Logo

Boy Lane · 02-12-2011, 09:51 PM

[Updated 7 Mar]

I post this here separately from the other too long thread as this is important information and a much better way than disabling/enabling streaming media all the time.

Thanks to no2redzone there is supposedly a simple way to prevent zF RedZone from collecting your data. Add the following entries to your hosts file

Code:

127.0.0.1 isellsl.ath.cx
127.0.0.1 isellsl.com
127.0.0.1 zfire.isellsl.com
127.0.0.1 girlsofthevip.com
127.0.0.1 hamlinpro.com
127.0.0.1 syscast.net
127.0.0.1 media.syscast.net
127.0.0.1 apache2-blow.port-au-prince.dreamhost.com
127.0.0.1 quickware.net
127.0.0.1 www.quickware.net
127.0.0.1 quickware.zapto.org
127.0.0.1 wh0.zapto.org
127.0.0.1 m.sparkgap.info
127.0.0.1 policedepartmentonsl.info
127.0.0.1 sparrowindustries.net

You can find the file here:
WinXP - Win7: C:\WINDOWS\system32\drivers\etc\hosts
Linux: /etc/hosts
MacOS: /private/etc/hosts
(to edit the file you need admin rights)

Working hosts file for Windows (just download and replace the existing one): hosts

What it does is preventing the DNS (domain name service) resolution of that website, assign your localhost IP (127.0.0.1) to it and keep everything that it wants to send to this site on your own PC.

His main site is using a free DNS service (ath.cx) and can be changed at anytime. So this may not prevent spying on you in future releases. But it should kill RedZone for now. Also he started redirecting traffic to the .com.

Not sure if ~~girlsofthevip.com and hamlinpro.com~~ also belong to him. They look similarly unprofessional at least

. But they are hosted at the same IP (76.104.212.177) that points directly to Redzone.

The anonymously registered domains/URLs syscast.net, media.syscast.net and apache2-blow.port-au-prince.dreamhost.com were supposedly used by CDS. They may not be needed anymore. m.sparkgap.info is ~~highly suspicious and might be associated with~~ CDS ~~or a similar tool. Not leaving it to chance,~~ blocked too.

policedepartmentonsl.info appears to be another data collector hidden behind Redzone and tons of popups.

sparrowindustries.net is used by another CDS / Redzone copycat product that works the same way, and is blocked the same way.

How to block Quickware? The newcomer on the block, not much information seems to be available other than the tool does the same as RedZone, supposedly it scans residents, puts them into a database and correlates data to identify alts. Same story, ToS violation. Quickware is hosted in the Netherlands, with a number of domains linking to one IP: 193.93.174.118. So to block this spyware you should add this IP to your firewall blocks. Adding quickware.net, quickware.zapto.org and wh0.zapto.org to the hosts file may not be sufficient here. The relevant section is added to the list above.

WARNING: Greenzone is not always able to detect Redzone, especially the latest versions. As it appears Greenzone also runs their own nasty little database, the very same way as Redzone. So colors do not matter. Just stay away from any people creating zones for whatever: ZF Redzone, Disclosure of SecondLife Alts.

Boy Lane · 02-13-2011, 03:14 AM

One more thing to mention, this will of course also block access to the RedZone website/forum. If someone wants to go there anyway

bronxelf · 02-13-2011, 03:31 AM

Quote:

Originally Posted by Boy Lane

One more thing to mention, this will of course also block access to the website/forum. If someone wants to go there anyway

So far it's not blocking access to the website. Im listing stuff on marketplace right now.

Boy Lane · 02-13-2011, 03:34 AM

Not the SL website/marketplace. But the RedZone one (isellsl.ath.cx).

bronxelf · 02-13-2011, 03:35 AM

Quote:

Originally Posted by Boy Lane

Not the SL website/marketplace. But the RedZone one (isellsl.ath.cx).

Ah! okay following along now.

Sorry for the confusion.

**Psyke Phaeton** · 02-13-2011, 03:38 AM

Quote:

Originally Posted by Boy Lane

I post this here separately from the other too long thread as this is important information and a much better way than disabling/enabling streaming media all the time.

Thanks to no2redzone there is supposedly a simple way to prevent zF RedZone from collecting your data. Add the following entry to your hosts file

Code:

127.0.0.1 isellsl.ath.cx

You can find the file here (WinXP - Win7):
C:\WINDOWS\system32\drivers\etc\hosts

What it does is preventing the DNS (domain name service) resolution of that website, assign your localhost IP (127.0.0.1) to it and keep everything that it wants to send to this site on your own PC.

This is a free DNS service (ath.cx) and can be changed at anytime. So this may not prevent spying on you in future releases. But it should kill RedZone for now.

Dont forget to add isellsl.com which is on a different IP address.
https://webcache.googleusercontent.c...www.google.com

Boy Lane · 02-13-2011, 03:43 AM

Quote:

Originally Posted by Psyke Phaeton

Dont forget to add isellsl.com which is on a different IP address.
https://webcache.googleusercontent.c...www.google.com

Seems that just forwards to the ath.cx one, which is a bit strange. I'd do it the other way around.

**Psyke Phaeton** · 02-13-2011, 03:53 AM

Quote:

Originally Posted by Boy Lane

Seems that just forwards to the ath.cx one, which is a bit strange. I'd do it the other way around.

For now. The goal would be to roll out a new RZ using the .com address then point that new address to the new IP. Bypassing blocks on the old name and IP. We can chase them all around the net

Chalice Yao · 02-13-2011, 04:11 AM

What's to note is that the .com address is merely forwarding to isellsl.ath.cx on HTTP connect, not directly pointing at the IP.

isellsl.com itself is hosted at hosting24.com.

I am amused how the owner of a '6000 dollar server' that needs ro be 'upgraded' because of RedZone's workload (...at a home comcast address...) is now going for the full 7 dollar per month deluxe webhosting plans here.

Walker · 02-13-2011, 04:27 AM

It's hard to appreciate how RedZone could ever have funded that class of hardware given its one-off fee and lack of subscription model.

Boy Lane · 02-13-2011, 04:30 AM

Quote:

Originally Posted by Walker

It's hard to appreciate how RedZone could ever have funded that class of hardware given its one-off fee and lack of subscription model.

Now don't give him ideas!

Walker · 02-13-2011, 04:36 AM

I just assumed the one-off fee model was his way of competing with the subscription funded Gemini CDS.

Chalice Yao · 02-13-2011, 05:34 AM

Quote:

Originally Posted by Walker

It's hard to appreciate how RedZone could ever have funded that class of hardware given its one-off fee and lack of subscription model.

See, the beauty of it all is, that if he is -really- struggling with the load with a *6000 dollar server* (TM), he's as clueless as it gets when it comes to programming, networking and resource management. If he -doesn't- have a 6000 dollar server on his little home address, he's an idiot who likes to senselessy brag in front of his clueless customers with a non-existant e-penis.

Either way he loses with his comment. :3 Ain't it grand?

Relm Foxdale · 02-13-2011, 05:46 AM

So the price is the spec?

Customer: "Excuse me, is this server any good?"

Salesman: "Good? Why it's $6000!"

Chalice Yao · 02-13-2011, 05:50 AM

P.s. lol 'wind storm':

Quote:

When I try to login I am seeing this error

Warning: mysql_num_rows() expects parameter 1 to be resource, boolean given in /Library/WebServer/Documents/signin.php on line 26 Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /Library/WebServer/Documents/signin.php on line 70 Warning: mysql_num_rows() expects parameter 1 to be resource, boolean given in /Library/WebServer/Documents/signin.php on line 79 No database selected

Quote:

Their was a wind storm that killed the power to the server, there by killing your update and login.
The server is back up now.
For everyone else, please update as I just created a new version. =)

Yeees, and since the power to the server was killed by a 'wind storm' (That 6000 dollar server sure is protected), the website at the same place was running..how?

Walker · 02-13-2011, 05:52 AM

Crazy. Everybody knows that the truly awesome servers are over 9000.

Innula Zenovka · 02-13-2011, 05:54 AM

Quote:

Originally Posted by Boy Lane

One more thing to mention, this will of course also block access to the RedZone website/forum. If someone wants to go there anyway

But if you want, you can still visit it, despite having thus blocked it for normal access, by using Anonymouse.org(available as a handy FireFox add on at https://addons.mozilla.org/en-US/fir...anonymouseorg/ )

Lil Hapmouche · 02-13-2011, 06:04 AM

Quote:

Originally Posted by Walker

Crazy. Everybody knows that the truly awesome servers are over 9000.

But does it come with windstorms?

Walker · 02-13-2011, 06:09 AM

Quote:

Originally Posted by Lil Hapmouche

But does it come with windstorms?

Kind of.

Relm Foxdale · 02-13-2011, 06:11 AM

/me runs off to increase all her prices to L$6000 so people will know the food is good.

And it's impervious to SL wind!

I like this model.

Couldbe Yue · 02-13-2011, 09:01 AM

Is this anything like when guys tell me that this |---------------------------------------| is 6 inches?

