Need Help!!!! I think I was Almost DNS Scammed while shoping at newegg?

Page 4 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.
Mar 11, 2004
23,444
5,850
146
Originally posted by: Cdubneeddeal
Originally posted by: waggy
poor guy. he is just trying to keep people from getting ripped off and you guys give him shit.

No shit - Like a pack of wolves.

That's all fine and good, but he's spreading false information. Even when confronted with overwhelming evidence of being wrong, he's still trying to argue that he's not. Then he results to calling the people who provided the facts about him being wrong dumbasses, and says that he trusts low level CS support more than "some links found on Google".
 

Cdubneeddeal

Diamond Member
Oct 22, 2003
7,473
3
81
Originally posted by: darkswordsman17
Originally posted by: Cdubneeddeal
Originally posted by: waggy
poor guy. he is just trying to keep people from getting ripped off and you guys give him shit.

No shit - Like a pack of wolves.

That's all fine and good, but he's spreading false information. Even when confronted with overwhelming evidence of being wrong, he's still trying to argue that he's not. Then he results to calling the people who provided the facts about him being wrong dumbasses, and says that he trusts low level CS support more than "some links found on Google".

Not exactly. He's rightfully frightened about the DNS exploit and after speaking to Newegg, it's in a way confirmed his suspicions - incorrect or correct - doesn't matter. Give the guy a fucking break. If he's correct so be it, if he's incorrect so be it as well. Just because he believes one thing doesn't give any of you the right to ridicule and call him names.

OP, I honestly don't think you have anything to worry about. Akamai is a trustworthy source.
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
Originally posted by: abaez
Possible nod for ownage of the year?

Not at all. I'd be concerned if the same thing happened to me. Anybody that understands SSL would be. And the take away from this thread should be - configure your browser to alert you if you get a bad cert and take it seriously, it's that way by default but somebody could click "don't notify me" and then they'd have to look at the lock on every page to see if it had a red X or not. Or possibly they accept the bad cert.

My only real possibilities on what happened:
1) really was nefarious purposes - highly unlikely, but probable because of the DNS mayhem going on. Akamai URLs would be a VERY fat juicy target for this.
2) somebody at akamai swapped the certs around and for a brief time the linkage on the load balancers on the certs was off until they finished - really likely

No matter what happened, the cert was bad and you don't want something like that to show up when you're dealing with money and information you don't want to get into the wrong hands.
 

mrSHEiK124

Lifer
Mar 6, 2004
11,488
2
0
Originally posted by: JujuFish
Originally posted by: Shaker8
Whether Newegg uses akimai or not perhaps the rep was mistaken, but i personally will take what she told me over a bunch of links found in Google.
Did you encounter a fake website? I can't say. But what I can say is that you're quite ignorant if you think NewEgg doesn't use Akamai, even after the proof was shown to you. The fact that you say they're just "a bunch of links found in Google" lead me to believe so. The link I gave you is directly from Akamai's website.

I'm not going to bother anymore.

Originally posted by: Shaker8
For your education Dumbass[L=For your education dumbass
[/quote]

Criteria for calling me a dumbass: Learn to link.
 

mrSHEiK124

Lifer
Mar 6, 2004
11,488
2
0
Originally posted by: newnameman
Originally posted by: 0roo0roo

http://www.radioopensource.org/
whys this giving me firefox warnings now? its an npr show
Antivir gives a virus warning on this page

Safe Browsing
Diagnostic page for www.radioopensource.org/

What is the current listing status for www.radioopensource.org/?

Site is listed as suspicious - visiting this web site may harm your computer.

What happened when Google visited this site?

Of the 369 pages we tested on the site over the past 90 days, 92 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 07/28/2008, and the last time suspicious content was found on this site was on 07/28/2008.

Malicious software includes 249 trojan(s), 24 adware(s). Successful infection resulted in an average of 12 new processes on the target machine.

Malicious software is hosted on 17 domain(s), including avwav.com, dciman32.com, viacodecright2.com.

Has this site acted as an intermediary resulting in further distribution of malware?

Over the past 90 days, www.radioopensource.org/ did not appear to function as an intermediary for the infection of any sites.

Has this site hosted malware?

No, this site has not hosted malicious software over the past 90 days.

How did this happen?

In some cases, third parties can add malicious code to legitimate sites, which would cause us to show the warning message.

Next steps:

* Return to the previous page.
* If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.
 

Jessica69

Senior member
Mar 11, 2008
501
0
0
Originally posted by: bigdog1218
Originally posted by: mrSHEiK124
Educate yourself, moran:

http://en.wikipedia.org/wiki/Akamai_Technologies


Only a real moron would quote Wikipedia as fact.



Right, and I guess Business Week, MIT, The Motley Fool, The Washington Post, and Yahoo! Finance are all morons, too, right?

Business Week article on Akamai

MIT article by F. Thomson Leighton Co-Founder and Chief Scientist, Akamai; Professor of Applied Mathematics, MIT

The Motley Fool Akamai article

Article on Akamai by The Washington Post

Akamai Technologies, Inc. Company Profile on Yahoo! Finance section

From Yahoo! Finance: Akamai Technologies offers an accelerated course on Internet delivery. The company's technology enables companies and government agencies to deliver Web content and applications, such as ads, business transaction tools, streaming video, and Web sites. Through its network of some 30,000 servers in about 70 countries, Akamai analyzes and manages Web traffic, transmitting content from the server geographically closest to the end user. The company's customers include Airbus, Apple, Best Buy, FedEx, Microsoft, MTV Networks, Sony Ericsson Mobile Communications, the US Department of Defense, the US Department of Labor, Victoria's Secret, and XM Satellite Radio.
(I notice that Newegg isn't listed in the customer list, but can expect that given Newegg's smaller presence than most of the list.....and not as well known as any of them by the general public. And I guess since the DOL and DOD and Microsoft, Airbus, FedEx, and Sony Ericsson all trust Akamai, the word of a CSR at Newegg overrides all that....yeppers!)


Yep...bunch of morons, all.

But you won't read any of those links, will you, but instead will continue to blast anyone who tries to present the facts instead of hyperbole and FUD.

By the way, little pup1218, before you call anyone a moron for a Wiki link, did you even bother to go to it, read anything there, follow the external links provided? Or did you simply, in such a childish 12 year old response, come up with the moron quip without a second's pause to think before you spoke?
 

Shaker8

Member
Jan 6, 2006
57
0
0
Originally posted by: mrSHEiK124

Originally posted by: Shaker8
For your education Dumbass=For your education dumbass

Criteria for calling me a dumbass: Learn to link.

First off I will apologize for that, you were right Newegg does use Akimai but you calling me a moron just added fuel to the fire as far as me getting my point across that I had a bad certificate and encountering a false newegg site.

I was angry because you took a thread about a me being DNS spoofed or coming under a bad link and made it about whether newegg uses akamai. I stated in my first post on the second thread that this is what I was told by a newegg rep and that I was sorry if I was wrong, then I also stated several times that you could believe what you wanted to believe and that I was going to go with what I was told that Newegg doesn't use Akimai.

Now for the record according to Newegg they use Akimai as an image cache server and here the link for that Link(can't get a search link to work just type akimai in the search field and it should come up)

and according to the rep i just talked to(yeah I called again, want to make sure my browser is safe before I do make a purchase) when you press view certificate while under SSL(i.e. https) it should definitely have www.newegg.com somewhere in the cert and to his knowledge should say verisign when you under SSL i.e. https. He didn't think you should ever see an Akimai Cert while under Https except as links to images.

Basically according to him Neweggs certificate when under SSL shouldn't look like the one I posted second on this thread.

Now as far as my original claim that newegg doesn't use Akamai, well in newegg reps defense I spelled it just like I had misspelled it the first time last night to when I originally came across this. So she probably misspelled it to the IT tech who was very concerned about when she contacted him (I could hear him talking in the back ground to her)

But that is not why I made this thread I made it because someone did mess with my newegg account (telephone number was wrong address was right but spelled wrong like someone had retyped it back in, my cart was gone and I had no saved wish list or auto notify form the night before)

I also made this thread because when I first asked for help I was told that Akimai is fine and newegg uses them.

I believed them and pressed accept on the certificate for the bad site, obliviously I should have never done that but I trusted the people on this forums and those Google links they used last night(hence why I wasn't so keen to trust them this afternoon).

Due as you wish if this ever happens to you in Firefox but if I ever see it give me a warning again for a page I am on and that page www.whatever.com isn't listed on the certificate I am not going to hit accept certificate again.

My apologize for causing any stir on these forums it wasn't what I intended to do, just trying to pass along that this happened to me in hopes that it doesn't happen to anyone else.

Also Newegg assures me even had they stolen the account information with a good credit card they wouldn't have shipped it to a non billing address unless I added that to my credit card issuer site as a legit address to be shipped too.
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
Originally posted by: Jessica69
Yep...bunch of morons, all.

But you won't read any of those links, will you, but instead will continue to blast anyone who tries to present the facts instead of hyperbole and FUD.

By the way, little pup1218, before you call anyone a moron for a Wiki link, did you even bother to go to it, read anything there, follow the external links provided? Or did you simply, in such a childish 12 year old response, come up with the moron quip without a second's pause to think before you spoke?

