If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|
Thread Tools | Rate Thread | Display Modes |
#16
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
VanguardLH on Thu, 6 Dec 2018 19:24:03 -0600 typed in
alt.windows7.general the following: Char Jackson wrote: pyotr filipivich wrote: Like the story about the guy who fell down a well, and while in the well "found God", that doesn't make pushing people down a well a valid form of evangelism. B-) Let us not be hasty in ruling it out, though. Well, if the well were deep enough or dry, and if the victim were good enough, maybe he really will find God ... the hard way: he died and went to heaven. As for the guy who pushed him in, maybe someone was behind him, too, and pushes him in but in his afterlife he won't meet up with his victim. And, and, and --- Verb Sap: just because it worked for one individual, does not necessarily mean it is a applicable to everybody. -- pyotr filipivich Next month's Panel: Graft - Boon or blessing? |
Ads |
#17
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
On Thu, 6 Dec 2018 10:45:48 -0500, Mayayana wrote:
"pyotr filipivich" wrote | I'm getting messages, that I can't 'reach a website. | I get the same thing. The problem with that is it's hard to know what they're trying to do because it happens before the page loads. Since it's encrypted I can't see in something like Smart Sniffer what the conversation is with the server. Telerik Fiddler can intercept encrypted connections to show you the conversation with the web server. (FYI Telerik Fiddler is not a packet sniffer like Smart Sniffer; Telerik Fiddler works like a local web proxy.) I think it usually means that they want to snoop and can't, so it's just looping, but I don't know the details. I generally find that with very commercial sites. -- Kind regards Ralph |
#18
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
On Thu, 06 Dec 2018 15:06:24 -0800, "pyotr filipivich"
wrote in article ... VanguardLH on Thu, 6 Dec 2018 16:34:30 -0600 typed in alt.windows7.general the following: Let me start by saying "thanks" for all the technical support. pyotr told use which web browsers he uses but nothing about which extensions he has installed into each, Most of which I don't know, nor (sorry to say) do I care enough to hunt down. If memory serves, I have the barebones loaded. or what happens when he loads the web browsers in their safe mode to eliminate modification of content by any installed extensions. Anti-virus software that interrogates web traffic can also affect odd behavior in a web page. Ufda. Like I said, article was not interesting enough for me to try to get past whatever is going wonky. Such is life - I'm "too busy" trying to figure out how to map the alumacantor circles for a Astrolabe. (I can figure out how to do it with a compass and rule {aka Geometry Old School} but when I trig out the numbers, they're not making sense. Guess I'm going to have to construct one to scale, measure the drawing, and work back from that.) Somewhat OT but youve piqued my interest: google hasnt heard of an alumacantor so what is it? JJ |
#19
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
John Jones wrote:
Somewhat OT but youve piqued my interest: google hasnt heard of an alumacantor so what is it? |___||____| | | almacantar or almucantar There is no "u" between the "l" and "m", and the "o" is an "a". There was a compounding of mispellings. https://www.thefreedictionary.com/Almacantar https://www.thefreedictionary.com/almucantar |
#20
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
"Ralph Fox" wrote
| Telerik Fiddler can intercept encrypted connections to show | you the conversation with the web server. | | (FYI Telerik Fiddler is not a packet sniffer like Smart | Sniffer; Telerik Fiddler works like a local web proxy.) | Thanks. That looks interesting. I don't think I care enough to use an adware program that requires me to give them an email address. But it's interesting to know. I've been working on a Bing maps program and was just wondering yesterday whether any tool can get pre-encrypted data. If it can really do that then it seems it must be more a hook than a proxy. I call winhttp. Winhttp calls bing and intitiates a TLS-encrypted conversation. It seems something like fiddler would have to hook in between me and winhttp. Or in the case of a browser, between the browser and something like crypt32.dll. Do you know what I mean? Do you happen to know the details of how that works? I was wondering because the REST map apis for things like Google and Bing require using a key these days. I'm switching from Google to Bing because Google just started requiring a credit card. Bing doesn't, but it does have a limit. It might be impossible to fully hide the key, but I'm trying to figure out more. For instance, someone with a Google account might put the key in their webpage, have it spread around by someone in China, and end up being charged thousands of dollars by Google for going over the free limit. Similarly, software that doesn't encrypt would make it simple for anyone to read the key. Probably a crack of the software could get the key, but that would likely be more work than it's worth to hackers. |
#21
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
VanguardLH on Fri, 7 Dec 2018 04:40:44 -0600 typed in
alt.windows7.general the following: John Jones wrote: Somewhat OT but youve piqued my interest: google hasnt heard of an alumacantor so what is it? |___||____| | | almacantar or almucantar There is no "u" between the "l" and "m", and the "o" is an "a". There was a compounding of mispellings. https://www.thefreedictionary.com/Almacantar https://www.thefreedictionary.com/almucantar Yep. First I mispronounce the word, then misspell what I remembered. -- pyotr filipivich Next month's Panel: Graft - Boon or blessing? |
#22
|
|||
|
|||
Almucantar / Astrolabes, Error message "www.thepoachedegg.net redirected you too many times."????
