It's WAR! - Page 1
Forum section: electronics / general

author: EEVblog
author_rank: Unknown
timestamp: February 04, 2010, 08:09:42 pm
content: Check this out!:http://www.warvideoblog.com/Wow, dejavu!Investigation time...Dave.

author: armandas
author_rank: Frequent Contributor
timestamp: February 04, 2010, 08:28:21 pm
content: From WHOIS:QuoteUses (surprise surprise) GoDaddy services. My guess is Jerome's trying to increase site's popularity/pagerank. All he can get though, is a ban from Google and hopefully godaddy as well (if Dave's willing to bring this to an end).

author: EEVblog
author_rank: Unknown
timestamp: February 04, 2010, 09:06:29 pm
content: I've been told the address is a fake, but the email works.The owner tried to set up an ad revenue service on the site, and it's they who smelled a rat and tipped me off.I'm trying to find a technical/complaints/legal contact at GoDaddy to get it removed...Dave.

author: Ferroto
author_rank: Frequent Contributor
timestamp: February 05, 2010, 12:05:38 am
content: http://www.warvideoblog.com/forum/index.php?topic=195.0Appearently this forum is mirrored exactually look you can even read THIS postBtw if anyone was going to That site the proper address iswww.eevblog.com/accept NO imitations*edit* wow when it mirrored my comment it replacedCode:www.e-e-e-v-b-l-o-g.c-o-m(without the -'s) with the URL

author: EEVblog
author_rank: Unknown
timestamp: February 05, 2010, 12:53:09 am
content: Quote from: Ferroto on February 05, 2010, 12:05:38 amWOW alright!That's actually very impressive!!Almost a shame, but this dude is going DOWN!Dave.

author: adam1213
author_rank: Regular Contributor
timestamp: February 05, 2010, 12:58:59 am
content: Check your the web server logs - you may find an easy way of blocking them (at least until they get around it)- you might want to consider redirecting people going there to a page that manages to get around their url rewriting thing and redirects people to the actual site.for exampleCode:<script type="text/javascript"><!--window.location = 'h'+'t'+'t'+'p'+':'+'w'+'w'+'w'+'.'+'e'+'e'+'v'+'b'+'l'+'o'+'g'+'.'+'c'+'o'+'m';//--></script>though it probably wouldn't last long before they block it and you would still need some text for users without javascript

author: charliex
author_rank: Frequent Contributor
timestamp: February 05, 2010, 01:02:26 am
content: The address is fake too, that address is in oregon, not california. if i remember the bazillions of emails i get from nsi the details have to be accurate or they'll delist it. another attack vector

author: migsantiago
author_rank: Frequent Contributor
timestamp: February 05, 2010, 01:04:31 am
content: Dave, just a tip... post any weird URLs in this fashion:Code:http://www.warvideoblog.com/By posting them in a normal way (clickable way) you're actually boosting up that URL at Google PageRank.

author: Ferroto
author_rank: Frequent Contributor
timestamp: February 05, 2010, 01:11:05 am
content: That website updates instantly within any content changing here, this indicates they likely have access to the database this site runs off. Change your DB password, and if the DB has the option, setup a 3 strikes and your out approach for password verification.

author: Ferroto
author_rank: Frequent Contributor
timestamp: February 05, 2010, 01:19:26 am
content: Quote from: adam1213 on February 05, 2010, 12:58:59 amIt could also throw people into an infinite loop of loading this site.*edit* wait DO AN EEVBLOG ON IT

author: xani
author_rank: Frequent Contributor
timestamp: February 05, 2010, 01:22:51 am
content: For 99.99999% its just simple proxy which gets page from eevblog.com, rewrites all urls to warblog com and sends it to clientsomething like "we get request so we download it from eevblog.com and then send it to client"if u have access to log just block themyou could prob sue them for copyright ;]

author: adam1213
author_rank: Regular Contributor
timestamp: February 05, 2010, 01:25:15 am
content: Quote from: Ferroto on February 05, 2010, 01:19:26 amDidn't think about that one - though the attack on their site would be their fault (but it does waste usage for people that leave the page open too long)- instead it could bewindow.location = 'h'+'t'+'t'+'p'+':'+'w'+'w'+'w'+'.'+'e'+'e'+'v'+'b'+'l'+'o'+'g'+'.'+'c'+'o'+'m' + '?' + 'r' + '=' + '1';and have server not redirect people if r is set (though soon they would just send r=1 for everything)or just have a page with a message with the link to the real blog with some text that won't be rewritten and an image with the url.

author: EEVblog
author_rank: Unknown
timestamp: February 05, 2010, 01:26:07 am
content: HA! blocked him with one fell swoop of my Hosting IP blocker!But I guess I'll have to re-enable it for a while so I can prove that he's stealing my stuff to ultimately get him shut down.Dave.

author: EEVblog
author_rank: Unknown
timestamp: February 05, 2010, 02:43:14 am
content: Got him!"This Account Has Been Suspended"10 minutes after me sending the DMCA takedown notice to the web host!That fight was just too easy, no fun at all!Dave.

author: ToddFun
author_rank: Contributor
timestamp: March 25, 2010, 05:07:44 am
content: So whats up now? The site seems ok now. I has content that matches its URL. Maybe their account was hacked? At any rate the URL is up but none of Dave's stuff is there.

author: EEVblog
author_rank: Unknown
timestamp: March 27, 2010, 10:57:41 am
content: Quote from: ToddFun on March 25, 2010, 05:07:44 amThey weren't hacked, they were deliberately leeching off my material. They are back with someone else's material I'm sure, although I don't know who.Dave.