Accessing FT from China new weirdness
#1
Original Poster
Join Date: Oct 2007
Location: Southeast USA
Programs: various
Posts: 6,710
Accessing FT from China new weirdness
Anybody accessing this site from inside China (China Unicom ISP) without your VPN on, and using Firefox as browser, check and see if you are getting a strange intermittent pop-up with: "202.106.33.158/DNS/popup.html" in the address bar. Lookup shows this is a China Unicom IP address. There is no content in the box, just the IP address.
It stays up for a few seconds, then goes away, then pops up again. Besides being annoying, it's a bit unnerving--ike a reminder that "Big Brother is Watching." And it's new, didn't happen yesterday. So far haven't had it happen with other websites in Firefox but haven't been on Net long this morning. Will try a check on FT using other browsers as well.
ETA: Seems to happen every time you click to view different page or different thread.
It stays up for a few seconds, then goes away, then pops up again. Besides being annoying, it's a bit unnerving--ike a reminder that "Big Brother is Watching." And it's new, didn't happen yesterday. So far haven't had it happen with other websites in Firefox but haven't been on Net long this morning. Will try a check on FT using other browsers as well.
ETA: Seems to happen every time you click to view different page or different thread.
Last edited by jiejie; Jan 28, 2012 at 7:25 pm
#2




Join Date: Nov 2005
Location: SIN / CNX / SFO
Programs: UA GS, SQ PPS, Hyatt Globalist, Marriott Titanium, Hilton Diamond, Accor Gold
Posts: 1,253
Doesn't appear to be the dreaded Net Nannies but rather the almost-as-nefarious advertisers. At least here, accessing that URL displays an ad:

Looking at the source for the page also uncovers things like adFrame_2608BD7F_EDB2_976D_8F4C_C032B747AD04 and hxxp://202.106.195.182/adpolestar/door/;ap=2608BD7F_EDB2_976D_8F4C_C032B747AD04;ct=js;pu= afp, all of which suggest that this is some type of advertising scheme. Also, the auto-closing is explained by a bit of JavaScript that sets it to close after 20,000ms or 20 seconds.
Is it possible you got some type of Chinese adware on your system? Or, alternatively, it could be that your ISP is injecting these ads into the sites you visit, a possibility suggested by the DNS reference in the URL. Do you have ....... installed in Firefox, explaining why it just appears as a blank window?

Looking at the source for the page also uncovers things like adFrame_2608BD7F_EDB2_976D_8F4C_C032B747AD04 and hxxp://202.106.195.182/adpolestar/door/;ap=2608BD7F_EDB2_976D_8F4C_C032B747AD04;ct=js;pu= afp, all of which suggest that this is some type of advertising scheme. Also, the auto-closing is explained by a bit of JavaScript that sets it to close after 20,000ms or 20 seconds.
Is it possible you got some type of Chinese adware on your system? Or, alternatively, it could be that your ISP is injecting these ads into the sites you visit, a possibility suggested by the DNS reference in the URL. Do you have ....... installed in Firefox, explaining why it just appears as a blank window?
#3


Join Date: Dec 2007
Location: Bay Area
Programs: BA - Blue
Posts: 4,721
Browsing FT on FF without VPN right now, and not experienced these issues, but no idea who my ISP provider is: landlord had installed and paid for our internet.
I think that some adware is the most likely reason.
tb
I think that some adware is the most likely reason.
tb
#4

Join Date: Jun 2006
Location: KIX, ITM, UKB, YVR
Programs: Star Alliance - AC
Posts: 2,356
I get the China Telecom "Happy New Year" special pricing for optic fiber contract advert when I open my browser these days.
Not quite the same advert you are seeing though but it pops up on the bottom right side of the screen each time even when I connect to vpn which was disconcerting.
Not quite the same advert you are seeing though but it pops up on the bottom right side of the screen each time even when I connect to vpn which was disconcerting.
#5
Ambassador: China
Join Date: Oct 2005
Location: Malibu Inferno Ground Zero
Programs: UA AA CO
Posts: 4,836
#6
Join Date: Jun 2010
Location: LHR, PVG
Programs: DL PM, OZ DM+, CX DM, LH SEN
Posts: 183
#7
Original Poster
Join Date: Oct 2007
Location: Southeast USA
Programs: various
Posts: 6,710
Doesn't appear to be the dreaded Net Nannies but rather the almost-as-nefarious advertisers. At least here, accessing that URL displays an ad:

