Reply
Forum owners - a good security tip
Old 02-01-2009, 06:25 PM Wink Forum owners - a good security tip
Banned

Posts: 922
Name: Geoff Vader
Location: In my dreams
Trades: 0
I am about to hack the passwords of several bnp members' usernames (ranging from a few years old to very recent, but heavily in use by the said bnp members) on a particular forum (miles away from here and everyone here, don't worry), for various reasons. I will then be putting them in the hands of a skilled activist with decades experience in handling morons like them.

I should warn all good forum owners (the owners of the said forum are way too stupid to read a site like this - they really don't know much about technology. They did find some of my posts on a guitar forum, but that's about it - if they ever found that I was here, in this guise, they'd have a field day, but the name is not one they're looking for)... the way to ensure you don't get hacked by this VERY simple method I am about to use, is to ensure that if a password is incorrect 3, or even 5 times, the user can't try and log in for a nice long time - I'd give it an hour if you really want to hinder hack attempts. They still happen, of course, but much more slowly. The involvement of cookies in certain subtle ways can ensure the hack attempt is impossible - no longer operable from a url's address (using the get method for the form).

The things I do for England.

Last edited by witnesstheday; 02-01-2009 at 06:27 PM..
witnesstheday is offline
Reply With Quote
View Public Profile
 
 
When You Register, These Ads Go Away!
Old 02-02-2009, 01:03 AM Re: Forum owners - a good security tip
Brian07002's Avatar
Defies a Status

Posts: 1,591
Name: ...
Location: ...
Trades: 0
Why hack? You can show your true qualities without hacking.
__________________
Sig Less - Have some site you want me to put here? Will put here for a couple of paypal bucks.
Brian07002 is online now
Reply With Quote
View Public Profile
 
Old 02-02-2009, 02:10 AM Re: Forum owners - a good security tip
Banned

Posts: 922
Name: Geoff Vader
Location: In my dreams
Trades: 0
I agree, and most of what I do is out in the open. But have you ever met a jewish yorkshireman prisonguard who supports the bnp? Every jew, every yorkshireman, and maybe even prisonguards would be against this man being the way he is {the ringleader of the bnp posse I mention}!

Besides, there are times when extreme racism causes me to have to take extraordinary actions - such as the pro-hamas site I hacked, long ago, for the same political reason (to psychologically harm someone particularly evil).

When I was 15, moreover, a bnp supporter scared the living michael out of me, and so to me BNP members are as fair game as any other terrorist! But I know what you mean and believe me I'd never use it for anything else (or I wouldn't be here showing loads of forum owners a few secrets on how to protect themselves... I'd leave their walls open in case I "wanted" to hack em!).

I'm not sure if ethical hacking is the same as hacking terrorists and pure evil racists, but to me what I am doing seems to be ethical. Plus it will give a lot of joy to someone who is a good guy and taught me a lot of what I know about being a decent chap. Not that I'm a decent chap, but I've been taught quite a lot about it!

I'm hesitant and haven't initiated the hack yet, purely because I hate this sort of thing myself. But I ran some tests, checked the security gap and will definitely root out those passwords. To me there are humans and there are racists. I can't put them both in the same category. I definitely do NOT hack humans. I'm very privacy-friendly too - I would never use my abilities in this field for personal gain, in terms of money, or women, or anything like that. Or even petty quarrels. But racists, terrorists and other criminals... that's a different story.

re the bnp...

When I hand those passwords over to my mate, I will feel very very pleased, as I did when I went into that pro-hamas site, went into the admin area and wiped out the streams of racist evil which a couple of people (one an ex American G.I. {greek by race} who felt that hamas was the ideal vehicle for his twisted anti-semitism). What pleased me most about that hacking was that as soon as I deleted all his posts and all the posts of his little sidekick, I then did a backup of all posts, so that reversion to the latest backup was a step behind and THEN I did the most inspired thing of all. I made all the right wing jews into moderators and sent them an email inviting them to come and moderate the forum! That way by the time the owners got to the forum it was crawling with information which blurred and distorted my own tracks a fair bit!

This time I won't take action myself. The guy I'll give the passwords to deals with these nazis all the time, so it's a gift. He can now (when i've got the passwords) play a few games with their minds. However right now this thing is my lowest priority - I am busy working on my boycott, my 'tardis' and my other issues, such as a new business I have begun on top of all else. Plus it's 9 degrees in my house and freezing and I'm ill - so I'm tending to that as well.

In a way for me to fight racism in Britain is for my kids, when I have them. Realism dictates that I accept I will spend my life in London and my kids will be born here and live here. I would like to go out of my way to destroy racism here and I suspect that when I have a bit more money and power I will do far more terrifying things to the racists of this country than hack their forum usernames! I really hate racist people - whether it's my dad, my best friend or johnny bnp... it fills me with a sense of shame at all humanity's failure. And I'd never want kids of mine to be attacked and terrified by a racist group like the bnp the way I was when I was way too young for that!

If you read what these bnp people write, the ones I am going to hack, you'd be sick. The ringleader recently stated that he really felt White ruled South Africa was a much better country than present South Africa and that not only should it be turned back into a White ruled country, but that the majority of sane people in the western world were in agreement with him!

So do you want me to shut him down or not?! Just kidding. I'm not going to make you an accomplice. The decision is mine, and I made it when I was 15 and one of his compadres tried to smash my face in!

if you are not british, you may need to read this to understand why the people i am hacking do, to most, count as a group of criminals:
http://en.wikipedia.org/wiki/British_National_Party

here's a bit of blurb about this wonderful white supremacist movement...

Quote:
Relations with neo-Nazi, terrorist and paramilitary groups

While Griffin was still a leading figure in the National Front, he was a close associate of Roberto Fiore, an Italian who, having fled to London, was convicted in absentia of belonging to the Nuclei Armati Rivoluzionari, a terrorist group that was alleged to have carried out the Bologna massacre, which killed 85 people and injured 200 others in a railway station.[228].[229] However, no connection to the bombing was ever proven, and the case is still open.
The group Combat 18 (C18), was formed in 1992 (although not originally under this name), to act as stewards for BNP rallies, which were often attacked by groups such as Anti-Fascist Action.[230] C18's first publicly-acknowledged terror action was an incendiary attack on a Communist Party premises in March 1992.[231] The BNP did not repudiate the attack until nearly two years later, when John Tyndall did so in an Organisers Bulletin on 14 December 1993. In his bulletin, Tyndall acknowledged that C18 had set itself up as "the disciplinary enforcement apparatus of the BNP", and claimed that C18 had been infiltrated by state informers.[232] In 2002, Adrian Marsden was elected as a councillor for the BNP, having previously had his house raided by the Special Branch in raids on Combat 18 supporters in 1999.[233]

Last edited by witnesstheday; 02-02-2009 at 02:35 AM..
witnesstheday is offline
Reply With Quote
View Public Profile
 
Old 02-02-2009, 02:37 AM Re: Forum owners - a good security tip
Banned

Posts: 922
Name: Geoff Vader
Location: In my dreams
Trades: 0
combat 18 went on to kill a number of black, asian and gay civlians in nailbomb terror attacks on highly populated areas in my home town of London (they chose areas where gay people, asian people and black people thronged in large numbers and they exploded nail bombs)

so you see I'm quite brave to hack these pots of toss, rather than unethical. but you know me... where there's a fight, there's a fighter. and indeed opposing them openly is dangerous - i try and get shafted every time, but one day they'll find me actually kill me. so it's best i learn how to deal with them using the underworld, a place a guy learns to embrace if he is classified as an underdog by a society who interestingly lets a lot of these bnp evil muthas get away with having their views and they get good jobs anyway, and me - i'm the wrong colour, or at least my name is... so i don't even get interviewed! so much the better... anonymity hides me from my enemies - many a racist mutha has yet, in time, to feel the blade of what I metaphorically call The Sword of Gaza!

Here's some news as recent as 2008, of more nailbomb terrorism planned...

Quote:
A Nazi sympathiser and paedophile who made nail bombs to attack black, Asian and Jewish people was jailed today for 16 years.
A judge at Leeds crown court told Martyn Gilleard, 31, of Poole Court, Goole, East Yorkshire, he believed he intended to cause "havoc" with the devices found by police under his bed.
Gilleard was found guilty yesterday of terrorist offences and also of possessing child pornography. Gilleard was found guilty yesterday of charges of engaging in conduct in preparation of terrorist acts and collecting information for terrorist purposes.
Police found four nail bombs, bladed weapons, bullets, documents about terrorism and extreme right-wing literature when they were searching his flat for child pornography in October last year.
Humberside police discovered around 39,000 indecent images of children, which included films and photographs and ranged from category one to five - where one is the least serious and five the most.
Gilleard admitted 10 specimen counts of possessing indecent images of children. He also pleaded guilty at an earlier hearing to possessing 34 cartridges of ammunition without holding a firearms certificate.
Police who searched Gilleard's flat discovered significant volumes of extreme right-wing literature and propaganda from far-right group Combat 18, as well as ammunition, weapons and homemade bombs.
A further search by detectives and forensic teams from the Counter Terrorism Unit (CTU) in Leeds uncovered more explosive material, camouflage clothing, balaclavas, a bomb-making manual and outdoor survival guides.
And they guy who is that ringleader I spoke of - he loves to go on about how mohammed is a paedophile! But he is on the same team as the paedophile above (and maybe even shared drinks with him - since they are both from the same place and have the same ideals) and with all people who want to kill all jews, black people, asians and gay people.

It's not much, but hacking his password will give a little bit of satisfaction.

Last edited by witnesstheday; 02-02-2009 at 03:17 AM..
witnesstheday is offline
Reply With Quote
View Public Profile
 
Old 02-02-2009, 06:24 PM Re: Forum owners - a good security tip
Decaf's Avatar
Ultra Talker

Posts: 490
Name: Adam
Trades: 0
Hacking is a waste of time, and hacking for personal gains/revenge is just sad. Sorry, but tell them of there errors and move along.
__________________
Decaf is offline
Reply With Quote
View Public Profile Visit Decaf's homepage!
 
Old 02-03-2009, 03:08 AM Re: Forum owners - a good security tip
Banned

Posts: 922
Name: Geoff Vader
Location: In my dreams
Trades: 0
Ah, advice from such an experienced wise source. I'm also thinking now, in the name of the best technologists I know, that hacking is the appropriate way to deal with all the spam that comes through our mailboxes! True, some of us use software to blot it out, but that doesn't stop it actually existing.

I think when I have even more time (and dosh) on my hands I'm going to start up the most vicious spam retaliation effort in the history of the internet - I shall root out the true sources of spam, inch by inch, and then not just wipe out all of their computers, but perhaps I'll first find their credit card numbers and order 1000 tins of canned spam to be sent to their home, and THEN wipe all their computers out!

Anyone who perverts the use of technology ought to be my target. I wonder how I should deal with the porn industry though? They provide a service and billions enjoy that service... so I suppose they, and the gamblers and other people who exploit society's weaknesses, aren't really fair game. But the spammers are, oh yes!

I'm not sure, Decaf, if you read anything about the BNP I posted! Do you think that nailbombers and terrorists should be handled like this: "but tell them of there errors and move along."!!!! I suppose it'd go a bit like "Well Mr BNP mutha, your error is wanting that me and anyone nonwhite in britain should be shipped out immediately to a "home country" whether we were born here, have 8 generations here, are black, asian, jewish, brazilian... I think you should seriously consider changing your mind and being a nicer person, eh?". Believe me when I was your age I DID try that approach! It led me to learn how to hack.

I seem to recall Chamberlain felt the same strategy would work for Hitler. No Adam, when you get a bit older you'll find that life is full of very unfair situations and the only way you can balance them is by learning to be unfair yourself. You obviously didn't read enough of what I wrote (as illustrated by your post in another thread I wrote on earlier) to really understand what I'm doing and why. You should not shoot first and ask questions later. Luckily I don't do that myself.

Last edited by witnesstheday; 02-03-2009 at 03:15 AM..
witnesstheday is offline
Reply With Quote
View Public Profile
 
Old 02-03-2009, 09:30 AM Re: Forum owners - a good security tip
Skilled Talker

Posts: 60
Name: Michael Swan
Location: United Kingdom
Trades: 0
An interesting post. I have hacked before, but my excuse is for knowledge and also it is ethical hacking.

I do not believe in illegal hacking because... WELL... ITS Illegal.

Hacking is more of a security based thing for me, because my theory is that if you are a good hacker then a good system administrator quality also comes there because of the security flaws which you are aware of.

Being a good hacker, does not mean that you have to breach the law. Being a good hacker, means that you are able to exploit security holes for the better.

I have a forum and i also have the timeout set to about an hour. I think that a good piece of security practice would be to have a timeout set to change with a random algorithm between an hour and two hours.

This would then make the timeout more unpredictable and thus harder for hackers to use automated software to brute force passwords.

~ Mike
ms2134 is offline
Reply With Quote
View Public Profile Visit ms2134's homepage!
 
Old 02-03-2009, 11:54 AM Re: Forum owners - a good security tip
Banned

Posts: 922
Name: Geoff Vader
Location: In my dreams
Trades: 0
Quote:

I do not believe in illegal hacking because... WELL... ITS Illegal.

