Google HijackedMaxnet hijack Google and insert pop-up ads
#26Posted 2009-05-29 19:32:16
https://hotmail.com
"Secure Connection Failed hotmail.com uses an invalid security certificate. The certificate is only valid for lc2.bay0.hotmail.passport.com (Error code: ssl_error_bad_cert_domain) * This could be a problem with the server's configuration, or it could be someone trying to impersonate the server. * If you have connected to this server successfully in the past, the error may be temporary, and you can try again later." #27Posted 2009-05-29 19:34:07
I just reported maxnet's IP hijack to Google by using a ssh-tunneled proxy in order to avoid the redirect. Google's IP hijacking report pages can be found by searching "Report IP problems google" woth google itself. I suggest you do the same, as I'm sure folks at Google will have far more weight on the matter than individuals calling to maxnet's tech support and I reckon they will not be very happy by anybody degrading the level of their service. Unfortunately I don't think Google has much pull over here in Thailand. Net neutrality laws here? #28Posted 2009-05-29 19:35:39
I've tried calling 1103 again to "annoy" them, and it appears they're not answering phones. Is anyone able to get through to that number?
#30Posted 2009-05-29 19:40:14
I'm a web programmer of ten+ years. This is a blatant redirect for anyone typing in www.google.com
This is the code for the page http://moviebuffet.m....th/google.html <html><meta http-equiv="content-type" content="text/html;charset=TIS-620"> <head> <script language="JavaScript"> msg=window.open("google_splash.html",'mighotmail','toolbar=0,location=0,minimize=0,maximize=0,directories=0,minimize=no,maximiz e=no,status=0,menubar=0,scrollbars=no,resizable=0,width=417,height=521'); </script> <meta http-equiv="refresh" content="0; URL=http://www.google.co.th/"> </head> </html> It's calling a page called google_splash.html and then redirecting to www.google.co.th Here is the code for google_splash.html <html><meta http-equiv="content-type" content="text/html;charset=TIS-620"><head> <meta http-equiv="Pragma" content="no-cache"> <meta http-equiv="Expires" content="-1"> </head> <body onBlur="self.focus()" topmargin="0"> <img border="0" src="buffet_images/Movie-Buffet-Splash.jpg" alt="¤ÅÔê¡ ÊÁѤÃàÅÂ" onClick="window.open('promotion750a.html?cl=google');self.close()" onMouseOver="this.style.cursor='hand'"> </body><meta http-equiv="content-type" content="text/html;charset=TIS-620"></html> So basically the whole thing is setup by Maxnet to promote moviebuffet for anyone who wants to visit www.google.com If only Google had a number for times like this. Maxnet would get sued big time for pulling stunt like this. #31Posted 2009-05-29 19:45:56
Sorry, that was poorly worded. I mean Maxnet is telling users that the user's machine is infected and that's why they see the ads. #32Posted 2009-05-29 19:47:43
I don't think Google will act on this either, but it doesn't hurt to try. But I can't click on the link to report it to google since it just redirects me back and I don't know how to use the proxy mentioned. dam_n i hate this kind of shit service.
#33#34Posted 2009-05-29 19:51:24
I can confirm it is done by Maxnet. I have 2 services - True and Maxnet. It is only happening when connected by Maxnet but not when connecting by True. True is normal.
#35Posted 2009-05-29 19:53:09
For anybody in serious need ofusing google.com such as myself...... here is your solution
http://www.pagewash.com I use it sometimes to ensure dubious websites don't infect my computer. It's a virtual proxy in other words. Hope it helps. #36Posted 2009-05-29 19:56:44
I don't think Google will act on this either, but it doesn't hurt to try. But I can't click on the link to report it to google since it just redirects me back and I don't know how to use the proxy mentioned. dam_n i hate this kind of shit service. This is very bad behaviour, if they start hijacking https calls as well, the result will be the certificate error that was mentioned before. If it's google now, how long will it take before they hijack f.ex Kasikorn's IP ? #37Posted 2009-05-29 20:05:27
This is illegal and MAXNET should get sued for this. I'm now looking for a Google number or international internet fraud hotline, will call them now if I can get the number.
Anybody has any contact numbers for some international internet fraud association? I would like to inform the international authorities about this idiotic fraudulent move from Maxnet. Cheers! #38Posted 2009-05-29 20:11:37
An add-blocker won't fix it because it's at the ISP level. Like when you don't pay your bill for 3 months they redirect you tot a payment reminder page. Or when you try to logon to a random wireless network which is actually a paid for service.... they redirect you to a login/pay page.
It's a blatant redirect by tt&t which is is so rude it's funny! #39Posted 2009-05-29 20:14:43
An add-blocker won't fix it because it's at the ISP level. Like when you don't pay your bill for 3 months they redirect you tot a payment reminder page. Or when you try to logon to a random wireless network which is actually a paid for service.... they redirect you to a login/pay page. It's a blatant redirect by tt&t which is is so rude it's funny! Again - a bad idea of Maxnet. But I just got it when I disabled my ad-blockers at Firefox. #40Posted 2009-05-29 20:21:59
Well I managed to get through maxnet bull crap but not by a SSH though, I did it through using which thaivisa forbids mentioning.
#41Posted 2009-05-29 20:22:29
www.pagewash.com, a non-tt&t proxy or Expensive Google Lawyers is the only way around this I'm afraid!
TIT folks! #42Posted 2009-05-29 20:29:01
What a joke... EDIT: I bet you can circumvent this by using OpenDNS. I use OpenDNS with MaxNet and it makes no difference. MaxNet has definitely entered new territory with this one, and if they actually get away with this (which I assume they will because they can), the (advertising) possibilities are limitless. #43Posted 2009-05-29 20:49:33
That's bad news, I had always read in this forum that maxnet was the best provider, especially for speed. This is crazy stuff for them to do, an actual supposedly reputable business engaging in what's know as "blackhat" marketing in the internet marketing world. Very, very bad. Serious breach of professionalism and professional service.
#44Posted 2009-05-29 20:57:12
An ad blocker won't help as it is not just a pop up. In my case I have tried to block everything but have many google pages including finance and support unusable as I am redirected back to google.co.th. No popups but the redirections make much of Google unusable
#45Posted 2009-05-29 21:21:20
For anybody in serious need ofusing google.com such as myself...... here is your solution http://www.pagewash.com I use it sometimes to ensure dubious websites don't infect my computer. It's a virtual proxy in other words. Hope it helps. "WARNING: SSL not supported, entering non-anonymous area! This proxy as installed does not support SSL, i.e. URLs that start with "https://". To support SSL, the proxy administrator needs to install the Net::SSLeay Perl module, and then this proxy will automatically support SSL (the CGIProxy site has more info). In the meantime, any browsing to an "https://" URL will be directly from your browser, and no longer anonymous. Follow the link below to exit your anonymous browsing session, and continue to the URL non-anonymously. https://www.google.com/accounts/ServiceLogi...amp;hl=en" #46Posted 2009-05-29 21:26:37
I got through to MaxNet on 1103. Obviously, they have been answering the same question over and over, because the first lady sighed and passed me on. The second one, however, was still very polite and helpful (as customer service is supposed to be) and explained that they are working on the issue. Of course, she could not tell when it would be solved. So, it did not help much, except for that I now know it is not a virus on my end.
Anyway, I got into Google's other services, by clicking on 'My Account' from that Thai Google page. Of course, it only works if you are permanently logged in, like I am on my home computer.... From My Account, I can get to Analytics, Adsense, Adwords and Gmail. Edited by SuzieQ, 2009-05-29 21:33:21. #47Posted 2009-05-29 21:27:34
Looks like I will have to switch over to CDMA if this doesn't get resolved.
FYI, "webmaster tools" is affected, but the dashboard for sitemaps is https: and it doesn't redirct https://www.google.c...tools/dashboard #48Posted 2009-05-29 21:33:10 Quote I recommend everyone fires off an few angry emails to icare@ttt.co.th and ism@ttt.co.th. That won't work. Use the following recipe to get the required attention from a Thai ISP: INGREDIENTS: 1 x 50 cal machine gun Lots of bullets APC (or a pickup if budget is an issue) Squad of Shining Path guerillas and rocket launchers optional. METHOD: Drive by building. Shoot it up with machine gun and optional guerillas and rocket launchers until it is a flaming pile of rubble. THEN send an email to 'icare' promising to repeat on a daily basis until someone answers and addresses the problem. This may take a week or too given the propensity for help desk staff a) turning up to work late, @Jimjim: Is that Heron Island in your avatar? #49Posted 2009-05-29 21:40:57
Same here in Chiang Mai - We called the helpline and they told us they will need 2 days to fix this !
To fix a bit of javascript that has been deliberately put on for the weekend...nice little earner for someone. I don't even think this will backfire on them. #50Posted 2009-05-29 21:42:31
I called Google and emailed them also...
Hopefully they'll get slapped with a very heavy lawsuit! |
Sponsored by:
|
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users