Looking at the source for the page also uncovers things like adFrame_2608BD7F_EDB2_976D_8F4C_C032B747AD04 and hxxp://202.106.195.182/adpolestar/door/;ap=2608BD7F_EDB2_976D_8F4C_C032B747AD04;ct=js;pu= afp, all of which suggest that this is some type of advertising scheme. Also, the auto-closing is explained by a bit of JavaScript that sets it to close after 20,000ms or 20 seconds.
Is it possible you got some type of Chinese adware on your system? Or, alternatively, it could be that your ISP is injecting these ads into the sites you visit, a possibility suggested by the DNS reference in the URL. Do you have ....... installed in Firefox, explaining why it just appears as a blank window?

Looking at the source for the page also uncovers things like adFrame_2608BD7F_EDB2_976D_8F4C_C032B747AD04 and hxxp://202.106.195.182/adpolestar/door/;ap=2608BD7F_EDB2_976D_8F4C_C032B747AD04;ct=js;pu= afp, all of which suggest that this is some type of advertising scheme. Also, the auto-closing is explained by a bit of JavaScript that sets it to close after 20,000ms or 20 seconds.
Is it possible you got some type of Chinese adware on your system? Or, alternatively, it could be that your ISP is injecting these ads into the sites you visit, a possibility suggested by the DNS reference in the URL. Do you have ....... installed in Firefox, explaining why it just appears as a blank window?
Yes, I do have ....... installed. Thanks for your technical input! For now, I am using a different browser for accessing FT. It's an incredibly annoying popup.
#8
A FlyerTalk Posting Legend