John Jones on Fri, 7 Dec 2018 09:39:35 -0000 typed
in alt.windows7.general the following: On Thu, 06 Dec 2018 15:06:24 -0800, "pyotr filipivich" wrote in article ... VanguardLH on Thu, 6 Dec 2018 16:34:30 -0600 typed in alt.windows7.general the following: Let me start by saying "thanks" for all the technical support. pyotr told use which web browsers he uses but nothing about which extensions he has installed into each, Most of which I don't know, nor (sorry to say) do I care enough to hunt down. If memory serves, I have the barebones loaded. or what happens when he loads the web browsers in their safe mode to eliminate modification of content by any installed extensions. Anti-virus software that interrogates web traffic can also affect odd behavior in a web page. Ufda. Like I said, article was not interesting enough for me to try to get past whatever is going wonky. Such is life - I'm "too busy" trying to figure out how to map the alumacantor circles for a Astrolabe. (I can figure out how to do it with a compass and rule {aka Geometry Old School} but when I trig out the numbers, they're not making sense. Guess I'm going to have to construct one to scale, measure the drawing, and work back from that.) Somewhat OT but youve piqued my interest: google hasnt heard of an alumacantor so what is it? Ah, there's the problem, I misspelled it. "Almucantar" from the Arabic 'sundial'. You want to look up Astrolabe (the predecessor to the sextant). The Almucantar circles are how circles of latitude are transferred from a sphere (the earth) to a plane by stereographic projection. https://wikivisually.com/wiki/Astrolabe#Construction The frustrating part of this is that goggling "constructing an astrolabe" gets all sorts of pre-printed templates, but very little on the mechanics of calculating where the points for the various latitudes are located. I found myself measuring the constructed diagram and seeing if my calculations "worked". Grumble, I had a URL for an app "Abacus for Android" but I lost it. -- pyotr filipivich Next month's Panel: Graft - Boon or blessing? |
#23
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
On Fri, 7 Dec 2018 04:40:44 -0600, "VanguardLH" wrote in
article ... John Jones wrote: Somewhat OT but youve piqued my interest: google hasnt heard of an alumacantor so what is it? |___||____| | | almacantar or almucantar There is no "u" between the "l" and "m", and the "o" is an "a". There was a compounding of mispellings. https://www.thefreedictionary.com/Almacantar https://www.thefreedictionary.com/almucantar Many thanks JJ |
#24
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
Mayayana wrote:
"Ralph Fox" wrote | Telerik Fiddler can intercept encrypted connections to show | you the conversation with the web server. | | (FYI Telerik Fiddler is not a packet sniffer like Smart | Sniffer; Telerik Fiddler works like a local web proxy.) | Thanks. That looks interesting. I don't think I care enough to use an adware program that requires me to give them an email address. But it's interesting to know. I've been working on a Bing maps program and was just wondering yesterday whether any tool can get pre-encrypted data. If it can really do that then it seems it must be more a hook than a proxy. I call winhttp. Winhttp calls bing and intitiates a TLS-encrypted conversation. It seems something like fiddler would have to hook in between me and winhttp. Or in the case of a browser, between the browser and something like crypt32.dll. Do you know what I mean? Do you happen to know the details of how that works? I was wondering because the REST map apis for things like Google and Bing require using a key these days. I'm switching from Google to Bing because Google just started requiring a credit card. Bing doesn't, but it does have a limit. It might be impossible to fully hide the key, but I'm trying to figure out more. For instance, someone with a Google account might put the key in their webpage, have it spread around by someone in China, and end up being charged thousands of dollars by Google for going over the free limit. Similarly, software that doesn't encrypt would make it simple for anyone to read the key. Probably a crack of the software could get the key, but that would likely be more work than it's worth to hackers. Just a proxy, so it's possible your own proxying could sidestep it. For HTTPS, it must install a certificate into the global certificate store (certmgr.msc) to perform a local man-in-the-middle attack, the same way anti-virus software (e.g., Avast) manage to intercept HTTPS traffic to look for malicious content. I also use a stream capture program (Applian Replay Media Capture) that uses the same technique (proxy with cert), so it can capture video streams from HTTPS sources. If RMC crashes, I don't get any web traffic until I clear out the proxy settings in the OS (Internet options - Connections - LAN settings - Proxy server). I've been nailed by software not undoing the proxy setting often enough (upon their exit or upon their crash) that I created a shortcut that loads a .reg file that clears this proxy setting rather than drill through the Internet Options wizard to check. As I recall, Google Chrome will use the global Internet Settings in Windows. Firefox may, too, but Mozilla likes to internalize such things. For example, Firefox does not use the global cert store in the OS and instead uses their own. That meant I couldn't use RMC to capture HTTPS video streams until Applian figured out how to install a cert in Firefox's private cert store (but the option to re-insert their cert is overly buried in RMC's settings). https://www.youtube.com/watch?v=2pTlA3AG4W8 Looks like you have to enable Fiddler to intercept HTTPS. After enabling Fiddler to intercept HTTPS traffic, look in certmgr.msc to see if a new certificate got installed. When I do the same in Avast, it adds an "Avast Web/Mail Shield Root" certificate. Inserting certs into the local cert store (in a sysprep image for their workstations) for a MITM interception of encrypted traffic is how many companies can monitor your traffic using their property (i.e., their workstations and their network). I've used Fiddler in the past (which became Fiddler2 and now Fiddler4). I don't remember any ads in the product to qualify it as adware. I see they now want an e-mail address and location. Use for an e-mail address and give them whatever location you (but you'll probably want to pick something where the official language is the same as yourself). |
#25
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
On Fri, 7 Dec 2018 10:22:08 -0500, Mayayana wrote:
"Ralph Fox" wrote | Telerik Fiddler can intercept encrypted connections to show | you the conversation with the web server. | | (FYI Telerik Fiddler is not a packet sniffer like Smart | Sniffer; Telerik Fiddler works like a local web proxy.) | Thanks. That looks interesting. I don't think I care enough to use an adware program that requires me to give them an email address. I don't get ads. But it's interesting to know. I've been working on a Bing maps program and was just wondering yesterday whether any tool can get pre-encrypted data. If it can really do that then it seems it must be more a hook than a proxy. I call winhttp. Winhttp calls bing and intitiates a TLS-encrypted conversation. It seems something like fiddler would have to hook in between me and winhttp. Or in the case of a browser, between the browser and something like crypt32.dll. Do you know what I mean? Do you happen to know the details of how that works? It works as a local web proxy, like I wrote, and not as a hook like you think. Fiddler generates a unique root certificate for my installation. I import this into the browser's certificate store so the browser will accept SSL certificates from Fiddler's local web proxy and Fiddler's local web proxy can do a man-in-the-middle interception of SSL. I keep a separate Firefox profile for this job. All this information is available on the Telerik Fiddler website. I was wondering because the REST map apis for things like Google and Bing require using a key these days. I'm switching from Google to Bing because Google just started requiring a credit card. Bing doesn't, but it does have a limit. It might be impossible to fully hide the key, but I'm trying to figure out more. For instance, someone with a Google account might put the key in their webpage, have it spread around by someone in China, and end up being charged thousands of dollars by Google for going over the free limit. Google maps checks the HTTP 'Referer' header. Simply putting your key in a different website won't work. Similarly, software that doesn't encrypt would make it simple for anyone to read the key. Probably a crack of the software could get the key, but that would likely be more work than it's worth to hackers. -- Kind regards Ralph |
#26
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
"VanguardLH" wrote
| After enabling Fiddler to intercept HTTPS traffic, look in certmgr.msc | to see if a new certificate got installed. When I do the same in Avast, | it adds an "Avast Web/Mail Shield Root" certificate. Inserting certs | into the local cert store (in a sysprep image for their workstations) | for a MITM interception of encrypted traffic is how many companies can | monitor your traffic using their property (i.e., their workstations and | their network). I didn't know about this. I've written a MIME filter before, to sit in front of IE and filter the pages it gets, but I'm not sure whether that works with encryption. I'm not clear on the steps. But it would seem that anything sitting in the middle also has to intercept the full exchange and perform its own version of decryption. Maybe that's why it needs a cert? |
#27
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
On Fri, 7 Dec 2018 12:52:11 -0600, VanguardLH wrote:
the same way anti-virus software (e.g., Avast) manage to intercept HTTPS traffic to look for malicious content. Exactly. As I recall, Google Chrome will use the global Internet Settings in Windows. Firefox may, too, but Mozilla likes to internalize such things. For example, Firefox does not use the global cert store in the OS and instead uses their own. That meant I couldn't use RMC to capture HTTPS video streams until Applian figured out how to install a cert in Firefox's private cert store (but the option to re-insert their cert is overly buried in RMC's settings). * From Fiddler, I export Fiddler's certificate to a file. * From Firefox, I import the certificate file into Firefox's certificate store. Options Privacy and Security View Certificates Import Fiddler itself doesn't need to figure out how to install a cert in Firefox's private cert store. After enabling Fiddler to intercept HTTPS traffic, look in certmgr.msc to see if a new certificate got installed. The Fiddler instructions say to manually import the certificate into the Windows certificate store. https://docs.telerik.com/platform/knowledge-base/how-to/how-to-trust-fiddler-root-certificate I installed Fiddler from a non-Admin account, so it would not have been able to update the Windows certificate store in any case. -- Kind regards Ralph |
