Tech: Problems with Mudcat?

Subject: RE: Tech: Problems with Mudcat?
From: JennyO
Date: 15 Jan 05 - 07:47 PM

Ah yes, SRS, I see what you mean. There is this big blank bit running down to the left of centre. Looks very odd. Probably wouldn't have noticed it for ages if you hadn't mentioned it cos I always go straight into the forum and bypass that page.

I see Bassic has sorta beaten me to it. I also noticed Max's warning about the adware was there and would assume the page is still "under construction" and will get rearranged again soon.

Jenny

Subject: RE: Tech: Problems with Mudcat?
From: Bill D
Date: 15 Jan 05 - 07:25 PM

here is one more tool to control uninvited 'stuff' from messing about on your machine : SSM- System Safety Monitor

I have used it for 5-6 months now, and it doesn't need to do much, because the OTHER programs I use prevent most crap from being installed...but SSM tells you when programs you did not expect are trying to run...and how they are being started. The site hints that they will begin to charge for the program soon...I dunno, but it is free for the moment.

copied from that website: (which may be slow)

"System Safety Monitor (SSM) is an application-firewalling tool (it is not a "firewall" in traditional understanding, so there shouldn't be any conflicts with your network firewalls). SSM controls which programs are running on your computer and what they are doing. For example, SSM can prevent so called "DLL Injection". Also, SSM will notify you whenever a program you want to start was modified. In addition, SSM can constantly check your registry and alert you, when an important modification was made.

Features
# Allows you to control which programs and applications can be opened on your computer. Alerts you whenever a program, you want to run was modified.
# Allows you to control calls to some OS functions which is used in "DLL Injection" and Keystroke logging utilities (keyboard spies).
# Allows you to control driver installation (including non-traditional ways exploited in malicious drivers - rootkits)
# Allows you to control low-level activity such as accessing "\Device\PhysicalMemory" object
# Prevents unauthorized code-injection activity, so no application will be allowed to use another legitimate one for malicious activity.
# Allows you to control which programs are allowed to start other, and wich cannot be started by others. For example, you may allow your browser to be started only by Explorer.exe but not by any other untrusted application.
# Offers a choice of two modes - User and Administrator. In Administrator mode you can set your preferences to control programs. Access to this mode can be protected with an encrypted password to prevent anyone changing your settings. In User mode no changes can be made to your settings.
# Supervises changes to important registry keys when installing new programs.
# Will block or alert on any attempt to change guarded registry keys.
# Allows you to control which programs run at system startup.
# Maintains a list of running applications and allows you to terminate any application immediately.
# Have a services-guard module which monitors installed system services in NT and notifies you when new services are added
# Also monitors (also in real time) start menu and startup ini-files sections; Internet Explorer settings (including BrowserHelperObjects)
# Allows you to block specific windows (including websites) from opening.
# Can be set to run automatically on system startup.

Subject: RE: Tech: Problems with Mudcat?
From: Bassic
Date: 15 Jan 05 - 07:24 PM

I suspect that has happened to make way for Max`s alert re the Adware problem which is now on the lower left side of the "front page". I suspect this will just be a temporary measure.

Subject: RE: Tech: Problems with Mudcat?
From: Stilly River Sage
Date: 15 Jan 05 - 07:18 PM

The positioning has changed for the text on the Mudcat front page. Was this by accident or on purpose? It leaves a big blank gap between the apparently absolutely positioned segments of text. The Google ads are where they always were, but now the two columns of Mudcat business are on the other side of the page. It looks odd.

SRS

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,MCP
Date: 15 Jan 05 - 07:09 PM

SiS - I think the Help vulnerability has been fixed in an update I had a few days ago. (KB890175) (but I have just turned off Drag/Drop...!)

Mick

Subject: RE: Tech: Problems with Mudcat?
From: GUEST
Date: 15 Jan 05 - 06:15 PM

Since finding mudcat my spam has reached gargantuan proportions. And the strangest thing is the number of emails i get with 'hull' in the to or message line.

Subject: RE: Tech: Problems with Mudcat?
From: Steve in Sidmouth
Date: 15 Jan 05 - 04:53 PM

Copy from PC World - the article is available on the internet - just don't ask me to explain it.

