[x3d-public] more little elves

[John Carlson]

$ nslookup alpha.web3dconsortium.org

Server:         127.0.0.53
Address:        127.0.0.53#53

Non-authoritative answer:
alpha.web3dconsortium.org       canonical name = web3dconsortium.org.
Name:   web3dconsortium.org
Address: 67.225.191.65
$ find . -type f -print0| xargs -0 grep alpha.web3dconsortium.org

[no output]

$ find . -type f -print0| xargs -0 grep 67.225.191.65

[no output]

$ find . -type f -print0| xargs -0 grep web3dconsortium.org

[no output]

Yes, I know about tunneling backwards through HTTPS.

It's not funny or humorous. It appears that a Java program 
(X3DJSAIL-based, potentially) is connecting to the web3dconsortium.org site

I will start auditing X3DJSAIL with similar searches.

John

On 8/28/21 7:28 PM, John Carlson wrote:
> Just noticed these connections.  I'll look through the examples I'm 
> running
>
> $ lsof -i
> COMMAND       PID         USER   FD   TYPE   DEVICE SIZE/OFF NODE NAME
> kdeconnec 1052534 coderextreme   13u  IPv6  4444337      0t0  UDP *:1716
> kdeconnec 1052534 coderextreme   14u  IPv6  4444338      0t0  TCP 
> *:1716 (LISTEN)
> java      1492305 coderextreme   12u  IPv6 12020289      0t0  TCP 
> coderextreme-Kubuntu20
> :56884->alpha.web3dconsortium.org:https (ESTABLISHED)
> java      1493264 coderextreme   12u  IPv6 12015610      0t0  TCP 
> coderextreme-Kubuntu20
> :56886->alpha.web3dconsortium.org:https (SYN_SENT)
>
> I wasn't running a web browser that I know of.  Also my Thunderbird 
> icon got erased from my desktop?
>
> John
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://web3d.org/pipermail/x3d-public_web3d.org/attachments/20210828/549587f5/attachment-0001.html>