Affiliate Code Hijacking - Page 2 - GoFuckYourself.com

titman · 06-05-2004, 06:47 PM

50 people smarter than you

Quote:

Originally posted by Sambo
Woudnt it depend on when the scumware was doing the hijacking?

yes most affiliate scams work like this..

altering the hosts file of a sponsor domain to the scam domain that just refreshes back to the original link but with the scam code in place

AlienQ - BANNED FOR LIFE · 06-05-2004, 06:47 PM

Quote:

Originally posted by Lane
does it surprise you that spyware builders are thieves?

how about them turning so many peoples computers unstable and useless, and scaring away surfers from the web? hurting all online businesses alltogether.

who is ever gonna have the balls to fight these scumbags?

You can bet its comming...

If Rick is aware of it...

Its definatly comming.

This is one them sort of threads some people wish would go away, however I am sure this kind of issue will perpetually continue.

titman · 06-05-2004, 06:49 PM

Quote:

Originally posted by titman
50 people smarter than you

yes most affiliate scams work like this..

altering the hosts file of a sponsor domain to the scam domain that just refreshes back to the original link but with the scam code in place

the ones i was referring to were the ones that disect the html of a page and search and replace affililiate code on the fly. these can be stopped by masking the url with any number of methods

Rick Latona · 06-05-2004, 06:49 PM

Quote:

Originally posted by Lane
does it surprise you that spyware builders are thieves?

how about them turning so many peoples computers unstable and useless, and scaring away surfers from the web? hurting all online businesses alltogether.

who is ever gonna have the balls to fight these scumbags?

In about four months more than have the scumware apps will stop working on the PCs. Wait and see.

leg4 · 06-05-2004, 06:50 PM

it would seem that a whole new infrastructure on how hits are tracked and recorded will need to be put in place????

titman · 06-05-2004, 06:51 PM

Quote:

Originally posted by Rick Latona
In about four months more than have the scumware apps will stop working on the PCs. Wait and see.

This is prob true , but in 4 months the amount of new scumware will increase 4 fold resulting in an increase

Rick Latona · 06-05-2004, 06:51 PM

Quote:

Originally posted by titman
the ones i was referring to were the ones that disect the html of a page and search and replace affililiate code on the fly. these can be stopped by masking the url with any number of methods

That's one of many methods for sure. As a webmaster you should spend your time protecting yourself from some of the more common techniques used like banner replacements. Just change your banner sizes by one off like 467x59, etc.

Make a list of what you would do if you were a criminal and do whatever you can to protect yourself. We have someone that spends most of their day on these things.

Rick Latona · 06-05-2004, 06:53 PM

Quote:

Originally posted by titman
This is prob true , but in 4 months the amount of new scumware will increase 4 fold resulting in an increase

Also probably true. We do what we can.

AlienQ - BANNED FOR LIFE · 06-05-2004, 06:56 PM

The sad thing is that this kinda thing can not be fought by a starting, struggling webmaster.

They can not be expected to know how to combat it.

Most webmasters when actually working are in solitude as the best secrets are self learned and seldomly tought.

This kinda thing ruins the small guys in a big way.

If you don't make sales you don't grow and your work fills someone elses pocket as they use some cheap shot code.

Who wants to call that "Smart" marketing.
Its fucken outright theft.

High Quality · 06-05-2004, 07:00 PM

The solution is to switch to linux / freebsd EVERYONE!!!!!!!!!!!!!

AlienQ - BANNED FOR LIFE · 06-05-2004, 07:01 PM

Quote:

Originally posted by High Quality
The solution is to switch to linux / freebsd EVERYONE!!!!!!!!!!!!!

Let me know when you can part water...

leg4 · 06-05-2004, 07:01 PM

no, high quality! that wont work!!!

why dont you go to that parade tonight and shuddup!

lol

Rick Latona · 06-05-2004, 07:02 PM

Quote:

Originally posted by High Quality
The solution is to switch to linux / freebsd EVERYONE!!!!!!!!!!!!!

That wouldn't help at all. It's the end users we are talking about.

jimmyf · 06-05-2004, 07:03 PM

I've been thinking about this stuff for months now, wondering how 2 stop it.

High Quality · 06-05-2004, 07:04 PM

Quote:

Originally posted by Rick Latona
That wouldn't help at all. It's the end users we are talking about.

This was my sad attempt at the cliche NERD argument.

heh

Rick Latona · 06-05-2004, 07:11 PM

Quote:

Originally posted by High Quality
This was my sad attempt at the cliche NERD argument.

heh

Gotcha

AlienQ - BANNED FOR LIFE · 06-05-2004, 07:11 PM

Quote:

Originally posted by High Quality
This was my sad attempt at the cliche NERD argument.

heh

Why it was very sad...

You should know who you do business with...

gornyhuy · 06-05-2004, 07:20 PM

Quote:

Originally posted by Rick Latona
The ultimate answer lies within the IPSPs monitorring referring URLs and the Sponsors monitering joins as Sambo suggested.

I have my own solution which is to combat the scumware guys directly. I won't tell any of you what that is though. But it's war if you have a lot of traffic so bring a big army to the battle fiield.

Its very easy to spoof the referring url to a page with a link containing the ref code of the hijacker.

