Potential risk — TWL Forum Archive

TWL Member

2011-10-05 16:35

The website http://www.tribesnext.com may no longer be safe. I suggest scanning your PC if you have recently used this website.
Just a friendly warning to all players.

If you continue to use the site, do it at your own risk. I understand it's an important website to tribes and I would like to make it clear I am not throwing any accusations to the owners of the site. It could be an outside source sneaking it's way in and infecting the site, as I said earlier, just a friendly warning.

That is all.
-Facemelter

_anthem

TWL Member

2011-10-05 16:44

wat

talent

TeamWarfare Vet

2011-10-05 16:44

wat

EpsilonNav

TWL Member

2011-10-05 16:58

So thats how all the donkey porn got on my machine! Thanks for letting me know.

saKe

Falhawk's buddyTeamwarfare Vet

2011-10-05 17:19

ono, I visit that website (not) alllllll the time.

Thyth

Lead DeveloperTribes Next

2011-10-05 17:44

Originally posted by: Facemeltermvp
The website http://www.tribesnext.com may no longer be safe. I suggest scanning your PC if you have recently used this website.
Just a friendly warning to all players.

If you continue to use the site, do it at your own risk. I understand it's an important website to tribes and I would like to make it clear I am not throwing any accusations to the owners of the site. It could be an outside source sneaking it's way in and infecting the site, as I said earlier, just a friendly warning.

That is all.

Uh huh...

You've registered here on TWL yesterday, and provide zero useful information or evidence.

I've checked the static content pages, and output of dynamic pages on the forum under my account, a testing account, and guest access. There are no malicious scripts, and no references to external content outside of things like user posts (which are limited to images).

Unless you can provide concrete evidence otherwise, this is unsubstantiated. You may also want to check your own computer for malicious software that may be tampering with your web browser.

BubbleTrout

TWL Member

2011-10-05 18:05

Originally posted by: Thyth
Originally posted by: Facemeltermvp
The website http://www.tribesnext.com may no longer be safe. I suggest scanning your PC if you have recently used this website.
Just a friendly warning to all players.

If you continue to use the site, do it at your own risk. I understand it's an important website to tribes and I would like to make it clear I am not throwing any accusations to the owners of the site. It could be an outside source sneaking it's way in and infecting the site, as I said earlier, just a friendly warning.

That is all.

Uh huh...

You've registered here on TWL yesterday, and provide zero useful information or evidence.

I've checked the static content pages, and output of dynamic pages on the forum under my account, a testing account, and guest access. There are no malicious scripts, and no references to external content outside of things like user posts (which are limited to images).

Unless you can provide concrete evidence otherwise, this is unsubstantiated. You may also want to check your own computer for malicious software that may be tampering with your web browser.

Snap!

B r o l l y

OVER 9000??!! TeamWarfare Vet

2011-10-05 18:44

Originally posted by: Thyth
I just cut them loose and told them to STFU.

Post edited by B r o l l y at 10/5/2011 6:44:40 PM

Teratos

TWL Member

2011-10-05 23:32

Now that Thyth is a battle-hardened veteran, such llama tactics no longer work on him.
--------
[16:18:27] Gunther-laptop> teratos im pushing for u to be kicked off the roster for that fyi
[16:23:23] Gunther-laptop> take it as a ur fuked...bragging about this just makes it funnier
[16:24:58] Gunther-laptop> i dont accept opinoins from the bech
&49M,FMFSPELLcheck has crashed ok.cancel?

lghtspd

QWNED!

2011-10-06 02:37

demos

StormcrowIV

TeamWarfare Vet

2011-10-06 09:45

I fucking love Thyth.

Tiberius Khan

TeamWarfare Vet

2011-10-06 12:26

i heard the tribes community is pretty dangerous too, we should all try to stay away from it.

