[funsec] mystery redirect

[Larry Seltzer]

I'm pretty sure I was on https://onlineeast2.bankofamerica.com, but of
course that's just the top-level URL. I suppose some other server with a
component on the page could do the redirect.

 

Larry Seltzer
Contributing Editor, PC Magazine

larry_seltzer at ziffdavis.com 

http://blogs.pcmag.com/securitywatch/

 

From: steve pirk [egrep] [mailto:steve at pirk.com] 
Sent: Friday, January 22, 2010 3:12 PM
To: Larry Seltzer
Cc: Benjamin Brown; funsec at linuxbox.org
Subject: Re: [funsec] mystery redirect

 

On Fri, Jan 22, 2010 at 10:35, Larry Seltzer <larry at larryseltzer.com>
wrote:

Nope. I'm on my own private wifi connected to Verzon FiOS

That URL is a Juniper Netowrks VPN web client login page. Google ncui. I
use a similar setup to vpn into the office. Looks like someone turned on
gating on a server you were either connected to or got shifted to. You
did not have the credentials to pass the gate anymore [or ever probably]
and were redirected to to the login page.

 

I thought you might have taken over a session floating out in the ether,
but that was too way out there.

My gut feel is that you landed on a server that was gated, or had gating
enabled mid-session with you. 

	 

	Larry Seltzer
	Contributing Editor, PC Magazine

	larry_seltzer at ziffdavis.com 

	http://blogs.pcmag.com/securitywatch/

	 

-- steve
steve pirk
refiamerica.org
"father... the sleeper has awakened..." paul atreides - dune
kexp.org member august '09

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://linuxbox.org/pipermail/funsec/attachments/20100122/6bb2890f/attachment.htm