Originally Posted by icsys (Post 34581015)

Worth a shot... http://www.bbc.co.uk/webwise/ click on 'contact Us'
Nothing ventured... nothing gained...

(In black this time)

Originally Posted by Paul Delaney (Post 34581020)

Ok easy ones first - I'm doing this in Vista as I've just uninstalled ie7 (but I think it's the same in xp+ie7) close Internet Explorer and go Start / Control Panel / Internet Options in the "Browsing History" section click the Delete button then in the Delete Browsing History window that opens in the first section "Temporary Internet Files" click the Delete Files button and click Yes at the confirmation.

This will clear Internet Explorer's file cache

When finished click close / apply ok your way back to the desktop

Try the site again

Originally Posted by Bobcat (Post 34581086)

I've just visited the BBC Webwise site and noticed that there is a comment in their Net Comment section about Phorm by one Bill Thompson. He gives a simple but understandable explanation of DPI (well, at least, I thunk I understood it? - duh?)
He doesn't, however, appear to mention BT Webwise at all.

Originally Posted by popper (Post 34581009)

i wonder what would happen to the trademark if lots of people started complaining to the BBC and it's "right to reply" program had to go on air and explain its not them, but kent and Co, your friendly ex rootkit vendor and potential future commercial pirate.....of 70% of the Uk interweb ;)

Originally Posted by pseudonym (Post 34581126)

LOL, yeah, I pay my licence fee, so why should BT users benefit from an exclusive deal with the BBC's Webwise to provide protection against online fraud and make their Internet browsing more relevant.:D

Seriously though, I'm sure some BT users will see Webwise and assume it is to do with the BBC.

Originally Posted by davethejag (Post 34581093)

Thanks Paul, done that but those 3 tabs are still not working. The only thing that has really happened to this computer before was when a while back I clicked on the link to view the video of the Phorm public meeting, the site that was hacked by the Russians and my AVG stopped a threat and I got rid of it. I googled "parasite" and followed advice to check programs in "add and remove Programs" and look for anything that I did not recognise. I found a program called "Sibelius Scorch (Activex Only)" lord knows where that came from but I removed it although it looked legitimate when going to their website. Is this the sort of thing we can expect if Phorm get a foothold? Thanks for your help Paul.

Dave.

Originally Posted by davethejag (Post 34581093)

Thanks Paul, done that but those 3 tabs are still not working. The only thing that has really happened to this computer before was when a while back I clicked on the link to view the video of the Phorm public meeting, the site that was hacked by the Russians and my AVG stopped a threat and I got rid of it. I googled "parasite" and followed advice to check programs in "add and remove Programs" and look for anything that I did not recognise. I found a program called "Sibelius Scorch (Activex Only)" lord knows where that came from but I removed it although it looked legitimate when going to their website. Is this the sort of thing we can expect if Phorm get a foothold? Thanks for your help Paul.

Dave.

Originally Posted by JackSon (Post 34581170)

Sadly I have received no registration e-mail either (from nodpi.org). I used my throwaway hotmail address in case it is of any significance, is plausible hotmail isn't letting it through - it's filtering can be indiscriminate.

Originally Posted by Mick (Post 34581005)

Originally Posted by warescouse (Post 34581214)

<snip>
When Phorm was 121Media
This was a page advertising ContextPlus

http://web.archive.org/web/200601101...ntextplus.com/

Does any of that that sound familiar?

Originally Posted by Kent;

Due to concerns over the practices of some of its distribution partners, ContextPlus has determined that it is no longer able to ensure the highest standards of quality and customer care and therefore is discontinuing further distribution of its software.

Originally Posted by warescouse (Post 34581214)

I thought this may be of interest.

This was the record on the wayback machine which keeps a history of web pages over time.

When Phorm was 121Media
This was a page advertising ContextPlus

http://web.archive.org/web/200601101...ntextplus.com/

Does any of that that sound familiar?

Next an interesting comment on a blog :- see the eweek reference
http://www.realtechnews.com/posts/3067

Next the same page from the wayback machine when ContextPlus shut down
http://web.archive.org/web/200606130...ntextplus.com/

And finally
What f-secure says about it all
http://www.f-secure.com/sw-desc/apropos.shtml

Reading between the lines I see the same smoke and mirrors then that I see today from Phorm. They may have changed their name from 121Media, but they still seem to see everything in a different light to myself and many others.

Originally Posted by Privacy_Matters (Post 34580720)

[snip]
VM Customers

Are any other VM Customers having serious difficulties browsing including the following:

- Pages not loading, requiring a refresh - Yes
- Pages timing out consistently - Yes
- Pages loading in Plain Text only - No
- Tracerts indicating Traffic Management with Specific types of Traffic through the UBR - Havn't done a test

Originally Posted by Privacy_Matters (Post 34580757)

I've noticed that particular media sources are routed through the same IP on the UBR - and these I never have problems with:

five.tv (213.86.253.5): 77-96-1-33.cable.ubr01.azte.blueyonder.co.uk
bbc.co.uk (212.58.224.131): 77-96-1-33.cable.ubr01.azte.blueyonder.co.uk
itv.com (83.98.74.134): 77-96-1-33.cable.ubr01.azte.blueyonder.co.uk
thesun.co.uk (143.252.148.160): 77-96-1-33.cable.ubr01.azte.blueyonder.co.uk
channel4.com (83.98.28.10): 77-96-1-33.cable.ubr01.azte.blueyonder.co.uk
virginmedia.com (212.250.162.12): 77-96-1-33.cable.ubr01.azte.blueyonder.co.uk
pokerstars.com (77.87.179.127): 77-96-1-1.cable.ubr01.azte.blueyonder.co.uk
poketstars.net (217.20.47.4): 77-96-1-2.cable.ubr01.azte.blueyonder.co.uk
bt.com (217.32.165.148): 77-96-1-2.cable.ubr01.azte.blueyonder.co.uk
tiscali.co.uk (212.74.99.30): 77-96-1-34.cable.ubr01.azte.blueyonder.co.uk
diy.com (62.6.240.94): 77-96-1-1.cable.ubr01.azte.blueyonder.co.uk
homebase.co.uk (129.35.70.107): 77-96-1-1.cable.ubr01.azte.blueyonder.co.uk
pcworld.co.uk (195.92.228.186): 77-96-1-34.cable.ubr01.azte.blueyonder.co.uk

The others I have intermitent problems with. It should be noted that this pattern has only started over the past few weeks, and the routing is consistent.

Now, they are not all in the same locus, so why route the same way? I wonder if this is a for prioritising services delivered to PCs? Or possibly caused by the Tech issues that are preventing Edinburgh's upgrade?

What about with you? Anything similar?

Originally Posted by Florence (Post 34581222)

Reading between the lines they stopped just long enough to move in on the BT managment and started illegal trials. The legal advice must have taken all of one day to do max..

Another reading betwen the lines why they are not releasing the proof of the legal advice it is lacking on quality...

On a better note F secure still has them down as malware/spyware so BT customers could have problems if their AV is F Secure cant see them changing phorms status from malware..

Originally Posted by Dephormation (Post 34573093)

OFCOM

Originally Posted by Paul Delaney

Ok go here and download ComboFix.exe to your desktop

physically disconnect the modem cable

shut down avg (right click icon and select exit)

Double-click ComboFix.exe and follow the instructions

Avoid clicking the mouse inside the combofix blue command window

Combofix may reboot windows for you

The program has finished running when the Notepad page appears showing you the log.

Originally Posted by TheBruce1 (Post 34581286)

Combofix should Not be run blind, Combofix only targets certain infections, not all, ComboFix is a dangerous tool and is not for private use. It is strongly suggested by the creator of ComboFix that you do not download and run ComboFix unless you have first posted a HijackThis log, and the procedure is being supervised by an analyst at one of the forums that handles logs.

