Followup on Inquiry about regreSSHion postmortem

[Aaron Rainbolt]

It tries to redirect me to "theannoyingsite" on both Chrome and
Firefox here. (Do not be like me and mistakenly think it's probably
one of those anti-LLM harvester things and proceed to press and hold
space like it asks you to. It pulls a bunch of JavaScript shenanigans
to play loud music, do a bunch of random Bing searches (or whatnot),
and make browser windows dance across the screen.)

On Wed, Aug 20, 2025 at 3:48 PM hvjunk <hvjunk at gmail.com> wrote:
>
> strange, everytime I click on that link, it “just opens the CVS diff logs”… tested on Safari and Brave
>
> > On 20 Aug 2025, at 22:39, Martin Paljak <martin at martinpaljak.net> wrote:
> >
> > This does in fact redirect as described.
> >
> >> On 20. Aug 2025, at 23:02, hvjunk <hvjunk at gmail.com> wrote:
> >>
> >>>
> >>> https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/log.c.diff?ipk=fF83_JCDCKqCJ85QEwn7jbP5Ag2cF3ZCTZ6QbjGp4RE&r1=1.52&r2=1.53&f=h
> >>>
> >>> Redirects your browser via 301 to https://theannoyingsite.com/
> >>
> >> don’t know where you get that, unless your own browser is compromised, and I pointed you to the direct source to show you your malice.. apologies you’ve now brainwashed me .. your stupidity/insanity of not investigating and asking the right questions before jumping on the blame game bandwagon…
> >
> >
> > $ wget -S 'https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/log.c.diff?ipk=fF83_JCDCKqCJ85QEwn7jbP5Ag2cF3ZCTZ6QbjGp4RE&r1=1.52&r2=1.53&f=h'
> > --2025-08-20 23:31:17--  https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/log.c.diff?ipk=fF83_JCDCKqCJ85QEwn7jbP5Ag2cF3ZCTZ6QbjGp4RE&r1=1.52&r2=1.53&f=h
> > Resolving cvsweb.openbsd.org (cvsweb.openbsd.org)... 128.100.17.243
> > Connecting to cvsweb.openbsd.org (cvsweb.openbsd.org)|128.100.17.243|:443... connected.
> > HTTP request sent, awaiting response...    HTTP/1.1 301 Moved Permanently
> >  Connection: close
> >  Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline';
> >  Content-Type: text/html
> >  Date: Wed, 20 Aug 2025 20:31:18 GMT
> >  Location: https://theannoyingsite.com/
> >  Server: OpenBSD httpd
> >  Transfer-Encoding: chunked
> > Location: https://theannoyingsite.com/ [following]
> > --2025-08-20 23:31:18--  https://theannoyingsite.com/
> > Resolving theannoyingsite.com (theannoyingsite.com)... 50.116.11.184
> > Connecting to theannoyingsite.com (theannoyingsite.com)|50.116.11.184|:443... connected.
> > HTTP request sent, awaiting response... No data received.
> >
> >
> >
> >
>
> _______________________________________________
> openssh-unix-dev mailing list
> openssh-unix-dev at mindrot.org
> https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev