When you're being watched ...

by **mogster** » Sun Jun 04, 2006 11:44 am

OK. So I'm currently working on a blogpost (in Norwegian) and because my blogposts usually are 2 miles long, I'm doing a lot of research. To set up a regime for systematizing the info I'm collecting, I've set up a phpBB board at my site, but closed it from outsiders by doing some ip filtering manually (the safe way - hard coded, lol). Anyho - the blog post I'm working on contains info about the so-called Muldergate, a scandal that broke in South Africa in 1978, where it became apparent that the Ministry of Information - led by the notorious <a href="http://www.sahistory.org.za/pages/people/rhoodie-em.htm" target="top">Eschel Rhoodie</a> - had used a budget of more than 70 million krugerrand on information operations, propaganda, targeted at Europe, US and the Middle East. An interesting story, I can tell you. But even more interesting is this: I've just picked up on this blog post yesterday after having written the start half a year ago (I needed to get hold of Rhoodie's book The Real Information Scandal in hard copy before continuing). I kept working on the info during the night, and continued today as this really need to be finished now. One of the reasons I'm using the phpBB is that it has a good search function, so when I needed some info I knew I'd posted half a year ago, I just think of a key word and hit the search button. Today, about 4 hours ago I wanted an article about the CIA and the media and searched for 'cia'. All well and good, and I found what I was searching for, but 15 minutes ago this pops up in the (hard coded) log file for my internal board: 04.06.2006 16:10^24.159.240.3^Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.8.0.1) Gecko/20060111 Firefox/1.5.0.1^/board/viewtopic.php?t=492&highlight=cia It was repeated four times. The topic in question was the correct topic where my info about CIA and the media was collected, but I doubt the person got through my ip filter. How can this be? I'm behind a firewall, and the site is placed on a server in a DMZ on the same FW. When I post to my site, I could go directly to it by typing the int. ip adress but I prefer to go by domain name, as the site itself is <a href="http://www.nitrogen.no" target="top">public</a>. So: I type a search, it goes out of my firewall to my gateway (I have a static ip), and then bounces back inside to the server inside the DMZ. When selecting the topic I wanted to see, it gave the url http://www.nitrogen.no/board/viewtopic.php?t=492&highlight=cia The information I was looking for was this: <a href="http://www.unknownnews.net/hh030102.html" target="top">www.unknownnews.net/hh030102.html</a> I logged onto another server not local and did a traceroute, here's the result from hop #3: 4 ge-0-1-1.0024.no-oslms001-pe-1.utfors.net (217.199.46.1) 1.153 ms 1.125 ms 1.001 ms 5 ge-4-0-0.se-sthms001-pe-1.tu.telenor.net (212.105.101.17<img src=http://www.ezboard.com/images/emoticons/glasses.gif ALT="8)"> 10.379 ms 10.445 ms 10.413 ms 6 213.242.110.1 (213.242.110.1) 10.412 ms 10.499 ms 10.453 ms 7 ge-0-0-0.mp1.Stockholm1.Level3.net (4.68.96.221) 8.546 ms ge-2-0-0.mp1.Stockholm1.Level3.net (4.68.125.217) 65.881 ms ge-0-0-0.mp1.Stockholm1.Level3.net (4.68.96.221) 8.508 ms 8 as-0-0.bbr1.NewYork1.Level3.net (4.68.128.106) 109.021 ms 109.070 ms 108.749 ms 9 * * ae-13-53.car3.NewYork1.Level3.net (4.68.97.82) 108.966 ms 10 192.205.33.93 (192.205.33.93) 111.386 ms att-level3-oc192.NewYork1.Level3.net (4.68.127.150) 111.597 ms 192.205.33.93 (192.205.33.93) 112.165 ms 11 tbr1-p012201.n54ny.ip.att.net (12.123.3.106) 136.243 ms 136.139 ms 136.084 ms 12 tbr1-cl14.cgcil.ip.att.net (12.122.10.2) 136.611 ms 138.551 ms 136.743 ms 13 gar3-p360.cgcil.ip.att.net (12.123.6.1) 134.989 ms 134.918 ms 134.991 ms 14 12.118.183.94 (12.118.183.94) 140.110 ms 139.624 ms 140.006 ms 15 172.18.97.221 (172.18.97.221) 142.265 ms 142.331 ms 141.992 ms 16 172.18.97.61 (172.18.97.61) 139.943 ms 140.013 ms 140.005 ms 17 172.18.97.102 (172.18.97.102) 139.314 ms 139.553 ms 139.518 ms 18 24-159-240-3.dhcp.mdsn.wi.charter.com (24.159.240.3) 148.944 ms 148.758 ms 149.127 ms How can a person in the US do a similar search by topic that I do? And so shortly after? I will need to check my systems, I guess. But how did he come by that url - by sniffing a node in the network? Edit: typo Edited by: <A HREF=http://p216.ezboard.com/brigorousintuition.showUserPublicProfile?gid=mogster@rigorousintuition>mogster</A> at: 6/4/06 9:47 am

by **mogster** » Sun Jun 04, 2006 12:00 pm

Here's some interesting scans from Rhoodies book: <img src="http://www.nitrogen.no/blogfiles/may2006/rhoodie_coffe.jpg" style="border:0;"/> Eschel Rhoodie, Deputy Secretary of Information, Ministry of Information 1972 - 1978. <img src="http://www.nitrogen.no/blogfiles/may2006/rhoodie_ford.jpg" style="border:0;"/> Connie Mulder, Secretary of Information, Ministry of Information 1968 - 1978. With ex president Ford on a seminar funded by Ministry of Information as a clandestine op. Publicaly, it was fronted as a free initiative by South African business interests. <img src="http://www.nitrogen.no/blogfiles/may2006/rhoodie_israel.jpg" style="border:0;"/> Rhoodie with no less than two Nobel Peace prize winners ;-) <img src="http://www.nitrogen.no/blogfiles/may2006/rhoodie_reagan.jpg" style="border:0;"/> Connie Mulder cultivated Reagan long before he became president, he visited R several times and was tightly involved with the Reagan crowd. Did they fund Reagan? They did remove a couple of anti-SA senators by sprinkling money into the US ... <img src="http://www.nitrogen.no/blogfiles/may2006/rhoodie_persia.jpg" style="border:0;"/> The regime of the Shah became an ally of SA during the late 60's/early seventies. OK, now.

by **bvonahsen** » Sun Jun 04, 2006 3:03 pm

I'm not a programmer, but I saw this and thought of your post here. Maybe it'll help, maybe not. <a href="http://www.biorust.com/tutorials/detail/214/en/http://www.biorust.com/tutorials/detail/214/en/" target="top">Restricting External Access To PHP Files</a> Surely there are plenty more on security out there also, good luck.

When you're being watched ...

When you're being watched ...

Re: When you're being watched ...

Re: When you're being watched ...

Who is online