By the way, the same ref spoof techique is used by plug-in stealers to bypass security there. zspoof and the like.

Rick - I swear to Jebus that I'm not using any of this scumware or cheating in any way, but I am pretty knowledgable in network enabled client side windoze code, and have knowledge of specific working examples of this kind of client-side hijacker. Let me know if there is any way I can help the war.

Major (Tom) · 06-05-2004, 07:41 PM

This affects mostly affiliates right? Is it possible for people to steal a join from the program itself? I would think that would be kind of hard if the sponsor pays out the affiliates him or herself. That would be totally crazy if someone could divert a join at the affiliate program level and have the join go to a different master account at the biller. I'm assuming affiliates are much more vernable to getting hijacked than the affiliate program is. What's good about affiliate software is you can monitor join form fill outs, so I would imagine that would help shed light on some things if the program was getting ripped off. Either way it sucks because affiliates are the backbone of any program, and once they loose revenue we all loose revenue.
Cheers,
Duke Skywalker

jimmyf · 06-05-2004, 08:28 PM

Quote:

Originally posted by Rick Latona
We have a major problem with this as well. Has anyone here used this?

http://www.affiliatelinkcloaker.com/

I have not used it, but if you try it would post the results

leg4 · 06-06-2004, 01:23 PM

its the new style... 4 and 3 and 2 and 1

$5 submissions · 06-06-2004, 02:12 PM

Quote:

Originally posted by gornyhuy
I've seen a scumware plugin that looks for affiliate code patterns in the URL and replaces the refcode with someone elses.

What do you want to know?

Exactly. Cookies are also vulnerable because of this. However, the worst are trojans that act like one aspect of Gator.

jawanda · 06-06-2004, 02:45 PM

That affiliatelinkcloaker looks slightly interesting, but why not just use tinyurl.com ?? It does pretty much the exact same thing for free.

-P

06-05-2004, 06:56 PM	#59
AlienQ - BANNED FOR LIFE best designer on GFY Join Date: Mar 2003 Location: IALIEN.COM - High Definition Video and Photographic Productions -ICQ 78943384 Posts: 30,307	The sad thing is that this kinda thing can not be fought by a starting, struggling webmaster. They can not be expected to know how to combat it. Most webmasters when actually working are in solitude as the best secrets are self learned and seldomly tought. This kinda thing ruins the small guys in a big way. If you don't make sales you don't grow and your work fills someone elses pocket as they use some cheap shot code. Who wants to call that "Smart" marketing. Its fucken outright theft. __________________ NAKED HOSTING FTW!11 I'm On The INSANE PLAN $9.95/mo! \| The Alien Blog Adult News Worth Reading Updated Daily \| Content For Sale! 641 PICS 216 MINUTES OF VIDEO $350.00 \|ICQ: 78943384 \| Last edited by AlienQ - BANNED FOR LIFE; 06-05-2004 at 07:00 PM..

06-05-2004, 07:00 PM	#60
High Quality Confirmed User Join Date: Feb 2002 Location: Vegas Posts: 5,741	The solution is to switch to linux / freebsd EVERYONE!!!!!!!!!!!!! __________________ RecurCash.com - Averaging $38/sale with 60% revshare in the first 4 months alone! Convert your TEEN traffic today @ better than 1:500 guaranteed. ICQ me: 18287590!

06-05-2004, 07:03 PM	#64
jimmyf OU812 Join Date: Feb 2001 Location: California Posts: 12,651	I've been thinking about this stuff for months now, wondering how 2 stop it. __________________ Epic CashEpic Cash works for me Solar Cash Paysite Plugin Gallery of the day freesites,POTD,Gallery generator with free hosting

06-05-2004, 06:50 PM	#55
leg4 Confirmed User Join Date: May 2003 Location: Texas Posts: 4,429	it would seem that a whole new infrastructure on how hits are tracked and recorded will need to be put in place????

06-05-2004, 07:01 PM	#62
leg4 Confirmed User Join Date: May 2003 Location: Texas Posts: 4,429	no, high quality! that wont work!!! why dont you go to that parade tonight and shuddup! lol

06-05-2004, 07:41 PM	#69
Major (Tom) Boomer Woffen Industry Role: Join Date: Nov 2003 Location: Null Posts: 30,597	This affects mostly affiliates right? Is it possible for people to steal a join from the program itself? I would think that would be kind of hard if the sponsor pays out the affiliates him or herself. That would be totally crazy if someone could divert a join at the affiliate program level and have the join go to a different master account at the biller. I'm assuming affiliates are much more vernable to getting hijacked than the affiliate program is. What's good about affiliate software is you can monitor join form fill outs, so I would imagine that would help shed light on some things if the program was getting ripped off. Either way it sucks because affiliates are the backbone of any program, and once they loose revenue we all loose revenue. Cheers, Duke Skywalker

06-06-2004, 01:23 PM	#71
leg4 Confirmed User Join Date: May 2003 Location: Texas Posts: 4,429	its the new style... 4 and 3 and 2 and 1

06-06-2004, 02:45 PM	#73
jawanda Confirmed User Join Date: Feb 2003 Posts: 6,040	That affiliatelinkcloaker looks slightly interesting, but why not just use tinyurl.com ?? It does pretty much the exact same thing for free. -P