Walker · 02-13-2011, 09:03 AM

Absolutely.

Walker · 02-14-2011, 09:17 AM

What about putting these in your hosts file instead?

Code:

127.0.0.1 girlsofthevip.com
127.0.0.1 www.girlsofthevip.com
127.0.0.1 isellsl.ath.cx
127.0.0.1 www.isellsl.ath.cx
127.0.0.1 isellsl.com
127.0.0.1 www.isellsl.com

Overly paranoid perhaps?

Boy Lane · 02-14-2011, 09:22 AM

Added girlsofthevip.com in the first posting. The www should not be necessary. But if you're really paranoid

.

I assume he will try to set up more addresses anyway, so these need to be monitored and updated.

Sione · 02-14-2011, 10:14 AM

Quote:

Originally Posted by Boy Lane

Added girlsofthevip.com in the first posting. The www should not be necessary. But if you're really paranoid

.

I assume he will try to set up more addresses anyway, so these need to be monitored and updated.

I hope he does. I hope he spends $100's buying up domain names before LL shut him down.

02-12-2011, 09:51 PM	#1 (permalink)
Boy Lane The Rainbow Girl One last Latex Doll. Join Date: Dec 2008 Location: The other end of your world... Posts: 2,651 My Mood: SL Join Date: Back in 2006 Client: Rainbow :)	How to stop zF RedZone [Updated 7 Mar] I post this here separately from the other too long thread as this is important information and a much better way than disabling/enabling streaming media all the time. Thanks to no2redzone there is supposedly a simple way to prevent zF RedZone from collecting your data. Add the following entries to your hosts file Code: 127.0.0.1 isellsl.ath.cx 127.0.0.1 isellsl.com 127.0.0.1 zfire.isellsl.com 127.0.0.1 girlsofthevip.com 127.0.0.1 hamlinpro.com 127.0.0.1 syscast.net 127.0.0.1 media.syscast.net 127.0.0.1 apache2-blow.port-au-prince.dreamhost.com 127.0.0.1 quickware.net 127.0.0.1 www.quickware.net 127.0.0.1 quickware.zapto.org 127.0.0.1 wh0.zapto.org 127.0.0.1 m.sparkgap.info 127.0.0.1 policedepartmentonsl.info 127.0.0.1 sparrowindustries.net You can find the file here: WinXP - Win7: C:\WINDOWS\system32\drivers\etc\hosts Linux: /etc/hosts MacOS: /private/etc/hosts (to edit the file you need admin rights) Working hosts file for Windows (just download and replace the existing one): hosts What it does is preventing the DNS (domain name service) resolution of that website, assign your localhost IP (127.0.0.1) to it and keep everything that it wants to send to this site on your own PC. His main site is using a free DNS service (ath.cx) and can be changed at anytime. So this may not prevent spying on you in future releases. But it should kill RedZone for now. Also he started redirecting traffic to the .com. Not sure if ~~girlsofthevip.com and hamlinpro.com~~ also belong to him. They look similarly unprofessional at least . But they are hosted at the same IP (76.104.212.177) that points directly to Redzone. The anonymously registered domains/URLs syscast.net, media.syscast.net and apache2-blow.port-au-prince.dreamhost.com were supposedly used by CDS. They may not be needed anymore. m.sparkgap.info is ~~highly suspicious and might be associated with~~ CDS ~~or a similar tool. Not leaving it to chance,~~ blocked too. policedepartmentonsl.info appears to be another data collector hidden behind Redzone and tons of popups. sparrowindustries.net is used by another CDS / Redzone copycat product that works the same way, and is blocked the same way. How to block Quickware? The newcomer on the block, not much information seems to be available other than the tool does the same as RedZone, supposedly it scans residents, puts them into a database and correlates data to identify alts. Same story, ToS violation. Quickware is hosted in the Netherlands, with a number of domains linking to one IP: 193.93.174.118. So to block this spyware you should add this IP to your firewall blocks. Adding quickware.net, quickware.zapto.org and wh0.zapto.org to the hosts file may not be sufficient here. The relevant section is added to the list above. WARNING: Greenzone is not always able to detect Redzone, especially the latest versions. As it appears Greenzone also runs their own nasty little database, the very same way as Redzone. So colors do not matter. Just stay away from any people creating zones for whatever: ZF Redzone, Disclosure of SecondLife Alts. __________________ The Rainbow Girl Be plurked: http://plurk.com/BoyLane Last edited by Boy Lane; 03-07-2011 at 10:45 AM. Reason: added www.quickware.net to play safe

