Montreal Webcam www.montrealwebcam.com Locus

Solved
Melo et Marc -  
 RoseDesBois -
Hello, I was a user of montrealwebcam.com and I would like to warn other swinger couples like us. Here’s what I’m explaining.
I signed up like many of you on montreal webcam. I knew after a TV ad that it was a trustworthy site run by an "American" registration company, but it is indeed a Quebec company (meetstream).

I met wonderful couples on this site until the day my husband, a programmer analyst for the Videotron company, looked into the little software that (MEETSTREAM) their famous video system and another program meetstreamIP that asked us to install.

After analysis and due to his curiosity, he concluded and certified that this software is nothing more than a trojan that gives 100% access to the root of your machine.

Of course, it is not detected as a trojan since you accepted the installation.

Your IP, your Mac address, as well as several serial numbers of your components (dll). Thus giving access to port opening, a large window opened on your documents and settings!

Read the terms of use before installing anything.

Unless you don’t see a constraint in disclosing the entirety of your private life to them.

I am saddened by this conclusion but montrealwebcam.com should correct the situation.

I spoke to an operator of this site montrealwebcam with a written analysis report certifying this trojan. I only received a message from this person saying that if we were not happy, we should simply leave the site. Personally, I find that very sad.

For more information, Google: meetstream virus, thank you Melo
Configuration: Windows XP Internet Explorer 6.0

56 réponses

  • 1
  • 2
  • 3
Caroline Ménard CIT
 
Hello, it is while searching for information about the montrealwebcam site following complaints made by several of my clients that I come across this topic. First of all, montrealwebcam uses a very outdated video transmission technology as it is akin to using software to transmit video images from your computer. The software in question is an ActiveX control that installs on your computer that you wish to broadcast from your webcam or not. To do this, you give permission to this control to access certain areas of your computer that are not specified during installation. These areas are accessible from the server that does not use any secure connections for data exchange and furthermore, the ActiveX control comes from a third-party site and has no certificate to prove its integrity, which explains the difficulty of installing it and the numerous alert messages warning you of the risks.

To give you an example, Windows Live Messenger, even though it has risks, uses a specific secure port on your machine for data exchange. The Meetstream control, on the other hand, asks for access to the "entirety" of your computer during installation. The open and unsecured ports can be discovered in less than 30 seconds by a "port scanner" as soon as you know the IP address of a user and since the connection is not secure at all, one can browse the computers of those who have Meetstream just as easily as on their own machine.

So if some (surely the site's owner themselves) come here to say that the site is very focused on security, it makes me laugh. How can you trust a site whose owner struggles to code HTML and uses a series of dubious controls to give you access to the site? So, the video images are intercepted, the content of your computer too, and the private messages. Very reassuring, isn’t it? The question to ask is: Is what you see on this site worth exposing your machine to everyone?

If you are curious enough to witness the human degradation and see people showing their bodies mangled by misery because they have nothing better to do while waiting for their check on the 1st of the month, don’t come crying the day you find your account drained, your credit card frauded, or your reputation lost.... Financial companies will only compensate you if you have taken the necessary measures to secure your computer. Allowing a control to access your entire computer despite security warnings is not what you would call prudent behavior.

For your information: Sites using a Flash module to transmit your video image send your data to a media flash server via the RTMP protocol which uses a secure port. The server then processes the upload, converts it, and retransmits it to the site. This is much safer and that is why most "serious" sites use this system. This, however, is very expensive for sites for which security and quality are not a concern.

Here are some clues that should make you think:

- The montrealwebcam site has no privacy policy apart from a simple sentence "We do not disclose in any way the confidential data of our users."

- The site has no legal entity, no address, no certificate attesting that we are indeed on a duly managed site by those who claim to be the owners. In case of problems, they can just say they only manage it and do not know the owners. This explains why the Meetstream site is fully hosted elsewhere and uses fake information.

- The site has no rules and no disciplinary measures are indicated to users who might be tempted to access personal data from other members.

- The credit card payment system is registered with a different name than the site itself.

- With a zone alarm type firewall, the Meetstream control sends data to the internet even when we are not on montrealwebcam.

There you go.
13
  • 1
  • 2
  • 3