weird cookies from this site

Comments and suggestions about this site

Moderators: ChrisThornett, LXF moderators

weird cookies from this site

Postby towy71 » Fri Dec 26, 2008 11:47 am

As I have been looking at the various pages here I am getting cookie requests from various .ru places
They look like
Code: Select all
Name:PHPSESSID
Content:fksap0q0l9c0190ghiir1to6t5
Host:adcatalogue.ru
Path:/
SendFor:Any type of connection
Expires:at end of session

they have various hosts
Code: Select all
searchdirect.ru
folderik.ru
primecatalog.ru
.mail.ru
Well I don't like it :evil:
still looking for that door into summer
User avatar
towy71
Moderator
 
Posts: 4276
Joined: Wed Apr 06, 2005 2:11 pm
Location: wild West Wales

RE: weird cookies from this site

Postby lok1950 » Fri Dec 26, 2008 12:10 pm

Been noticing the .ru in firefox's status bar for a couple of days now haven't checked the cookies though with all malware associated with .ru they do become problematic.

Enjoy the Choice :)
my box:Q8200/Asus P5QDLX/8 Gb ram/WD 2Tb 2-500 G HD/GF GT640 2Gb fedora 20 Win 7 acer S243HL X193W
amd XP1800 on a asusA7N8x/ 789Mb ram/ sda 120 Gb ntfs sdb 80 Gb ext3 (fedora 10) gForce 6800 gt 128 Mb
User avatar
lok1950
LXF regular
 
Posts: 1044
Joined: Tue May 31, 2005 5:31 am
Location: Ottawa

RE: weird cookies from this site

Postby Rhakios » Fri Dec 26, 2008 5:03 pm

Hmm, odd, I'm not getting anything like that in Konqueror. I have it set up to ask me about cookies and I don't see any .ru domains set to accept or reject and I have no such cookies stored. :?
Bye, Rhakios
User avatar
Rhakios
Moderator
 
Posts: 7634
Joined: Wed Apr 06, 2005 11:18 pm
Location: Midlands, UK

RE: weird cookies from this site

Postby george84 » Sat Dec 27, 2008 1:43 pm

I am not technical. Running Firefox/Noscript.

Noscript is blocking "richtraffic.ru". No .ru cookies placed.

Is this an example of Noscript doing its job?
george84
 
Posts: 51
Joined: Wed May 30, 2007 12:15 pm
Location: Cambridge, UK

RE: weird cookies from this site

Postby RedWillow » Sat Dec 27, 2008 4:01 pm

Unticking "Accept third-party cookies" in firefox preferences stopped the blizzard of Russian cookies for me, but I've just experienced something more worrying. I left my computer (running Ubuntu 8.10) with firefox on this thread. I came back to it about 20 minutes later and firefox was displaying the auiofind DOT ru page instead. (I'm not posting a hyperlink.) I found my way back to the thread and it auto-forwarded to auiofind DOT ru again (and again). So I disabled JavaScript and it stopped autoforwarding. When I re-enabled JavaScript, it didn't autoforward anymore, but I found a cookie from auiofind (presumably from when it autoforwarded) in the cookie list.

Can anyone explain what's going on? This feels sinister.

(Note to self: remember not to visit this site while using Windows. :( )

Edit: I've just added '*.ru' as a filter in Adblock Plus and now not only do I get no "Waiting for... various Russian URLs" in the Firefox status bar, but the pages on this website now load faster. :)
RedWillow
LXF regular
 
Posts: 719
Joined: Thu May 29, 2008 1:05 pm

Re: RE: weird cookies from this site

Postby Rhakios » Sat Dec 27, 2008 4:27 pm

RedWillow wrote:Unticking "Accept third-party cookies" in firefox preferences stopped the blizzard of Russian cookies for me,


Ah, perhaps that's why Konqueror doesn't ask me, as I have also set the "Only accept cookies from the originating server" option.
Bye, Rhakios
User avatar
Rhakios
Moderator
 
Posts: 7634
Joined: Wed Apr 06, 2005 11:18 pm
Location: Midlands, UK

Postby lok1950 » Sat Dec 27, 2008 6:54 pm

Note to self: remember not to visit this site while using Windows. Sad )


I am ATM :oops: and have had a re-direct to a Russian language casino front page promising extreme honesty in it's games.

So time to turn third party cookies off :twisted:

Enjoy the Choice :)
User avatar
lok1950
LXF regular
 
Posts: 1044
Joined: Tue May 31, 2005 5:31 am
Location: Ottawa

Postby Dutch_Master » Sat Dec 27, 2008 11:27 pm

I too found the cookies and they bother me. The message to Future is plain and simple: remove all questionable cookies of non-UK sources (or at least block those from outside the EU, including Russia, Nigeria and other known scam-countries) and take more care on who you allow on your site as advertisers in the Future, or loose a subscriber. And probably more then just me.... :evil:

Mind you, LXF is a great mag, but not the only one. Future is fishing in a small pond named Linux, I think you can figure out the rest.... :roll:
Dutch_Master
LXF regular
 
Posts: 2471
Joined: Tue Mar 27, 2007 1:49 am

Postby Rhakios » Sun Dec 28, 2008 2:56 pm

I've e-mailed Mike about it, but he's very likely enjoying a well-earned rest at the moment.
Bye, Rhakios
User avatar
Rhakios
Moderator
 
Posts: 7634
Joined: Wed Apr 06, 2005 11:18 pm
Location: Midlands, UK

Postby ethernet » Sun Dec 28, 2008 3:56 pm

A lot of these things seem to be out of the direct control of the LXF folk but rather come down to Future, whether it be the dodgy manhood drug adverts (two of them!) in the mag a while back or these cookies, or the Windows ads on the site. Don't mind too much as, like george84, am running NoScript.
ethernet
LXF regular
 
Posts: 170
Joined: Sat Oct 07, 2006 8:00 pm
Location: Ireland

Postby george84 » Sun Dec 28, 2008 5:03 pm

NoScript..... as recommended by LXF! That's why I have it installed.
george84
 
Posts: 51
Joined: Wed May 30, 2007 12:15 pm
Location: Cambridge, UK

Postby lok1950 » Sun Dec 28, 2008 6:16 pm

As george said NoScript. does the trick :D

Enjoy the Choice :)
my box:Q8200/Asus P5QDLX/8 Gb ram/WD 2Tb 2-500 G HD/GF GT640 2Gb fedora 20 Win 7 acer S243HL X193W
amd XP1800 on a asusA7N8x/ 789Mb ram/ sda 120 Gb ntfs sdb 80 Gb ext3 (fedora 10) gForce 6800 gt 128 Mb
User avatar
lok1950
LXF regular
 
Posts: 1044
Joined: Tue May 31, 2005 5:31 am
Location: Ottawa

Postby Rhakios » Sun Dec 28, 2008 9:50 pm

Not really the point if they're not supposed to be there in the first place.

I've just set Opera to its most promiscuous mode and while I am picking up some cookies from .ru domains, they don't seem to be the same as the ones towy is getting. Hmm, just refreshed the page and got two more from other domains. Definitely something odd, they don't seem to be related to any other advertsing content I can see on the front page.
Also, I have emptied Opera of all cookies, then clicked on each ad to see what new cookies are being offered. It's only when loading pages from the LXF site itself that I pick up the .ru cookies, but oddly, not the blog page :? . I don't like it at all.
Bye, Rhakios
User avatar
Rhakios
Moderator
 
Posts: 7634
Joined: Wed Apr 06, 2005 11:18 pm
Location: Midlands, UK

Postby lok1950 » Sun Dec 28, 2008 11:07 pm

I would not be surprised if one of the sub-contractor's in the the ad chain got there server hacked as the behavior we are seeing fits.Would not want to work in that shop when the e-mails start to fly :wink:

Enjoy the Choice :)
my box:Q8200/Asus P5QDLX/8 Gb ram/WD 2Tb 2-500 G HD/GF GT640 2Gb fedora 20 Win 7 acer S243HL X193W
amd XP1800 on a asusA7N8x/ 789Mb ram/ sda 120 Gb ntfs sdb 80 Gb ext3 (fedora 10) gForce 6800 gt 128 Mb
User avatar
lok1950
LXF regular
 
Posts: 1044
Joined: Tue May 31, 2005 5:31 am
Location: Ottawa

Postby kpmilburn » Tue Dec 30, 2008 10:17 pm

I find a good companion to NoScript is CookieSafe, it provides more fine grained control than the blanket accept or reject of cookies, or third party cookies..
kpmilburn
 
Posts: 2
Joined: Tue Dec 30, 2008 12:21 pm

Next

Return to This Website

Who is online

Users browsing this forum: No registered users and 1 guest

cron