02-13-2011, 03:14 AM	#2 (permalink)
Boy Lane The Rainbow Girl One last Latex Doll. Join Date: Dec 2008 Location: The other end of your world... Posts: 2,651 My Mood: SL Join Date: Back in 2006 Client: Rainbow :)	One more thing to mention, this will of course also block access to the RedZone website/forum. If someone wants to go there anyway Last edited by Boy Lane; 02-13-2011 at 03:35 AM. Reason: clarified/added "RedZone"

02-13-2011, 04:11 AM	#9 (permalink)
Chalice Yao The Purple Kinda at work. Somewhat. Join Date: Dec 2007 Location: Somewhere purple, Germany Posts: 6,682 My Mood: SL Join Date: 20. January 2007 Client: NaCl	What's to note is that the .com address is merely forwarding to isellsl.ath.cx on HTTP connect, not directly pointing at the IP. isellsl.com itself is hosted at hosting24.com. I am amused how the owner of a '6000 dollar server' that needs ro be 'upgraded' because of RedZone's workload (...at a home comcast address...) is now going for the full 7 dollar per month deluxe webhosting plans here. __________________ "Have you ever noticed that anybody driving slower than you is an idiot, and anyone going faster than you is a maniac?" - George Carlin

02-13-2011, 05:46 AM	#14 (permalink)
Relm Foxdale Senior Member Join Date: Dec 2010 Location: USA Posts: 493 My Mood: SL Join Date: 7/12/2009 Business: Foxdale Fine Foods (also Luckstone's of Boulderden on an alt) Client: Phoenix	So the price is the spec? Customer: "Excuse me, is this server any good?" Salesman: "Good? Why it's $6000!" __________________ Foxdale Fine Foods - Azora and Spellfire Group Food Baskets of Fun - Easter Egg Hunt - April 1-30

02-14-2011, 09:17 AM	#23 (permalink)
Walker jraffnapped *SLU Supporter* Halp! Join Date: Jul 2007 Posts: 15,567 Awards: 1	What about putting these in your hosts file instead? Code: 127.0.0.1 girlsofthevip.com 127.0.0.1 www.girlsofthevip.com 127.0.0.1 isellsl.ath.cx 127.0.0.1 www.isellsl.ath.cx 127.0.0.1 isellsl.com 127.0.0.1 www.isellsl.com Overly paranoid perhaps?

02-13-2011, 03:34 AM	#4 (permalink)
Boy Lane The Rainbow Girl One last Latex Doll. Join Date: Dec 2008 Location: The other end of your world... Posts: 2,651 My Mood: SL Join Date: Back in 2006 Client: Rainbow :)	Not the SL website/marketplace. But the RedZone one (isellsl.ath.cx).

02-13-2011, 04:27 AM	#10 (permalink)
Walker jraffnapped *SLU Supporter* Halp! Join Date: Jul 2007 Posts: 15,567 Awards: 1	It's hard to appreciate how RedZone could ever have funded that class of hardware given its one-off fee and lack of subscription model.

02-13-2011, 04:36 AM	#12 (permalink)
Walker jraffnapped *SLU Supporter* Halp! Join Date: Jul 2007 Posts: 15,567 Awards: 1	I just assumed the one-off fee model was his way of competing with the subscription funded Gemini CDS.

02-13-2011, 05:52 AM	#16 (permalink)
Walker jraffnapped *SLU Supporter* Halp! Join Date: Jul 2007 Posts: 15,567 Awards: 1	Crazy. Everybody knows that the truly awesome servers are over 9000.

02-13-2011, 06:11 AM	#20 (permalink)
Relm Foxdale Senior Member Join Date: Dec 2010 Location: USA Posts: 493 My Mood: SL Join Date: 7/12/2009 Business: Foxdale Fine Foods (also Luckstone's of Boulderden on an alt) Client: Phoenix	/me runs off to increase all her prices to L$6000 so people will know the food is good. And it's impervious to SL wind! I like this model.

02-13-2011, 09:03 AM	#22 (permalink)
Walker jraffnapped *SLU Supporter* Halp! Join Date: Jul 2007 Posts: 15,567 Awards: 1	Absolutely.

02-14-2011, 09:22 AM	#24 (permalink)
Boy Lane The Rainbow Girl One last Latex Doll. Join Date: Dec 2008 Location: The other end of your world... Posts: 2,651 My Mood: SL Join Date: Back in 2006 Client: Rainbow :)	Added girlsofthevip.com in the first posting. The www should not be necessary. But if you're really paranoid . I assume he will try to set up more addresses anyway, so these need to be monitored and updated. Last edited by Boy Lane; 02-14-2011 at 09:35 AM.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Logo

Site Navigation