IE Flaw Exploited

Security firm identifies exploit technique for known browser hole.

Matthew Broersma, Techworld.com
Friday, January 07, 2005
Internet Explorer has become an even bigger security risk--even under Windows XP SP2--with the publication of a new and extensive exploit.

Security researchers have warned that the exploit, which takes advantage of known loopholes in SP2, could allow an attacker to run script code on a user's system via a specially crafted Web page.

Known Hole

The holes involved have been known publicly for more than two months, but previous exploit techniques required the user to take actions such as dragging an image from one part of a Web page to another. The new exploit--a demonstration of which has been published by Danish security firm Secunia--is fully automated, requiring the user only to visit a Web page in Explorer. Other browsers and operating systems aren't affected.

"There now is a 'reliable' working exploit that can compromise an SP2 system by just visiting a Web page," says Secunia chief technology officer Thomas Kristensen. Secunia has raised its warning level to its highest, "extremely critical."

Security group Greyhats warned of the new type of exploit in an advisory in late December. Secunia then upgraded its advisory to "extremely critical" and published a demonstration based on a proof-of-concept by a researcher known as ShredderSub7. US-CERT, the U.S. computer security alert organization, has also published an advisory on the issue.

Issues Identified

Microsoft has warned users to turn off IE's 'Drag and drop or copy and paste files' option as a partial solution. The danger can also be lessened by setting security levels to high for the 'Internet' zone or, as several security firms pointed out, using another browser.

The exploit is the first major weakness in SP2 to have surfaced. Microsoft is promoting SP2, released last summer, as a solution to many of Windows' worst security problems.

Researchers have identified three separate but related issues in IE: a bug in the validation of certain drag-and-drop events, and zone restriction errors with embedded HTML Help ActiveX controls. The first problem can be avoided by disabling the 'Drag and drop or copy and paste files' option, but the new exploit doesn't rely on this particular bug, researchers said.

The HTML Help control exploit bypasses one of SP2's key features, the 'Local Machine' zone lock down, designed to make it far more difficult for attackers to execute script on a local system.

Subject: RE: Tech: Problems with Mudcat?
From: EagleWing
Date: 15 Jan 05 - 04:29 PM

Steve from Sidmouth says "Maybe everyone should run Linux and Firefox or some such Gates-free combination until he can produce programs that are not full of holes. Seen the latest exploit under XP? It gets around SP2 apparently."

Linux and firefox etc are probably just as full as holes - it's just that the people who make the nasties go for GatesWare because that way they hit the greatest number of people. If everyone changed over to firefox we'd very soon discover that it's just as vulnerable.

Frank L.

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,Alba
Date: 15 Jan 05 - 03:48 PM

I spoke the words and Murphy's Law happens....
what the heck is happening
when I went away and checked my systems and came back to Mudcat via my Fav button I got this! :Access by FunWebProducts adware denied:
aghhhhhhhh what does that mean. I have scanned all my Files and Hard drive and have found nothing with this funwebblahblah in there.
Helllllp
Jude

Subject: RE: Tech: Problems with Mudcat?
From: Scooby Doo
Date: 15 Jan 05 - 03:32 PM

Thanks Max for your advice.

Subject: RE: Tech: Problems with Mudcat?
From: Alba
Date: 15 Jan 05 - 02:47 PM

I'm covered thank goodness and updated automatically.
It doesn't solve the problem but thanks for letting us know what is causing it Max.
Blessings
Jude

Subject: RE: Tech: Problems with Mudcat?
From: JohnInKansas
Date: 15 Jan 05 - 02:31 PM

For those who have had Spybot for a while, a reminder that just like your AV it does need regular updates. I thought I was fairly current, but a fresh update added a few signatures.

When you first open Spybot, with default installation, the UPDATES button is grayed out, but it should appear after you run a scan and fix what's found. Click for updates, select all of what's available, and they should download and install, and Spybot will open for a new scan. A current scan should show about 21,000 threats in the progress bar when your run a scan. If yours shows fewer, you should get updated.

John

Subject: RE: Tech: Problems with Mudcat?
From: wysiwyg
Date: 15 Jan 05 - 02:20 PM

I don't understand why I would have different speed/URL access at different times, regardless of having run or not run any anti-spy or anti-bot or anti-ware scans.

~S~

Subject: RE: Tech: Problems with Mudcat?
From: Steve in Sidmouth
Date: 15 Jan 05 - 01:15 PM

Forgot to say - I am enjoying (??) a free month trial with AOL. Almost unworkable within ebay sometimes - page cannot be found etc etc. Other times it is fine. They have an inbuilt spy/adware detection programme that checked 25,000 files (+) on my main internet machine and found nothing. It's the first time I have checked in over two years so infection must be pretty rare except on broadband connections??? Or maybe it depends which naughty websites you visit???

Subject: RE: Tech: Problems with Mudcat?
From: MBSLynne
Date: 15 Jan 05 - 01:13 PM

Spybot means not having to say you're sorry!

Phew! I've got it so I don't have to feel guilty!

Love Lynne

Subject: RE: Tech: Problems with Mudcat?
From: Steve in Sidmouth
Date: 15 Jan 05 - 01:08 PM

As someone relatively new to computers I can enjoy taking them to pieces but all this software inadequacy is making me p***ed off. I am glad to know that access problems with mudcat are not at my end.

Maybe everyone should run Linux and Firefox or some such Gates-free combination until he can produce programs that are not full of holes. Seen the latest exploit under XP? It gets around SP2 apparently.

I found this recently - it may be 'old hat' to all you tech people but I had a troubled night thinking about all the updates I should load but am damned if I am going to risk a computer that works for an updated one that doesn't. These problems of spyware etc etc should be sorted out in robust products - not left to millions of users to deal with. I have just spent half a day trying to get W98(2) to accept a modem at some place else than COM1. It offers me COM5 - which doesn't even exist in the Registry.

I am afraid a lot of people will be staying with out of date software (even more full of holes than XP) until they have confidence that their next expensive purchase will actually WORK.

Happy reading http://www.mdgx.com/web.htm

Steve in Sidmouth http://www.seered.co.uk

Subject: RE: Tech: Problems with Mudcat?
From: MBSLynne
Date: 15 Jan 05 - 01:05 PM

Spybot means not having to say you're sorry!

Phew..I've got it so I don't have to feel guilty!!

Love Lynne

Subject: RE: Tech: Problems with Mudcat?
From: John MacKenzie
Date: 15 Jan 05 - 12:59 PM

Thanks Max, I knew there had to be a good reason, can you set your server up to detect and reject any Catter who has this on their 'Pooter'? Or am I being late again and you've already done it?
Giok

Subject: RE: Tech: Problems with Mudcat?
From: Sorcha
Date: 15 Jan 05 - 12:33 PM

Thanks for the note, Max. Not at home right now, but will check when I get there.

Subject: RE: Tech: Problems with Mudcat?
From: GUEST
Date: 15 Jan 05 - 12:29 PM

I use both Spybot and Ad Aware for the malware.

Also, people should be using a good anti-virus software too. I use this freebie download on all my computer lab computers at school.

It isn't that tough to update them regularly and run these programs daily.

Subject: RE: Tech: Problems with Mudcat?
From: Amos
Date: 15 Jan 05 - 12:28 PM

Here is a table of different cures for spyware. If you are running OSX, you're not at all likely to be part of this problem.

Spyware Tool Comparisons.

Regards,

A

Subject: RE: Tech: Problems with Mudcat?
From: JennyO
Date: 15 Jan 05 - 12:13 PM

See you in a few hours Lynne. Gotta go to bed now - it's way past my bedtime.

Jenny

Subject: RE: Tech: Problems with Mudcat?
From: Max
Date: 15 Jan 05 - 12:07 PM

ALERT: The recent mudcat problems are due to Search Engine Robots and Adware/Spyware installed on mudcat members' computers. Specifically something called FunWebProducts. There is an article about it here: http://www.nwfusion.com/newsletters/web/2003/1208web2.html. Apparently its driving Web Masters crazy all over the world.

I have gotten the Robots under control, now please do your part.

I encourage everyone to download and run spybot to rid your computer of this, and probable hundreds more adware and spyware software.

Subject: RE: Tech: Problems with Mudcat?
From: MBSLynne
Date: 15 Jan 05 - 12:05 PM

Great idea Jenny! I'll see you there!!

Love Lynne

Subject: RE: Tech: Problems with Mudcat?
From: GUEST
Date: 15 Jan 05 - 11:48 AM

Mudcat may be up, but my ISP now seems to be having problems. Can't win.

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,JennyO
Date: 15 Jan 05 - 11:37 AM

Hello Lynne - why not come over to Backdoor Tavern 99? Drinks are on the house, and some loony is handing out free CD's...

Subject: RE: Tech: Problems with Mudcat?
From: Scooby Doo
Date: 15 Jan 05 - 11:33 AM

Its back now Lynne

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,MBSLynne
Date: 15 Jan 05 - 11:05 AM

Well it's still not back up at 4.05......

Subject: RE: Tech: Problems with Mudcat?
From: GUEST
Date: 15 Jan 05 - 09:23 AM

While I appreciate your version of the funding story being relevant tot he tech problems Allan, it isn't the One True Right Truth of the matter.

Max doesn't ask for money because he doesn't want to be held accountable for it. It's that simple. The funding issue with Mudcat could easily have been solved years ago, people have volunteered to do the work it would take to set up a proper funding channel and keep track of the accounts, that sort of thing. But Max has stubbornly refused to do it. Like I said, this is a guy who doesn't want to be held accountable.

People who love this place and are lead to believe that sending Max money to "fix" the problems deserve to know that, IMO. If they send money they will never know what does or doesn't get done with it, it may or may not fix the current spate of technical problems (which Max is apparently saying now is a software learning curve issue, which isn't something that can be fixed by sending him donations, he just has to take the time to figure out the problem), you won't be able to deduct your donations from taxes (which most people here don't seem to care about anyway, they just want their internet chat fix), and you likely won't ever hear a "thank you" from anyone.

Some of us, Allan, have been down this well worn road before.

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,JennyO
Date: 15 Jan 05 - 08:56 AM

When I try Ping, http://www.mudcat.org/threads.cfm answers normally, as if it was up. Weird!

With Buddy, it says "Ping returned an error"

And of course, with these numbers, Ping answers normally too.

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,foolestroupe
Date: 15 Jan 05 - 08:26 AM

My test probes currently show all known permutations of the Mudcat addresses as 'unavailable' - even the one I am getting in thru now - but I can get in thru the 'magic numbers' - as this post proves.... bloody weird...

Viz - all entries the same as this line
[http://207.103.108.99/        HTTP Error: Operation cancelled (12017)]
except
[http://www.mudcat.org/threads.cfm Error: Request timed out (35761)]

Robin

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,MCP
Date: 15 Jan 05 - 07:01 AM

For the last week or so www.mudcat.org becomes unavailable at about 08:30 UK time, but access is available via IP address ...99. I suspect that something is timed to run at around 03:30 mudcat time that makes the www.mudcat.org address unavailable. It becomes available again in the afternoon UK (maybe 14:30 UK or after).

Mick

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,Bewitched bothered, and bewildered.
Date: 15 Jan 05 - 04:41 AM

Gee thanks Garg; that's like reeeeally helpfull man!

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,.gargoyle
Date: 15 Jan 05 - 12:02 AM

There is SELDOM a problem....you are probably attempting to access through the wrong server....may I suggest you change ISP's?

Sincerely,

Gargoyle

or at least change browsers.

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,sandra in sydney
Date: 14 Jan 05 - 07:06 AM

money can be sent via Dick Greenhaus which I'll do on Monday & I've just sent an email to my work address to remind me

sandra (getting older & more forgetful)

Subject: RE: Tech: Problems with Mudcat?
From: GUEST, Allan C.
Date: 13 Jan 05 - 08:49 AM

Liz, I asked Max the same question. He explained that the main problem is that he is still trying to learn all of the functions of some of the new software. However, (he said, almost parenthetically,)"My dream is to have redundancy." In other words, if the Mudcat had a full fledged backup server, there wouldn't be any down time. As it is, anytime there is a problem, the Mudcat has to be disabled in order to work on it.

My underststanding is that the "redundancy" could be a reality if the Mudcat were more solvent. Max is still working to get the tax thing worked out so that those on this side of the pond can deduct our contributions. This process, itself, is not without expense; i.e. consulting with accountant and a lawyer. Meanwhile, Max's dream is far from becoming a reality.

The current income is barely sufficient to sustain the status quo. The acquisition of the server that replaced the ailing "Shorty" was completely funded by a single donation. (It is difficult to imagine what sort of tin cans and strings Max might be working with now, had this not happened.) There are some few people who actually make use of the Amazon link for their purchases as well as using some of the other links through which the Mudcat receives a small percentage. Sadly, not many of us take advantage of this means of funding the Mudcat. Most of the funding for the Mudcat comes directly through the generous giving of a dismally small number of members.

Now, I will have to say that (to my knowledge) Max, himself, has rarely, if ever, asked for funds. In fact, it is rather difficult to get him to admit that he needs any more than he has. (Most of the years of the Mudcat's existence have seen shortfalls that I suspect were alleviated by money out of Max's own pocket.) It is not hard to imagine that there is always a necessity for some small or even large bits of hardware or else some sort of software to make the Mudcat to run more smoothly. Funding is always an issue.

I know that folkies, almost by definition, generally aren't well-to-do and therefore, aren't usually in the position of being greatly philanthropic. However, even small sums donated from time to time would be a boon to the overall financial picture. In fact, I strongly urge those who will be receiving a tax refund again this year, to consider sending a wee bit of it to the Mudcat.

I know I have rambled a little here; but I hope I have said what needs to be said. Please help to fund the Mudcat.

I'll step down from the soapbox now.

Subject: RE: Tech: Problems with Mudcat?
From: Liz the Squeak
Date: 13 Jan 05 - 03:19 AM

So apart from quittin' bitchin', is there anything we can do to help?

LTS

Subject: RE: Tech: Problems with Mudcat?
From: Rt Revd Sir jOhn from Hull
Date: 13 Jan 05 - 02:23 AM

Subject: RE: Tech: Problems with Mudcat?
From: Paco Rabanne
Date: 12 Jan 05 - 12:20 PM

Hiya Bassic, how's life in Hessle.

Subject: RE: Tech: Problems with Mudcat?
From: Stilly River Sage
Date: 12 Jan 05 - 12:00 PM

Back and logged on through the old link.

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,Rapaire
Date: 12 Jan 05 - 11:20 AM

Them Albertans are folks of a few words.

Subject: RE: Tech: Problems with Mudcat?
From: GUEST
Date: 12 Jan 05 - 11:09 AM

;-)

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,Bassic
Date: 12 Jan 05 - 11:00 AM

Erudite as ever Brucie ;-)

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,Bruce Murdoch
Date: 12 Jan 05 - 10:36 AM

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,JennyO
Date: 12 Jan 05 - 10:16 AM

However, the DT is working :-)

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,JennyO
Date: 12 Jan 05 - 10:04 AM

Hmm. That's exactly where I got to as well, MMario, but everything seems to lead back to www.mudcat.org

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,MMario
Date: 12 Jan 05 - 09:59 AM

I'm testing this link right now...Supersearch which gives you the main search page -=

and the answer appears to be no - at least not currently.

Subject: RE: Tech: Problems with Mudcat?
From: GUEST
Date: 12 Jan 05 - 09:46 AM

Is it possible to search from here (207.103.108.99)?

Davetnova

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,sandra
Date: 12 Jan 05 - 08:24 AM

hello, Joe

Subject: RE: Tech: Problems with Mudcat?
From: GUEST,JennyO
Date: 12 Jan 05 - 07:48 AM

Sandra, I think you'll find that you can't log in on this one. Nothing on the drop down menu works without some altering. And even if you did manage to get to the login page with some tweaking, you can't take your cookie with you.