Question For The Net Security Savvy

[Some Random]

okay...there is an artist who i really dig, who's site, when google searched, yeilds a warning about it being possibly harmful to your computer.

 

one of the returns is from mcafee:

 

mcafee's analysis

 

it warns that the site aggressively links to a dangerous site, but i've visited the site a dozen times with no problems (granted, i'm on a linux box). i don't understand this warning. can anyone with some web security savvy explain. does it supposedly link you to this site without you knowing? what's the dillio?

[Sparq]

I haven't seen a redirect anywhere, inclusing in the source code of the entry splash and store pages. The 'potentially dangerous' site seems to be some sort of adventure tourism thing, which also had no adverse effect on my system. I wouldn't worry about it too much...could just be a false positive.

Edited March 28, 2007 by Sparq

[Some Random]

that's what i figured. still not comfortable telling people to check it out with that stupid warning up, though.

[RicardoObviouso]

just make sure you attach a waiver to your invitation for them to view the site.

[Sparq]

Well if it helps, I'm running XP and Internet Explorer (potentially the least secure modern combination) and I've had no problem. No intrusion notification from Nod32 either.

[Some Random]

thanks for looking into it, sparq.

[Guest Prosis]

I haven't seen a redirect anywhere, inclusing in the source code of the entry splash and store pages. The 'potentially dangerous' site seems to be some sort of adventure tourism thing, which also had no adverse effect on my system. I wouldn't worry about it too much...could just be a false positive.

Well the redirect could be in the .htaccess which is something no one has access to directly so no one could possibly know about the redirection even by checking the source code. Same if the page is in JSP or PHP which you can't check the source code as it is parsed in normal HTML or compiled. That's probably how it redirects. As for the warning, the way I understand it is that McAfee just can't check it (the french message is significally different than the english one which is a really bad thing on McAfee's part). It doesn't say it's dangerous just that the system couldn't check it.

 

Since Colin checked it, I think you're safe! ;)

 

I only wanted to point out that there are different ways of redirecting and that you should be aware of that because it can lead to bad traps and you'll never be aware of it. Checking the source code is, therefore, a big mistake because ultimately it means nothing. :angry:

Edited March 29, 2007 by Prosis

[Sparq]

Indeed. I wouldn't say the source code means nothing, but I do realise that it's not the only place one might find a threat. I am no expert, to be sure, but I have managed to avoid problems for years. At any rate, I am glad you mentioned it. Good lookin' out (thumbs up)