Hi all. I just joined. I'm a BT customer. My first post on this forum is a technical question:
Over on the BT forums they've issued a new FAQ.
http://www.beta.bt.com/bta/forums/ann.jspa?annID=64
No 57 reads:
"Does Webwise runs its own Javascript software on the users' machines? (relates to a Phorm patent where it claims it can do this)
No, Webwise operates at the network level and will not download, install or run any software on users' machine."
However, at
http://www.experts-exchange.com/Prog..._22012205.html
we see
"On a website I look after (
http://www.bluesnights.co.uk/) I've noticed a strange piece of javascript that has embedded itself on the site after the closing html tags.
Eg: </html>
<script type="text/javascript">var PSpc="I.287303.1",PSsize="none";</script><script type="text/javascript" src="http://ntp.sysip.net/tag/2.js"></script>
How it got there, I've no idea. Can only think I've been "infected" via my Firefox browser when visiting Google and the like (who all seem to have the same script on their web pages when I viewed page "Source"!) and then inadvertently uploaded via my FTP when making site changes.
This doesn't show up on my computer as a virus/malware, etc.
Google reference to "sysip" is very sparse (seems to be a proxy) and I can only assume that the script is some sort of "spyware" or harvester?
Does anybody know what this is? And what does it do?
And how do I get rid of it - permanently!
Is their a counter script I can add to my web pages to stop these scripts "attaching" themselves incognito?
Can anybody help? Many thanks,
Richard"
If it was not on the user's machine, then where was it?
What do you think BT means by "at the network level"?
Another horror story with more examples of the Phorm/Webwise software injection HTML or javascript is at:
http://www.spikelab.org/blog/btProxyHorror.html
gnilddif