Web Address Spoofing? - ehMac.ca
Facebook
Twitter
YouTube
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read Advertise


Reply
 
LinkBack Thread Tools Display Modes
Old Jan 17th, 2011, 11:15 AM   #1
Full Citizen
 
Join Date: Jan 2004
Location: Silverton, BC
Posts: 867
Send a message via AIM to duosonic
Question Web Address Spoofing?

I'm flummoxed - perhaps someone can shed some light on this.

Yesterday and today, while trying to go to Facebook (yeah, I know - that's another discussion altogether) I have been taken instead to other sites - yesterday to MySpace, today to The Washington Post.

I was able to work around this yesterday by switching browsers (from Firefox to Safari), but today I am getting the same result regardless of browser.

This is not happening with any other sites I try going to - just fb.

This happened with both computers on my network (wireless, WPA password protected) (by the way, I live in a very small, semi-remote town where there is low security risk, and I would actually see anyone wardriving - I know all my neighours within wireless range and it's unlikely any of them have hacked me)

My assumption is that someone, somewhere, has hacked or attacked the facebook site and inserted a redirect instruction somewhere along the line

Or is this perhaps a vulnerability on my own network?

Can anyone help?
__________________
MacBookPro 13" 2.7 GHz Intel Core i7
Mainline Graphics & Communications ~ graphic design, business support services ~ Computer Tutoring: obedience training for you & your computer
duosonic is offline   Reply With Quote
Sponsored Links
Advertisement
 
Old Jan 17th, 2011, 11:20 AM   #2
Full Citizen
 
Join Date: Sep 2006
Posts: 701
What does the file /etc/hosts on your Macs look like?
9780 is offline   Reply With Quote
Old Jan 17th, 2011, 11:27 AM   #3
Full Citizen
 
Join Date: Jan 2004
Location: Silverton, BC
Posts: 867
Send a message via AIM to duosonic
not sure I understand your question - file/hosts - but here is what comes up when I try going to fb:
Attached Images
File Type: jpg Picture 2.jpg (146.1 KB, 9 views)
__________________
MacBookPro 13" 2.7 GHz Intel Core i7
Mainline Graphics & Communications ~ graphic design, business support services ~ Computer Tutoring: obedience training for you & your computer
duosonic is offline   Reply With Quote
 
Old Jan 17th, 2011, 11:32 AM   #4
Full Citizen
 
Join Date: Jan 2004
Location: Silverton, BC
Posts: 867
Send a message via AIM to duosonic
The episode yesterday lasted about 45 min., then I was able to get fb again.
__________________
MacBookPro 13" 2.7 GHz Intel Core i7
Mainline Graphics & Communications ~ graphic design, business support services ~ Computer Tutoring: obedience training for you & your computer
duosonic is offline   Reply With Quote
Old Jan 17th, 2011, 12:17 PM   #5
Honourable Citizen
 
CubaMark's Avatar
 
Join Date: Feb 2001
Location: Nova Scotia, Canada
Posts: 17,537
Send a message via AIM to CubaMark
Consider modifying your Network settings (Advanced-->DNS) to use a different DNS server, such as OpenDNS (208.67.222.222 and 208.67.220.220). There are a number of other free DNS servers available. May be an issue with your ISP-provided default DNS server.
__________________
* * * * * * * * * * * * * * * * * * * *
The Cuban Revolution as Socialist Human Development Brill Books (Amazon Paperback)
CubaMark is offline   Reply With Quote
Old Jan 17th, 2011, 12:25 PM   #6
mguertin
Guest
 
Posts: n/a
Quote:
Originally Posted by CubaMark View Post
Consider modifying your Network settings (Advanced-->DNS) to use a different DNS server, such as OpenDNS (208.67.222.222 and 208.67.220.220). There are a number of other free DNS servers available. May be an issue with your ISP-provided default DNS server.
+1

Also if someone is messing with their DNS server and getting away with it chances are they are doing it in order to try and spoof sites like facebook and myspace so they can collect everyone's login information :/
  Reply With Quote
Old Jan 17th, 2011, 12:35 PM   #7
Full Citizen
 
Join Date: Jan 2004
Location: Silverton, BC
Posts: 867
Send a message via AIM to duosonic
Thanks CubaMark and mguertin - those were my thoughts, especially the DNS server - which is already at those settings. Still flummoxed.
__________________
MacBookPro 13" 2.7 GHz Intel Core i7
Mainline Graphics & Communications ~ graphic design, business support services ~ Computer Tutoring: obedience training for you & your computer
duosonic is offline   Reply With Quote
Old Jan 17th, 2011, 02:08 PM   #8
krs
Honourable Citizen
 
krs's Avatar
 
Join Date: Mar 2005
Location: Ontario and Quebec
Posts: 9,103
Quote:
Originally Posted by mguertin View Post
+1

Also if someone is messing with their DNS server and getting away with it chances are they are doing it in order to try and spoof sites like facebook and myspace so they can collect everyone's login information :/
You lost me...........

Nobody is spoofing facebook or myspace.

One tries to go to facebook and ends up with the Washington Post, that's a simple misdirection - at this point nobody has asked for any login information and I'm sure nobody would try to log into their facebook account when they are staring at a Washington Post web page.
krs is offline   Reply With Quote
Old Jan 17th, 2011, 02:57 PM   #9
Lifetime membership
 
Lawrence's Avatar
 
Join Date: Mar 2003
Location: Toronto, Ontario, Canada
Posts: 9,265
Could be just a glitch, I suffered from a triple post on FB,
Nothing harmful, Could be their server updating while I posted.

I'm using Open DNS too.
__________________
Signature deleted for obvious reasons
---------------------------------
MacMagic Game Forum
Lawrence is offline   Reply With Quote
Old Jan 17th, 2011, 04:21 PM   #10
Wescoastie in exile
 
MacMagicianJunior's Avatar
 
Join Date: Nov 2010
Location: Kitchener, ON
Posts: 255
A while back there was a DNS Changer Trojan that masqueraded as a video codec, you can try this free removal tool:

DNSChanger Trojan Horse Removal - OSX.RSPlug.A OSX/Puper OSX/Jahlav

If that's not the problem it won't do anything, if it is it'll fix it. I think it's unlikely since it's happening on multiple machines, but it's worth making sure...
__________________
MP 2008 - 2.8 Quad, 24GB, 7TB, HD 5770, Blu-Ray, wifi
MBP 2009 - 2.66, 4GB, 500GB
PM G5 - Dual 1.8 (x2)
PM G5 - Dual 2.0
PM G4 MDD Dual 1.25
PM G4 MDD 867
PB G4 17" HD
PB G3 Pismo
iPad 32GB wifi
iPhone 3GS
MacMagicianJunior is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
IP Address Confusion krs Mac, iPhone, iPad and iPod Help & Troubleshooting 13 Jun 22nd, 2009 04:31 PM
Address Book crash Conundrum NetMinder Mac, iPhone, iPad and iPod Help & Troubleshooting 16 Dec 5th, 2008 04:43 PM
Jackboots and brown shirts Britnell Everything Else, eh! 23 Mar 31st, 2003 03:00 PM


All times are GMT -4. The time now is 06:11 AM.



Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
vBulletin Security provided by vBSecurity v2.2.2 (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Copyright 1999 - 2012, ehMac.ca All rights reserved. ehMac is not affiliated with Apple Inc. Mac, iPod, iTunes, iPhone, Apple TV are trademarks of Apple Inc. Content Relevant URLs by vBSEO 3.6.0 RC 2

Tribe.ca: Urban living in Toronto!