Jump to content

Listen to Pattaya FM105
View New Content  

Google HijackedMaxnet hijack Google and insert pop-up ads


104 replies to this topic

#26 klikster

    Super Member

  • Advanced Members
  • PipPipPipPipPip
  • 1,926 posts

Posted 2009-05-29 19:32:16

https://hotmail.com

"Secure Connection Failed

hotmail.com uses an invalid security certificate.

The certificate is only valid for lc2.bay0.hotmail.passport.com

(Error code: ssl_error_bad_cert_domain)

* This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.

* If you have connected to this server successfully in the past, the error may be temporary, and you can try again later."

#27 surface

    hubba hubba

  • Advanced Members
  • PipPipPipPip
  • 715 posts

Posted 2009-05-29 19:34:07

View PostDrTuner, on 2009-05-29 19:30:13, said:

I just reported maxnet's IP hijack to Google by using a ssh-tunneled proxy in order to avoid the redirect. Google's IP hijacking report pages can be found by searching "Report IP problems google" woth google itself. I suggest you do the same, as I'm sure folks at Google will have far more weight on the matter than individuals calling to maxnet's tech support and I reckon they will not be very happy by anybody degrading the level of their service.

Unfortunately I don't think Google has much pull over here in Thailand. Net neutrality laws here? :)

#28 Hobgoblin

    Senior Member

  • Members
  • PipPipPipPip
  • 204 posts

Posted 2009-05-29 19:35:39

I've tried calling 1103 again to "annoy" them, and it appears they're not answering phones. Is anyone able to get through to that number?

#29 niller74

    Senior Member

  • Members
  • PipPipPipPip
  • 390 posts

Posted 2009-05-29 19:37:35

View PostHobgoblin, on 2009-05-29 19:35:39, said:

I've tried calling 1103 again to "annoy" them, and it appears they're not answering phones. Is anyone able to get through to that number?

Press '9' for English and they continue in Thai....

#30 RichieH

    Advanced Member

  • Members
  • PipPipPip
  • 48 posts

Posted 2009-05-29 19:40:14

I'm a web programmer of ten+ years. This is a blatant redirect for anyone typing in www.google.com

This is the code for the page http://moviebuffet.m....th/google.html

<html><meta http-equiv="content-type" content="text/html;charset=TIS-620">
<head>
<script language="JavaScript">
msg=window.open("google_splash.html",'mighotmail','toolbar=0,location=0,minimize=0,maximize=0,directories=0,minimize=no,maximiz
e=no,status=0,menubar=0,scrollbars=no,resizable=0,width=417,height=521');
</script>
<meta http-equiv="refresh" content="0; URL=http://www.google.co.th/">
</head>


</html>


It's calling a page called google_splash.html and then redirecting to www.google.co.th

Here is the code for google_splash.html

<html><meta http-equiv="content-type" content="text/html;charset=TIS-620"><head>
<meta http-equiv="Pragma" content="no-cache">
<meta http-equiv="Expires" content="-1">
</head>
<body onBlur="self.focus()" topmargin="0">
<img border="0"
src="buffet_images/Movie-Buffet-Splash.jpg"
alt="¤ÅÔê¡ ÊÁѤÃàÅÂ" onClick="window.open('promotion750a.html?cl=google');self.close()" onMouseOver="this.style.cursor='hand'">
</body><meta http-equiv="content-type" content="text/html;charset=TIS-620"></html>

So basically the whole thing is setup by Maxnet to promote moviebuffet for anyone who wants to visit www.google.com

If only Google had a number for times like this. Maxnet would get sued big time for pulling stunt like this.

#31 Veazer

    Senior Member

  • Advanced Members
  • PipPipPipPip
  • 792 posts

Posted 2009-05-29 19:45:56

View Postniller74, on 2009-05-29 19:28:23, said:

View PostVeazer, on 2009-05-29 19:26:40, said:

View PostHobgoblin, on 2009-05-29 19:19:39, said:

.. I've already contacted phone support, but of course, they don't acknowledge there is any problem at all....

I was just looking at the thai thread about this, Maxnet is denying it and telling customers that it caused by a virus on their machine. :)

Haha, that make it even more hilarious. Which company would ever admit to be infected by virus? These people are just so stupid they could not make up a better excuse.

Sorry, that was poorly worded. I mean Maxnet is telling users that the user's machine is infected and that's why they see the ads.

#32 hellavagi

    Member

  • Members
  • PipPip
  • 10 posts

Posted 2009-05-29 19:47:43

I don't think Google will act on this either, but it doesn't hurt to try. But I can't click on the link to report it to google since it just redirects me back and I don't know how to use the proxy mentioned. dam_n i hate this kind of shit service.

#33 Hobgoblin

    Senior Member

  • Members
  • PipPipPipPip
  • 204 posts

Posted 2009-05-29 19:50:23

View Postniller74, on 2009-05-29 19:37:35, said:

View PostHobgoblin, on 2009-05-29 19:35:39, said:

I've tried calling 1103 again to "annoy" them, and it appears they're not answering phones. Is anyone able to get through to that number?

Press '9' for English and they continue in Thai....

Nope.... I can't even get to that point. I'm thinking they could be rejecting requests from my number because I insinuated this could be their fault? It would figure - dealing with Thais is like dealing with 8 year-old children.

#34 cmsally

    Platinum Member

  • Advanced Members
  • PipPipPipPipPipPip
  • 3,533 posts

Posted 2009-05-29 19:51:24

I can confirm it is done by Maxnet. I have 2 services - True and Maxnet. It is only happening when connected by Maxnet but not when connecting by True. True is normal.

#35 RichieH

    Advanced Member

  • Members
  • PipPipPip
  • 48 posts

Posted 2009-05-29 19:53:09

For anybody in serious need ofusing google.com such as myself...... here is your solution

http://www.pagewash.com

I use it sometimes to ensure dubious websites don't infect my computer. It's a virtual proxy in other words.

Hope it helps.

#36 DrTuner

    Newbie

  • Members
  • Pip
  • 7 posts

Posted 2009-05-29 19:56:44

View Posthellavagi, on 2009-05-29 19:47:43, said:

I don't think Google will act on this either, but it doesn't hurt to try. But I can't click on the link to report it to google since it just redirects me back and I don't know how to use the proxy mentioned. dam_n i hate this kind of shit service.
Unfortunately using a ssh tunneling proxy requires access to a server running an ssh daemon. Mine is a linux-box in Germany. It also proves that it is indeed Maxnet that is hijacking the HTTP requests based on the destination IP. I'm using OpenDNS and have maxnet Premier (or was ist Premium, anyway, not the Indy).

This is very bad behaviour, if they start hijacking https calls as well, the result will be the certificate error that was mentioned before. If it's google now, how long will it take before they hijack f.ex Kasikorn's IP ?

#37 ikebukuro5

    Advanced Member

  • Members
  • PipPipPip
  • 31 posts

Posted 2009-05-29 20:05:27

This is illegal and MAXNET should get sued for this. I'm now looking for a Google number or international internet fraud hotline, will call them now if I can get the number.

Anybody has any contact numbers for some international internet fraud association?

I would like to inform the international authorities about this idiotic fraudulent move from Maxnet.

Cheers!

#38 RichieH

    Advanced Member

  • Members
  • PipPipPip
  • 48 posts

Posted 2009-05-29 20:11:37

An add-blocker won't fix it because it's at the ISP level. Like when you don't pay your bill for 3 months they redirect you tot a payment reminder page. Or when you try to logon to a random wireless network which is actually a paid for service.... they redirect you to a login/pay page.

It's a blatant redirect by tt&t which is is so rude it's funny!

#39 Johnxxx

    Senior Member

  • Members
  • PipPipPipPip
  • 131 posts

Posted 2009-05-29 20:14:43

View PostRichieH, on 2009-05-29 20:11:37, said:

An add-blocker won't fix it because it's at the ISP level. Like when you don't pay your bill for 3 months they redirect you tot a payment reminder page. Or when you try to logon to a random wireless network which is actually a paid for service.... they redirect you to a login/pay page.

It's a blatant redirect by tt&t which is is so rude it's funny!

Again - a bad idea of Maxnet. But I just got it when I disabled my ad-blockers at Firefox.

#40 livinthailandos

    Senior Member

  • Advanced Members
  • PipPipPipPip
  • 594 posts

Posted 2009-05-29 20:21:59

Well I managed to get through maxnet bull crap but not by a SSH though, I did it through using which thaivisa forbids mentioning.

#41 RichieH

    Advanced Member

  • Members
  • PipPipPip
  • 48 posts

Posted 2009-05-29 20:22:29

www.pagewash.com, a non-tt&t proxy or Expensive Google Lawyers is the only way around this I'm afraid!

TIT folks!

#42 grrr

    Senior Member

  • Members
  • PipPipPipPip
  • 227 posts

Posted 2009-05-29 20:29:01

View Postniller74, on 2009-05-29 13:18:46, said:

What a joke...

EDIT: I bet you can circumvent this by using OpenDNS.

I use OpenDNS with MaxNet and it makes no difference. MaxNet has definitely entered new territory with this one, and if they actually get away with this (which I assume they will because they can), the (advertising) possibilities are limitless.

#43 Jimjim

    Release the hounds

  • Advanced Members
  • PipPipPipPipPipPip
  • 3,516 posts

Posted 2009-05-29 20:49:33

That's bad news, I had always read in this forum that maxnet was the best provider, especially for speed. This is crazy stuff for them to do, an actual supposedly reputable business engaging in what's know as "blackhat" marketing in the internet marketing world. Very, very bad. Serious breach of professionalism and professional service.

#44 cmsally

    Platinum Member

  • Advanced Members
  • PipPipPipPipPipPip
  • 3,533 posts

Posted 2009-05-29 20:57:12

An ad blocker won't help as it is not just a pop up. In my case I have tried to block everything but have many google pages including finance and support unusable as I am redirected back to google.co.th. No popups but the redirections make much of Google unusable

#45 klikster

    Super Member

  • Advanced Members
  • PipPipPipPipPip
  • 1,926 posts

Posted 2009-05-29 21:21:20

View PostRichieH, on 2009-05-29 19:53:09, said:

For anybody in serious need ofusing google.com such as myself...... here is your solution

http://www.pagewash.com

I use it sometimes to ensure dubious websites don't infect my computer. It's a virtual proxy in other words.

Hope it helps.
That may not work(?) for anything beyond search.

"WARNING: SSL not supported, entering non-anonymous area!
This proxy as installed does not support SSL, i.e. URLs that start with "https://". To support SSL, the proxy administrator needs to install the Net::SSLeay Perl module, and then this proxy will automatically support SSL (the CGIProxy site has more info). In the meantime, any browsing to an "https://" URL will be directly from your browser, and no longer anonymous.
Follow the link below to exit your anonymous browsing session, and continue to the URL non-anonymously.

https://www.google.com/accounts/ServiceLogi...amp;hl=en"

#46 SuzieQ

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 2009-05-29 21:26:37

I got through to MaxNet on 1103. Obviously, they have been answering the same question over and over, because the first lady sighed and passed me on. The second one, however, was still very polite and helpful (as customer service is supposed to be) and explained that they are working on the issue. Of course, she could not tell when it would be solved. So, it did not help much, except for that I now know it is not a virus on my end.

Anyway, I got into Google's other services, by clicking on 'My Account' from that Thai Google page. Of course, it only works if you are permanently logged in, like I am on my home computer.... From My Account, I can get to Analytics, Adsense, Adwords and Gmail.

Edited by SuzieQ, 2009-05-29 21:33:21.


#47 klikster

    Super Member

  • Advanced Members
  • PipPipPipPipPip
  • 1,926 posts

Posted 2009-05-29 21:27:34

Looks like I will have to switch over to CDMA if this doesn't get resolved.

FYI, "webmaster tools" is affected, but the dashboard for sitemaps is https: and it doesn't redirct

https://www.google.c...tools/dashboard

#48 Crushdepth

    Dismembered

  • Advanced Members
  • PipPipPipPipPipPip
  • 4,966 posts

Posted 2009-05-29 21:33:10

Quote

I recommend everyone fires off an few angry emails to icare@ttt.co.th and ism@ttt.co.th.

That won't work. Use the following recipe to get the required attention from a Thai ISP:

INGREDIENTS:

1 x 50 cal machine gun
Lots of bullets
APC (or a pickup if budget is an issue)
Squad of Shining Path guerillas and rocket launchers optional.

METHOD:

Drive by building. Shoot it up with machine gun and optional guerillas and rocket launchers until it is a flaming pile of rubble. THEN send an email to 'icare' promising to repeat on a daily basis until someone answers and addresses the problem. This may take a week or too given the propensity for help desk staff a) turning up to work late, :) not turning up at all due to some obscure ceremony the 'need' to attend, c) staff 'going to the bank' but actually going shopping, or d) sleeping through said assault at their desks and expecting the cleaner to sort it out for them.

@Jimjim: Is that Heron Island in your avatar?

#49 Robbogeordie

    Advanced Member

  • Members
  • PipPipPip
  • 39 posts

Posted 2009-05-29 21:40:57

Same here in Chiang Mai - We called the helpline and they told us they will need 2 days to fix this !
To fix a bit of javascript that has been deliberately put on for the weekend...nice little earner for someone.
I don't even think this will backfire on them.

#50 VancouverBC

    Newbie

  • Members
  • Pip
  • 7 posts

Posted 2009-05-29 21:42:31

I called Google and emailed them also...

Hopefully they'll get slapped with a very heavy lawsuit! :)



 


Sponsored by:

1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Quick Navigation   View New Content Site search: