Wierd firefox symptom

[Stan Bubrouski]

Hey,

I don't ordinarily send messages like this, but I find it kinda
disturbing. I opened up firefox today (v1.0.2 I know its old but I
haven't used this PC in a while), and typed:
www.espn.com

into the address bar only to find myself at:
http://www.megago.com/l/?

I checked the address bar history and it indeed showed that I had
typed http://www.espn.com

So I tried again. I made sure I typed www.espn.com and once again
ended up at http://www.megago.com/l/?

The third time was a charm. ESPN actually loaded. Checked firefox
directories for any rogue extensions or modified files and nothing had
been modified since I updated the User Agent Switcher extension on
5/16/05. I ran NAV and MS Anti-Spyware and nothing was found. Which
makes sense since I only use Mozilla and have A LOT of sites blocked
using adblock extension. So I'm kind of at a loss. I can't reproduce
it atm but I'm just wondering has anyone else seen this before and
could it just be a firefox bug?

-sb
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[Daniel H. Renner]

I have a client that stayed at a hotel, the Crowne Plaza UN in New York.
While there, she used the hotel's Internet connection with her laptop.
She was running Windows XP Pro and Firefox v1.0.3 - no problems with the
connection.

Upon return, when she tries to go to her specified homepage, it instead
tries to access the hotel's (I'm assuming here) proxy or autorization
server - no, no proxy settings set.

I've installed Firefox v1.0.4 and still get the same results - it will
NOT view that website. Changed homepage to Google and can surf fine,
but will NOT go to that original home site.

So, yes - I've seen it...

Cheers,
Dan

Date: Mon, 6 Jun 2005 23:40:25 -0400
Subject: [Full-disclosure] Wierd firefox symptom
Content-Type: text/plain; charset=ISO-8859-1
Hey,
I don't ordinarily send messages like this, but I find it kinda
disturbing. I opened up firefox today (v1.0.2 I know its old but I
www.espn.com
http://www.megago.com/l/?
I checked the address bar history and it indeed showed that I had
typed http://www.espn.com
So I tried again. I made sure I typed www.espn.com and once again
ended up at http://www.megago.com/l/?
The third time was a charm. ESPN actually loaded. Checked firefox
directories for any rogue extensions or modified files and nothing had
been modified since I updated the User Agent Switcher extension on
5/16/05. I ran NAV and MS Anti-Spyware and nothing was found. Which
makes sense since I only use Mozilla and have A LOT of sites blocked
using adblock extension. So I'm kind of at a loss. I can't reproduce
it atm but I'm just wondering has anyone else seen this before and
could it just be a firefox bug?
-sb

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[Gary E. Miller]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Yo Daniel!

Post by Daniel H. Renner
Upon return, when she tries to go to her specified homepage, it instead
tries to access the hotel's (I'm assuming here) proxy or autorization
server - no, no proxy settings set.

The hotel DHCP probably over wrote your hosts or DNS resolver file. On
Slackware that would be /etc/hosts and /etc/resolv.conf

RGDS
GARY
- ---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Blvd, Suite E-3, Bend, OR 97701
***@rellim.com Tel:[phone] Fax: [phone]

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFCpcmH8KZibdeR3qURAl4bAJ4iV8ORGj3vY6qo8vgIbkRQMZU7XQCg59Z9
Ba9uYLPwR1+oQEUKx7OpRpw=
=LkMb
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/