<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Web Integrity Checker - ISPs Inserting Ads Into Web Content</title>
	<atom:link href="http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/</link>
	<description>Ethical Hacking, Penetration Testing &#38; Computer Security</description>
	<pubDate>Fri, 21 Nov 2008 01:21:32 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.3</generator>
		<item>
		<title>By: Sir Henry</title>
		<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-83583</link>
		<dc:creator>Sir Henry</dc:creator>
		<pubDate>Fri, 14 Dec 2007 19:05:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-83583</guid>
		<description>@dre:

I disagree with your sentiments on the basis that I pay for them to provide me with access, not content.  I think that this is the veritable "inch before the foot" in that, if ISP's can get away with this, what is to stop them from not only pushing content upon you, but dictating what content you should or should not see?  I am very leery of this and feel that they should not be allowed to do such a thing.

Apart from that, however, I do think that simply whitelisting scripts is a good start to alleviating this headache.</description>
		<content:encoded><![CDATA[<p>@dre:</p>
<p>I disagree with your sentiments on the basis that I pay for them to provide me with access, not content.  I think that this is the veritable &#8220;inch before the foot&#8221; in that, if ISP&#8217;s can get away with this, what is to stop them from not only pushing content upon you, but dictating what content you should or should not see?  I am very leery of this and feel that they should not be allowed to do such a thing.</p>
<p>Apart from that, however, I do think that simply whitelisting scripts is a good start to alleviating this headache.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: dirty</title>
		<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-72025</link>
		<dc:creator>dirty</dc:creator>
		<pubDate>Tue, 06 Nov 2007 18:18:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-72025</guid>
		<description>so they over-charge us for services and then subject users to this $***?!?! unbelievable!</description>
		<content:encoded><![CDATA[<p>so they over-charge us for services and then subject users to this $***?!?! unbelievable!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nobody_Holme</title>
		<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71670</link>
		<dc:creator>Nobody_Holme</dc:creator>
		<pubDate>Thu, 01 Nov 2007 15:08:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71670</guid>
		<description>Meh? Just adblock anything from the intercept box... That should kill it. Dunno what you can do if you run opera, exploder, or any of the others, but hey...

(also, yeah, i'm clean. Didnt think Richard Branson needed to stoop that low to make money)</description>
		<content:encoded><![CDATA[<p>Meh? Just adblock anything from the intercept box&#8230; That should kill it. Dunno what you can do if you run opera, exploder, or any of the others, but hey&#8230;</p>
<p>(also, yeah, i&#8217;m clean. Didnt think Richard Branson needed to stoop that low to make money)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sandeep Nain</title>
		<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71627</link>
		<dc:creator>Sandeep Nain</dc:creator>
		<pubDate>Wed, 31 Oct 2007 14:04:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71627</guid>
		<description>@dre, no thats not right. There is a major difference in services provided by ISP and those provided by Google.

1. Google services are free for end users where ISP is charging the end users for their services
2. Google is putting adverts on the websites created by google itself (except adsense where website owner uses google services) where ISP is inserting adverts in a 3rd party website.

Therefore its totally unethical to insert adverts byISP and must be banned.

No doubt disallowing Javascript, Floash, Activex etc etc will make the web browsing much safer and advert free but it is not practical. you are talking about going atleast one or two decade back when these technologies didnt exist and web was boring. Nobody wanna do so and this is not the solution. There must be some rules and legislations to be put.</description>
		<content:encoded><![CDATA[<p>@dre, no thats not right. There is a major difference in services provided by ISP and those provided by Google.</p>
<p>1. Google services are free for end users where ISP is charging the end users for their services<br />
2. Google is putting adverts on the websites created by google itself (except adsense where website owner uses google services) where ISP is inserting adverts in a 3rd party website.</p>
<p>Therefore its totally unethical to insert adverts byISP and must be banned.</p>
<p>No doubt disallowing Javascript, Floash, Activex etc etc will make the web browsing much safer and advert free but it is not practical. you are talking about going atleast one or two decade back when these technologies didnt exist and web was boring. Nobody wanna do so and this is not the solution. There must be some rules and legislations to be put.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: srinivas</title>
		<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71623</link>
		<dc:creator>srinivas</dc:creator>
		<pubDate>Wed, 31 Oct 2007 12:17:21 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71623</guid>
		<description>ISP's don't have any right to serve ads to their users.  These kind of techniques are a boon for money seeking ISP's.  Sooner or later we are going to face these ads as we surf web when more ISP's jump into this business.  Users of such ad serving ISP's have only one thing to do. They should warn their ISP's to stop serving ads.  If they don't listen, cancel your subscription and choose a new ISP which does not serve ads.  

What happens when the ISP's serve inappropriate ads when the kids and teenage guys n girls surf the web.</description>
		<content:encoded><![CDATA[<p>ISP&#8217;s don&#8217;t have any right to serve ads to their users.  These kind of techniques are a boon for money seeking ISP&#8217;s.  Sooner or later we are going to face these ads as we surf web when more ISP&#8217;s jump into this business.  Users of such ad serving ISP&#8217;s have only one thing to do. They should warn their ISP&#8217;s to stop serving ads.  If they don&#8217;t listen, cancel your subscription and choose a new ISP which does not serve ads.  </p>
<p>What happens when the ISP&#8217;s serve inappropriate ads when the kids and teenage guys n girls surf the web.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: dre</title>
		<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71609</link>
		<dc:creator>dre</dc:creator>
		<pubDate>Wed, 31 Oct 2007 06:45:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71609</guid>
		<description>I think it's great and more power to them.  If Google can monopolize on everything Javascript, I don't see why your ISP shouldn't also be able to do so.  It's your own damn fault for allowing cookies and/or Javascript (or Java applets, Flash, Actionscript, VBScript, ActiveX, PDF, Quicktime, or whatever else browser plugin support)...