#28
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
"Ralph Fox" wrote
| I was wondering because the REST map apis | for things like Google and Bing require using | a key these days. I'm switching from Google | to Bing because Google just started requiring a | credit card. Bing doesn't, but it does have a | limit. It might be impossible to fully hide the key, | but I'm trying to figure out more. For instance, | someone with a Google account might put the | key in their webpage, have it spread around by | someone in China, and end up being charged | thousands of dollars by Google for going over the | free limit. | | Google maps checks the HTTP 'Referer' header. Simply | putting your key in a different website won't work. | I'm not sure we're talking about the same thing. Up until recently no key was even needed. I was using their maps in my own software. No referrer. I'm doing that now with Bing. They both have different categories of usage. It's possible they check the source in some cases, such as a corporate in-house usage. Maybe they check referrers for webpage usage, though I doubt it. But the usage category I'm dealing with is meant for public software use, especially phone apps. So the app and key would stay the same, but the caller would change. Different IP. No referrer. That means any number of people can call for maps using the same key. |
#29
|
|||
|
|||
Almucantar / Astrolabes, Error message "www.thepoachedegg.net redirected you too many times."????
On Fri, 07 Dec 2018 07:44:12 -0800, "pyotr filipivich"
wrote in article ... John Jones on Fri, 7 Dec 2018 09:39:35 -0000 typed in alt.windows7.general the following: On Thu, 06 Dec 2018 15:06:24 -0800, "pyotr filipivich" wrote in article ... VanguardLH on Thu, 6 Dec 2018 16:34:30 -0600 typed in alt.windows7.general the following: Let me start by saying "thanks" for all the technical support. pyotr told use which web browsers he uses but nothing about which extensions he has installed into each, Most of which I don't know, nor (sorry to say) do I care enough to hunt down. If memory serves, I have the barebones loaded. or what happens when he loads the web browsers in their safe mode to eliminate modification of content by any installed extensions. Anti-virus software that interrogates web traffic can also affect odd behavior in a web page. Ufda. Like I said, article was not interesting enough for me to try to get past whatever is going wonky. Such is life - I'm "too busy" trying to figure out how to map the alumacantor circles for a Astrolabe. (I can figure out how to do it with a compass and rule {aka Geometry Old School} but when I trig out the numbers, they're not making sense. Guess I'm going to have to construct one to scale, measure the drawing, and work back from that.) Somewhat OT but youve piqued my interest: google hasnt heard of an alumacantor so what is it? Ah, there's the problem, I misspelled it. "Almucantar" from the Arabic 'sundial'. You want to look up Astrolabe (the predecessor to the sextant). The Almucantar circles are how circles of latitude are transferred from a sphere (the earth) to a plane by stereographic projection. https://wikivisually.com/wiki/Astrolabe#Construction While still OT all q interesting. That's a very good article but I found https://www.math.ubc.ca/ ~cass/courses/m30901a/montero/math309project.html (word wrap) Slightly easier to read. And it contains a transcript of part of Chaucer's explanation of use. I also found a maple treatise where the author complains he could find no document expounding the calculations so he had to do it all himself. Trouble is you need maple to read the actual diagrams and they want $239 for a personal licence : so that's that. The frustrating part of this is that goggling "constructing an astrolabe" gets all sorts of pre-printed templates, but very little on the mechanics of calculating where the points for the various latitudes are located. I found myself measuring the constructed diagram and seeing if my calculations "worked". Grumble, I had a URL Indeed. Spherical trig: too many cosines herr mozart. JJ |
#30
|
|||
|
|||
Error message "www.thepoachedegg.net redirected you too many times."????
On Thu, 06 Dec 2018 18:14:25 -0600, Char Jackson wrote:
On Thu, 06 Dec 2018 15:06:24 -0800, pyotr filipivich wrote: Different strokes for different folks. Like the story about the guy who fell down a well, and while in the well "found God", that doesn't make pushing people down a well a valid form of evangelism. B-) Let us not be hasty in ruling it out, though. Damn you!!! I was just taking a sip of coffee when I read that. Now I have clean up the computer room. -- croy |
Thread Tools | |
Display Modes | Rate This Thread |
|
|