MetaChat REGISTER   ||   LOGIN   ||   IMAGES ARE OFF   ||   RECENT COMMENTS




artphoto by splunge
artphoto by TheophileEscargot
artphoto by Kronos_to_Earth
artphoto by ethylene

Home

About

Search

Archives

Mecha Wiki

Metachat Eye

Emcee

IRC Channels

IRC FAQ


 RSS


Comment Feed:

RSS

12 November 2006

Important web information that you should be aware of. Nope, no jokes, nothing like that. It's just a mention of something that I saw on MeFi that people may want to know.[More:] A post on MeFi got deleted, as the page that it featured was attacked by greifers who filled enough of the suggestion boxes with links that will cause browsers load tubgirl pics, open tons of windows, etc. to make the site unuseable.
The website is kancept.com DO NOT GO THERE. Assume it's totally NSFW.
The MeTa thread on the post/page in question is here: http://metatalk.metafilter.com/mefi/13073

I know there are some people who don't read MeFi, so I'll repost my comment here so you can update your filters/be warned.

No pop-ups for me, which is good. I noticed that noscript stopped something from running, so I added this filter to Ad Block Plus - *lol.on.nimp.org*. Reloading the page removed all the attempted scripts and made it look normal. Doing a search on the site leads me to believe that it's a major greifing site, so you may want to add it to any list of sites that you have where you should never go and will always disallow.

Doing a little more digging led me to this comment on the New Grounds boards:

Get ahold of her email address and sign her up to a shitload of porn sites.
Also, send her countless emails with this link:

WARNING DO NOT CLICK THIS LINK!

www.lol.on.nimp.org

The link will autospawn popups and crash her PC
The "lol" can be replaced with anything, so to make her unsuspiscious, rewrite the link with different words other than "lol". Try and be cunning and say shit like "Haha look at this link i found of a boy getting owned" or something.

I REPEAT, DO NOT USE THE LINK ABOVE ON YOURSELF.


So, maybe change (or add a new line) the filter to be *.on.nimp.org*. Either way, forwarned is forearmed, right?


NoScript is available for d/l here, as is AdBlock Plus.
More info: Answers.com has a page of information on Last Measure.com (which is where on.nimp.org links to), including links of referral sites that will link back to Last Measure and cause havok with your browser. My suggestion is to add the URL's of the referrals to any filters that you have to stop you from accidentally going there.
posted by Zack_Replica 12 November | 20:43
Even more info: The pop-up/redirect/crash thing is NOT BROWSER SPECIFIC. It runs on a Java script, and has screwed up Firefox, IE, and whatever mathowie is using on his Mac. So the only way to stop this is to not go to the site, or to use a script blocker (and still not go there).
posted by Zack_Replica 12 November | 21:26
http://www.ericphelps.com/scripting/samples/Hosts/

Windows users should add the address to the hosts file if it is not already there.
posted by weretable and the undead chairs 12 November | 21:38
I use his updater to auto-update the hosts file from the mvps site and I also add my own entries (like the nimp site) when I need.
posted by weretable and the undead chairs 12 November | 21:41
I don't know how to do any of this stuff! Explain it to me like I'm dumb! KTHNXBYE!
posted by ThePinkSuperhero 12 November | 21:47
TPS - ok, are you using Firefox? I'm really not sure about how to do this in any version of IE. Also, I don't feel confident about telling you how to edit your hosts file, as (I don't think) it's something you shouldn screw up. Someone else want to jump in? If you are using FF, then you should have some add-ons installed as they make your browsing safer and easier.
First: download AdBlock Plus. This will block a lot of ads and page elements such as banner ads, and crap like that. There's more info on it at its official site, which tell you how to use it. The learning curve is not at all steep, and remember that by doing this, pages load faster, and you don't have to see a lot of the BUY NOW!!! crap. :)

No Script. What it does is stop all scripts from running on all pages. As an example, if you were typing something here, and you went to click 'Italics', it wouldn't work because the script has been disabled. Easy to fix - right-click the icon on the status bar, and click on the 'Allow metachat.org'. Here's the link to the official site, which has more info. You'll have to allow all the sites that you go to on a regular basis, say, Flickr, for example. I go there and I can't add notes to pictures, as that's disabled. Same with MetaFilter. It's not as annoying as it sounds, as once you allow the site, you don't have to do it again.
I'll write more as I think of it.
posted by Zack_Replica 12 November | 22:33
Let's not panic the Peanut Gallery. It's not necessary to kill your Domain Name Service client in Windows XP, or set up and maintain some big Hosts file on your machine. It's not even advisable, unless you want any of the tens of thousands of domains that change Web hosting arrangements daily not to work for you speedily, since killing the DNS client kills local address caching, and you'll be hitting your upstream DNS machine a whole lot more. We have the DNS so no one has to constantly keep updating a Hosts file, and frankly, some exploits work by patching local Hosts files with bogus entries, so you can actually expose yourself to some of these old boogey men by doing that.

I don't see why, if you're running Firefox 1.5.0.8 or 2.0, you can't just install the AdBlock Plus extension, and put in a custom filter rule on http://*.on.nimp.org and feel pretty safe. In Internet Explorer 6, you can just go to Tools-->Internet Options, click the Security tab, click Restricted Sites (red icon) and add the same http://*.on.nimp.org URL to block the site.

Case closed.
posted by paulsc 12 November | 22:46
So... I guess I'll do nothing about this, except avoid that site, and probably have bad dreams about it tonight.
posted by Doohickie 12 November | 23:06
I did not suggest killing the DNS client, just using a hosts file.
posted by weretable and the undead chairs 12 November | 23:16
"I did not suggest killing the DNS client, just using a hosts file."

True, weretable, you didn't suggest killing the Windows DNS client, and I'm sorry if I seemed to imply you or Zack_Replica did. That's one of the suggestions on the Eric Phelps site that you did provide a URL for, though, and when I saw that, it just raised some old "Windows tips" flags. Let the DNS be the DNS though, I say.
posted by paulsc 12 November | 23:40
If you kill the DNS client you will only be able to reach sites if you have the IP address. If this Eric dude suggests this as a strategy then he has no credibility. Also, his hosts file is effective but it is also huge and really slows down browsing.
posted by arse_hat 12 November | 23:50
Photo Friday Suggestion || Cool Hand Luke is on AMC tonight.

HOME  ||   REGISTER  ||   LOGIN