Wow. Just...Wow. You really don't get it do you?

OP got a bad cert during a supposedly secure socket layer transaction and was suspicious. Rightfully so.

It doesn't matter who supplies the content, the fact of the matter is the content and transaction could not be trusted. Do you agree or disagree with this point?

Shaker, don't worry about it. Posters can be pretty harsh sometimes, you were only trying to help.
 

Shaker8

Member
Jan 6, 2006
57
0
0
Originally posted by: Jessica69
Dude, akamai.net is NOT their security SSL certificate....that's through VeriSign. Akamai.net provides secure servers.....

This is what I am trying to tell you, while under their Security SSL i.e. https://secure.newegg.com/NewMyAccount I didn't have VeriSign last night I had the Akamai.net one I posted at the beginning of this thread, it didn't say www.newegg.com, verisign or any of that. Now if Akamai was hosting secure for Newegg why wouldn't they have something like www.newegg.com in there certificate?

My understanding(and its limited I know) is that those Akamai certs you have in there are links to images that are in your cart, I am probably wrong but just throwing that out there cause thats what newegg use Akimai for.

I understand what your saying, even if I don't like the way you have to say it with insults...but last night I didn't have a verisign www.newegg.com certificate like I do tonight. It said Akamai.net and a whole bunch of other gibberish and it was a bad certificate. All i was doing was trying to warn people that they should look out for that.

Now with all that said if someone want to show me what a good Akimai Certificate for newegg SSL looks like I would be ecstatic!!

 

Fraggable

Platinum Member
Jul 20, 2005
2,799
0
0
I'm not saying I know what this is all about, but I just DL'd some drivers from ati.com and when it was finished downloading and I ran it it said the file was from xxx.e.akami.net...

Freaky.
 

TridenT

Lifer
Sep 4, 2006
16,800
45
91
holy shit... how can we get a mod to lock this? This is a spread of FALSE INFORMATION. It's like saying there is a 900ft jesus. Omfg, gtfo noob.
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
Shaker,

You're concern is very valid. Any poster that says otherwise you can dismiss.

Your browser will make many SSL connections to many different URLs (outside of NewEgg, just like every webpage out there) even if your browser doesn't show it in the URL listed in your browser. Part of the content on the page you were in could not be trusted due to the bad cert, you can not be expected to confirm every single piece of content of the page nor should you. Your browser did it for you and alerted you that part of the page listed at your URL could not be trusted or verified.

But I'm a network/security guy, not a web page guy. You will NOT get an Akamai cert for the URL in the domain of newegg.com. But some content of newegg.com WILL contain content from akamai via SSL and as long as the cert is good you will get no warning.



 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
Originally posted by: TridenTBoy3555
holy shit... how can we get a mod to lock this? This is a spread of FALSE INFORMATION. It's like saying there is a 900ft jesus. Omfg, gtfo noob.

NO.

What he is posting is the truth and needs to be read and understood.
 

olds

Elite Member
Mar 3, 2000
50,113
776
126
Originally posted by: spidey07
Originally posted by: TridenTBoy3555
holy shit... how can we get a mod to lock this? This is a spread of FALSE INFORMATION. It's like saying there is a 900ft jesus. Omfg, gtfo noob.

NO.

What he is posting is the truth and needs to be read and understood.

How about if it was posted in the right forum?
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
Originally posted by: oldsmoboat
Originally posted by: spidey07
Originally posted by: TridenTBoy3555
holy shit... how can we get a mod to lock this? This is a spread of FALSE INFORMATION. It's like saying there is a 900ft jesus. Omfg, gtfo noob.

NO.

What he is posting is the truth and needs to be read and understood.

How about if it was posted in the right forum?

More entertainment by being in OT, more exposure.

Then again, most users just click "accept certificate" without knowing what they're doing.
 

IEC

Elite Member
Super Moderator
Jun 10, 2004
14,597
6,076
136
Summary of thread: keep your eyes peeled for DNS exploits.

It never hurts to be careful.
 

Gamingphreek

Lifer
Mar 31, 2003
11,679
0
81
This is the reason why we have Hardware Forums and not ATOT. Most people in ATOT don't have a clue what they are talking about about, and most people just come in here to start arguments.

Shaker, you had every right to be concerned, as Spidey said (Though you may have overreacted a bit ;)).

Guys if your DNS Server that you are using is safe and you have any clue about computers you are probably safe. In all my years of working on computers, I have never gotten a virus or spyware or anything else when sticking to safe sites (ie: I got 1 virus when I tried to get a keygen when I was little for Heroes of Might and Magic - and that was IT).

-Kevin