Hacking is more of a security based thing for me, because my theory is that if you are a good hacker then a good system administrator quality also comes there because of the security flaws which you are aware of.

Being a good hacker, does not mean that you have to breach the law. Being a good hacker, means that you are able to exploit security holes for the better.
That's it totally. That's exactly the point. I think that apart from stupid laws (like you can't make mince pies at home on xmas eve in britain, legally speaking, or the "captain of school" at my secondary school is allowed to take a flock of sheep across london bridge any time he wants, and maybe, if government scientists are trustworthy, the cannabis laws) that applies on a broad level for me - whether it's in business, or personal issues, or anything... the law is the yardstick by which you measure what it is acceptable to do. I mean we don't need the law to tell us that murder is bad, of course, but as you tend away from obviously evil things, it's hard to know what's right and wrong and all you can do is try and trust in a decent workable social contract.

For example many employers who used racist policies to prevent me joining them, etc - are definitely lawbreakers, and it reassures me that the law is on my side there, even if the corporations have not been for some time - but Scotch Gordon is gonna put a boot in their erses (as they may say in glasgow? sorry, i'm not too good with scottish accents in writing... erses sounds a bit irish to me now, in retrospect).

I totally like the current foreign secretary, on the most irrelevant note possible!

Yeah, I agree that time-outs are good at HINDERING an attack but trust me it wouldn't stop me breaking in - first, I'd pick a moderator (then I can hack other people without using any forced entry) and I'd slow-burn my hacking tool for months - after 6 months of running 24 tests a day, that's 180 x 24... that'd give me nearly 4000 attempts. Not so big... hmm. I see what you mean, that could potentially slow you down to a crawl except for one thing... you could alternate through lots of users... spread yourself out laterally - i could for example take all the mods and try each one in succession, and if you started timing out IPs, I could use proxies.

Or you could even do this - you could have 10,000 forums, and run the hack tool on each of them one password attempt at a time, one forum per minute... you'd beat 100% of timeout security measures!

So really none of these tips can completely stop a hack attack on a forum - but then forum passwords and similar constructs are probably the easiest thing in cyberspace to hack! Considering the complex nature of access points to other, more sensitive accounts people have, such as email.

Have you seen the hotmail password-hack scam? some bloke with a hotmail address tells you to email his address, but it looks like an official hotmail address, including the username and password of YOUR account and then just the username of the account you want to hack. It's crazy what people fall for, really. It's quite a common scam from what i've seen online. They target middle class married people by saying that they can find out if their wife/husband is cheating - in fact that way they are ensuring this is what in the sales world we call someone with purchasing power! A married person is much more likely to not just have credit cards etc, but indeed to make purchases online and leave occasional trails of receipts, perhaps even more valuable data than that, in their hotmail account.

It's an unscrupulous world and internet crime is allegedly on the rise due to the crash... lots of desperate greedy people. So we should all watch out and work hard to secure ourselves, our customers, our friends and family, and anyone else we care about.

The only way to be truly capable of protecting yourself against and fighting off hackers and other unwanted people gaining false access to your site is to have the same abilities as them - and specifically this means you should be able to write your own scripts and indeed log directly into servers from commandlines and watch things coming and going yourself, as and when you choose to - if you want to see who's on your machine all you have to really do is go ask the machine "who's on my machine" - but if you don't know the language that the machine talks and the hacker does, well it's obvious which out of you and the hacker knows more about who's on your machine, when he/she is there particularly, but even at other times - according to what that hacker wants from your machine. The most common use of machines is to hijack them to send mass emails out to sell viagra and stuff like that. Or to carry out evil fraud - "phishing" (why the "Ph" anyway? what idiot thought of it? it's fishing, clearly) for bank/card passwords and details, etc.

Last edited by witnesstheday; 02-03-2009 at 12:37 PM..
witnesstheday is offline
Reply With Quote
View Public Profile
 
Old 02-03-2009, 06:38 PM Re: Forum owners - a good security tip
Decaf's Avatar
Ultra Talker

Posts: 490
Name: Adam
Trades: 0
witnesstheday: Just remember what goes around comes around, and treat others as you wish to be treated.

When you piss off a hacker who is better then you, watch out.
__________________
Decaf is offline
Reply With Quote
View Public Profile Visit Decaf's homepage!
 
Old 02-04-2009, 01:37 AM Re: Forum owners - a good security tip
Banned

Posts: 922
Name: Geoff Vader
Location: In my dreams
Trades: 0
Short answer: then I better become the best hacker.

