IMM SORY1!1!! i almost skullfucked a moose

Guest

OK you can stop trying to ban me now. My proxies switch out after every connection.

I'm posting to say that I'm sorry for the panic and you people are far less fun than I had assumed.

I would like to object to the expressions of horror at the mere addition of a forum and the de-adminning of someone who tried to end my fun.

...

What should REALLY be horrifying you is, wtf is this doing here:
http://www.khakain.com/theboard/phpbb2/some dude.txt

But seriously folks, I kid.

My username has apparently been deleted, but due to [GAPING SECURITY HOLE OMITTED HAHAHAHA], I still have access to [GAPING SECURITY HOLE OMITTED HAHAHAHA].

I could have sealed this gaping security hole, of course, but as my server's IP has been banned from khakain.com, I cannot use the tools I've made to correct it.

Oh well, someone will point it out eventually. No one will notice until someone gets curious. And that's when you have problems.

I'll let you know in a week. And I'm sorry for the trouble I caused you, Zman. I'll tell Jesus to forgive the ban, too.

Efreit · Posted: Thu Dec 16, 2004 1:47 am Post subject:

Meh, people suck, some dude. Don't let the man get you down.
_________________
i got soul but im not a soldier

Krono · Posted: Thu Dec 16, 2004 1:53 am Post subject:

Yeah, seriously. Most people here think you're awesome. No one would mind if you stuck around.

drewnb · **cochinillo** Joined: 21 Nov 1999 Posts: 1640

Why would the some dude be banned from here? He should be admin.

Zman · Posted: Thu Dec 16, 2004 2:11 am Post subject:

I'm guessing HOAX.

Edit: And that file seems to be 404.

drewnb · **cochinillo** Joined: 21 Nov 1999 Posts: 1640

Actually it did read 'some dude was here'.
_________________
[B][78][F5][FF][K]

Zman · Posted: Thu Dec 16, 2004 2:25 am Post subject:

Looks like it's ShadowLynk's fault.

Archdeco · Posted: Thu Dec 16, 2004 2:28 am Post subject:

All the more reason to keep some dude around.

Who Cares · Posted: Thu Dec 16, 2004 2:34 am Post subject:

I've been a some dude fan since his tour with Whitesnake in '85.

Zman · Posted: Thu Dec 16, 2004 2:47 am Post subject:

Security hole fixed....hopefully.

Archdeco · Posted: Thu Dec 16, 2004 2:50 am Post subject:

But oh, the damage that has been done. Like me, Krono and Kal being admins.

Any chance it could stay that way?

drewnb · **cochinillo** Joined: 21 Nov 1999 Posts: 1640

Yes it should.

Especially for Kal.
_________________
[B][78][F5][FF][K]

Krono · Posted: Thu Dec 16, 2004 2:52 am Post subject:

We very obviously deserve it.

Especially, yeah, Kal.

(And me and Deco, too, that is)

Archdeco · Posted: Thu Dec 16, 2004 2:55 am Post subject:

Even if you de-admin the both of us, keep Kal on. He's long overdue.

Archdeco · Posted: Thu Dec 16, 2004 3:01 am Post subject:

Vaginas, every last one of you.

Zman · Posted: Thu Dec 16, 2004 3:01 am Post subject:

I'm not touching anything. I'm too damn tired. Copying and pasting the change log from 2.0.10 to 2.0.11 is a pain in the ass.

Assassin · Posted: Thu Dec 16, 2004 3:56 am Post subject:

I'm a big some dude fan, he should be an administrator. Seriously.

Flea · Puta Traidora Joined: 17 Oct 1999 Posts: 1376 Location: SD

Jesus. Who cares if you're an admin for a message board? Whoopdeeshit, you have the ability to screw everything up. Whee.

Assassin · Posted: Thu Dec 16, 2004 4:11 am Post subject:

I don't really care if he's an administrator, he should just be allowed to stick around at least. Obviously he didn't do too much, I fell asleep around 6 P.M. EST and woke up around 11 and apparently between 11 and now everything's been fixed.

Flea · Puta Traidora Joined: 17 Oct 1999 Posts: 1376 Location: SD

Fucking around with the board very much now is kind of like being an Arab shortly after 9/11. Generally not a good idea, as tempers are still short.

Zman · Posted: Thu Dec 16, 2004 4:16 am Post subject:

Someone deleted his account (not me) and someone banned his IP's (me). I'm waiting for him to reply so I can unban him because the IP logs are gone.