Originally Posted by Dephormation (Post 34581257)

I've had a letter from OFCOM indicating they are considering my complaint.

http://www.badphorm.co.uk/e107_plugi....php?6833.last

Originally Posted by Woodgar (Post 34581301)

I'm on the old NTL portion of the network (in the Midlands) and have been seeing the above for a good few weeks now.

For reference, I am using Firefox 2 and I have seen the behaviour whilst running Windows Vista, and with Ubuntu and SUSE linux distributions, and so I doubt it is a software related issue.


Also, in the spirit of helping out, I've just posted this to the BBC Webwise feedback section.

Sirs,

Whilst using google to research the new spyware program called Webwise that BT and other major internet providers are planing to implement, the first thing I came across was your very own BBC beginner's guide to the internet.

I am concerned that a prestigious public funded organisation such as yourselves are allowing your good name to be associated with such an intrusive and underhanded venture. In my mind, and in the minds of many others, Webwise will always be connected with the BBC and I hate to think that people will be duped into clicking YES on any pop-up invitation box simply because they have come to trust your advice and will assume that you are sponsoring the new scheme.

Please, for the safety of many innocent webusers, the very webusers your site is aimed at informing, I am urging you to look further into this pernicious hijacking of your reputation.

Originally Posted by Paul Delaney

Yes it can be - I've never personally had a problem with it but...

Do you think I would recommend running a program that would damage rather than cure?

Originally Posted by Paul Delaney

You'll have to trust me on this one because there are several tools I use daily to remove these parasites, part of my work involves providing a non - destructive virus removal service mostly to small businesses.

Originally Posted by Paul Delaney

All of them can be dangerous if handled in the wrong way.

Originally Posted by Paul Delaney

It would be irresponsible of me to post a cure for this problem without first knowing what I was talking about and I see identical problems every week.

Originally Posted by TheBruce1 (Post 34581334)

I gonna have to disagree here, there are certain infections that will render a users system useless if you use CF first.
Its not just about running tools, its researching every entry and from that putting a fix together, for example, which order would you put tools in and why.

Combofix is not just a tool, it is also a diagnostic tool and with so many changes to CF as malware develops, removing the wrong thing will also cause the users system to become useless.



What do you do if CF does not remove files on the first run?



I agree.



I too help users and am trained to use CF, if anything goes wrong i can speak to the tools creator along with many others, i would never run CF without seeing either a hijackthis log or DSS log first and neither would any analyst i know.

So, you run CF for the first time and you have look at the text file it produces, from the reg dump this shows up, what would you do.

Originally Posted by TheBruce1 (Post 34581334)

I gonna have to disagree here, there are certain infections that will render a users system useless if you use CF first.
Its not just about running tools, its researching every entry and from that putting a fix together, for example, which order would you put tools in and why.

Combofix is not just a tool, it is also a diagnostic tool and with so many changes to CF as malware develops, removing the wrong thing will also cause the users system to become useless.

What do you do if CF does not remove files on the first run?

I too help users and am trained to use CF, if anything goes wrong i can speak to the tools creator along with many others, i would never run CF without seeing either a hijackthis log or DSS log first and neither would any analyst i know.

Originally Posted by ilago (Post 34581360)

I was about to post the same thing. Combofix is not a tool for people untrained in its use. It does not remove all malware. There are some specific infections that it does remove, but there are many it does not. The logs need careful reading and assessment.

Back to fighting with the people that used to provide rootkits and forced advertising on unsuspecting users in the recent past :(

Originally Posted by Paul Delaney

Please yourself - I wasn't expecting to debate it - you work out why half of nodpi.org cannot be viewed then.

Originally Posted by ilago

Back to fighting with the people that used to provide rootkits and forced advertising on unsuspecting users in the recent past

Originally Posted by OldBear (Post 34581221)

Yes, and what they actually tell you they will do with your info, as laid out in the "Privacy Policy" (yeah! privacy, my arse!), is quite frightening.
cut...
OB

Originally Posted by JackSon (Post 34581170)

Sadly I have received no registration e-mail either (from nodpi.org). I used my throwaway hotmail address in case it is of any significance, is plausible hotmail isn't letting it through - it's filtering can be indiscriminate.

On a positive note, all site navigation appears to be working :)

Originally Posted by SelfProtection (Post 34581413)

Same here no response from nodpi.org using a hotmail e-mail address.

Originally Posted by SelfProtection (Post 34581413)

Same here no response from nodpi.org using a hotmail e-mail address.

Originally Posted by warescouse (Post 34581414)

Is it possible that persons unknown have added nodpi.org to an anti-spam database?

Originally Posted by warescouse (Post 34581414)

Is it possible that persons unknown have added nodpi.org to an anti-spam database?

Originally Posted by Privacy_Matters (Post 34581419)

I've checked a few lists after the last issues were reported, and nodpi.org appeared not to be on any list.

It could be a case that certain webmail clients, as a results of protecting their own lists of users, indicate nopdi.org as spam or junk mail. nodpi.org could be possibly read by the protective code in webmail clients as a possible bot, due to the apparent randomness of the address.

Just a thought...

Originally Posted by Privacy_Matters (Post 34581419)

I've checked a few lists after the last issues were reported, and nodpi.org appeared not to be on any list.

It could be a case that certain webmail clients, as a results of protecting their own lists of users, indicate nopdi.org as spam or junk mail. nodpi.org could be possibly read by the protective code in webmail clients as a possible bot, due to the apparent randomness of the address.

Just a thought...

Originally Posted by SelfProtection (Post 34581432)

Attempts via Forgot Password, get sent to the hotmail bulk folder, but no valid password obtained through nodpi.org link.

Originally Posted by Privacy_Matters (Post 34581437)

My reg was delayed by a few hours - but it did work, could be a lag?

Also, a problem with the script to produce the PW, possible not linking correctly with the user?

A user on badphorm, has indicated that the case may be a bad script.

Originally Posted by SelfProtection (Post 34581475)

24 hours is a long lag though, & still no original reply.

Originally Posted by SelfProtection (Post 34581413)

Same here no response from nodpi.org using a hotmail e-mail address.

Originally Posted by SelfProtection (Post 34581413)

Same here no response from nodpi.org using a hotmail e-mail address.

Originally Posted by AlexanderHanff (Post 34581495)

I can honestly say this is not a problem with nodpi.org

If there was a problem with the site then everyone would experience the same difficulties and that simply isn't the case. Maybe Hotmail are deleting incoming messages from NoDPI because some unscrupulous person has added it to an RBL somewhere, but the email itself is definitely working so the issue would seem to be at the user end as opposed to the site end.

Alexander Hanff

Originally Posted by warescouse (Post 34581504)

Unless you have done severe modifications on your site with the email process, Wordpress mail is well tried and has been well tested by thousands of users on other sites so I would tend to agree.

Originally Posted by davethejag (Post 34581498)

Hi, Sorry to have distracted the thread a bit with my "nodpi.org" problem of 3 of the tabs not working. I mentioned before that I managed to get to the forum/reg page with my son's help adding "Forum" to the web address and I was able to register with no problem, I received my e-mail/pass word immediately. I am with VM.

Paul, I am sorry to have got you into a seperate debate! I am very thankful for your help. I will attempt to PM you, something else that I have never done before but I have to learn!

keep up the good work you lot!

Dave.

Originally Posted by AlexanderHanff (Post 34581556)

Placards


Does anyone know if there are any Wifi services available at the Barbican Centre. I am thinking of taking a laptop for people to be able to sign the petition on the PM site at the protest, but we will need either a Wifi service or a 3G dongle so we can access the PM web site.

Alexander Hanff

Originally Posted by AlexanderHanff (Post 34581556)

Placards

Does anyone know if there are any Wifi services available at the Barbican Centre. I am thinking of taking a laptop for people to be able to sign the petition on the PM site at the protest, but we will need either a Wifi service or a 3G dongle so we can access the PM web site.

Alexander Hanff

Originally Posted by AlexanderHanff (Post 34581556)

Does anyone know if there are any Wifi services available at the Barbican Centre. I am thinking of taking a laptop for people to be able to sign the petition on the PM site at the protest, but we will need either a Wifi service or a 3G dongle so we can access the PM web site.

Alexander Hanff

Originally Posted by OldBear (Post 34581598)

Alex,

Just remember people have to confirm their email address before their name is added to the list. You will need to remind all people who you do get to sign to do that when they get home.

OB

Originally Posted by AlexanderHanff (Post 34581600)

Yeah I already thought of that. Where possible people will be invited to sign it with their webmail accounts (if they have one) such as gmail, hotmail etc. then they can confirm there at the protest, but it will be explained to everyone that if they don't confirm at the protest they will need to do so when they get home.

Originally Posted by pseudonym (Post 34581619)

It could take a while for the email from the no.10 site to arrive, and people may not be too keen to enter their email account's password on someone elses laptop, I think it would be better to explain that they'll get an email from no 10 that they need to click on the link when they get home.

Originally Posted by icsys (Post 34581638)

What do you reckon to this 'Independent on Sunday' news story...

Phorm to use BT customers to test precision advertising system on net

By Sarah Arnott
Friday, 20 June 2008

The first live trial of the controversial Phorm internet advertising system is expected to start imminently with the participation of up to 10,000 BT broadband customers.

http://www.independent.co.uk/news/bu...et-851133.html

Posted over on digital spy, I have attempted to correct the obvious error.
this has raised the profile of phorm over there again. could anyone with an account there help keep the thread alive?

Originally Posted by Frank Rizzo (Post 34579970)

Sarah Arnott in the Independent ...
...
Where is the PIA?

Originally Posted by Hank (Post 34579359)

Alexander - on this page: https://nodpi.org/2008/06/18/material-change/

I'm not seeing any content after the banner at the top (I have tried reloading/refreshing - no joy)

Hank

Originally Posted by Hank (Post 34581651)

I have mailed the paper to ask for a correction about the fact that BT is said to be about to start its first trial of the system. First? Third surely!

Yeah... and where is the PIA? Probably fallen into the black hole where that video of the public meeting went! Come on Kent, let it out!

Hank

Originally Posted by icsys (Post 34581638)

<snip>
Posted over on digital spy, I have attempted to correct the obvious error.
this has raised the profile of phorm over there again. could anyone with an account there help keep the thread alive?

Originally Posted by OldBear (Post 34581684)

Done! http://www.digitalspy.co.uk/forums/s...1#post24828850

Great post by you BTW. :)

OB

Originally Posted by AlexanderHanff (Post 34581689)

Still need some information about the protest on that thread.

Alexander Hanff

Originally Posted by OldBear (Post 34581693)

You old slave-driver, you. :D

Done!

Originally Posted by AlexanderHanff (Post 34581597)

A new letter
Could people please start writing letters to: David Davis

Originally Posted by AlexanderHanff (Post 34581694)

...any chance I had of privacy are long gone.
Alexander Hanff

Originally Posted by AlexanderHanff (Post 34581703)

Yeah it is kind of ironic that I have to sacrifice my privacy in order to try and protect everyone else's.

Alexander Hanff

Originally Posted by Florence (Post 34581704)

With the uni degree you have taken and the selected path you are taking in next steps at Uni. Wouls almost say this is your futuure to walk in high places fighting the cause for the small mans privacy, human rights.. You must have had a insight of what was coming and started tpo prepare yourself for the fight :D

You are appreciated Alex for all you have given up for our privacy.

:clap: :clap:

Originally Posted by dephormation

Still, at least you can sleep at night, knowing people appreciate what you're doing for them.

Originally Posted by roadrunner69 (Post 34581759)

Kent Ertugrul : various posts, blogs, interviews, press releases etc

"Research shows that our technology will help overcome two of the biggest issues consumers have with the internet – irrelevant ads and security. Our system will deliver ads that are more relevant....blah blah"

Originally Posted by Hank (Post 34581672)

I see the Home Office are late replying to requests under FOI...
http://www.whatdotheyknow.com/reques...mation_about_r

To be fair it looks like the original request did not state that it was made referencing the freedom of information act, so the HO may be able to get away with it!

