/srv/irclogs.ubuntu.com/2015/10/29/#launchpad-dev.txt

bigjoolsheh, someone went and made another LP http://www.breakingnewsnews.org/03:58
blrbigjools: err...04:11
bigjoolsand it's not using SSL04:12
wgrantThat's not another LP.04:19
wgrantThat's a sed over LP.04:19
cjwatsonbigjools: It's much weirder than that04:19
wgrantIt's the live site AFAICS.04:20
cjwatsonYeah, that04:20
wgrantExcept s/Launchpad/Breakingnewsnews/04:20
wgrantwtf04:20
bigjoolshuh yeah I wondered why it had the same bugs04:20
wgrantbigjools: How did you find it?04:20
bigjoolsAppeared in a Google search04:20
bigjoolswhich is a little worrying04:21
wgrantOh.04:21
wgrantThis isn't you trolling us? :)04:21
wgrantLook at the whois on that domain.04:21
bigjoolsheh I know04:21
bigjoolsnot even I would go to that trouble to troll you04:21
wgrantWhat on earth.04:22
blroh of course it's a Queenslander.04:22
bigjoolsthis isn't that nutjob we had to ban I wonder ...04:22
wgrantMy initial thought was amhnews, indeed.04:22
wgrantThe entire domain is aliased.04:22
blrbigjools: is Nobby Beach a real place?04:22
wgranthttp://qastaging.breakingnewsnews.org/04:23
wgranthttp://blog.breakingnewsnews.org/general/launchpad-news-august-201504:23
bigjoolsrings a bell04:23
bigjoolswgrant: WTF!04:23
blronly in Australia would you have a place called Nobby Beach.04:23
bigjoolsThere's a place in England called Bell End04:23
blroh dear04:23
wgranthttp://pqm.breakingnewsnews.org/ doesn't work :(04:23
bigjoolsI used to live near a place called Minge Lane04:23
wgrantI'm increasingly convinced it is amhnews, as it's so inexplicable and has news in the name.04:25
wgrantamhnews is the master of things that make no sense at all but appear not to be trolling.04:25
wgrantHe's been gone for like a year now, though.04:26
bigjoolsI am sure a redirect can be placed in the Canonical Apache configs04:26
blrseems like the work of a rogue, and somewhat confused AI.04:26
bigjoolsredirect to goatse? :)04:26
bigjoolsAlso if you're logging request headers, maybe check for others...04:28
cjwatsonIt also inserts iframes into the pages it serves, and strips LP's JavaScript.05:30
cjwatson(And does other reprocessing of the "pass through parser and back" kind)05:32
cjwatsonbigjools: blocking requested05:56
bigjoolseek05:56
bigjoolsthanks cjwatson05:57
cjwatsonI think I've got about as much as I can out of logs05:57
bigjoolsare you logging request urls?05:58
cjwatsonyes05:58
cjwatsonwell, paths, not URLs05:58
bigjoolsah - I was thinking you can block where the requested site is not launchpad.net05:58
cjwatsonno, it's a proxy05:58
bigjoolsoh, ok05:59
cjwatsonit's requesting launchpad.net as far as we're concerned05:59
bigjoolsjeez, that's evil05:59
cjwatsonand then filtering (and caching) the results and returning them05:59
cjwatsonif it weren't requesting launchpad.net or similar then our Apache would say nope05:59
cjwatson(not that I've actually checked but that seems highly likely)05:59
bigjoolsthe original request header is in the browser request header still?06:00
cjwatsonI don't see why they'd do that06:00
bigjoolsunless the proxy is munging that too06:00
cjwatsonthis is going to be more like a client/server pair than a legitimate proxy06:01
cjwatsonit will be making its own requests constructed based on the ones it receives06:01
bigjoolsright06:01
bigjoolswhat on earth is someone's motivation for that I wonder06:01
cjwatsonmy ticket title includes the string "incomprehensibly weird"06:01
bigjools:)06:02
cjwatson(I can certainly tell it's making its own requests to at least some extent, based on User-Agent)06:04
=== mup_ is now known as mup

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!