Reitz · Posted: Thu Dec 16, 2004 8:42 am Post subject:

If the gaping security hole is Snip's back door, we all know about it and it's kind of an inside joke around here. Thanks to work I totally missed everything, but eh.
_________________
"Colonel! I've located a ration... but it's trapped behind some sort of metal forcefield! I... I can't get through it!"
"...Raiden, it's just a can, there's a tab..."
"This wasn't in VR training!"

KALIMDEL · Posted: Thu Dec 16, 2004 10:30 am Post subject:

HEY WTF WAS I AN ADMIN OR SOMETHING?? FUCK I MISSED IT.

Efreit · Posted: Thu Dec 16, 2004 12:25 pm Post subject:

Zman · Posted: Thu Dec 16, 2004 2:00 pm Post subject:

It was though the fuckin word highlight code.

The Cabbage · Member since 1999 Joined: 09 Oct 1999 Posts: 3698

_________________
I got ants in my pants and I need to dance.

DAVE · Posted: Thu Dec 16, 2004 4:02 pm Post subject:

Too awesome.

I think he should be an admin because, hell, if he wanted to, are you going to stop him?

Guest · Posted: Thu Dec 16, 2004 4:03 pm Post subject:

The exploit words on all phpbb boards at version 2.0.10 or lower, and works best on 2.0.10.

Basically all you need is the address of the board and a working topic ID number, and you can execute any command on the system with the permissions of the webserver.

I could give you all the address of the tools I made being that they no longer work here, but I don't want to incite mayhem across the internet again.

The GAPING SECURITY HOLE I was referring to earlier was the fact that I had removed authentication checking from the "admin" folder. Between the hours of 11PM and 1AM last night it was possible to log out and access the administration panel from anywhere.

Being that I could have just erased the entire home directory (rm -rf ~/), which includes the board, I think I did relatively minimal damage.

Now aren't you all glad I found this before some trickster did?

Krono · Posted: Thu Dec 16, 2004 4:15 pm Post subject:

See? He's like our very dangerous, slightly offsetting, but overall pretty cool guardian angel.

Who Cares · Posted: Thu Dec 16, 2004 4:18 pm Post subject:

Aww, thanks, sweetie.

The Letter E · Joined: 17 Mar 2005 Posts: 0

Weeee unbanned....

I kinda miss my "Taker of Childrens Candy" custom rank, though...

Krono · Posted: Thu Dec 16, 2004 6:18 pm Post subject:

So what kind of stuff can't you hack? I'm curious. What are some successful security measures that have (or could possibly have) kept you out in the past?

Archdeco · Posted: Thu Dec 16, 2004 6:22 pm Post subject:

Are things like, say, Gamefaqs accounts out of your reach?

Rocketlex · Posted: Thu Dec 16, 2004 6:23 pm Post subject:

Oh, God, not this again...
_________________
Board City
(A fantastic comic of words!)

Zman · Posted: Thu Dec 16, 2004 8:28 pm Post subject:

I'm sure SL isn't the smartest person when it comes to making good passwords.

Efreit · Posted: Thu Dec 16, 2004 10:00 pm Post subject:

The Letter E · Joined: 17 Mar 2005 Posts: 0

Rocketlex · Posted: Thu Dec 16, 2004 11:37 pm Post subject:

I wonder, would it be possible to set some sort of trap program? Something which looks like an exploit but, when used, actually sends out a virus or something?
_________________
Board City
(A fantastic comic of words!)

Dunkinbean · Posted: Thu Dec 16, 2004 11:38 pm Post subject:

The Fonz · Posted: Thu Dec 16, 2004 11:39 pm Post subject:

Heh, same with the new windows firewall. I turned that shit off the second it DL'd SP2.

Zman · Posted: Thu Dec 16, 2004 11:57 pm Post subject:

Gamefaqs accounts would probably be pretty easy for Brutus to crack, especially since the username is already known.

Zman · Posted: Thu Dec 16, 2004 11:59 pm Post subject:

You guys know the email address, right?

Tinister · Posted: Fri Dec 17, 2004 12:24 am Post subject:

Actually, GameFAQs now has it where to log in you need an email address and a password, they don't ask for your username anymore. Shadowlynk posted on his topic that he was gonna use a private email address.
_________________
Doug Flutie. Part Cyborg. Part Jesus. Most likely your biological father.

Zman · Posted: Fri Dec 17, 2004 12:47 am Post subject:

Brutus is having a hard time figuring out what the correct response for a login is. I might have to switch to Access Driver.

drewnb · **cochinillo** Joined: 21 Nov 1999 Posts: 1640

Off topic, but I hate it that gamefaqs boards are gonna merge with gamespot. It was bad enough as it was.
_________________
[B][78][F5][FF][K]