Hank

Originally Posted by Kursk (Post 34581792)

Hmm, my understanding of the FOI Act 2000 is that it is a statutory requirement to respond to requests for information within 20 days. It does not matter if the initial enquiry mentioned FOI; it is encumbent upon the recipient to consider if an FOI process is appropriate and in this case it clearly was/is. For absolute clarity, statutory means it is the law that they comply. Oh dear :D.

The Act states:

Time for compliance with request

(1) Subject to subsections (2) and (3), a public authority must comply with section 1(1) promptly and in any event not later than the twentieth working day following the date of receipt.

The subsections qualify the compliance rules but the information requested should be readily available so delay seems unnecessary.

Originally Posted by Kursk (Post 34581792)

Hmm, my understanding of the FOI Act 2000 is that it is a statutory requirement to respond to requests for information within 20 days. It does not matter if the initial enquiry mentioned FOI; it is encumbent upon the recipient to consider if an FOI process is appropriate and in this case it clearly was/is. For absolute clarity, statutory means it is the law that they comply. Oh dear :D.

The Act states:

Time for compliance with request

(1) Subject to subsections (2) and (3), a public authority must comply with section 1(1) promptly and in any event not later than the twentieth working day following the date of receipt.

The subsections qualify the compliance rules but the information requested should be readily available so delay seems unnecessary.

Originally Posted by warescouse (Post 34581806)

Trouble is, this Government seems to be no different to Robert Mugabe in Zimbabwe. They are either incompetent or they must assume they are above the law.

Has any British Government ever cited incompetence as a defence I wonder?

Originally Posted by Kursk (Post 34581819)

Good points. Ah well, probably best that we keep our eye on the ball (phOrm) :D

EDIT: The visual impact of the suggested placards could be improved imho. They are too 'wordy' and may turn off the average punter. The theme needs to be more instantly recognisable and a prompt for curiosity. How about a black placard, one word in bold white: ISPy ? It has a street cred appeal and we'll be selling T shirts like this soon :p:

Originally Posted by AlexanderHanff (Post 34581825)

The linked imaged is not placards. As I said, they are the current ads being run on AdWords, I posted the image to give people -ideas- for placards, not to copy for placards, I thought that was clear in my original post.

Alexander Hanff

Originally Posted by Ravenheart (Post 34581901)

There has been a feature on the radio overnight and also currently on the BBC News site urging councils not to be over zealous with snooping and using the RIPA.

And it's handy they also have the Have Your Say section running about the issue, I'm sure we could sneak some comments in there too :)

Originally Posted by AlexanderHanff (Post 34581495)

I can honestly say this is not a problem with nodpi.org

If there was a problem with the site then everyone would experience the same difficulties and that simply isn't the case. Maybe Hotmail are deleting incoming messages from NoDPI because some unscrupulous person has added it to an RBL somewhere, but the email itself is definitely working so the issue would seem to be at the user end as opposed to the site end.

Alexander Hanff

Originally Posted by Florence (Post 34581808)

Perhaps Gordon Brown thinks he is above the Law since he isn't the official elected prime minister.

Originally Posted by Deko (Post 34581977)

Any one got a invite or the 24 hour warning yet ?

Originally Posted by Dephormation (Post 34582018)

I saw an announcement of an imminent rollout in Feb, is that what you mean? I was so impressed I cancelled all my services with VM, and my family and friends were advised to do likewise. ;)

Beware of FUD and unattributed so called 'BT' announcements. I suspect someone very badly needs to dump some shares at the moment. They failed spectacularly to talk up the share price last week, and I expect they will fail again. :rolleyes:

Originally Posted by Wild Oscar (Post 34582060)

I seem to remember someone in the past recommending using the 'User Agent Switcher' add-on in Firefox to fool 'Phorm' into thinking you are using Safari as your browser, which in effect, stops it in it's tracks!!

Is this a good idea as another line of defence .. or not .. can anyone clarify? .. TIA