BS has a bug - Ad blockers seem to be effective

[silver_bullet]

Hit my phone this morning...

[BBR]

Firefox on my PC with Adblock Plus is 100% effective against it. I have no trouble on my PC at all.

[Tubbed Pacecar]

Thanks BBR! I'm using Chrome, but they have a version for that too!

A few clicks of the mouse later, and opening BS in a new tab, and no more redirects!!

Firefox on my PC with Adblock Plus is 100% effective against it. I have no trouble on my PC at all.

[pdub]

Firefox on my PC with Adblock Plus is 100% effective against it. I have no trouble on my PC at all.

Same. I've been wondering about the trouble everybody has been talking about.

[65RHDEER]

Firefox on my PC with Adblock Plus is 100% effective against it. I have no trouble on my PC at all.

Same for me also.

[BBR]

Adblock Plus has a browser available for Android (not sure about apple) that seems to work fine. I am using it right now with no redirects.

[Big Dave]

I'm using Duck Duck Go and no problems here.

[tardis454]

No issues with Manjaro Linux & Firefox w/Ghostery. (you know, because Linux... )

I checked BS's source code when this thread was initially posted, and didn't notice anything 'obviously' wrong.

[Monster]

Having issues with Explorer, Google and Safari, all without add-ons.

[Red_Kitty]

Same for me also.

And me! (Firefox + Adblock Plus)

[tardis454]

I dug a little deeper.. This is a Javascript inject exploit on the individual threads. Ghostery picked up 2 Google trackers on the main forum and subforums, but it picks up 6 trackers in ALL of the threads. In the threads 2 are Google trackers (the same ones on the main and subforums), 1 is a social media tracker, the other 3 trackers are causing the redirects. It's been about 10 years since I coded PHP and Javascript, but from what I remember when I ran my forum is there were always Javascript vulnerabilities. Below are screen shots so the IT dudes know where to look if they haven't found them already. Whoever did this inserted the code into EVERY thread on the forum, which leads me to believe the SQL database may be compromised.

Main Forum Page



General Discussion Subforum




Dan Barlow's Thread about the bug...




The source code, it don't lie...





The site links you're looking for in the Javascript are highlighted.

//pl15871255.bestcpmnetwork.com

//www.responserver.com/00bc444ca96519e47565e13c3d7aefc3/invoke.js <<<Invoke method...

//pl15892917.topcpmnetwork.com/4d/fe/dc/4dfedc94b210b812b622a7176e817686.js

[tardis454]

who says bug guys and chevy guys don't get along, nice pickup from the tag Tardis

I'm really not a bug guy Aaron, I'm an AMC/Jeep, Genital Motors guy... The buggy belongs to my wife..
Snarky lawyer retort in 3..2..1......

You got me thinking about this bug issue when you mentioned that you also use Ghostery.

Ghostery is great at calling out trackers with "Modified Requests".. It was easy to find once I dug into those.

[JRoberts]

The TicTok thing is still here.

[cstmwgn]

any update?
Is the only solution to install yet another piece of software to allow us to peacefully use this site?

[Monster]

I have not done anything and have not had any problems in about a week.