|
Audio Asylum Thread Printer Get a view of an entire thread on one page |
For Sale Ads |
70.17.83.92
or so says my Trend Micro AV program, in which I have enabled the protection of private information.
Now, I'm not assuming AA is actually trying to use my cc numbers, but I AM curious as to what actually is going on when I get the "Transfer of Information Blocked" pop-up alert. I get such alerts frequently after clicking on SOME posts, and they always seem to indicate "audioasylum.com" or "googleanalytics" (whatever THAT is). Also, there will be a blocked-out space ("Blocked by Trend Micro", or something like that) at the bottom of the post.
Any ideas?
Follow Ups:
Howdy
My experience with programs like those (but not with Trend Micro AV in particular) is that they look for subsets of the digits in your CC info being in the HTML stream. Unfortunately if a sequence in the CC number looks a lot like, say, a date or time, etc. you'll get false positives. If you have the option of configuring which part of your CC data to use, you might try changing it.
-Ted
That makes sense, but...
I just disabled my AV, and re-ran a post that triggered the alert, and it turns out that the blocked area of the post was the line at the bottom, where it says "Alert Moderator", followed by the Views and Thread counts, neither of which had a combination of digits remotely resembling any portion of the cc number. Of course, that doesn't necessarily disqualify your theory, and I've been considering marking AA as a Trusted Web Site for the purposes of the AV program.
What's most puzzling is the "googleanalytics" address that is shown as one of the requesters, which appears at least as often as AA when clicking onto an AA post. A check of "googleanalytics", referenced below, doesn't reveal anything PARTICULARLY sinister, but I'd still like to know how it's able to insinuate itself into certain Web pages such as the Asylum's.
I actually haven't a clue. It strikes me as a typical bug in an AV program. The Alert Moderator line is dynamically generated and uses an iframe to fill in the data. Everything is processed on the server side, so there is no personal data at all. All of that is evaluated on the server side and you'd get an Edit link if the cookie matches your user id and it's it's your post.
Google Analytics uses it's own cookie, so I'm guessing that it triggers Trend to a foreign cookie on the site. Now you're got me thinking that it's tracking cookie requests and the moderator line in the iframe does have to do it's own cookie request to serve the line, so that's likely what Trend is tracking.
And yeah, it's all a false positive. Set AA as trusted and forget it.
-Rod
I'll go ahead and mark AA as a trusted site.
If a week from now I have to declare bankruptcy, I'm comin' after your server with a ball-peen hammer.
Howdy
I'm just speculating here till Rod finds the time to answer, but the Alert...Views section is dynamically generated and its generation depends on your asylum cookies.
You might check the content of your cookie cache for asylum related cookies contents.
Also I'm sure the Google stuff used cookies which once again might look like your CC number.
-Ted
FAQ |
Post a Message! |
Forgot Password? |
|
||||||||||||||
|
This post is made possible by the generous support of people like you and our sponsors: