ZIP Passwords? S.YTIMG.COM hacks!
VIRAND
Posts: 656
In the past month I have been having multiple internet anomalies and cannot tell what
problem causes what. But first I want to know why do half of the zipped Spin files I loaded from the
forum have passwords even in the same thread?
As received, they are missing the ZIP extension and when I rename them they require a password.
But only half of them, and sometimes different version of the same SPIN.
Examples, FHT, Propeller Radio, AIgeneric.
It doesn't reject a random word but then asks if I want to overwrite the original,
which isn't even around.
And S.YTIMG.COM keeps getting past my blocking software. Something suspicious happened
as soon as I typed it. It prevented me from reporting it to EFF.ORG and my ISP by making
the SEND EMAIL button not work. S.YTIMG.COM is a two year old nuisance, falsely* claiming to
be YouTube IMaGes and Owned by GOOGLE, apparently, because I booted fresh, manually
set maximum security settings BEFORE connecting to the internet, and came here first to
ask why half the ZIPs need passwords.
*S.YTIMG.COM is related to Youtube, and Google, and Facebook, and Myspace, and Twitter,
but I am not using any of those now, and just as I don't use Windows because of Viruses, I don't
use these services that... according to An MSCE and information provided to me by him,
Google owns YTIMG, Flash, Macromedia, and Adobe access it (but I have not used those today)
and it is VERIFIED that IT ACCESSES WEBCAMS AND MICROPHONES and I HAVE CAUGHT IT MYSELF
CREATING A YTIMG FOLDER after BEING ALERTED BY MY BROWSER that IT WAS LOADING THROUGH
ALL THE BLOCKS. I have the information sent by the IT guy that explains how to disable the mic
and camera because of it, and another about how to disable YouTube from accessing the ORWELL
1984 BIG BROTHER feature by CLICKING ON THE BOTTOM OF A YOUTUBE WINDOW and turning off
the S.YTIMG.COM hidden access camera and microphone switch! The other sites that
have Off Switches are ADOBE and MACROMEDIA, but YouTube's definitely is a dummy switch,
Like a STAPLES "Easy" BUTTON! It's a LIE. It doesn't stop s.ytimg.com from accessing files or
anything else. Again, it disabled the send button on emails, and I expect it to interfere with me now,
too. But I may just be literally out of luck, and have two months of daily "lottery losses (negative wins)"
after 5 years of trouble free LINUX use.
Additionally, I find that older browsers report fatal Javascript errors or just panic and vanish until
restarting (which is convenient), both randomly and after watching a few or many Youtube videos,
before s.ytimg.com intrudes uninvited. Therefore it is NOT the source of Youtube videos, unless it
is one "evil" server that intrudes. I would not trust any NEW browser to block it, since they would
HIDE IT, and let it do whatever it wants. All the POPULAR browsers have had some trouble with it
in the past few years, and only a few obscure ones either ignore it or say "bad data object".
s.ytimg.com has lots of IP addresses, perhaps why it is unblockable, but the documentation that
I could post, if it lets me, certainly expresses agreement that it is an undocumented and buggy
"back door" in my words, or suspiciously devious (no good excuse imaginable for its MO)
or something like that in theirs.
MY QUESTION IS; HOW OR WHY DO HALF THE ZIP FILES NEED PASSWORDS,
I may have, and Probably have, some older copies that don't require the passwords.
BUT I WARN AND SUGGEST THAT SOMEONE INVESTIGATE S.YTIMG.COM
For Aggravated CRIME (Hacking, Tresspassing, circumventing access controls)
And DAMAGES (lost data and lost time wasted on trying to block s.ytimg.com)
The incredulity of those who are used to Windows bugs and believe in "SICK" computers
and disobedient computers as "NORMAL" is overwhelming, and making it very hard to get help
fixing these problems. That alone may be enough to have it dismissed in a court as a
"conspiracy theory". I'll ask, is Toyota having Blue Crashes of Death, or are they running,
(God Forbid) on Mac or Linux? WinCE may be likely, but I am unaware of its bugs.
My intuition strongly expects those to be the terrible answer to old "What If Microsoft Made Cars" jokes.
(People have died in crashes over 100MPH due to runaway maximum acceleration during the "BSoD").
There is a proven connection between Google, s.ytimg.com, social networks,
and software such as adobe, macrovision, acrobat, shockwave, flash, and the
Popular browsers (IE is "HAXOR" OWNED), Firefox either has a problem with or submits to YTIMG,
It has also been mentioned as behaving the same way on Safari or Opera, again it comes in unrequested and
unannounced and is either interfering with normal browser in some way (especially when blocked),
or "updated" browsers HIDE it's behavior and the files it makes are hidden.
I may feel a little foolish if you can read this, but I couldn't send either of two earlier
reports of being attacked by S.YTIMG.COM today in my previous boot and online session.
EDIT: forgot to post the link to background posts about other VERY RECENT and VERY ATYPICAL internet misbehavior:
http://forums.parallax.com/showthread.php?p=876913
EDIT:Something is QUACKING a lot, and it is not me, so the explanation of how it is not a "duck" will be
very much more interesting and longer than this post! Who or what is wasting my time and why?
Post Edited (VIRAND) : 2/3/2010 2:17:49 AM GMT
problem causes what. But first I want to know why do half of the zipped Spin files I loaded from the
forum have passwords even in the same thread?
As received, they are missing the ZIP extension and when I rename them they require a password.
But only half of them, and sometimes different version of the same SPIN.
Examples, FHT, Propeller Radio, AIgeneric.
It doesn't reject a random word but then asks if I want to overwrite the original,
which isn't even around.
And S.YTIMG.COM keeps getting past my blocking software. Something suspicious happened
as soon as I typed it. It prevented me from reporting it to EFF.ORG and my ISP by making
the SEND EMAIL button not work. S.YTIMG.COM is a two year old nuisance, falsely* claiming to
be YouTube IMaGes and Owned by GOOGLE, apparently, because I booted fresh, manually
set maximum security settings BEFORE connecting to the internet, and came here first to
ask why half the ZIPs need passwords.
*S.YTIMG.COM is related to Youtube, and Google, and Facebook, and Myspace, and Twitter,
but I am not using any of those now, and just as I don't use Windows because of Viruses, I don't
use these services that... according to An MSCE and information provided to me by him,
Google owns YTIMG, Flash, Macromedia, and Adobe access it (but I have not used those today)
and it is VERIFIED that IT ACCESSES WEBCAMS AND MICROPHONES and I HAVE CAUGHT IT MYSELF
CREATING A YTIMG FOLDER after BEING ALERTED BY MY BROWSER that IT WAS LOADING THROUGH
ALL THE BLOCKS. I have the information sent by the IT guy that explains how to disable the mic
and camera because of it, and another about how to disable YouTube from accessing the ORWELL
1984 BIG BROTHER feature by CLICKING ON THE BOTTOM OF A YOUTUBE WINDOW and turning off
the S.YTIMG.COM hidden access camera and microphone switch! The other sites that
have Off Switches are ADOBE and MACROMEDIA, but YouTube's definitely is a dummy switch,
Like a STAPLES "Easy" BUTTON! It's a LIE. It doesn't stop s.ytimg.com from accessing files or
anything else. Again, it disabled the send button on emails, and I expect it to interfere with me now,
too. But I may just be literally out of luck, and have two months of daily "lottery losses (negative wins)"
after 5 years of trouble free LINUX use.
Additionally, I find that older browsers report fatal Javascript errors or just panic and vanish until
restarting (which is convenient), both randomly and after watching a few or many Youtube videos,
before s.ytimg.com intrudes uninvited. Therefore it is NOT the source of Youtube videos, unless it
is one "evil" server that intrudes. I would not trust any NEW browser to block it, since they would
HIDE IT, and let it do whatever it wants. All the POPULAR browsers have had some trouble with it
in the past few years, and only a few obscure ones either ignore it or say "bad data object".
s.ytimg.com has lots of IP addresses, perhaps why it is unblockable, but the documentation that
I could post, if it lets me, certainly expresses agreement that it is an undocumented and buggy
"back door" in my words, or suspiciously devious (no good excuse imaginable for its MO)
or something like that in theirs.
MY QUESTION IS; HOW OR WHY DO HALF THE ZIP FILES NEED PASSWORDS,
I may have, and Probably have, some older copies that don't require the passwords.
BUT I WARN AND SUGGEST THAT SOMEONE INVESTIGATE S.YTIMG.COM
For Aggravated CRIME (Hacking, Tresspassing, circumventing access controls)
And DAMAGES (lost data and lost time wasted on trying to block s.ytimg.com)
The incredulity of those who are used to Windows bugs and believe in "SICK" computers
and disobedient computers as "NORMAL" is overwhelming, and making it very hard to get help
fixing these problems. That alone may be enough to have it dismissed in a court as a
"conspiracy theory". I'll ask, is Toyota having Blue Crashes of Death, or are they running,
(God Forbid) on Mac or Linux? WinCE may be likely, but I am unaware of its bugs.
My intuition strongly expects those to be the terrible answer to old "What If Microsoft Made Cars" jokes.
(People have died in crashes over 100MPH due to runaway maximum acceleration during the "BSoD").
There is a proven connection between Google, s.ytimg.com, social networks,
and software such as adobe, macrovision, acrobat, shockwave, flash, and the
Popular browsers (IE is "HAXOR" OWNED), Firefox either has a problem with or submits to YTIMG,
It has also been mentioned as behaving the same way on Safari or Opera, again it comes in unrequested and
unannounced and is either interfering with normal browser in some way (especially when blocked),
or "updated" browsers HIDE it's behavior and the files it makes are hidden.
I may feel a little foolish if you can read this, but I couldn't send either of two earlier
reports of being attacked by S.YTIMG.COM today in my previous boot and online session.
EDIT: forgot to post the link to background posts about other VERY RECENT and VERY ATYPICAL internet misbehavior:
http://forums.parallax.com/showthread.php?p=876913
EDIT:Something is QUACKING a lot, and it is not me, so the explanation of how it is not a "duck" will be
very much more interesting and longer than this post! Who or what is wasting my time and why?
Post Edited (VIRAND) : 2/3/2010 2:17:49 AM GMT
Comments
Sounds like you need to call the the exorcist.
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
Life may be "too short", but it's the longest thing we ever do.
When you stay logged into various websites, youtube, facebook, gmail, they tend to cross interact and track everything you do. Always log out of all websites before leaving.
If you use comodo internet security, you can set its security settings so that any access to web is going to result in a popup that tells you which IP and what port the data is being sent to.
I have found that blocking most programs from access the net improves your safety and also makes your computer behave much better.
Microsoft went wrong when they tried to dumb down the OS to give the average user the impression that this stuff is "simple"
Thats why googles simple homepage, or microsofts simple "it just works", or apples sleek and "simple" business models are so profitable, they convince most people that their products are simple and problem free.
When really they are if you don't use them.
Get no script and comodo internet security.
As far as the zip files being name improperly and needing passwords,...
I would suspect a system virus/ OS corruption. I have fixed so many systems that had hard drives with bad sectors that caused odd system corruption, and most don't run destructive hard drive testing before they (re)install their OS of choice.
They figure if a crc error didn't show up at install, then everything is fine.
I have had a OS install go perfectly fine, on a hard drive that was found to have many bad sectors,
but after a few boots, odd lockups, and behavior starts to show up.
Get no script and comodo internet security.
(comodo has a antivirus built into it also, which detected viruses that avg couldn't find)
comodo is free also.
I just got done watching a really good video titled "Shadow Government" that deals with data (in)security on many levels including google, rfid, phone, etc.
I have been using linux for a long time as well, and I find that even on linux it is a good idea to take the sledgehammer approach to problems like you are experiencing, by reinstalling on a new disk.
Keep the old disk as a backup, and install on a new disk your OS and transfer your data deliberately. You might want to get rid of some dot files/directories, like your .mozilla directory. You will have to reenter alot of automatic passwords and such(or decide not to),
but you will be in a known state.
If you do use Firefox, there is a file: ~/.mozilla/firefox/*lt/chrome/userContent.css
It can be used to block adds and stuff. Because of your tip, I just added ytimg to it. If you want a copy of mine that you have been building for a while PM me and I will send it to you.
Well, now that I disabled ytimg in userContent.css, I can't watch youtube anymore ;^) Even the thumbnails don't show up.
Post Edited (hinv) : 2/3/2010 4:50:01 AM GMT
I mean really? You've actually re-installed a linux system? I just can't imagine..
I have certainly blown away ~/.mozilla once or twice, but never, ever had to re-install from scratch. That's _so_ Windows!
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
Life may be "too short", but it's the longest thing we ever do.
