[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: Banners injected in web pages at exit nodes TRHCourtney*
- To: or-talk@xxxxxxxxxxxxx
- Subject: Re: Banners injected in web pages at exit nodes TRHCourtney*
- From: Freemor <freemor@xxxxxxxxx>
- Date: Tue, 2 Jun 2009 09:01:03 -0300
- Delivered-to: archiver@xxxxxxxx
- Delivered-to: or-talk-outgoing@xxxxxxxx
- Delivered-to: or-talk@xxxxxxxx
- Delivery-date: Tue, 02 Jun 2009 08:01:20 -0400
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:date:from:to:subject :message-id:in-reply-to:references:x-mailer:face:mime-version :content-type; bh=74wym+0zKNMpcXln4CFWeb/uiM8xKYdUSrQkUBPgZn8=; b=nAg4kMWW/8Iv3BJ5pwtns7x0JVx+3HUtqOzodJcHkyOWngGePl3/1jhAHGmw3x3HD8 bvyhlS4ud+dmtj305XfVA3s5AJUYWR2U+/GGc/fdeBfdVCrSSgrg98WOBnkhIjabUAjM PYxe/B2LwXCi69haPi3Fz+wXS0w3enmx5WzHY=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=date:from:to:subject:message-id:in-reply-to:references:x-mailer :face:mime-version:content-type; b=HDJvtfm+js1j52cAaTcY/NRbueP7GlYc2Nad6OgiMr5Go8k148dgryX1fOB4AjrlAC Y/uNzYpDoOlv5q3Un/KwnDi5LYEDZwqO1cU4B6q3YAh3vLHYLxRWnmTMqCwkR1L1Y6LR LyBRGLShULqN/my6NrgG+7T1YDLAZPaOppTo4=
- Face: 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
- In-reply-to: <20090602112258.C864914085B6@xxxxxxxxxxxxxx>
- References: <20090602112258.C864914085B6@xxxxxxxxxxxxxx>
- Reply-to: or-talk@xxxxxxxxxxxxx
- Sender: owner-or-talk@xxxxxxxxxxxxx
On Tue, 02 Jun 2009
"Freemor" <freemor@xxxxxxxxx> wrote:
Some rather silly stuff..
Appoligies for the proceeding post.. Certificate is correct.. The
.trhcourtney01.exit/ Was throwing the browser into complaining that the
certificate didn't match.
I really must learn not to post before having my morning coffee.
I've tried a couple of other sites now and there definitely is banner
injection going on... looking into the html source now to see if there
are other exploits.
Strange the the provided link didn't have injection... Adaptation on
the nodes part?
--
freemor@xxxxxxxxx
freemor@xxxxxxxx
This e-mail has been digitally signed with GnuPG - ( http://gnupg.org/ )
Attachment:
signature.asc
Description: PGP signature