Home Messages Index
[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index

Re: [Roy Schestowitz cannot stop lying] [Rival] Another Major Site Runs Windows, Serves All Visitors with Malware After PWNAGE

In comp.os.linux.advocacy, Erik Funkenbusch
<erik@xxxxxxxxxxxxxxxxxxxxxx>
 wrote
on Tue, 13 Nov 2007 00:01:37 -0600
<1351q5j1sml97.dlg@xxxxxxxxxxxxxxx>:
> On Mon, 12 Nov 2007 17:39:00 -0800, Jim Richardson wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>> 
>> On Mon, 12 Nov 2007 18:59:10 -0600,
>>  Erik Funkenbusch <erik@xxxxxxxxxxxxxxxxxxxxxx> wrote:
>>> On Mon, 12 Nov 2007 14:29:52 -0800, Jim Richardson wrote:
>>>
>>>> Since in.indiatimes.com is an akamai host, you can't trust that the
>>>> headers you get from that are the same ones that the origin site sent
>>>> out. Without knowing what the origin site's IP/hostname is, you can't
>>>> get the raw headers, so all your stuff above, is a waste of typing,
>>>> since Akamai can, and does, mess with the headers. 
>>>
>>> So then claiming that's it's a Windows server is just as suspect.
>> 
>> there is evidence that it's a Windows server, as much evidence as
>> www.msn.com offers anyway :)
>
> Uh.. what?
>
> http://toolbar.netcraft.com/site_report?url=http://www.msn.com

There are also the headers:

wget -O /dev/null --server-response http://www.msn.com/

    HTTP/1.1 200 OK
    Connection: keep-alive
    Date: Tue, 13 Nov 2007 17:11:10 GMT
    Server: Microsoft-IIS/6.0
    P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
    S: ptlB09
    X-Powered-By: ASP.NET
    X-AspNet-Version: 2.0.50727
    Pragma: no-cache
    Set-Cookie: ...

The cookie expiry dates are a little odd.  Depending on
cookie, they last for a week, two years, or a decade.

[rest snipped]

-- 
#191, ewill3@xxxxxxxxxxxxx
/dev/signature: Not a text file

-- 
Posted via a free Usenet account from http://www.teranews.com


[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index