2. SOMEHOW S.YTIMG.COM IS CIRCUMVENTING FIREWALL AND ACCESSING THE VM RAMDISK AND
CREATING YTIMG SUBDIRECTORY. I HAVE TWO LINUXES IN ROM. ONE BOOTS FROM CDROM
AND THE OTHER BOOTS FROM A WRITE PROTECTED DISK, ALTHOUGH I TRUST ONE MORE
THAN THE OTHER, THEY ARE DIFFERENT DISTROS WITH DIFFERENT BROWSERS AND I HAVE
MANUALLY WIRED SWITCHES TO SELECT WHICH ONE BOOTS. I HAVE GONE TO GREAT LENGTHS
TO PREVENT THIS SORT OF THING SINCE WINDOWS BECAME UNUSABLE ONLINE FOR ME IN 2005,
WHEN 50% OF MY TIME WAS WASTED REINSTALLING BSOD MACHINES IN THAT AND PRECEDING
YEARS. I CAN SEE THE YTMIG FOLDER APPEAR WHEN THE BROWSER SAYS READ S.YTIMG.COM,
AND THE BROWSERS HAVE IT ON THE BLOCKLIST.
3.I REFLASHED MY BIOS WHILE THE ROUTER WAS UNPLUGGED VERY RECENTLY TO INSURE NOT
HAVING A BIOS VIRUS, ALTHOUGH MY BIOS WAS MODIFIED DURING THE TIME MY CELL PHONE WAS
NUKING THE MOUSE WITH ITS ANTENNA (A 1-WATT MICROWAVE OVEN ON SAME MICROWAVE BAND!).
I don't talk on the cellphone phone much so my brain has not been cooked. Teeny weeny LOL.
4.IF YOU SEARCH FOR S.YTIMG.COM YOU WILL FIND MANY MANY SIMILAR COMPLAINTS BUT USUALLY
RELATED TO YOUTUBE CRASHING THE BROWSER WHEN S.YTIMG.COM APPEARS AFTER SEVERAL
VIDEOS WATCHED WITHOUT IT.
5.MOST OF THE COMPUTERS HERE ARE LINUX WITH A FEW WINDOWS, ONLY 2 OR 3 WINDOWS
COMPUTERS HAVE INTERNET ACCESS. VARIOUS DISTRIBUTIONS. VARIOUS VERSIONS OF WINDOWS.
SOMEONE WAS FIXING A VISTA MACHINE ON MY JACK WHEN IT BSOD'd, BUT BY FIXING I MEAN THEY
WERE UPGRADING THE ANTIVIRUS PROGRAMS. THAT WAS ONLY TWO DAYS AGO. MOST OF THE
COMPUTERS ARE SINGLE-USE OFFLINE WORKSTATIONS BECAUSE THEY ARE CRITICAL AND MUST
NOT HAVE ANY MALWARE EVER. THE WINDOWS IT GUY VERIFIED WHAT HAPPENS WITH S.YTIMG.COM
AFTER I MENTIONED THE LINUX PROBLEM WITH IT (CAN'T BLOCK IT ANYMORE). LIKE I SAID, IT IS
NOT PERMITTED HERE, AND MUST NOT BE ALLOWED ACCESS TO ANY COMPUTER, AND I AM TRYING
VERY HARD TO KEEP IT OFF. WHEN IT GETS ON THIS MACHINE, I REBOOT THE VM AND THERE IS
ONLY RAMDISK, TEMPORARILY CLEARED OF IT, UNTIL IT BREAKS IN AGAIN.
Such intrusions are unacceptable. There are people who don't mind using Windows. They do not
have access to other machines on the network, only the internet. They see the s.ytimg.com on
their browsers but don't understand (or care) what it is doing. That is typical of everyone who
tolerates it, and tends to dismiss it as a conspiracy theory, while I have to protect everything
else from it. They can be live surveillance TV stars if they feel like it, and let YTIMG.COM read
their hard drive if they want to. But the data I am protecting is currently private until I am ready
to make the finished product public. I have leaked some old information about the projects for
educational purposes both to preempt patent trolls and to educate the public about not only
the kind of product but how it works and how to build it as a science project. It is as simple as
faster release of new inventions preventing them being stolen by Patent Trolls who keep them from the
public for 20 years, leaving them ignorant of anything more advanced than 15 years of
"boring Solitaire", now on Dual Cores, after 40 years of NO MORE MOON LANDINGS nor other futuristic stuff.
It is also as simple as PRIVACY, NOT BIG BROTHER. The icon for the "apparently fake" hidden OFF SWITCH
for S.YTIMG.COM is a COMPUTER WITH A BIG EYE ON IT'S SCREEN. I will probably post it!
Dismissal as conspiracy theory is how ENRON happened, is how AIG happened, is how Madoff happened,
I won't waste time listing the whole list. S.YTIMG.COM is an invasive, damaging, and untrusted
semi-mysterious thing that needs to stay out of MY system. I have no agreements or EULAs
with anyone like Microsoft for them to have their way with me! Microsoft is boycotted for
serious unethical issues as far as I am concerned, least of which is their defective product
requires even more attention from people who somehow know more about the bugware
than those who sell it to people who prefer to pay extra for frequent and common malfunction.
Y.TIMG.COM doesn't just invade one of my computers or browsers or OS's, it affects them all,
but nobody cares enough; I want to talk to someone who does, who has successfully blocked it,
and can tell me how to keep it off of just one computer that has only a RAMDISK and boot ROM
containing 2 OS and 2 browsers, switch selectable, VM's, otherwise VERY secure except for this
one sneaky burglar. I can see the whole system, it is not that complicated, but there is something
I am unaware of, how this can get in repeatedly when it is specifically banned by me and I have
to waste time clearing it every time it does, as it causes serious malfunctions and does things
I don't want it doing and I have no reason whatsoever to start tolerating these kinds of things.
Microsoft Malware is deliberately caused by the planned obsolescence of software write protection,
or Harvard Architecture. It used to be common sense to write protect software. Whatever is attacking
me involves similar decisions in Web Software Design, such as forced updates of firewalls
and browser plugins, and the surface of the new problem is Flash versions 7 and above, and Google,
who circumvent and violate the blocking policies, effectively making computers lie about them.
I'm working on a block, hoping for help, because it's killing my time.
Nobody knows why the Zip files suddenly need passwords to unzip now,
after needing to be renamed as zips?
Maybe a security issue, somehow scripts embedded in transit?
I mentioned an email recently modified in transit in my other recent internet problems (link).
Who should I call? It is not a ghost or a virus, it is a Proprietary Trojan from Google and Adobe/Macromedia,
unavoidable if it happens even just by only visiting this website, and staying away from its origin.
The use of scripts on this site makes it impossible to avoid YTIMG here, because YTIMG is script operated.
(I have to allow script execution to post here.)
It appears that I am being forced to accept another Rootkit DRM scheme; it is supposed to be optional to avoid
DRM products, and that is what I have been doing since the SONY Rootkit. But too many sites indirectly link to
S.YTIMG.COM through scripts and execute unauthorized (undeniably HACK-IN) code from ytimg.com.
Who should I call?
Microsoft and SONY try to punish attempts to get help from them, and Google seems likely to also,
since they are hiding the intrusion on newer browsers, and effectively unresponsive to sytimgcom questions
on public forums. Suggestions include using the dummy switch, or clearing cookies. FYI, flash cookies don't
clear unless you delete every hidden LSO/SOL file. I have a bash file to do that periodically, but it is rapidly
becoming ineffective. I have tried to contact Google about ytimg, which gradually emerged over 2 years.
Future reference tag: VIRAND vs. YTIMG (info)
THANKS FOR THE SUGGESTIONS THAT CAME IN WHILE I WAS TYPING, ANY MORE VERY MUCH APPRECIATED [noparse]:D[/noparse]
Post Edited (VIRAND) : 2/3/2010 6:06:00 AM GMT
One nice way to have a look at your hard disk is:
Get yourself a copy of Knoppix, Ubuntu or other Linux LIVE CD. With this CD you boot and have access to the hard disk. Then you copy/read whatever you need and re-format the hard disk and re install windows. That would help you to avoid some viruses. Avoid executables. But over all, try scanning you data files for viruses.
Try from there to open one of the passworded zip files...
Use as suggested the Adlock, no-script and so on extensions in FF, they help a lot.
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
Visit some of my articles at Propeller Wiki:
MATH on the propeller propeller.wikispaces.com/MATH
pPropQL: propeller.wikispaces.com/pPropQL
pPropQL020: propeller.wikispaces.com/pPropQL020
OMU for the pPropQL/020 propeller.wikispaces.com/OMU
Okay, time to dispel a couple misconceptions:
1. Google/YouTube does not own Macromedia, nor does it have any control over Flash; Adobe does. Google and Adobe are separate, publicly-traded companies.
2. s.ytimg.com is not "putting" anything on your computer. The folder you're referring to is put there by your Flash player, with your implicit permission.
Now, regarding #2, you can control what, if anything, gets stored on your computer by Flash (among other things) by going to the following address and setting your preferences:
····www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html
Also, it would be helpful if you did not use all caps in your posts, as it makes them much harder to read.
Thanks,
-Phil
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
Life may be "too short", but it's the longest thing we ever do.
@Ale:WHAT HARD DISK? I BOOT FROM EITHER CD-ROM DRIVE OR SOLID STATE ROM TO VM RAMDISK!
MTBFs of hard drives was always terrible, and at today's speeds they must be like driving a runaway
Toyota at full acceleration with unlimited fuel, without colliding, until the motor has a meltdown.
The ROMs are NEW and CLEAN and changed offline with clean computers during this recent
(last month or two) problem.
I can hit reset or cycle the power, wait a few seconds, and YTIMG be gone (and whatever I was doing)
very quickly. The setup is an unusual hackshield, but it has worked well since SONY Rootkit of 2005
(which is what you get if you put their CDs in a computer, NOT from doing anything illegal.
The criminals are a hemisphere away from me!).
And I have those versions of Linux already that you mentioned and many others also.
KNOPPIX doesn't need a hard drive, but it probably has too many servers in it to use for private data
online. I will probably carefully make a new machine with two new write protected Linux ROMs,
but I will have to waste time making sure that there are no backdoors.
I am thinking of a dedicated OSless proxy filter that sends YTIMG to dev/null/
FLASH PLAYER IS A PLUG-IN THAT INSTALLS ITSELF PROBABLY VIA XSS; I DO NOT INSTALL IT
AND DON'T ANTICIPATE IT ON ANY SITE EXCEPT YOUTUBE, I DO NOT EXPECT IT HERE OR IN EMAIL,
IT IS USUALLY BLOCKED EXCEPT FOR YOUTUBE ! Sorry. Thanks for trying to help.
Can I examine the source code for AdBlock to make sure it doesn't hide/coverup YTIMG?
(I also realize that not all ytimg subdomains break the rules, but S.ytimg.com always does,
and it has been called Google SPYrate by someone else who is sick of that nuisance.)
@Phil: Um... Google owns YTIMG, and YouTube, so why does Macromedia support
YTIMG on All flash sites? YTIMG installs YTIMG in the main partition in SPITE of blocking it,
as flash may hide LSO/SOL "flashcookies", but (WHY?) it also lets Google barge in and create YTIMG on a
partition in SPITE of blocking. It is currently safe and suggested to batch or bash delete
both SOL files/folders AND YTIMG files/folders ASAP after the intrusion which is visible to me in realtime.
Something is able to change settings and let these in, and since these are what gets let in, these
are every bit in need of being kept out as whatever rogue code is disobeying the security policy
and letting them in. I will show the fake YTIMG off switch, unless interfered with, which uses an
"EYE SPY COMPUTER" ICON with a caption "SYTIMG camera mic access turn Off"; noting of course that
it is always on by default! Those things are the problem, or... can I login here using https:
before allowing forum scripts, or is that a bad or useless idea?
#2, I already learned my lesson about going to malicious sites when I sent my damage bill to SONY
and they sent a virus that killed that computer. Besides, it is (UN?)common sense to NOT click on
the OPT-OUT link when you get SPAM unless you want LOTS OF Spam! How does a blocked plugin,
FLASH, install GOOGLE'S BLOCKED YTIMG, with "MY PERMISSION"? And WHY does Flash install Google's
SPYtimg with or without my permission? I am EULA-free and claiming Tresspass! Where's MY PERMISSION?
I've already gone to the opt-out site and it doesn't work. Dummy switch. It's like the opt-out site for SPAM.
(no emoticon expresses the irony of dummy opt-out sites for evil sites.)
You don't visit a bear in his cave to tell him to stay out of your pantry, you either fortify your home, or
other options depend on what you may use to stop bears from visiting you.
Sorry for the big letters, I'll try to remember B I U and color highlights instead.
@Brad: I will have to allow the video and block the intrusion very selectively, but I can watch video without
s.ytimg.com which is why I call it a Spy and a LIE. You concur that it spies, and admits doing so, and
that it accesses camera/microphone/and DATA. If you doubt the data access, it is obviously a convenient
part of the intrusion that creates the YTIMG folders and files and modifies them in areas that it has no
permissions to do so, and that data has been lost, and as to how zip files get passwords, that seems
to happen in transit, since there is nothing visibly wrong between the NIC and the media the files are
stored on. I will scan for viruses. Do you trust the Danish CHKRootkit, or another option?
I accept correction to misinformation, when evidence of misinformation appears. But I have an incredible
problem with incredible symptoms that are better explained by what is feasible than what is common.
There is evidence that things are as they appear to be. There is only "Madoff style confidence" to the contrary.
I started to list many trusted parties that recently betrayed that trust. Is Google next?
Post Edited (VIRAND) : 2/3/2010 10:05:29 AM GMT
If you say your system is ROM based and has no writable storage then the issue is hardly local to your system (except for possible RAM based temp space). If you are using Linux, you can try to "black hole" offending IP addresses by using /etc/hosts entries of the following form:
# Dirty Blocking # The addresses below have been BlackHoled because of
# unacceptable behaviour with regard to proper use of a server site.
#
# For example, attempting to create a directory name of an unusual length
#
xx.yy.94.78 a localhost
xx.yy.28.12 b localhost
xx.yy.16.98 c localhost
This gives two things; 1) you get log entries against the a, b or c to allow tracking and 2) the "other ends" connection "hangs" because the connection cannot find a return path.
If you run your access programs with no priviledges, the associated activities won't have permission to write to "protected" system files. Of course you do not browse as the "root" (or UID=0) user - right?
Failing this, the issue is more serious and the problem is not on your systems, but within your network infrastrcuture. Possible firewall/router/gateway/proxy corruption, infection or remote control.
BTW:
ULTRIX> nslookup s.ytimg.com
Server: WinRoute Proxy Server
Address: 10.1.1.1
Non-authoritative answer:
Name: static.cache.l.google.com
Address: 74.125.15.19
Aliases: s.ytimg.com
But this Forum is about Propellers - not PC's and the Internet
Which Linux are you using since 1996?
Just curious. I'm not surprised, because I've been well with Linux from 2005 to a few weeks ago,
but if it helps my new problem then I am interested.
I upgrade VERY RARELY because if it works I don't fix it. But now it is not working right, so I'm ready.
Debian. YMMV.
I started with Debian and I've stuck with it because it does precisely what *I* want it to do. I've dabbled briefly with an RPM based distribution for testing about 5 years ago, but I was/am just more comfortable with what I know, so I stick with it. My main laptop and my Mac both run Ubuntu 8.04 currently (it's Debian based). Use what you are comfortable with.
I've run systems from flash for many years, so I'm a little familiar with embedded, resilient systems.
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
Life may be "too short", but it's the longest thing we ever do.
ytimg.com does not install anything on your computer. When you visit any site, including those Google-owned sites that refer to ytimg.com, and which use Flash, the Flash plug-in which runs on your computer may, with your permission, create a directory and cache information and settings in it regarding the sites you visit. As I pointed out in my prior post, you can refuse permission for Flash to save this kind of information by going to the website I mentioned. The only problem in your case is that you will have to do this every time you turn on your computer since you don't have any non-volatile storage that Flash can use to remember that setting. The default, without stored settings to indicate otherwise, is to grant permission. The same may also apply to your mic and camera settings and could explain why they keep getting reset.
There's really nothing sinister or evil about s.ytimg.com. It's just a repository that Google uses to serve static images, so there's no need to block it.
-Phil
I noticed this also after he mentioned using linux. If you visit stickam.com you will see it all when you choose to share your webcam video. The flash applet comes up and lets you choose the directory for the data being transferred, plus many other things.
Jim
-Phil
Now on solving the problem. I have had zero problems downloading zips, and I think 99% of other fourm members share the same success. (I'm running Windows 2000 Professional Windows XP Professional and Windows 7 64 Professional platforms).
I like to recreate problems and try to help in solving them. I have a lot of hardware, but I can't put anything together that would resemble the platform in question. I can't begin to help solve the problem.
It's just a little bit out of the ordinary for me.
Jim
I DO NEED TO BLOCK IT. I will try again the zips and do some research and then go offline to code without its distraction.
PROPELLER QUESTION: I thought that asking this may leak ideas to Turing-test-passing antagonists, but...
Can I Proxy filter it with Propeller and WIZ5100s or ENJxxx (forgot the other MACPHY chip)?
@hover1: I'm sorry for cluttering your browser.
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
I should be typing in Spin now.
Set up a simple iptables rule to reject all outbound connections to the list of addresses used by s.ytimg.com (use dig to dump the records). Then set up a corresponding inbound rule to drop all incoming packets. Job done, tinfoil hat installed.
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
Life may be "too short", but it's the longest thing we ever do.
Never had a problem with XP, and W7 is looking great so far.
edit -
btw, I note this hubbub over s.ytimg is well over a year old...· I don't recall much being made of it in that time, nor any valid example of any type of 'spying' video being captured and stored remotely.
http://www.keiths-place.com/blogs/keith/2008/stop-youtube-sytimgcom-video-camera-spying#comment-191
Your issue sounds more PEBKAC related.
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
Post Edited (Agent420) : 2/4/2010 1:24:53 PM GMT
Now replace "parallax.com" with "s.ytimg.com", and this tempest of "spying" conspiracy seems rather more confined to a teapot.
-Phil
Now can we go back to Propeller stuff? [noparse]:)[/noparse]
OBC
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
New to the Propeller?
Visit the: The Propeller Pages @ Warranty Void.
I'd LOVE TO!!!
WHO SHOULD I CALL???
I JUST RECEIVED BLANK SPIN FILES AND OBJECTS!
(INSTEAD of password protected files I am now receiving ones with headers but appear to be full of zeroes).
I'll make sure, and maybe post them.
Propeller Tool opens only those new ones as blank, old ones are fine..
I AM GOING TO USE A FRIEND'S WINDOWS MACHINE, with that hosts entry, AND IF THAT DOESN'T WORK,
This "nice little Game of GTNW" is in "MAD" LEVEL and time for GAME OVER.
Who hides in the cloud and modifies data in transit? No ytimg yet today.
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
I should be typing in Spin now.
My friend's Windows XP machine IS GOING TO SEE THE MICROSOFT DOCTOR AFTER THE SNOWSTORM!
The IT Guy is ALREADY AWARE of my s.ytimg.com Problem. I'M STILL ASKING HOW TO CALL HACKBUSTERS!
After downloading objects and unzipping them. CRASH!
I took a picture using ALT-PRINTSCREEN and PAINT CRASHED!
I took a picture using my multimegapixel camera and intend to post it as soon as I find a safe PC!
Copied BY HAND:
OS:WINDOWS XP
SzAppName:explorer.exe
szAppVer:6.0.2900.5512
szModName:hungapp
szModVer:00000000
Windows Explorer Error Report:
C:\DOCUMENTS\Bill\LOCALS~1\Temp\WER2d06.dir00\explorer.exe.mdmp
C:\DOCUMENTS\Bill\LOCALS~1\Temp\WER2d06.dir00\appcompat.txt
???Ideas???
I REALLY THOUGHT I WAS READY TO LET THIS THREAD DIE, BUT THIS IS AN SOS!!!
Ok, ITS DEAD. Hopeless. Put it in the sandbox. Watch them BSoD the whole WWW.
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
I should be typing in Spin now.
You are saying that someone else downloaded an object on a clean XP machine and it crashed his machine when unzipped?
Generally it sounds like a trojan or a problem with the unzipping software but crashing another PC does not make sense unless the particular object is in some way infected or the issue is connected to your internet connection (i.e. a server has a virus).
Graham
s.ytimg.com may well be doing some snooping things that I would not agree with, but I'm quite sure that also applies to the majority of software running today.· You pretty much sign your life away when you get on the net, that's the price you pay unless you want to limit yourself to your own internal network.
Just for giggles I took a common, 'abused' XP machine full of java and flash and who knows what and downloaded objects from the Exchange without issue.
I suggest that if your friends machine was unrelated to your other network (eliminating any potential internal virus), that you may well have borked his box by fiddling with the hosts file and whatever else you attempted to do to circumvent your percieved 'threat'.
I note it seems your friend is still using IE6...· upgrading to 7 or 8 may resolve his problem because the IE installation / upgrade recopies several system files that may be borked.· Not to mention that IE6 has a few security holes in it.· You can argue the cause of these security design flaws, but provided you keep Windows up to date most people never have issues stemming from them...· Those that do usually are running unpatched boxes.
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔
Post Edited (Agent420) : 2/5/2010 2:50:41 PM GMT
▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔▔