Does this sound like a program shaving or a rogue employee stealing??

[Tempest]

I won't name the program until the discussion back and forth has ended, besides which I doubt many are promoting it.

This program changed a bunch of links recently and I haven't got around to changing all of them to the new ones. So Wed night I click on a link and it redirects to some other programs site. My first thought it was my own script but then I realized I don't send to that site. So then I checked that link and a few more via a script and found that they were all directing some random amount to 2 other sites. The new linking wasn't doing that. So I posted a pissed off message on their board..

Well of course, not one read it until Sunday morning at which point they suggested I had some spyware. They say they don't redirect to those sites and that they don't even have accounts for those site... She asks me to email her about the issue.. ummm.. ok...

So Sunday night I ran the script again.. Still doing it. I checked for spyware, nothing. I ran the script on a clean computer.. same redirecting.. I put the script on 2 different Unix servers and ran it... Both reported the random redirecting.. I had a person in Cali and a person in NY click the links... They both found them redirecting...

So I write another message giving this information. I also tell them straight out that if they're not doing it, that either their servers are hacked or they have an employee stealing from all of us.

So the next message says something about scripts not working right sometimes with links, the techs are looking into it and haven't found anything wrong, all links are working properly..

As far as the script goes, it's so simple that there's nothing to fuck up and I've used that thing for years now to catch redirecting galleries etc.

So I write her and then I run my script again... Guess what... NO REDIRECTING anymore...

So.. Do you think it's the company or an employee (who wasn't in the office until today) fucking everyone over.

[Wad]

Smells bad here.

[Phoenix]

that does seem fishy as hell

[SmokeyTheBear]

well without knowing the details its hard to say but i have noticed a few creative "hacks" recently.. most of the time they just insert some iframe in sites they hack/infect but recently i have noticed sites scripts get hacked in the EXACT same fashion, a small skim added to the redirect but without knowing the details its hard to say..

[RogerV]

I would say Employee most owners of companies don't know how to do it,

[Tempest]

Originally Posted by SmokeyTheBear

well without knowing the details its hard to say but i have noticed a few creative "hacks" recently.. most of the time they just insert some iframe in sites they hack/infect but recently i have noticed sites scripts get hacked in the EXACT same fashion, a small skim added to the redirect but without knowing the details its hard to say..

I ran a Perl script with LWP to GET the "page", i.e. the sponsor link. The link is supposed to redirect to the real site but some random number of times it was redirecting to a couple different sites in a completely different program.

But you didn't have to even run any script. You could just click on the links and it would redirect to the wrong sites. The links are similar to the silvercash, adultplayersclub, sunnydollars etc. ones.

If the server was hacked etc., then that wouldn't explain why the redirecting stopped on Monday when everyone was back at work and the "techs" say there's nothing wrong and they didn't find anything.

[Tempest]

Originally Posted by RogerV

I would say Employee most owners of companies don't know how to do it,

True.. Unless the owners are also involved with the scripts, or are directing the techs to do it.

[Tempest]

Any other thoughts?

[squishypimp]

drama time.

[Kimo]

something smells like fish