Whats this??????

[whiskey]

Maybe theres a thread about this I haven't checked, but what is this???

VaperSpace.com The Next Evolution in Electronic Cigarette Communities. Coming Soon the E Cig Social Network & Forum - VaperSpace.com The Next Evolution in Electronic Cigarette Communities. Coming Soon the E Cig Social Network & Forum

 

[Freddie]

I would like to know also because their FORUM INFO is WRAPPED around the ECF! HMMM...I'm very sure EVERYONE else would like to know as well! NEED ANSWERS PLEASE ASAP...

 

[nerak]

Very interesting! Why does it show I am signed in when I go there? I mean, it shows my ECF screen name!

If that is not ECF then why is my information there? If it is NOT ECF then I want to know!

 

[rolygate]

Nothing to do with us. It's a scraper site being used to attack us. We'll see what can be done about it.

 

[Freddie]

Very interesting! Why does it show I am signed in when I go there? I mean, it shows my ECF screen name!

If that is not ECF then why is my information there? If it is NOT ECF then I want to know!

Well stated as well, but ONE of the Admins needs to ADDRESS this issue ASAP!

 

[Freddie]

Nothing to do with us. It's a hack/scraper site being used to attack us. We'll see what can be done about it.

Thank you because if it is being hacked, then our info is being too!

 

[rolygate]

It just redirects you to ECF and you see ECF via that site.

 

[Freddie]

Just our forums are being displayed.

We who have seen the link know that the forums are being displayed, but when as soon as we click on the link our user name and passwords are also being accessed! Knowing that, then that means our info can be accesed!

 

[rolygate]

OK what the site does is show you what you see if you go to ECF. Everyone sees something different.

This is an attack site, your browser is being redirected - not ECF.

 

[UntamedRose]

If you clicked that link....Please do not click it again....clear cookies, and change your password.

 

[nerak]

OK what the site does is hack your browser, steal your ECF cookie, and show you the ECF website in an iframe. It shows you what you see if you go to ECF. Everyone sees something different.

This is an attack site, your browser is being hacked - not ECF.

I don't quite understand. If you scroll to the bottom of the page, not the inserted ECF forum, you will see lots of information. One link titled "Why ECF rocks" when clicked will take you to a post from New Members forum.

So it seems like the whole site is ECF.

 

[rolygate]

What the site does is simply to redirect you to ECF in an iframe, a box on their front page that displays ECF. So whatever you would see on ECF, you see there.

Don't go there. If you want to view that site, go there in a 'spare' browser with no logins or passwords, then wipe the browser afterwards. But I don't advise it. You've no idea what sites like that can try to get onto your PC.

It's quite a good joke because it makes people worry if they or ECF have been hacked. Technically it is a clever joke. All that happens is you see ECF but on another site. ECF is not affected in any way, only your browser.

However sites like that can be used for other purposes like attempting to steal your passwords and so on. We've censored that site name out so that people don't go there, there is a danger the site could be used to get their personal info.

 

[Freddie]

What the site does is simply to redirect you to ECF in an iframe, a box on their front page that displays ECF. So whatever you would see on ECF, you see there.

Don't go there. If you want to view that site, go there in a 'spare' browser with no logins or passwords, then wipe the browser afterwards. But I don't advise it. You've no idea what sites like that can try to get onto your PC.

It's quite a good joke because it makes people worry if they or ECF have been hacked. Technically it is a clever joke. All that happens is you see ECF but on another site. ECF is not affected in any way, only your browser.

However sites like that can be used for other purposes like attempting to steal your passwords and so on. We've censored that site name out so that people don't go there, there is a danger the site could be used to get their personal info.

Actually Roly it is NOT a good joke! We are talking about members personal INFO here! This matter is SERIOUS! There are some members who have already clicked on the link to check it out amd who knows what transpired when doing so! HOWEVER, as you say and stated that you have RESOLVED this matter, I will take your word for it and NOTE of this thread!

 

[Keekers]

The link isn't working for me

 

[rolygate]

@Freddie
Careful - it is nothing to do with ECF in any way.

Any website in the world can do this - it is called an iframe.

If you feel that you have been personally attacked then you should complain to the domain registrars and the website hosting of the attack site. We will also be doing this.

All we did is fix it so they couldn't use our front page on their site for a redirect. There is nothing we or any other website can do to stop people setting up an iframe attck of this type - all anyone can do is complain to the domain registrars and website hosts.

I'll explain how it is done, then you can see it is nothing to do with us. You just put some code on a page of your website that says, "in this block, display website XXX". That's all it does. And of course if you are logged into website XXX, then you will see your personal pages there.

The main thing the spammer does is to publicize the link. Whoever posted the link up on to the web first is the owner of the spam site. Note that they can also add code to their site to get your personal info, if they want to. However, this sort of person is a spammer and general troublemaker, who is not clever enough to be a hacker.

 

[Riverboat]

Nothing to do with us. It's a scraper site being used to attack us. We'll see what can be done about it.

Its no longer up.......... Way to go ECF!

 

[Freddie]

@Freddie
Careful - it is nothing to do with ECF in any way.

Any website in the world can do this - it is called an iframe.

If you feel that you have been personally attacked then you should complain to the domain registrars and the website hosting of the attack site. We will also be doing this.

All we did is fix it so they couldn't use our front page on their site for a redirect. There is nothing we or any other website can do to stop people setting up an iframe attck of this type - all anyone can do is complain to the domain registrars and website hosts.

I'll explain how it is done, then you can see it is nothing to do with us. You just put some code on a page of your website that says, "in this block, display website XXX". That's all it does. And of course if you are logged into website XXX, then you will see your personal pages there.

The main thing the spammer does is to publicize the link. Whoever posted the link up on to the web first is the owner of the spam site. Note that they can also add code to their site to get your personal info, if they want to. However, this sort of person is a spammer and general troublemaker, who is not clever enough to be a hacker.

OK, THANK YOU! Now you took a BIG LOAD off my shoulders! Thanks Roly!

 

[oldsoldier]

Just to reiterate what Roly said above, using an iFrame to display content in itself is not nefarious though it can be done unethically and for blackhat SEO reasons.


The biggest concern about your personal information comes from using an iFrame to "phish". A clever attacker could do this in a way to lure the less savvy internet users into entering his login credentials or personal information, much like the email phishing scams that 99.9% of internet users are aware of and just delete. Phishing scams understand this and make their margin by exploiting the .01%

I'm not saying this was the intent of that site, because it probably wasn't. I'm just giving you an example

 

[progg]

Thank you -- whiskey, for making us aware of it. -- mods and management, for taking action and explaining.

 

[kenetix]

This is easily something that ECF could fix. All ECF has to so is place a small bit of code in the <header> to stop it from being loaded in <iframe> either as javascript giving a warning that the page is loaded via an iframe and not officially ecf or php to stop it period. The code is all over the web. This would of been the first rational action to be done.

I will make your job easy for you....

http://en.wikipedia.org/wiki/Framekiller