diyaudio.com - An unsafe site??

[Geek]

Thanks for the report. The site is fine. I'll try to find out what's going on with M$.

Add this line in the header of the generated HTML on each page:

<meta name="MSSmartTagsPreventParsing" content="TRUE" />

It shouldn't bother you anymore

Cheers!

 

[Glowbug]

Ew, IE

No thanks...

 

[AdamThorne]

Hrmm. I got stuck with one of the fake "YOU MAY HAVE A VIRUS!" jobbies the other day. I think Thursday (9/10), around 4:45 pm local time. At the time I was on this website and gmail.

I assume that it was something crawling around via another method, but since this came up I thought I'd mention it.

 

[Geek]

I get viruses all the time in emails.. I can click on them all I want.

I love my Linux

/gloat

 

[Wavebourn]

Yahoo is more dangerous than other sites: their pages generate tons of javascript errors, and almost each click activates calls to many foreign sites that collect information about users.

 

[kevinkr]

I get viruses all the time in emails.. I can click on them all I want.

I love my Linux

/gloat

Me too!

 

[Hearinspace]

This isn't a complaint, just a report in case it has meaning for the admin., when coming in this time, my machine asked to connect to

1) number number blah blah yahoodns . . . . .
2) bid.openx.net

openx was the one I couldn't remember that tried to connect the time I mentioned in post above.

Oh yeah, this IS using Firefox, on Mac

Thanks

 

[Jason]

This isn't a complaint, just a report in case it has meaning for the admin., when coming in this time, my machine asked to connect to

1) number number blah blah yahoodns . . . . .
2) bid.openx.net

openx was the one I couldn't remember that tried to connect the time I mentioned in post above.

Oh yeah, this IS using Firefox, on Mac

Thanks

Thanks for the report. OpenX is our ad serving program. At the moment we're trialling something that connects to the main OpenX servers to work out what ads to serve. Not sure about the yahoo DNS stuff, probably something to do with the google ads.

 

[Hearinspace]

Thanks for the report. OpenX is our ad serving program. At the moment we're trialling something that connects to the main OpenX servers to work out what ads to serve. Not sure about the yahoo DNS stuff, probably something to do with the google ads.

Roger that Jason.
It's actually neat to hear back the other way (from you) as it gives me a little more feel for what's actually going on when my computer is telling me that apparently unrelated sites are trying to connect. I was starting to find them all suspicious, which isn't much fun. You get a thanks!

 

[Jason]

The forum software uses code from Yahoo to do all the fancy AJAX dropdown menus and stuff, which is why you see the Yahoo calls.

 

[Hearinspace]

Interesting. Coming in with Firefox on the Mac, I actually denied access to all the Yahoo addresses that were requesting permissions but it didn't seem to make any difference to navigating through the site.
When I enter using Safari I don't even get the requests. . . . .

Thanks Jason

 

[lazyfly]

Far out, hasn't anyone dumped FF in favour of Chrome?

I love Chrome - Google FTW!

--

Oh yeah, Chrome thinks DIY Audio is quite pleasant.

 

[Holger Barske]

Chrome still has security issues. May become interesting someday, but now it's FF. Pity Opera is declining.

 

[Geek]

Pity Opera is declining.

Ever since they lost the ad-driven support in the later 8.x, they've been targeting more the cellphone market making the desktop version really suck

Cheers!

 

[ostripper]

Far out, hasn't anyone dumped FF in favour of Chrome?
I love Chrome - Google FTW!

yes , I have . chrome will run circles around either FF or IE -X . where a REAL malicious site will "nuke IE" or crash FF , chrome will just throw up a red sandboxed warning window asking , " do you really want to?? "

As far as being an "unsafe site" , from the client side .. I do not see this.
8 cookies (attachment 1) .. seems normal , they do disappear after the session.

.. I "hid behind my proxy" (attachment 2) , and logged what requests the page (DIYA) made. Nothing out of the ordinary ... the yahoo scripts , google- analytics , and 3 open X ad- server requests. nothing happens "behind the scenes".
OS

 

[rdf]

Far out, hasn't anyone dumped FF in favour of Chrome?

I love Chrome - Google FTW!

Still too bare bones. No official mouse gestures yet? So 1998.

 

[ostripper]

Still too bare bones. No official mouse gestures yet? So 1998.

On my "retro " chrome , I have found out how to ferret an individual cookie out for inspection ( all cookies are in a unified .DB format with chrome) and compared this to an identical IE cookie after logon with DIYA. I could see no personally identifiable info , but I could see the hash change after login. that must be how just DIYA knows ME !!

PS If my chrome goes the way of the bloated, slow IE8 or FF , I will search again for a lean ,mean 200 millisecond surfin' machine. I can do without "gestures" , but this seems to be a plugin anyways.
(attachment is IE7 cookie - identical to chrome cookie content)
OS

 

[mirlo]

But it IS an unsafe site ...

... it could cost me my job if I spent as much time at work reading it as I want to!

 

[peranders]

Would a new one like me be welcome here?

... only if you can behave yourself and not swear

 

[Steve Dunlap]

Hi ostripper,

Chrome is fast, if you don't count all the times you have to do a hard reboot because it freezes. If you have found a solution for that, the boys over at Google would like to hear about it.