_anthem

TWL Member

2011-10-06 12:37

stormcrow is pretty seedy, I would avoid him if possible

TitlelessTeamWarfare Vet

2011-10-06 13:15

Originally posted by: StormcrowIV
I fucking love Thyth.

Facemeltermvp

TWL Member

2011-10-06 20:56

I understand, my source isn't the best but it never hurts to be cautious.

http://www.siteadvisor.com/sites/tribesnext.com

Perhaps I should've added more maybes and perhaps.

My apologies.
-Facemelter

Tiberius Khan

TeamWarfare Vet

2011-10-06 21:38

what a dumb website. It doesn't give any useful feedback at all.

Thyth

Lead DeveloperTribes Next

2011-10-07 00:25

McAfee's site looks pretty useless. It explicitly states that there are no malicious downloads or links to malicious sites from tribesnext.com, but at the same time says it's a risk.

The only thing that I could think could cause this is possibly the fact that part of the TribesNext services are implemented as web services on the TribesNext domain (e.g. locating the account server, downloading the master server list). Maybe in some twisted way, it interprets the game's behavior as a mini-web-browser as a security risk.

Maybe it thinks the site is command and control for an HTTP botnet (since things like the server list is a list of IP addresses).

In any case, here's the Google Safe Browsing diagnostic for the site: http://www.google.com/safebrowsing/diagnostic?site=http://www.tribesnext.com/

It show's it's clean. McAfee's shows it's clean, except for some unspecified security risk.

You're free to examine the patch, all network communications sent by the game, and the site code itself if you don't want to take my word for it.

Note: We do take precautions and keep all software up to date, but I'm not making the claim that the site is unhackable, or that the web services couldn't be compromised.

Just that... this time it looks like a flaw in McAfee's analysis.

Teratos

TWL Member

2011-10-07 00:28

I would like to change my answer to: hacked!

SHIELDS UP

BubbleTrout

TWL Member

2011-10-07 03:38

Originally posted by: JT
Originally posted by: StormcrowIV
I fucking love Thyth.

Facemeltermvp

TWL Member

2011-10-07 18:19

I agree, it's pretty useless when it comes to feedback. I have it for reassurance, although like in this case it marks a site for viruses when I actually use it, which makes me sad. It's alright for when you google things and you can see what is safe and what is not. Usually I look at the community reviews, which are much better than the actual program in my opinion. Sadly, tribesnext had no community reviews.

Also, even though I did register very recently, I've been around for at least a year. I just never bothered to register. I wouldn't mind playing for a team, I just wouldn't be able to make the times which is why I never bothered. Plus, every thread seems to get derailed eventually, I know this one is going to go somewhere far from the initial post. I'm just happy my worries were set to rest.

Also, the google diagnostic hasn't been to the site for 90 days.

-Facemelter

Fling

Big Grin 4 Life!

2011-10-07 22:09

you care about things i dont even think about

Thyth

Lead DeveloperTribes Next

2011-10-07 23:21

Originally posted by: Facemeltermvp
Also, the google diagnostic hasn't been to the site for 90 days.

Originally posted by: Google Safe Browsing Diagnostics
The last time Google visited this site was on 2011-10-05, and suspicious content was never found on this site within the past 90 days.

AnarchyAo

TeamWarfare Vet

2011-10-16 16:14

There's a simple answer to why McAfee thinks the site is malicious...

It clearly states that it's findings are based on reputation.

Meaning that a user submitted false information about the site being malicious.

Online reputation is up to the reviews submitted by users of the site adviser community.

P41nm4k3r

TWL Member

2011-10-17 18:50

Thyth,

I use McAffe's and have not had any warnings on the tribesnext web site - not sure if it McAfee's in general or a specific program. Anyways - Thank you for clearing it up and also for providing the website.

shyzter-

TWL Member

2011-10-17 19:34

Originally posted by: StormcrowIV
I fucking love Thyth.

shyzter-

TWL Member

2011-10-17 19:37

$5 says Facemelter pays Tribes Vengeance.. amirite?