Posted by chemist on August 26, 2005, at 11:10:28
In reply to Re: Peek-a-boo Dr. Bob et al., posted by Phillipa on August 25, 2005, at 21:44:55
hello there, chmeist here...phillipa and gg...the first part of the prior post was a mention that some troubles on several personal fronts - from the very real to the very likely imagined or invented by myself - are fading as a regular schedule of work and non-work approaches a steady-state.
the second part was simply grabbing the header line from a post on admin (the page is displayed without frames, and it happened to be one of phillipa's: just one i grabbed, and nothing at all more than that).
the second few lines include a some javascript for purposes that are well-established by peolple who are professionals and, most importantly, are not to my knowledge suffering from paranoia.
when one invokes a URL with frames, they see a split screen, two panels. one of them is the true URL, and so-called pseudo URLs at least one and usually three in number - are literally hidden from the viewer (they are referenced from the one, true frame they would be reading and, most importantly, submitting typed information to a linked, hidden, and seemingly ``owned'' spot just as i am am doing right now in replaying to the posts). also, others can be precluded because of expired cookies that are taken; i was not aware until a while back that this form of communication was available here.
the discussion concerning the smaller board over a month to two ago - as best as i can reacall - was a trial run by Dr. Bob and alexandra_k. the thread on Admin where Toph, NikkiX2, Dinah, and rainbowbrite were enjoined by Dr. Bob for some reason just this a.m. to redirect the banter to a URL which was tied to the goings-on in july. go figure.
my mistaken assumption that a rootkit had been triggered resulted in some down-time for me. you need look no further than the PB pages from Admin (at least) viewed with or without frames to confirm what the cause likely is. also, should you need a little more clarity, you can go back to the transition from HTML to DHTML/javascript, and i feel that (Dr. Bob, can you pardon the double-double quotes? i am not at all certain that the event handling and associated keyPress and onKeyPress are sturdy, and the miskeys are more than usual) any of the O'Reilly books will do: i grabbed one of mine on DHTML (Dynamic HTML, D. Goodman, 1996) and quite a bit of javascript stuff and other facts are contained therein.
the embedded javascript that, when triggered, results in the execution of a script and an action for a person who is under the impression that another person - or some such - was not responsible for their puzzling observations while making use of what really is an extension of another's window ought to confuse anybody.
in short, i can grab what you type in real time and it is unencrypted as long as your DOM is not to blame.
Dr. Bob has, at the PB site and via the use of the framed alternate loophole, set up a way to communicate with PBers - or who knows, some have the privilege to do so in his absence, for whatever reason - and as long as one of the not-so-correct cookies does not key with those of the others, you do not get a real-time, virtual console of typwd messages.
for further clarification, examine the posting page where your cookies (although not enough to wipe you out) are taken in and swapped out. and it should be clear that you have not done anything bad or underhanded. all the best, chemist
poster:chemist
thread:546419
URL: http://www.dr-bob.org/babble/admin/20050823/msgs/546895.html