Long answer: It's a fair point, but I don't (outside of extreme necessity) seek/hope to attack hackers because that would be attacking an I.T. expert - I'd never gladly attack an I.T. expert, just a dilettante. Spammers are mostly the latter. And other targets of mine are usually I.T. illiterate.

The thing about what goes around comes around is exactly what has created ME in the first place (a lengthy biography will only make me seem like an egomaniac, so just take my word for it!) I am Jack's only protection in a greedy materialistic society which has no sympathy for the weak and gives dominance to those without scruples, without feeling and without fear or love of justice.



And in the end I don't fear hacking the hackers because I cannot kneel, never, not before anyone*, and if someone gives themselves the ability to screw with me, I owe it to myself and anyone I love, whether platonically, familially or with a raging passion, to take away that ability from anyone who has it!

*well okay, there is one. But apart from her.

Last edited by witnesstheday; 02-04-2009 at 01:52 AM..
witnesstheday is offline
Reply With Quote
View Public Profile
 
Old 02-06-2009, 08:21 AM Re: Forum owners - a good security tip
Banned

Posts: 922
Name: Geoff Vader
Location: In my dreams
Trades: 0
I'll try and be brief - longwindedness is my vice when among those I like.

I thought of a realworld hacklike thing I did which was THE RIGHT thing to do.

One company fired me after 3 weeks because the racist supervisor materialist pointless piece of turd had started to personally dislike me - he preferred his gimps to have no confidence. It was 70k+ per year, so he had rights - if he said bark, they barked. I did my job, and I was fine. But he decided to boot me out.

When leaving the guy above him, who was 50/50 about losing me since it was more his *****'s decision than himself, took me to the firing room and told me that the actual reason for firing me was that they felt i didn't have the balls for the job (hard sales).

Anyway, so I rang up 3 major companies who were my former employers' clients, including Accenture, and told them truthfully about what I termed their "white names" policy (I would be calling as some white man, not myself - once or twice they'd refer to me by name and I'd not realise they were talking to me - on the phone I mean!)

They lost 1 client - which was an ethically progressive development-related institution! Well, people like that don't waste time. So my employers sent me legal threats from a JEWISH firm (pure traitorhood, oi vay) and I decided to let it lie. They told me that fellow workers of mine had been asked to verify my voice on messages left at the major companis mentioned - well i just mentioned one. These guys are proper big company people with proper activities down in the city - not goons. Just white, and ALLOWED to break every **** moral code of my city. Anyway, so he knows, I DO have balls. HE's the one that ought to call himself eunuch. Anyway. The thing I got worried about was the girl I'd struck up a strong bond with - she gave me her number, but after i left i didn't call her more than once because i got scared about what the company had done to my reputation with her during my little battle of wits.

That's why when I spoke to her a few weeks ago and she was just the same as ever with me and we had a very productive chat and it was no different to before... I realised, well only now, in the light of ALL of it, that i did the right thing.

I rang the Commission for Racial Equality and had told them the full details of all that had happened and they told me to PLEEEASE take legal action because that's what THEY stood for and tried so hard to get done because people just don't bother. I said - look, I have no money, I need to get another job, I need to move on - if I get into a legal battle, not only will they probably find a deceitful way to win, they'll also make me very stressed for a very long time and it will just make my life ****.

That's why people don't bother taking white men to court over racism against nonwhite workers, and why a lot of women don't bother fighting against chauvinism.

So what I did was brilliant. I took away about 50k of their profits for the next 2 years by removing a FAT BLUECHIP CLIENT from their list - they were so scared about how many more i'd take from them they sent me the most terrifying legal threat i've ever seen! I binned it immediately purely to ensure i did not fall prey to its psychological warfare!

who has balls wins.

(something i didn't include in my descrip to the CRE but which is true - is that the guy who had me removed was pretty seriously lustful about the girl i hope to go out with next month, and she really wasn't having it. she called him *****, in front of me, a short while before my departure, maybe as a goodbye present! i enjoyed it. lucky for her she found a better job long since then!)

Last edited by witnesstheday; 02-06-2009 at 08:26 AM..
witnesstheday is offline
Reply With Quote
View Public Profile
 
Reply     « Reply to Forum owners - a good security tip
 

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off





   
RSS Feed  Feeds: RSS   JS   XML
RSS Feed  Feeds for this forum: RSS   JS   XML

 



Page generated in 0.41873 seconds with 13 queries