[176303] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Craigslist hacked?

daemon@ATHENA.MIT.EDU (Lyndon Nerenberg)
Mon Nov 24 00:28:08 2014

X-Original-To: nanog@nanog.org
From: Lyndon Nerenberg <lyndon@orthanc.ca>
In-Reply-To: <m28uj19p5x.wl%randy@psg.com>
Date: Sun, 23 Nov 2014 21:27:52 -0800
To: Randy Bush <randy@psg.com>
Cc: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org


--Apple-Mail=_CE2D994F-0613-4C09-A5A3-87284CCF1B1C
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii


On Nov 23, 2014, at 8:51 PM, Randy Bush <randy@psg.com> wrote:

> and what tasty things did the hijacker's web site serve?

Firefox on my Mac started acting very strangely after encountering one =
of the 'unresponsive' versions of craigslist.ca.  Apparent browser =
hangs, javascript script timeouts, and odd things related to the browser =
history.

I restored ~/Library/Application\ Support/Firefox from a Time Machine =
snapshot taken just before the Craigslist hack, and all appears fine =
now.

I have to diff between the two versions of that directory before I claim =
the website hack had anything to do with it, but for now Mac Firefox =
users might want to be wary ...

(Note: Mac OS 10.9.5 and Firefox 33.1 are what I was running.)

--lyndon


--Apple-Mail=_CE2D994F-0613-4C09-A5A3-87284CCF1B1C
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
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=ZCJ/
-----END PGP SIGNATURE-----

--Apple-Mail=_CE2D994F-0613-4C09-A5A3-87284CCF1B1C--

home help back first fref pref prev next nref lref last post