Of course, I also think the UW Web Integrity Checker is a wonderful idea.  People should learn about who is influencing them and why.

People should also start using inbound WAF's that remove potentially malicious iframes or Javascript, but then allow them to be whitelisted on a case-by-case basis.  I've heard of Palo Alto Networks, but there is also their open-source project, &lt;a href="http://whitetrash.sf.net" rel="nofollow"&gt;Whitetrash&lt;/a&gt;.  Using (or forwarding) OpenDNS is also a plus, as would be null routing or firewalling various sensitive IP prefixes, maybe ones pulled via a DNS or BGP RBL.

Point of this: don't trust the web, but help your ISP monotize itself.  They are going to need the help, what with the &lt;a href="http://www.secret-wg.org" rel="nofollow"&gt;problems the secret working group&lt;/a&gt; is attempting to address - let alone the stupid threat of net-neutrality.</description>
		<content:encoded><![CDATA[<p>I think it&#8217;s great and more power to them.  If Google can monopolize on everything Javascript, I don&#8217;t see why your ISP shouldn&#8217;t also be able to do so.  It&#8217;s your own damn fault for allowing cookies and/or Javascript (or Java applets, Flash, Actionscript, VBScript, ActiveX, PDF, Quicktime, or whatever else browser plugin support)&#8230;</p>
<p>Of course, I also think the UW Web Integrity Checker is a wonderful idea.  People should learn about who is influencing them and why.</p>
<p>People should also start using inbound WAF&#8217;s that remove potentially malicious iframes or Javascript, but then allow them to be whitelisted on a case-by-case basis.  I&#8217;ve heard of Palo Alto Networks, but there is also their open-source project, <a href="http://whitetrash.sf.net" rel="nofollow">Whitetrash</a>.  Using (or forwarding) OpenDNS is also a plus, as would be null routing or firewalling various sensitive IP prefixes, maybe ones pulled via a DNS or BGP RBL.</p>
<p>Point of this: don&#8217;t trust the web, but help your ISP monotize itself.  They are going to need the help, what with the <a href="http://www.secret-wg.org" rel="nofollow">problems the secret working group</a> is attempting to address - let alone the stupid threat of net-neutrality.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: fazed</title>
		<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71578</link>
		<dc:creator>fazed</dc:creator>
		<pubDate>Tue, 30 Oct 2007 19:27:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71578</guid>
		<description>@pantagruel
Sounds like potential for mass phishing..</description>
		<content:encoded><![CDATA[<p>@pantagruel<br />
Sounds like potential for mass phishing..</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Pantagruel</title>
		<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71571</link>
		<dc:creator>Pantagruel</dc:creator>
		<pubDate>Tue, 30 Oct 2007 17:40:58 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71571</guid>
		<description>So basically your internet provider, usually commited to keeping your inbox spam free, will inject 'customized' SPAM.

Wonder what happens if the proxy gets h4x0r3d and starts injecting malicious code instead of SPAM.</description>
		<content:encoded><![CDATA[<p>So basically your internet provider, usually commited to keeping your inbox spam free, will inject &#8216;customized&#8217; SPAM.</p>
<p>Wonder what happens if the proxy gets h4&#215;0r3d and starts injecting malicious code instead of SPAM.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: fazed</title>
		<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71557</link>
		<dc:creator>fazed</dc:creator>
		<pubDate>Tue, 30 Oct 2007 16:17:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71557</guid>
		<description>hmm fair play to them
for the idea but anyone doing
this should be shot.
I wouldn't mind if they gave you
free service because they would
make enough revenue from showing
the ads on every page you visited.</description>
		<content:encoded><![CDATA[<p>hmm fair play to them<br />
for the idea but anyone doing<br />
this should be shot.<br />
I wouldn&#8217;t mind if they gave you<br />
free service because they would<br />
make enough revenue from showing<br />
the ads on every page you visited.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sandeep Nain</title>
		<link>http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71551</link>
		<dc:creator>Sandeep Nain</dc:creator>
		<pubDate>Tue, 30 Oct 2007 14:16:36 +0000</pubDate>
		<guid isPermaLink="false">http://www.darknet.org.uk/2007/10/web-integrity-checker-isps-inserting-ads-into-web-content/#comment-71551</guid>
		<description>Damn such ISPs.. this is all unfair. 
you paying your ISP to provide service and yet they do this kinda stuff to make more money
And usually end-users believe that its the website which is showing all these annoying adverts and pop-ups. End result: websites loose their visitors.
There must be some laws against such activities. 

PS: Happy to know that my ISP is not inserting any adverts. :)</description>
		<content:encoded><![CDATA[<p>Damn such ISPs.. this is all unfair.<br />
you paying your ISP to provide service and yet they do this kinda stuff to make more money<br />
And usually end-users believe that its the website which is showing all these annoying adverts and pop-ups. End result: websites loose their visitors.<br />
There must be some laws against such activities. </p>
<p>PS: Happy to know that my ISP is not inserting any adverts. <img src='http://www.darknet.org.uk/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /></p>
]]></content:encoded>
	</item>
</channel>
</rss>
