete Topic next oldest topic   next newest topic
 - Printer-friendly view of this topic
Hop To:

Contact Us | Geek Culture Home Page

© 2015 Geek Culture

Powered by Infopop Corporation
UBB.classicTM 6.4.0



homeGeek CultureWebstoreeCards!Forums!Joy of Tech!AY2K!webcam