Virgin Media Phorm Webwise Adverts [Updated: See Post No. 1, 77, 102 & 797]

[Dephormation]

On a related note, I'd recommend updating to Firefox 3.

Firefox 2's anti phishing filter seems vulnerable to a man in the middle attack, potentially allowing a criminal with access to the network to remove phishing sites from the Firefox 2 list of evil sites.

Firefox 3 implements the Safe Browsing protocol v2 (which uses secure encrypted message authentication to check list validity).

[Anonymouse]

Originally Posted by SelfProtection

A security issue has been identified that could allow an unauthenticated remote attacker to compromise your Microsoft Windows-based system and gain control over it.

Oh, please, they all say that. If you have a firewall up and running and you're not using an admin account, then a remote attacker can't control your system. Microsoft still assumes users are thick and clueless; such attitudes annoy me. Some of the security updates have been known to break Windows installations. One user on Windows Annoyances hasn't updated his XP setup in five years, and his PC has never been remotely controlled, so there you go!

I'd like to see anyone try it with my laptop; according to ShieldsUP! it's effectively invisible on the Internet and scored a perfect rating - probably because I use a router. So come on, would-be crackers: bring it!

[Cobbydaler]

Originally Posted by Dephormation

Meglena Kuneva's presentation in London;

http://euroalert.net/en/news.aspx?idn=7439

<snip>

Ensuring that important issues of personal privacy - data collection and profiling practices - do not damage trust in the digital space:
"I want to ensure that in the heated debates surrounding privacy, the voice of the consumers is clearly heard. I want to step up our work to develop core consumer principles on privacy that feed into policy across sectors and technologies delivering a more consistent approach the conditions surrounding tracking and profiling. I will invite my fellow Commissioners to work with me on process leading to a consistent framework for issues of data collection and profiling that would be applicable across platforms."

Well, we'll see if words translate into action & how long it takes...

[bluecar1]

Originally Posted by HamsterWheel

Stuart - Ernst & Young have done a full privacy audit on what Phorm does. And they will no doubt regularly update it. And BT, Virgin and CPW will also have done their own work on the privacy aspects and data retention.

If you are going to say that you still don't trust them, then one wonders if you could ever trust anyone or any commercial organisation ?

And if there are any shenanigans, then BT etc will be the first to scream as it is their reputations that will be on the line.

Harping back to Phorm's background is getting a bit turgid now. The company is rather different now and has a hugely heavyweight board that would not be involved in anything inherently dodgy.

---------- Post added at 14:24 ---------- Previous post was at 14:23 ----------

Wildie - very happy that you don't see the ads, but without the revenue generated by them, the board would obviously not exist would it ?

hamster, if you bother to read the E&Y report you will see it was conducted according to US law not UK, also it was only a process audit, not an audit of the actual system,

so it effect it was an audit of what phorm said they will do not what they actually do

which means most people in here will probably use it to line a litter tray

peter white (see i am not affraid to own up who i am)

---------- Post added at 20:54 ---------- Previous post was at 20:51 ----------

Originally Posted by HamsterWheel

I see there is an ad for Virgin Broadband at the top of this page.
How ironic.

Perhaps if the site owners signed up for Phorm they could have more targetted ads that would be better for the blood pressure of the regulars.

and WHY is there not a virgin logo on the webwise page if virgin are so committed to phorm as phorm say, but virgin saying only interested and NO CONTRACT in place

[SelfProtection]

Originally Posted by Anonymouse

Oh, please, they all say that. If you have a firewall up and running and you're not using an admin account, then a remote attacker can't control your system. Microsoft still assumes users are thick and clueless; such attitudes annoy me. Some of the security updates have been known to break Windows installations. One user on Windows Annoyances hasn't updated his XP setup in five years, and his PC has never been remotely controlled, so there you go!

I'd like to see anyone try it with my laptop; according to ShieldsUP! it's effectively invisible on the Internet and scored a perfect rating - probably because I use a router. So come on, would-be crackers: bring it!

Every time you connect to a Web Site you Open that Shield, I too also always get a True Stealth reading, but once you let code Javascript or anything run on your Pc then you are relying on the MS kernel to protect your system.

It is up to you whether you Update your System, but please do not encourage others not to update critical updates.

[Dephormation]

I'd just like to welcome www.phorm.com and www.webwise.com back to the UK.

Did you enjoy your little getaway trip to NY? Catch the sun while you were over at PSInet?

I see you forgot to bring your DNS server back. Perhaps they'll send them on with the lost luggage? 38.105.138.53, 38.105.138.54.

Its such a bummer when that happens. You get home and find you've left your DNS servers at the airport.

UPDATE; just got this live web cam image from JFK airport... I can see your DNS servers going round and round on the luggage reclaim;

[TheBruce1]

Just finished listening to Steve Gibsons podcast, i love it when he said, phorm are not nice people or words to that effect, looking forward to his phormscumware podcast in two weeks time.

[gnilddif]

Originally Posted by oldun

Hello, I found this site a few weeks ago, I had not previusly been interested in discussion forums, but I wanted to join up to thank you all for what you are doing, and to let you now there are still more lurkers out there who support you.
My first post on my first forum.

Great to hear from lurkers Oldun Did you find the link to Frank Rizzo's unfolding secret trial drama, culminating in the now infamous hugely embarrassing BT denial?
Here it is - I think it's a great read
http://bbs.adslguide.org.uk/showthre...anded&sb=5&o=0
or
http://tinyurl.com/25ggog

There have been recent additions, so it's best to follow the posts chronologically.
gnilddif

Originally Posted by Anonymouse

Oh, please, they all say that. If you have a firewall up and running and you're not using an admin account, then a remote attacker can't control your system. Microsoft still assumes users are thick and clueless; such attitudes annoy me. Some of the security updates have been known to break Windows installations. One user on Windows Annoyances hasn't updated his XP setup in five years, and his PC has never been remotely controlled, so there you go!

I'd like to see anyone try it with my laptop; according to ShieldsUP! it's effectively invisible on the Internet and scored a perfect rating - probably because I use a router. So come on, would-be crackers: bring it!

I rarely update my XP Pro SP2

I'm not saying don't update Windows but here's a for instance why it need not be done the day a patch is released.

My work requires me to run both Internet Explorer 6 and 7 (personally I wouldn't surf with either of these virus magnets, prefering Firefox or Opera)

Both Microsoft browsers run side by side on my system

The only reason they do is because I didn't install a security update for Windows Media Player (I only use Media Player Classic) in November 2005 which also removed XP's ie6/ie7 compatibility mode (probably to insure that the new browser was taken up by Joe public warts and all) and I've never installed any security updates for ie7 either.

Before downloading any update it's a good idea to search Google for the KB number followed by the word "problem" (some updates do not like certain chipsets) and always create your own restore point before installing one.

I use a heavily configured ZoneAlarm Pro version 4.5.594.000 - the last good one before all the bells and whistles.

Just my 2p

[davews]

I agree. Steve's podcast was excellent, he didn't mince any words. From somebody who is well respected in (most) security circles this should make some of the 'Pros' sit back. Looking forward to his Phorm detailed podcast in two weeks, he has clearly worked out what we all know - their implementation is HORRIBLE...

Dave
(still lurking...)

[mark777]

Originally Posted by Dephormation

I'd just like to welcome www.phorm.com and www.webwise.com back to the UK.

Did you enjoy your little getaway trip to NY? Catch the sun while you were over at PSInet?

I see you forgot to bring your DNS server back. Perhaps they'll send them on with the lost luggage? 38.105.138.53, 38.105.138.54.

Its such a bummer when that happens. You get home and find you've left your DNS servers at the hotel.
{snip}
[/IMG]

Poor tradecraft. In the days of Uncle Joe it would have been off to the gulag, but now I suspect it's just another missed milestone on the project plan.

I'm not sure about all the implications, i'm not a network bod, but have you just exposed and forced the reversal of a stealthy attempt to export data out of the UK Pete? Via a proxy.

I hope you are keeping a few things in reserve to hit them with when/if any trials start. Having to reconfigure a live system might spoil their day.

[Privacy_Matters]

Hey Guys

Another Legal issue unearthed (Thanks VM News Groups Members):

http://www.opsi.gov.uk/si/si2008/uks..._en_2#pt2-l1g3

5.�(1) A commercial practice is a misleading action if it satisfies the conditions in either paragraph (2) or paragraph (3).

(2) A commercial practice satisfies the conditions of this paragraph�

(a) if it contains false information and is therefore untruthful in relation to any of the matters in paragraph (4) or if it or its overall presentation in any way deceives or is likely to deceive the average consumer in relation to any of the matters in that paragraph, even if the information is factually correct; and

(b) it causes or is likely to cause the average consumer to take a transactional decision he would not have taken otherwise.

Extract from the The Consumer Protection from Unfair Trading Regulations 2008, as available at www.opsi.gov.org

I haven't looked any further - so knock yerselves out lads and ladies

[gnilddif]

Well, well well, whaddya know? I was just browsing through those posts on the bbl thread I just mentioned, and spotted that Frank posted on July 2 2007: 'I have logged an abuse at bt and directsupport at bt which is an address on the ripe form.'

Funny that, because I have a letter in front of me from the Chief Counsel (Commercial Law) at BT Retail dated 13 May 2008, saying "we were not able to identify individual customers who participated" (in the trials) "but in the one or two instances where it has subsequently become clear from later correspondence that customers may have experienced these problems, we have sought to contact them".

abuse at bt, direct support at bt, a leaked report that makes it plain that BT was monitoring the helpdesks and forums during the trials ....now, who do you believe?

gnilddif

[mark777]

Do we have a definitive list of BT lies and misleading comments? Ditto Phorm.

It would be useful to send to MP's, Europe etc.

We would need dated, verifiable evidence of the porky, then dated, verifiable evidence of the truth.

There would be 'plain English' porkies and 'technical' porkies.

EDIT : I shall try to put one together over the next few days and would appreciate any input.

[SelfProtection]

[QUOTE=Dephormation;34580433]I'd just like to welcome www.phorm.com and www.webwise.com back to the UK.

Did you enjoy your little getaway trip to NY? Catch the sun while you were over at PSInet?

I see you forgot to bring your DNS server back. Perhaps they'll send them on with the lost luggage? 38.105.138.53, 38.105.138.54.

Its such a bummer when that happens. You get home and find you've left your DNS servers at the airport.

I was doing some tracing on those IP addresses & this turned up
38.104.69.66 phorm.demarc.cogentco.com

Not sure if it's of any significance though.