iesnare - make sure you're not being snooped on.

[GlobalSquare]

time for a grrrrrr bump lol

after what i did before ive registered at BoDog and think ive visited 365 again just to nose at the enhanced odds .... just done a search

folders founds
1#mpsnare.iesnare -> C:\Documents and Settings\''USERNAME''\Recent -> Size 3kb -> type=Shorcut -> DateModded = 15/10/08
2mpsnare.iesnare -> C:\Documents and Settings\''USERNAME''\Recent -> Size 2kb -> type=Shorcut -> DateModded = 15/10/08
3#mpsnare.iesnare.com -> C:\Documents and Settings\''USERNAME''\Application Data\Microsoft\Office\Recent -> Size 2kb -> type=Shorcut -> DateModded = 15/10/08
4mpsnare.iesnare.com -> C:\Documents and Settings\''USERNAME''\Application Data\Marcomedia\Flash Player\#SharedObjects\5H8MMTMH -> Size = Blank -> type=FileFolder -> DateModded = 30/10/08
5#mpsnare.iesnare.com -> C:\Documents and Settings\''USERNAME''\Application Data\Marcomedia\Flash Player\macromedia.com\support\flashplayer\sys -> Size = Blank -> type=FileFolder -> DateModded = 30/10/08

Inside those folders (same order)
1 = Sol file called 'setting' -> size = 1kb -> date modded = 30/10/2008 -> date created = 30/10/2008 -> date accessed 6/11/2008
2 = Sol file called 'setting' -> size = 1kb -> date modded = 30/10/2008 -> date created = 30/10/2008 -> date accessed 2/11/2008
3 = Sol file called 'setting' -> size = 1kb -> date modded = 30/10/2008 -> date created = 30/10/2008 -> date accessed 6/11/2008
4 = Sol file called 'setting' -> size = 1kb -> date modded = 30/10/2008 -> date created = 30/10/2008 -> date accessed 2/11/2008
5 = Sol file called 'setting' -> size = 1kb -> date modded = 30/10/2008 -> date created = 30/10/2008 -> date accessed 6/11/2008

What those (sol)files say when converted into notepad
1 = ¿ STCSO mpsnare.iesnare.com/settings allow always klimit @Y
2 = ¿ KTCSO stm __vstl ,4qRIDvT0Lws2ScPQGtrJ1XAlRfsk913l7piszwsVSQ8=
3 = ¿ STCSO mpsnare.iesnare.com/settings allow always klimit @Y
4 = ¿ KTCSO stm __vstl ,4qRIDvT0Lws2ScPQGtrJ1XAlRfsk913l7piszwsVSQ8=
5 = ¿ STCSO mpsnare.iesnare.com/settings allow always klimit @Y


now i dont know enough about computer programming etc but if there is a way of changing the numbers in those files could it not get some people unlimited etc (the sort of hack gamers use online?).... if it helps ive not been limited at any bookies so those little numbers in the little box might be the standard for no limited account? (in notepad you cant see the little numbers just the surrounding box)

[GlobalSquare]

when i just posted that reply the numbers in the little boxes and the boxes werent visable ... i pressed quote and could see them again and then double checked and they now seem visible in the post .... but if they arent visable quoting might show them up (the boxes only appear in the last 5 bits as they are only written in the sol files


*edit* looking at the dates i listed id say the 3 first folders on the 15th were around the time i checked out 365 (didnt deposit .. was about to today but not now for obvious reasons) or when i wiped them and the last two about the time i joined BoDog

looking at the file dates id say they were all from BoDog ... the dates i signed up and then when i played ... guessing the three on the 6th were from the search on my computer just?



*hmmm the little boxes have now dissapeared ... and quoting isnt working for me so will discribe them
they are little square boxes the size of a letter that contain four small numbers (one in each 1/4), most of them are set at 0 in all the boxes apart from the one in the bottom right hand quarter/corner

as an example
5 = ¿ STCSO 'BOX' 'BOX'mpsnare.iesnare.com/settings 'BOX'allow'BOX' 'BOX'always'BOX' 'BOX'klimit @Y
1st box = three 0 with a 4 in the bottom right 1/4
2nd box = doesnt show up in notpad only when i copy the whole line to the reply box here
3rd box = three 0 with a 5 in the bottom right 1/4
4th box = three 0 with a 1 in the bottom right 1/4
5th box = three 0 with a ? in the bottom right 1/4 (unsure if its a 5 or a 6 they are that small)
6th box = three 0 with a 1 in the bottom right 1/4
7th box = three 0 with a ? in the bottom right 1/4 (unsure if its a 5 or a 6 they are that small)

I think all five files had the same numbers showing in the boxes when its possible to see them

[munk]

when i just posted that reply the numbers in the little boxes and the boxes werent visable ... i pressed quote and could see them again and then double checked and they now seem visible in the post .... but if they arent visable quoting might show them up (the boxes only appear in the last 5 bits as they are only written in the sol files


*edit* looking at the dates i listed id say the 3 first folders on the 15th were around the time i checked out 365 (didnt deposit .. was about to today but not now for obvious reasons) or when i wiped them and the last two about the time i joined BoDog

looking at the file dates id say they were all from BoDog ... the dates i signed up and then when i played ... guessing the three on the 6th were from the search on my computer just?



*hmmm the little boxes have now dissapeared ... and quoting isnt working for me so will discribe them
they are little square boxes the size of a letter that contain four small numbers (one in each 1/4), most of them are set at 0 in all the boxes apart from the one in the bottom right hand quarter/corner

as an example
5 = ¿ STCSO 'BOX' 'BOX'mpsnare.iesnare.com/settings 'BOX'allow'BOX' 'BOX'always'BOX' 'BOX'klimit @Y
1st box = three 0 with a 4 in the bottom right 1/4
2nd box = doesnt show up in notpad only when i copy the whole line to the reply box here
3rd box = three 0 with a 5 in the bottom right 1/4
4th box = three 0 with a 1 in the bottom right 1/4
5th box = three 0 with a ? in the bottom right 1/4 (unsure if its a 5 or a 6 they are that small)
6th box = three 0 with a 1 in the bottom right 1/4
7th box = three 0 with a ? in the bottom right 1/4 (unsure if its a 5 or a 6 they are that small)

I think all five files had the same numbers showing in the boxes when its possible to see them

The problem is that the sol files are binary files, ie not meant to be human readable, just machine readable. So as you found out it's hard to deal with them in more ways than one - when pasting on a forum but also if you wanted to try and edit them, it's not straightforward like it would be with a text file.

You could try hit/miss trial/error to change the files, but then again you'd never know for sure you made the right changes unless you could see the iesnare end of the conversation... there's no way to know for sure your changes worked.

Re things not showing in the forum, you could try using the [code] tags (it's the '#' button in the edit box ^^^ (next to the [q] button).

So stuff looks like:

asdf
asdf
asd
fasdf

etc.

[GlobalSquare]

 ¿   STCSO      mpsnare.iesnare.com/settings     allow   always   klimit @Y

ah worked that time

Ive no need to alter the code as ive not been limited (my problem is i keep finding the damn thing lol)... it was more an idea for someone else to try out if they have been limited

and the code bit worked from what i can tell thanks! make that it doesnt work lol ... hit save on the edit and theyve gone again but i could see them when i submitted

Ahwell deleted them now that youve seen and you dont think there will be an easy fix for those limited

[munk]

Hah yes [strike] is one bbcode I miss as well on here! Need to get onto that, strikeout is quite useful

[wndllll]

Bearing in mind I have little to no idea about all this stuff, just thought this thread might help me.
I've not joined any of the "marked" bookies yet other than Jaxx which was my first and I assume that corresponds to the mpsnare file that I have found. Since then I went through the 2nd method of preventing ipsnare that was suggested whereby the ping-thingy does something different ( I couldn't seem to do the first method even though i apparently have admin access so I gave up)
I've joined 15+ bookies since with no problems (none on the "mpsanre list" but today I tried signing up for the BlueSquare £100 offer through betrescue. I have filled out the registration form and clicked on "submit" and the icon just turns to "busy" followed by absolutely nothing happening.
I emailed CS and was told to "check my cookies" which has had no effect. I just wondered if the reason that I can't sign up could be anything to do with the measures taken to prevent mpsnare?
I know I'm clutching at straws but I simply can't think of any thing else it could be and some of you seem incredibly good at this stuff!
Cheers

[munk]

I can't answer you definitively since I don't know exactly how bookies use iesnare. In my experience I've not had issues signing up to new bookies after disabling iesnare - on the sites that do use iesnare I presume the iesnare functionality just 'gives up' after a certain period (ie a few seconds if it doesn't work, it'll just go on without it). All I could suggest would be to try again later, perhaps try another web browser or even another machine if possible and if all else fails then re-enable iesnare (remove those lines from your hosts file) and try then. If it does work then ... that's pretty scary really.

I don't imagine they'd pop up a message though saying 'sorry unable to carry out this request, you won't let us spy on you!!'!

[wndllll]

I'm sure it can't be that sinister but I guess this is a good chance for an experiment anyway.
My girlfriend has a pc using the same router but she uses Mozilla (vs my IE) so I could try through there first - or maybe it would be interesting to see if renabling the iesnare has an effect first. I'll have a go a bit later when i bust out of this poker tourney
Thanks for the suggestions!

Edit: Sooo, I deleted those lines that I added and lo and behold , the registration goes through immediately. That's a bit spooky! I just ran a search for mpsnare and there're only the 2 original folders that have been there since 9/9, nothing new. I'm going to put that line straight back in before I do anything else and hope the site still works.
It could of course be coincidence but I've been trying to do the same registration form all afternoon, I've restarted my pc, changed cookie settings and all sorts - I'd say it failed to work 15-20 times. They're gonna follow my mouse pointer aren't they!

[wndllll]

Just another update in case it's of interest - I added the iesnare-blocker again (don't know what to call it - we need some catchy acronym ) and now I seem able to navigate the site with no problems. I won't be placing any bets until tomorrow at the earliest but if I run into any more problems, I'll let you know.
If anyone else is in a similar situation - it would be interesting to see if they have the same issue.

[munk]

Very odd then. Apparently the iesnare functionality only gets involved sometimes when you go to specific parts of the site - ie to deposit or withdraw... as always though there's just no guide to it at all given that it's supposed to be sneaky by design!

Cheers for the info though