Rabbits for profit… Rabbits for fun… Rabbits for just about everyone…

It is currently Tue May 22, 2012 1:00 am 






This topic is locked, you cannot edit posts or make further replies.  [ 2 posts ] 

Previous topic | First unread post | Next topic 

  Print view

Author Message
 Years of membershipYears of membership
 Post subject: If your browser thinks RT is a security risk, read this.
New postPosted: Wed Jun 22, 2011 7:57 am 
User avatar

Joined: Dec 27 2009
Posts: 175
Location: Sacramento CA
Thanks: 2
Thanked: 21 in 16 posts
Country: United States (us)
Cash on hand:
350.00 BunnyBucks

Currently: Offline Offline
Mcafee has rabbittalk listed as a security risk
http://www.malwareurl.com/listing.php?d ... ittalk.com


Malicious URLs on rabbittalk.com

/~bbonline/administrative/bot.exe

Have a good day!
Franco Rios


Top
 Profile E-mail  
Post Permalink  
 Years of membershipYears of membership
 Post subject: Re: mcafee
New postPosted: Wed Jun 22, 2011 9:47 am 
Site Admin
User avatar

Joined: Dec 16 2009
Posts: 356
Location: Ontario
Thanks: 6
Thanked: 30 in 20 posts
Country: Canada (ca)
Cash on hand:
851.00 BunnyBucks

Currently: Offline Offline
I'm going to address this issue, and then sticky and lock this topic. I've been through it with many other sites.

First, I'll explain a bit about how our website hosting works. This site is on a shared host. That means there are many, many accounts on it, each with at least one but possibly dozens of websites. That's per physical server too. Each "account" is separate, you cannot see or access the files on other peoples' accounts, and they cannot see yours. In the path to each account you have a username, and they use this to create a "virtual url" to get to your site, in case your domain stops functioning. For example, one could reach rabbittalk by visiting http://74.53.86.98/~midnight/rabbittalk.com/ and see the homepage, even if the domain rabbittalk.com were suspended or expired. The important thing to note here is the /~midnight/ part, and we'll come back to this later.

Now, what malwareurl.com does is indexing of websites for possibly suspicious files. This scummy site purposefully collects "results" that they know to be incorrect, in order to make it look like they have more results (and therefore do a better job) than they actually are. They use scripts, much like spam bots or search spiders, to locate anything that might be worth mentioning, do not verify if it is an actual threat, and do not update their results to reflect if a suspicious file has been removed. You can see from the url they give: /~bbonline/ that that is not us. Who is user bbonline? Who knows, but they don't exist now, haven't for several months at least, and the file they flag doesn't exist either.

So what does malwareurl.com do with this "result"? Naturally, they flag all 590 domain names currently using the same IP address as being infected. This makes their site look like they have 589 results more than if they had properly just flagged the one url or domain. They do this with every result they collect. If I had the assets and time to pursue it, they would be in court. Their site itself is malicious in that it attempts to defame legitimate websites, and scare users into buying more antivirus software. Antivirus companies like McAfee cash in on this, by making it look like their software is doing a better job than it is, or better than their competitors. People see more results and think it must be better - they don't know or care that the results are fake.

So how does this affect us? Well, now we have every antivirus company, plus a lot of wannabe browser plugin makers trying to cash in on these indexing sites. McAfee, "Web of Trust", and others all use, or have used malwareurl.com despite its well known deceptive practices. Web of Trust claims to not use them anymore, due to their unreliability, but they do not remove results gathered from this site either. This allows users of their plugin to game the system, using these bogus results to degrade the reputation of their competitors, or sites they just don't like.

The lesson to learn from this is that web browser plugins that provide "security" through reputation are useless. Everyone involved in them is cheating in some way - the AV company cheats by using known bogus results, the sites like malwareurl.com cheat by gathering false results and publishing them, and end users cheat by using these plugins to attack sites for their own benefit, or to "get back at them" over things like being banned from a site.

The correct way to secure your home computer is threefold:

1. Use a router between your computer and modem.
2. Use a respectable antivirus. Microsoft Security Essentials is one of the better ones, and is free.
3. Use a software based firewall. The one included with Windows 7 is pretty good, much better than it was in XP.

Any questions can be PMed to me. I'm so sick of these malicious malware sites causing bogus reports, wasting my time and scaring people off from legitimate websites, that I will not get into a big debate about it on the forums. Been there before.

_________________
:typing: -David
Affordable forum and blog customization | My latest photos


Top
 Profile E-mail  
Post Permalink  
Display posts from previous:  Sort by  
This topic is locked, you cannot edit posts or make further replies.  [ 2 posts ] 


Similar topics

Interesting read Author: Hoping13
Forum: Natural Feeding for Rabbits, 5 Replies

HELP.......PLEASE READ Author: Fatboy
Forum: Rabbit Care, 23 Replies

PLease read this Author: Mary Ann's Rabbitry
Forum: Rabbit Care, 26 Replies

Barn security Author: Barnhouse
Forum: Rabbit Care, 34 Replies

Dead 4wk kit, Please Read & Reply! Author: ChickiesnBunnies
Forum: Meat Rabbits, 8 Replies



Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:


Copyright ©2009-2012 RabbitTalk.com
Website Created by MidnightCoder.ca