www.tosecdev.org warnings in eventviewer when visiting eab

[Retroplay]

Do you use a VPN by any chance ?
If you do, maybe try and select another location.

Seems like DNS is borked on some locations
https://www.whatsmydns.net/#A/www.tosecdev.org

[honx]

i'm not using any vpn. i have my main pc directly connected to my modem, my notebook and my phone connect to modem using wifi to get to internet.
all adresses (ip, dns) i get from my provider.
on my windows 8 notebook i als tried changing dns, in "Eigenschaften von Internetprotokoll Version 4 (TCP/IPv4)" i checked "Folgende DNS-Serveradressen verwenden:" i entered 208.67.222.222 in "Bevorzugter DNS-Server" and 208.67.220.220 in "Alternativer DNS-Server". and then i tried google dns (8.8.8.8, 8.8.4.4), this tosecdev.org thingamajigs never is reachable. not using open dns and not using google dns.

so can someone PLEASE untangle eab.abime.net from that not reachable www.tosecdev.org bullshit so i finally GET RID of these damn warnings when visiting eab? as i already said: i am here to visit EAB and NOT that tosecdev.org bullshit!!!

[honx]

eab is still infested that with warning spamming www.tosecdev.org bullshit!

[Exodous]

When I go to eab.abime.net, my computer doesn't try to go to www.tosecdev.org. This suggests that it is something local to your computer that is making your browser go there.

You said you use Firefox, so...

• Open a "New private window" from the menu at the top right.
• Press F12 to open the developer toolbar (by default this opens at the bottom).
• On the developer toolbar, if it's not already selected, select the "Network" tab (no. 1)
• On the next row down, ensure the word "All" is selected (no. 2)
• In your address bar type: https://eab.abime.net/
• The bottom window will fill up with a load of links
• In the "Filter urls" box (no. 3), type: tosec
• If the page is trying to open www.tosecdev.org, it will appear in the list below (no. 4)
• Finally press F12 to close the developer toolbar

This shoud look like the attached screenshot.

If nothing appears, repeat the same steps above (apart from the private window) on your normal session and see what happens, then let us know.

[honx]

will try that tomorrow.

another question regarding a possible workaround(?): would it help, if i edit /etc/hosts file and add 127.0.0.1 for www.tosecdev.org? will these warnings go away if i do so? because on localhost (127.0.0.1) there shouldn't be any timeout, there should be simply nothing...

[Exodous]

That should stop the DNS errors, but it won't fix the cause of the problem.

I wonder if it's some add-on that is automatically trying to check page content vs whether linked content may be on TOSEC?

Try running Firefox in what they call "Troubleshoot Mode", but I call it "Safe mode". See here: https://support.mozilla.org/en-US/kb...x-in-safe-mode

[honx]

i just had that network tab opened, while that tosecdev warning spam appeared again.
it doesn't show anything, if i search for "tosec". this thread here was the first i visited.

afaik troubleshoot mode disables all addons, which is not very helpful when it comes to narrowing this problem down to one addon.
now i'll just add tosecdev to hosts file, because i also don't want to disable one addon after the other, i'm way too lazy for that...

[Exodous]

If you had the developer mode open on the network tab and the warning appeared, then it's not coming from the browser loading the page you're viewing.

Troubleshoot mode helps narrow it down to being either one of your add-ons, or something (malware for example) installed on your PC. Agreed it doesn't tie down which add-on is causing it, but it could help point you in the general direction.

The hosts entry will stop the error, if not the cause

[honx]

i added tosecdev.org and www.tosecdev.org to hosts file, now i'll have to watch and see if this works.

fun fact: six months ago (march 4th) i already had one warning regarding www.tosecdev.org in event viewer. back then it was only one warning. but now, since december 25th, there are eleven warnings regarding tosecdev so far...

[honx]

adding tosecdev.org to hosts file does NOT stop these damn warnings! i just again got such a warning despite having tosecdev bullshit in hosts file.

i wish someone would simply shut down this tosecdev bullshit which isn't working anyway...

//edit: i found another prefetch entry in about:config.
along with "network.prefetch-next" (which i already set to false a few days ago) i found "network.dns.disablePrefetch" which i now set to false. maybe this works...

i hate www.tosecdev.org!

[honx]

now tosecdev.org seems to be reachable again... now i can't test if my new settings (network.dns.disablePrefetch) do work or not.

[van_dammesque]

Originally Posted by honx

now tosecdev.org seems to be reachable again... now i can't test if my new settings (network.dns.disablePrefetch) do work or not.

Yes works for me now as well.