Re: Does Firefox auto link to Google? Redux
- From: dillinger <dillinger@xxxxxxxxxxx>
- Date: Thu, 26 Apr 2007 02:01:34 +0200
Sam Coley wrote:
This is more info about my earlier thread of a google link always showing
up when using Firefox.
Test: Boot up, dial out (no default web page), connect to a newspaper in
San Diego. As it is loading run an lsof -i command.
~$ lsof -i
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME firefox-b 4878 sg 20u IPv4 11095 TCP
localhost.localdomain:47036->localhost.localdomain:ipp (CLOSE_WAIT)
firefox-b 4878 sg 55u IPv4 13831 TCP
192.168.0.195:33087->host198.signonsandiego.com:www (CLOSE_WAIT) firefox-b
4878 sg 56u IPv4 13833 TCP
192.168.0.195:33088->host198.signonsandiego.com:www (CLOSE_WAIT) firefox-b
4878 sg 57u IPv4 14241 TCP
192.168.0.195:44990->po-in-f95.google.com:www (ESTABLISHED) firefox-b 4878
sg 58u IPv4 13903 TCP
192.168.0.195:50728->od-in-f99.google.com:www (ESTABLISHED) firefox-b 4878
sg 61u IPv4 13859 TCP 192.168.0.195:58417->unknown.xeex.net:www
(ESTABLISHED)
Sure enough, here is google, unasked for. But maybe this site links to
google somewhere. Shut down, restart and connect to a site that I KNOW
has no connections to google. (Unless the ISP is shoving a google link in,
unasked.)
firefox-b 4668 sg 20u IPv4 11095 TCP
localhost.localdomain:47036->localhost.localdomain:ipp (CLOSE_WAIT)
firefox-b 4668 sg 55u IPv4 16266 TCP
192.168.0.195:38122->eo-in-f104.google.com:www (ESTABLISHED) firefox-b
4668 sg 56u IPv4 16337 TCP
192.168.0.195:44461->host32.hrwebservices.net:www (ESTABLISHED) firefox-b
4668 sg 61u IPv4 16338 TCP
192.168.0.195:44462->host32.hrwebservices.net:www (ESTABLISHED)
Regular as clockwork, google shows up.
Shut down, restart, dial out, connect to the same places with Konqueror
and I get...
kio_http 5246 sg 8u IPv4 15412 TCP
192.168.0.195:60545->careers.adicio.com:www (ESTABLISHED) kio_http 5251 sg 8u IPv4 15408 TCP
192.168.0.195:45995->host198.signonsandiego.com:www (ESTABLISHED) kio_http
5256 sg 8u IPv4 15159 TCP
192.168.0.195:45976->host198.signonsandiego.com:www (ESTABLISHED)
Never a google connection that I don't initiate. So, Firefox for whatever
reason, connects to google almost every time.
But, while looking over my isof info, I suddenly noticed the line...
firefox-b 4878 sg 61u IPv4 13859 TCP
192.168.0.195:58417->unknown.xeex.net:www (ESTABLISHED)
This one appears every now and then and immediately unhooks. It isn't
regular and I can't make it appear at will. The only reason that I can see
it is because my connection is so slow. Googling (legit this time) on
unknown.xeex.net comes up with apparently a Windows hijack problem. Supposidely caused in some instances by a bug in Zone Alarm. And other
theories, but all have to do with Windows. Tracing back through xeex.net
leads to some really disgusting web sites.
I don't use Zone Alarm, my firewall is Smoothwall on a separate PC with
everything blocked except 80. There isn't a Windows PC in the house - I
use Debian Sarge. It would almost have to be some kind of malicious
redirect at the newpaper site, wouldn't it? Since I doubt that
SanDiego.com is supporting hard porn.
As it turns out, a very slow connection will show stuff that I can't see
on my T1 connected office machine. I would have to build a script to log
fairly fast, which would be fun except that my employer has other things
for me to do.
Never really gave much thought to Internet Protocol, but is turns out to
be very interesting, if totally confusing at this point. Guess I need to
buy a book.
Sam Coley
Probably Firefox checking the sites you visit with Google's phishing database, you can turn if off in options > security.
Michel,
.
- Follow-Ups:
- Re: Does Firefox auto link to Google? Redux
- From: Sam Coley
- Re: Does Firefox auto link to Google? Redux
- References:
- Does Firefox auto link to Google? Redux
- From: Sam Coley
- Does Firefox auto link to Google? Redux
- Prev by Date: Re: tar + split + dd + EOF + st0
- Next by Date: Re: tuxcards & shift+delete
- Previous by thread: Does Firefox auto link to Google? Redux
- Next by thread: Re: Does Firefox auto link to Google? Redux
- Index(es):
Relevant Pages
|
Loading