Join Date: Dec 2000
Location: Shanghai
Posts: 46,399
jiejie: Since you appear to be the only one of us experiencing these problems, my money is on the "malware" theory. When IB made us ambassadors, they gave us the ad free version of FT as a token of their appreciation for our contributions here; I don't see ANY ads on FT, with or without VPN.
#9
Original Poster
Join Date: Oct 2007
Location: Southeast USA
Programs: various
Posts: 6,710
jiejie: Since you appear to be the only one of us experiencing these problems, my money is on the "malware" theory. When IB made us ambassadors, they gave us the ad free version of FT as a token of their appreciation for our contributions here; I don't see ANY ads on FT, with or without VPN.
As for the general ad issue, yes of course I also am ad-free on FT once I log in, with or without VPN. That Chinese popup came up in a completely separate window, not as a frame on the FT site.
#10
Join Date: Feb 2012
Posts: 14
@jiejie
You're not crazy. That's about the same time I started receiving the ads. There is a little box that pops up in the bottom-right-hand corner of my screen. The ads on my computer are for 10010 (China Unicom). I had a hunch it was them, but I decided to rule out the other possibilities first. Scans by various antivirus/malware/adware software detected nothing. I confirmed it was not a new type of advertising by the websites. With that out of the way, I called up China Unicom and I complained about pop-up ads; the representative stated that I had agreed to them in my contract when I signed up for internet service. It must be nice being a monopoly (many neighborhoods in China, including mine, only allow one ISP). At least they didn't deny it like they do every time I call up and complain that I can't access YouTube, Facebook, etc. (Yes, I do realize that they are blocked, but sometimes it's just fun to mess with the system.
) Anyway, they aren't the first ISP to insert ads (search for "Phorm" or "ISP inserting ads"). Hopefully, these bad advertising practices by ISPs will be the next story to go viral on Weibo.
Also, apparently, this has been going on a long time, so maybe we're actually lucky we are only now experiencing it:
You're not crazy. That's about the same time I started receiving the ads. There is a little box that pops up in the bottom-right-hand corner of my screen. The ads on my computer are for 10010 (China Unicom). I had a hunch it was them, but I decided to rule out the other possibilities first. Scans by various antivirus/malware/adware software detected nothing. I confirmed it was not a new type of advertising by the websites. With that out of the way, I called up China Unicom and I complained about pop-up ads; the representative stated that I had agreed to them in my contract when I signed up for internet service. It must be nice being a monopoly (many neighborhoods in China, including mine, only allow one ISP). At least they didn't deny it like they do every time I call up and complain that I can't access YouTube, Facebook, etc. (Yes, I do realize that they are blocked, but sometimes it's just fun to mess with the system.
) Anyway, they aren't the first ISP to insert ads (search for "Phorm" or "ISP inserting ads"). Hopefully, these bad advertising practices by ISPs will be the next story to go viral on Weibo.Also, apparently, this has been going on a long time, so maybe we're actually lucky we are only now experiencing it:
#11
Original Poster
Join Date: Oct 2007
Location: Southeast USA
Programs: various
Posts: 6,710
@jiejie
You're not crazy. That's about the same time I started receiving the ads. There is a little box that pops up in the bottom-right-hand corner of my screen. The ads on my computer are for 10010 (China Unicom). I had a hunch it was them, but I decided to rule out the other possibilities first. Scans by various antivirus/malware/adware software detected nothing. I confirmed it was not a new type of advertising by the websites. With that out of the way, I called up China Unicom and I complained about pop-up ads; the representative stated that I had agreed to them in my contract when I signed up for internet service. It must be nice being a monopoly (many neighborhoods in China, including mine, only allow one ISP). At least they didn't deny it like they do every time I call up and complain that I can't access YouTube, Facebook, etc. (Yes, I do realize that they are blocked, but sometimes it's just fun to mess with the system.
) Anyway, they aren't the first ISP to insert ads (search for "Phorm" or "ISP inserting ads"). Hopefully, these bad advertising practices by ISPs will be the next story to go viral on Weibo.
Also, apparently, this has been going on a long time, so maybe we're actually lucky we are only now experiencing it:
You're not crazy. That's about the same time I started receiving the ads. There is a little box that pops up in the bottom-right-hand corner of my screen. The ads on my computer are for 10010 (China Unicom). I had a hunch it was them, but I decided to rule out the other possibilities first. Scans by various antivirus/malware/adware software detected nothing. I confirmed it was not a new type of advertising by the websites. With that out of the way, I called up China Unicom and I complained about pop-up ads; the representative stated that I had agreed to them in my contract when I signed up for internet service. It must be nice being a monopoly (many neighborhoods in China, including mine, only allow one ISP). At least they didn't deny it like they do every time I call up and complain that I can't access YouTube, Facebook, etc. (Yes, I do realize that they are blocked, but sometimes it's just fun to mess with the system.
) Anyway, they aren't the first ISP to insert ads (search for "Phorm" or "ISP inserting ads"). Hopefully, these bad advertising practices by ISPs will be the next story to go viral on Weibo.Also, apparently, this has been going on a long time, so maybe we're actually lucky we are only now experiencing it:
Thanks for confirming my sanity is still intact! The Chinese are complaining about this on the BBS's. It's apparently Beijing Unicom, a subset of China Unicom, and it's dependent on where you are located and what your building/apartment has hooked up. Which is why I seem to be one of the few on FT experiencing it. Also started getting it on IE browser, but not Opera (so far). Firefox: there is a fix.
Open Firefox (try to have latest or recent version).
Go to Tools.-->Addons-->search in the box for NoScript.
When NoScript comes up (curr version 2.2.8) Install it, and then Restart Firefox. This took care of it for me.
If however, the popup happens again, click on the curvy "S" NoScript icon that's now on your toolbar, and select Untrusted. That little popup may appear as family001.com--so send that sucker to Untrusted. And Restart Firefox again.
This ISP-inserted advert thing has not crashed or hung up my browsers yet, but I have read reports from Chinese users that that has been a problem.
Having the VPN on or off makes no difference in this nasty phenomenon. But interestingly, so far of the international websites I've visited (which is about 95% of my usage), it only happens on FT.
ETA: If any of you tech-savvy readers have further ideas on how to combat this corporate hijacking of my internet peace, please advise!
Last edited by jiejie; Feb 4, 2012 at 6:57 pm
#12
A FlyerTalk Posting Legend




Join Date: Dec 2000
Location: Shanghai
Posts: 46,399
@jiejie
You're not crazy. That's about the same time I started receiving the ads. There is a little box that pops up in the bottom-right-hand corner of my screen. The ads on my computer are for 10010 (China Unicom). I had a hunch it was them, but I decided to rule out the other possibilities first. Scans by various antivirus/malware/adware software detected nothing. I confirmed it was not a new type of advertising by the websites. With that out of the way, I called up China Unicom and I complained about pop-up ads; the representative stated that I had agreed to them in my contract when I signed up for internet service. It must be nice being a monopoly (many neighborhoods in China, including mine, only allow one ISP). At least they didn't deny it like they do every time I call up and complain that I can't access YouTube, Facebook, etc. (Yes, I do realize that they are blocked, but sometimes it's just fun to mess with the system.
) Anyway, they aren't the first ISP to insert ads (search for "Phorm" or "ISP inserting ads"). Hopefully, these bad advertising practices by ISPs will be the next story to go viral on Weibo.
Also, apparently, this has been going on a long time, so maybe we're actually lucky we are only now experiencing it:
You're not crazy. That's about the same time I started receiving the ads. There is a little box that pops up in the bottom-right-hand corner of my screen. The ads on my computer are for 10010 (China Unicom). I had a hunch it was them, but I decided to rule out the other possibilities first. Scans by various antivirus/malware/adware software detected nothing. I confirmed it was not a new type of advertising by the websites. With that out of the way, I called up China Unicom and I complained about pop-up ads; the representative stated that I had agreed to them in my contract when I signed up for internet service. It must be nice being a monopoly (many neighborhoods in China, including mine, only allow one ISP). At least they didn't deny it like they do every time I call up and complain that I can't access YouTube, Facebook, etc. (Yes, I do realize that they are blocked, but sometimes it's just fun to mess with the system.
) Anyway, they aren't the first ISP to insert ads (search for "Phorm" or "ISP inserting ads"). Hopefully, these bad advertising practices by ISPs will be the next story to go viral on Weibo.Also, apparently, this has been going on a long time, so maybe we're actually lucky we are only now experiencing it:
#13




Join Date: Apr 2009
Location: HKG
Posts: 1,397
Theoretically if everything were sent over the VPN then they would have no way of inserting ads, unless they planted malware on your machine.
#14
Original Poster
Join Date: Oct 2007
Location: Southeast USA
Programs: various
Posts: 6,710
It may be that you're not doing your DNS lookups over the VPN. See if your VPN client allows you to configure it so that DNS traffic gets sent over the VPN rather than in the clear.
Theoretically if everything were sent over the VPN then they would have no way of inserting ads, unless they planted malware on your machine.
Theoretically if everything were sent over the VPN then they would have no way of inserting ads, unless they planted malware on your machine.
--No malware on machine (that anybody can find.)
--Doesn't happen except accessing from my current (temporary) apartment, which is China Unicom service. Unless I'm missing something, the computer still has to access an ISP even before I activate the VPN. And it seems that THIS is the conceptual electronic interface point where the ISP is inserting the pop-up. How do you access the internet with no ISP?!?! While China (Beijing) Unicom can't see where I'm surfing over the VPN, they can tell that it's a computer hooked up to their ISP servers. And then if I happen to be in an advertising-targeted location, I'll get the popup along with the other users in that area.
--Doesn't happen when I take my computer to work and access, which is a different provider/ISP.
--Pop-up is a separate small window, not part of any frame of any website, and is sporadic....maybe most of the day, every 3-4 days. In Firefox with NoScript Addon, blitzed it. It did start popping up on IE also.
Since it's a temporary apartment and the service, though included in the rent, was not of my choosing and not in my name, I'll have to suck it up and deal, but since (per the Chinese chatter) it seems to be a China/Beijing Unicom problem, I'd probably not use them as a provider voluntarily, except if absolutely no other choice.
#15
FlyerTalk Evangelist




Join Date: Feb 2003
Posts: 11,259


