l i n u x - u s e r s - g r o u p - o f - d a v i s
L U G O D
 
Next Meeting:
August 5: Social gathering
Next Installfest:
TBD
Latest News:
Jul. 4: July, August and September: Security, Photography and Programming for Kids
Page last updated:
2003 Sep 25 07:47

The following is an archive of a post made to our 'vox-tech mailing list' by one of its subscribers.

Report this post as spam:

(Enter your email address)
Re: [vox-tech] one of the most pernicious spams i've ever seen.
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vox-tech] one of the most pernicious spams i've ever seen.



On Thu 25 Sep 03,  9:49 AM, Rob Rogers <rob@wizardstower.net> said:
> On Thu, Sep 25, 2003 at 06:30:32AM -0700, p@dirac.org wrote:
> >
> > my question is -- how is this done?  how does this URL:
> > 
> > http://www.citibank.com:ac=VybznNffNxknAUxPrfE2jYaQUptJ@a3ksd.PiSeM.NeT/3/?IYTEw
> > 4eVTtbH1w6CpDrT
> > 
> > bring up citibank.com's webpage and then another page with the
> > account/PIN grabber?  i've never seen anything like this before.
> 
> If you break down that url it looks like:
> 
> www.citibank.com <- username
> : <- seperator
> ac=VybznNffNxknAUxPrfE2jYaQUptJ <- password
> @ <- at (duh)
> a3ksd.PiSeM.NeT <- servername
> /3/?IYTEw4eVTtbH1w6CpDrT <- misc crap
> 
> And doing a wget on that url gives me this (comments added)
> 
> 
> <HTML><HEAD>
> <META HTTP-EQUIV="Refresh" CONTENT="0; URL=http://citibank.com/us/index.htm";>
> 
> <title></title></HEAD>
> <BODY bgColor=#ffffff onload="window.open('welcome2.html', 'nameit',
> 'top=185,left=250,width=300,height=230,toolbar=no,location=no,scrollbars=
> no,resizable=no')">
> </BODY></HTML>

i didn't know this.  so, an URL is of the form:

URL = user:password@url

where lowercase "url" is what i used to think of as being an url. and
the "user:password@" portion is optional.


pete

-- 
GPG Instructions: http://www.dirac.org/linux/gpg
GPG Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D
_______________________________________________
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech



LinkedIn
LUGOD Group on LinkedIn
Sign up for LUGOD event announcements
Your email address:
facebook
LUGOD Group on Facebook
'Like' LUGOD on Facebook:

Hosting provided by:
Sunset Systems
Sunset Systems offers preconfigured Linux systems, remote system administration and custom software development.

LUGOD: Linux Users' Group of Davis
PO Box 2082, Davis, CA 95617
Contact Us

LUGOD is a 501(c)7 non-profit organization
based in Davis, California
and serving the Sacramento area.
"Linux" is a trademark of Linus Torvalds.

Sponsored in part by:
Appahost Applications
For a significant contribution towards our projector, and a generous donation to allow us to continue meeting at the Davis Library.