Security Incidents mailing list archives

Re: fbi.gov weirdness?


From: Chip McClure <vhm3 () hades dnsalias net>
Date: Thu, 11 Oct 2001 16:03:07 -0700 (PDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Something funky on their 404 error page. I followed the same routine that
you did, a direct referral (no previous referral link), and I get referred
to a link on CNN.

Flushed the cache right before opening the link, running Konqueror on
FreeBSD 4.4

- -----
Chip McClure
Sr. Unix Administrator
GigGuardian, Inc.

http://www.gigguardian.com/
- -----

On Thu, 11 Oct 2001, cg wrote:

Hi All,
    I hope I'm posting this to the right list. I'm most likely just paranoid
but is there something weird going on with the fbi.gov site?
1. The new warning that they put out was /pressrel/pressrel01/skyfall.htm
2. Then it was changed to /pressrel/pressrel01/101101.htm
3. So after seeing the first url change I tried to go back to skyfall.htm
and I got a Not Found error with a
    link that said to go back to or notify the refering site. By clicking
this I went to the Yahoo! email login
    site. I had just opened my browser at home for the first time today, so
it wasn't a cache or anything.
4. Now as I look further by looking at DNS at COSTE, UXN and geektools.com I
find differing ip             addresses. COSTE reports 216.200.14.114, while
the two others (which look truer to me)                     64.124.161.77.

Is anyone else seeing this??


Thanks for being patient with my paranoia.

C. Gordon


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com



-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Made with pgp4pine 1.76

iQA/AwUBO8YlLoxq/3tb9j7EEQJToQCfb7pHbO1qfu32jtimbltszwvOOJAAn1TR
riK70+dhfq1049VJ/Ais6yCc
=sXxh
-----END PGP SIGNATURE-----



----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com


Current thread: