SRL Archive - Senior News and General

Session Start: Wed Apr 29 13:08:31 2009
Session Ident: WowNu11
[13:08] Session Ident: WowNu11 (freenode, n3ss3s) (n=T@122.172.3.227)
[13:08] <WowNu11> hi
[13:08] <WowNu11> ate you a SITE admin
[13:08] <WowNu11> are.
03[13:09] <n3ss3s> no
[13:09] <WowNu11> id like to point out vulnerabilites
[13:09] <WowNu11> who can i find? :S
03[13:10] <n3ss3s> talk to Wizzup
[13:10] <WowNu11> does he run this shit?
[13:10] <WowNu11> and just so you know
[13:10] <WowNu11> I'm a moderator of h4cky0u, I play runescape & i enjoy botting with your scripts
03[13:10] <n3ss3s> That's great
03[13:11] <n3ss3s> which one?
[13:11] <WowNu11> Sudoku solver
[13:11] <WowNu11> You're in the greets :P
[13:11] <WowNu11> It
03[13:11] <n3ss3s> ok lol
03[13:11] <n3ss3s> btw
03[13:11] <n3ss3s> who gave it to u?
-
11[13:12] WowNu11 is n=T@122.172.3.227 * The best of the best….
11[13:12] WowNu11 on #SRL
11[13:12] WowNu11 using irc.freenode.net http://freenode.net/
11[13:12] WowNu11 End of /WHOIS list.
-
[13:12] <WowNu11> nobody
[13:12] <WowNu11> i like to research and grab db's
03[13:12] <n3ss3s> Oh
03[13:12] <n3ss3s> so that's about the vulnerability
[13:12] <WowNu11> lol
[13:13] <WowNu11> theres so many
[13:13] <WowNu11> cant point em all out
03[13:13] <n3ss3s> I was worried someone leaked to you
03[13:13] <n3ss3s> But anyway
03[13:13] <n3ss3s> if you like to talk about vulnerabilities
[13:13] <WowNu11> Anyway
03[13:13] <n3ss3s> talk to Wizzup
[13:13] <WowNu11> Ever want to chat with me?
[13:13] <WowNu11> irc.h4cky0u.org #h4cky0u
03[13:13] <n3ss3s> alright
03[13:13] <n3ss3s> I propably won't be there but I'll remember
[13:13] <WowNu11> try and get on now
[13:13] <WowNu11> it's fun :P
03[13:13] <n3ss3s> nah
03[13:13] <n3ss3s> pking
[13:13] <WowNu11> ah :P
[13:14] <WowNu11> cmb?
03[13:14] <n3ss3s> 69
[13:14] <WowNu11> 71
[13:14] <WowNu11> wanna pk?
[13:14] <WowNu11> and i'll brb
03[13:14] <n3ss3s> Na I solo
[13:15] <WowNu11> kk
03[13:15] <n3ss3s> by the way
03[13:16] <n3ss3s> one question
[13:16] <WowNu11> ?
03[13:16] <n3ss3s> how is the script available at h4cky0u, is it only for some "high" rank section
03[13:16] <n3ss3s> or is it completely public
[13:16] <WowNu11> we dont play runescape on h4cky0u
[13:16] <WowNu11> just 2 of us
[13:16] <WowNu11> do it for fun
03[13:16] <n3ss3s> so it isn't published at h4cky0u?
[13:16] <WowNu11> lol
[13:16] <WowNu11> nobody even knows what runescape is
[13:16] <WowNu11> on h4cky0u
03[13:16] <n3ss3s> ok
[13:16] <WowNu11> it isnt published anywhere
[13:16] <WowNu11> you can relax
03[13:17] <n3ss3s> We will appreciate if you keep it that way
[13:17] <WowNu11> if you dont do anything fishy, i wont need to…
[13:17] <WowNu11> you're not gonna be the first runescape related site to be rm'ed
[13:17] <WowNu11> if it is
03[13:18] <n3ss3s> "fishy" ?
[13:19] <WowNu11> not acting nice
[13:19] <WowNu11> for a start
03[13:19] <n3ss3s> the SRL community goals to be in good relations with other communities
[13:19] <WowNu11> trying to do everything to prevent my access in
[13:19] <WowNu11> we're not a community
03[13:19] <n3ss3s> As I said, don't talk to me about it
[13:19] <WowNu11> we're a group of black hats
03[13:19] <n3ss3s> I don't handle security or anything
[13:19] <WowNu11> who hack what we disagree with
03[13:19] <n3ss3s> so you disagree with SRL but use the scripts?
03[13:19] <n3ss3s> :D
[13:19] <WowNu11> we didn't "hack" you
[13:20] <WowNu11> but i just wanted to see what was in there
[13:20] <WowNu11> curious
03[13:20] <n3ss3s> Okay
[13:20] <WowNu11> and dont you dare do anything against me
[13:20] <WowNu11> you're db will be public
[13:20] <WowNu11> and leaseweb will be rm'ed
03[13:20] <n3ss3s> Please
03[13:20] <n3ss3s> Define against
[13:20] <WowNu11> i'll even make it easier for the skids
[13:20] <WowNu11> ill give them email:pass lists
[13:20] <WowNu11> from your sitew
03[13:21] <n3ss3s> Just answer
03[13:21] <n3ss3s> what do you consider doing against you
03[13:21] <n3ss3s> Because as I said, there is nothing I can do to you
03[13:21] <n3ss3s> I'm just a member
[13:21] <WowNu11> for a starter
[13:21] <WowNu11> taking my access away?
03[13:21] <n3ss3s> I cannot do that
[13:21] <WowNu11> doing everything to defend yourself against ME
03[13:21] <n3ss3s> I have no rights to change passes or anything
[13:22] <WowNu11> and blokcking access to the members section?
03[13:22] <n3ss3s> I cannot do ANYTHING
[13:22] <WowNu11> I will be back.
03[13:22] <n3ss3s> except for infractions
03[13:22] <n3ss3s> erm
03[13:22] <n3ss3s> I find this a little awkward
03[13:22] <n3ss3s> that you're telling all of this to me
03[13:22] <n3ss3s> Maybe you should talk to an admin who has got something to do with access and stuff
[13:22] <WowNu11> because i saw your name in the greets of the sudoku solver
[13:22] <WowNu11> :S
03[13:23] <n3ss3s> lol
[13:23] <WowNu11> lol
03[13:23] <n3ss3s> Actually
[13:23] <WowNu11> Anyway
03[13:23] <n3ss3s> I haven't done one single piece of that code
03[13:23] <n3ss3s> I just reminded my friend of the method
[13:23] <WowNu11> o
[13:24] <WowNu11> scar scripting is just english -_-
03[13:24] <n3ss3s> Well it is object pascal
03[13:24] <n3ss3s> which is an easy language
[13:24] <WowNu11> yea

:mad:

Well, atleast he hasn't tried to claim it's his…

He said to protect from "T aka DaSteem".

(20:34:19) <WowNu11> lol
(20:34:23) <WowNu11> i leaked the db already

I used to be admin at h4cky0u.org, although there's not much I can do…hacking isn't agaisnt their rules, obviously. Looks like we're fucked if he's telling the truth tbh. Was fun while it lasted at least

edit

(20:40:00) <kz> so you leaked the db?
(20:40:32) <@T> I didnt, i lied but nothing stops me from doing it

T is wownu11

Sounds like total crap to me, but if he wants to talk to me, he can talk to me on the freenode IRC…
Also, if you load their site, it redirects to a hosting company. Sounds like they want us to use their services instead. :)

Vulnerabilities? Wizzup is there holes in the system?

From: Narcle
Vulnerabilities? Wizzup is there holes in the system?

Not that I am aware of. I've been chatting with that guy for a few hours now, but he doesn't want to give any sort of proof. The only "proof" he has is that he knows there is a "rogue trader" in an "srl member" forum, and "nava" made a recent post. So it could just have been some ssrl member being hacked etc.
However, if he found some vulnerability, I will find out soon enough. His intentions aren't to harm us. (But then again, he might just be making this all up.)

From: Wizzup?
Not that I am aware of. I've been chatting with that guy for a few hours now, but he doesn't want to give any sort of proof. The only "proof" he has is that he knows there is a "rogue trader" in an "srl member" forum, and "nava" made a recent post. So it could just have been some ssrl member being hacked etc.
However, if he found some vulnerability, I will find out soon enough. His intentions aren't to harm us. (But then again, he might just be making this all up.)

I think some SSRL got hacked. That's the easiest way to access by hacking imo. Perhaps check the IP logs and compare them to the "guy" IP address.

99% of people who say they can hack/hacked something truely can't/didn't.

I wouldn't be too worried.

do bare in mind though, in the event that he does have the database, he will be able to see everything we write here.

<assuming there are holes in the forum>
He was pretty unclear about 'against' and 'blocking access', if he wants to talk about holes. The only reason to talk about holes is so that they can be patched, and if we do that he won't have access (to new content). So what does he expect? Patch the holes and then give him an account with read access to the forums?

I'm sure the host would run vulnerability checks, well if they were a good host.

But if you can, somehow try to run this
http://www.grc.com/x/ne.dll?rh1dkyd2

Probably won't work since you don't have access to the server.

It might be possible some guy indeed has (parts of) the Database. I have spoken to him, and he says the portal (CMPS) is vulnerable, so there's a big chance I will remove it in the near future. If these guys show up, don't offend them. There's one guy who actually knows alot of stuff, and he is a nice fellow, he is not planning to post the DB anywere, anyway. Don't taunt them, however. There's also a friend of this guy, who is a bit more childish, but generally an OK guy too. They wanted me to help them macro. (lol :) )

Lol, if you really want to see if they are actually in the database just ask to see if they will prove it by posting part of the script or a post or something. I mean do it in a non offensive way, I mean we are just trying to make everything safer.

Neat. If you can read this, get on irc.freenode.net and go to #srl. Say "pink elephants" when you join, preferably keep the nickname you've been using, WowNu11 (I'd assume T on freenode would be taken).

It is very possible he got some names and is hoping that we will leak something to him that he claims to have. To not give them any whole scripts, only ask them for the contents of lines and then modify that line if they ask for help. Otherwise claim ignorance and do not help them.

From: Wizzup?
It might be possible some guy indeed has (parts of) the Database. I have spoken to him, and he says the portal (CMPS) is vulnerable, so there's a big chance I will remove it in the near future. If these guys show up, don't offend them. There's one guy who actually knows alot of stuff, and he is a nice fellow, he is not planning to post the DB anywere, anyway. Don't taunt them, however. There's also a friend of this guy, who is a bit more childish, but generally an OK guy too. They wanted me to help them macro. (lol :) )

Well there must be some way to make CMPS more secure…. There are a lot of addons that require CMPS….

I think the version of iSpy we have does… but we can change that.

Was one of conditions not to leave the vulnerabilities? Also Wizzup, is this why you were asking about how to run sudoku?

Lol, if you really want to see if they are actually in the database just ask to see if they will prove it by posting part of the script or a post or something. I mean do it in a non offensive way, I mean we are just trying to make everything safer.

He has Ali Rapist, and for proof that he really has it and just doesn't know about it, he knows I'm in the credits…

WowNu11!*@* set by NiallC!i=Niall@77-99-42-84.cable.ubr26.newt.blueyonder.co.uk (Thu Apr 30 09:18:09)

humhm….

cleared it

~RM

From: Rasta Magician
WowNu11!*@* set by NiallC!i=Niall@77-99-42-84.cable.ubr26.newt.blueyonder.co.uk (Thu Apr 30 09:18:09)

humhm….

cleared it

~RM

Who is NiallC? I been wondering for a while

he used to be called TheUnNamed

Ok, thanks, I know who that is.

from #ssrl:

(2:36:09 AM) Zeph [n=Erik@203-59-119-83.dyn.iinet.net.au] entered the room.
(4:12:37 AM) Pann [n=T@server.atekweb.com] entered the room.
(4:13:10 AM) Pann: o
(4:13:20 AM) Pann: WHO BE IN THE MOTHERFUCKING HOUSE
(4:13:29 AM) Pann: cat house~!@@
(4:14:03 AM) Pann: YUZ
(4:14:48 AM) Pann: RM -RF /*@@@@@!~~@@@
(4:18:53 AM) Pann: o who u zeph
(4:23:37 AM) Zeph: hmmm question is who are you?
(5:58:11 AM) Pann left the room (quit: Remote closed the connection).
(6:41:29 AM) Zeph left the room (quit: "Leaving").

I just woke up to it…

If this helps at all, I have no idea who Q_q on #ssrl is either.

* [q_Q] (n=T@server.atekweb.com): The best of the best….
* [q_Q] #ssrl
* [q_Q] irc.freenode.net :http://freenode.net/
* [Q_q] End of WHOIS list.

<q_Q> halo LeeLokHin
<q_Q> who r u
<LeeLokHin> Who are you?
<q_Q> I am myself
<LeeLokHin> And thus so am I.
<q_Q> Oh right
<q_Q> im the guy who just talks shit
<LeeLokHin> Intresting idea. How'd you get in here?
<q_Q> i got no skill, i dont rm :(
<LeeLokHin> Explain "rm"
<q_Q> i can only hack with sub7.exe
<q_Q> :'(
<LeeLokHin> A script kiddie, eh?
<q_Q> ya
<q_Q> dats me
<LeeLokHin> Fair enough. Nice meeting you.
<q_Q> thnak U
<LeeLokHin> So why're you here?
<q_Q> i was here to talk to Wizzup
<LeeLokHin> Ah, That explains it.

obviously if they have the database they can see that thread where it says the channel key.

EDIT: another one

* [Ben__] (n=Ben@client-86-10-9-95.leed.adsl.virgin.net): Ben
* [Ben__] #ssrl #SRL 
* [Ben__] irc.freenode.net :http://freenode.net/
* [Ben__] End of WHOIS list.

* Ben__ (n=Ben@client-86-10-9-95.leed.adsl.virgin.net) has joined #ssrl
<Ben__> Haloo
<Ben__> so
<Ben__> black people.
<kz> who is Ben__?
<Ben__> I am ben.
<kz> no
<kz> you are Ben__

iSpy, I know RSR had leaks with it back in the old days, and SMART got semi-leaked that way..

I know we had leaks with it too.. But they should have been around longer for them to get the ssrl key.

From: nielsie95
I know we had leaks with it too.. But they should have been around longer for them to get the ssrl key.

this isn't a leak, as much as it is a hole. they just simply downloaded the db.

~RM

That's what they said. The question is: did they really do that? I doubt that.

Just thought I'd post this:

<q_Q> i request an unban :<
<q_Q> im muted
<q_Q> they thought it was funny
<q_Q> and so it isnt
<Zeph> erm you'll have to talk to wizzup or someone
<q_Q> wizzup didnt ban me
<q_Q> some idiot called widget muted me
<Zeph> well talk to him then
<Zeph> except hes afk
<q_Q> he muted me >_>
<Zeph> idk then talk to someone with more authority like wizzup or yakman
<Zeph> im not going to unban if there was a reason to ban in the first place
<q_Q> gayest reason ever
<q_Q> <q_Q> on the irc
<q_Q> -ChanServ- You have been quieted on #ssrl by R0b0t1
<q_Q> * ChanServ sets ban on %*!*@server.atekweb.com
<q_Q> <R0b0t1> You may remain here but your language is atrocious.
<q_Q> mute because "my language is atrocious?"
<q_Q> o
<q_Q> so it wasnt widget
<q_Q> L
<q_Q> got confoosed
<q_Q> see tee see pee
<q_Q> /rm -rf yourself
<q_Q> kk
<Zeph> right…
<q_Q> o right
<q_Q> irc.h4cky0u.org #h4ck0u
<q_Q> watch all your skripts bkum publiq 1 bai 1
<q_Q> and the email:hash:salt list

I personally think this is getting out of hand. He does have the ali script, he showed it to Zeph.

Do you think it's time to tell the juniours? Or at least the srl-member? Q_q threatened to release Ali on #srl today, and I really don't know what to do with it.

I told Zeph to +m if he ever comes in.

BEFORE READING LEE'S POST:I'm just amused by how he thinks he somehow has us on our knees by threatening about leaking all the scripts, the only private script is sudoku TBH, and all SRL Member scripts are propably in pastebin or shit…



AFTER: Is there any way to add some copyright crap to the script so that he isn't legally allowed to publish it? Or something?

From: n3ss3s
BEFORE READING LEE'S POST:I'm just amused by how he thinks he somehow has us on our knees by threatening about leaking all the scripts, the only private script is sudoku TBH, and all SRL Member scripts are propably in pastebin or shit…



AFTER: Is there any way to add some copyright crap to the script so that he isn't legally allowed to publish it? Or something?

Open source is open..

And it's not much help that *!*@* is added as +votr either.

Ha thought I would let you guys know some stuff.

"Ben" is the guy who hacked me and scammed Hy71139.
They do have the database.

I have been talking with them on irc since they have been in #rsbot and they are actually pretty nice people :).

Well, that gives some new meanings to things…

What has been "leaked"?

A password to the SSRL IRC? Anyone could have given that to him. Is there any solid proof that this guy actually HAS the database? apart from circumstantial?

But then again, if he was to show bits and pieces of this board, it could still be copied and pasted from any SSRL, mod admin…. who knows?

Think about it people. Who do you trust?
I will tell you who I trust…

NOONE! <- and you should too.


All I know and read is: there are people out there trying to undermine this community, because it is beyond their brain we actually ARE a community. They are pathetic and pityfull. Stealing scripts? wo-ho-ow, now I am scared.

I have placed a thread so deep into this board that noone can see but me, so, hackers, come and rape me! I dare you. Tssss.

From: pwnaz0r
Ha thought I would let you guys know some stuff.

"Ben" is the guy who hacked me and scammed Hy71139.
They do have the database.

I have been talking with them on irc since they have been in #rsbot and they are actually pretty nice people :).

I still have my doubts about them having the database. I haven't seen much really. They might possibly have it, or just might not. I find it pretty hard to believe that one can download an entire database because of a hole in CMPS.

All they talk about is Ali script, seriously why won't they just grab something from Dev section etc and show it?

A hole in the CMPS would mean that all commercial boards using VB, which is A-LOT, could be sucked up.

Well, I am very very interested to see how this can be done. There a a couple of .gov and .com boards I would love to see the database.

Come on, get real. There is no leak.

1. The SSRL channel has been leaked before.
2. I'm sure others outside SSRL have the Ali script through other means like accidental file sharing or just plain sharing.

I have yet to see Dev section material posted as proof.

Yea, I think it's safe to say that the Ali script can't be considered proof of hacking anymore…

I know of three people I don't know IRL who got the script (outside SSRL). I'm really sure those didn't leak it, else I would've banned their asses by now.

nice on fawk. i'd like to see that thread too :p

however i do suspect that if they got a password it would be mine or hobbit's, because they have posted nothing which is above mod OR from dev section.

i have changed my pw btw.

~RM

From: Rasta Magician
nice on fawk. i'd like to see that thread too :p

however i do suspect that if they got a password it would be mine or hobbit's, because they have posted nothing which is above mod OR from dev section.

i have changed my pw btw.

~RM

Hobbit is an admin remember?

From: n3ss3s
Hobbit is an admin remember?

no access to dev forums as you probably know.

~RM

He has friends and he has lovers. That is all.

From: WT-Fakawi
What has been "leaked"?

A password to the SSRL IRC? Anyone could have given that to him. Is there any solid proof that this guy actually HAS the database? apart from circumstantial?

But then again, if he was to show bits and pieces of this board, it could still be copied and pasted from any SSRL, mod admin…. who knows?

Think about it people. Who do you trust?
I will tell you who I trust…

NOONE! <- and you should too.


All I know and read is: there are people out there trying to undermine this community, because it is beyond their brain we actually ARE a community. They are pathetic and pityfull. Stealing scripts? wo-ho-ow, now I am scared.

I have placed a thread so deep into this board that noone can see but me, so, hackers, come and rape me! I dare you. Tssss.

From: WT-Fakawi
A hole in the CMPS would mean that all commercial boards using VB, which is A-LOT, could be sucked up.

Well, I am very very interested to see how this can be done. There a a couple of .gov and .com boards I would love to see the database.

Come on, get real. There is no leak.

You are my god. *Bows*

Heres the rest of the convo with him: He does have Sudoku and he knew that I posted chat logs above.

<q_Q> i request an unban :<
<q_Q> im muted
<q_Q> they thought it was funny
<q_Q> and so it isnt
<Zeph> erm you'll have to talk to wizzup or someone
<q_Q> wizzup didnt ban me
<q_Q> some idiot called widget muted me
<Zeph> well talk to him then
<Zeph> except hes afk
<q_Q> he muted me >_>
<Zeph> idk then talk to someone with more authority like wizzup or yakman
<Zeph> im not going to unban if there was a reason to ban in the first place
<q_Q> gayest reason ever
<q_Q> <q_Q> on the irc
<q_Q> -ChanServ- You have been quieted on #ssrl by R0b0t1
<q_Q> * ChanServ sets ban on %*!*@server.atekweb.com
<q_Q> <R0b0t1> You may remain here but your language is atrocious.
<q_Q> mute because "my language is atrocious?"
<q_Q> o
<q_Q> so it wasnt widget
<q_Q> L
<q_Q> got confoosed
<q_Q> see tee see pee
<q_Q> /rm -rf yourself
<q_Q> kk
<Zeph> right...
<q_Q> o right
<q_Q> irc.h4cky0u.org #h4ck0u
<q_Q> watch all your skripts bkum publiq 1 bai 1
<q_Q> and the email:hash:salt list
<q_Q> <Wizzup> I thought you no longer needed my shitty autoing help?
<q_Q> <Wizzup> I am on 56kb/s internet now anyway, which loses conn very 5 mins, so I can't do much anyway
<q_Q> <Wizzup> afk
<q_Q> its not ver nice ^^
<q_Q> ver
<q_Q> very
<q_Q> being nice when it was compromised
<q_Q> and once i leave it
<q_Q> drop the nicenezz?
<Zeph> wtf you on about?
<q_Q> he offered to auto
<q_Q> i dropped all access i had then
<q_Q> and told him that
<q_Q> no more being nice? :<
<q_Q> what stops me from raping him again?
<q_Q> and rm'ing his shitt leaseweb box
<Zeph> maybe he really is busy...
<q_Q> i doubt that
<Zeph> Wizzup is a busy person
<q_Q> telling me shit like srl is a group of friends, we dont like starting shit, ou're destroying the lives of 2000 people if you rm my box....
<q_Q> eye do not liek emo spaceships
<q_Q> eye will rm uoi
<q_Q> you, srl <---
<q_Q> this is a promise
<Zeph> so umm, mind explaining what "rm" is
<q_Q> try it
<q_Q> rm -rf /*
<q_Q> on your loonix bawx
<q_Q> so im asking you
<q_Q> the last person
<q_Q> would you auto for me? -_-
<Zeph> auto for you? why?
<q_Q> you really want to find out why?
<q_Q> im about to leak the onlu good script
<q_Q> would you like that?
<Zeph> no why do you want me to auto for you?
<q_Q> because you  guys seem to be good at this sort of stuff
<q_Q> eye like runescape
<q_Q> it goes good for ben & me
<Zeph> can't you just autoing yourself?
<q_Q> No.
<q_Q> thats the point
<q_Q> We cant :<
<Zeph> why not?
<q_Q> why dont you just do it?
<Zeph> because i don't even auto for myself...
<q_Q> o
<q_Q> right
<q_Q> watch #srl
<q_Q> closely
<q_Q> watch your "ali raper" get leaked
<q_Q> if you dont do it, ill have to give it to the people in the main channel
<q_Q> who can
<q_Q> {******************************************************************************)
<q_Q> (*                                                                            *)
<q_Q> (*                        A  L  I    R  A  P  E  R                            *)
<q_Q> (*                                                                            *)
<q_Q> (*                             by Markus                                      *)
<q_Q> (*                      Modded & Improved by Narcle                           *)
<q_Q> (*          Credits to Ray, Wizz, King of Knives, n3ss3s and The Crew!        *)
<q_Q> (******************************************************************************)
<q_Q> (*                                                                            *)
<q_Q> (*     DESCRIPTION: This script rapes Ali Morrisane's and Aubury's Sudoku     *)
<q_Q> (*     REQUIRMENTS: The Feud done, and started the Rogue Trader minigame      *)
<q_Q> (*     INSTRUCTION: Open the Sudoku screen of the large sudoku (really, small *)
<q_Q> (*                  is way too easy, I do that one while owning TzTok-Jad)    *)
<q_Q> (*                  then run the script :) If you want it to be safe for your *)
<q_Q> (*                  char, set const 'Rule7Proof' to true, it'll give you the  *)
<q_Q> (*                  solution in the debug window.                             *)
<q_Q> (*                                                                            *)
<q_Q> (******************************************************************************}
<q_Q> program ALIRAPER;
<q_Q> {.include srl/srl/misc/smart.scar}
<q_Q> {.include srl/srl.scar}
<q_Q> const
<q_Q>   Rule7proof = false; //TRUE TO BE LEGAL!
<q_Q>   DisplayDetails = false;//shows all the crap in Debug/Report windows :P
<q_Q>   debugmode = false;
<q_Q>   procedure debug(s : string); begin if debugmode then writeln(s) else Status(s); end;
<q_Q> var
<q_Q>  Playground : Array of Array of byte;
<q_Q>  lolz : TStringArray;
<q_Q>  DTM : array [1..9] of integer;
<q_Q>  ownarr : array [1..9] of TPoint;
<q_Q>  FailTime, Solved, ReportTime, A: integer;
<q_Q>  NorthLast, UnSolvable: Boolean;
<q_Q> /STOOOOOOF
<q_Q> / mind = 1  1536183
<q_Q> / fire = 2  1121931       -414252
<q_Q> / ea
<q_Q> this shit never solves it 4 my friend -.-
<q_Q>  all you ssrl members are rude
<q_Q> ill have to show you how rude this is
<Zeph> you're the one leaking our scripts lol
<q_Q> you're the one posting chatlogs in the sections
<Zeph> of course
<q_Q> ofcourse
<q_Q> so what do you say
<q_Q> one of you going to auto
<q_Q> or all of your community be leaked?
<Zeph> well tbh if you really wanted to auto then you would be able to
<Zeph> its not that hard..
<Zeph> just download a couple of things and press plat
<Zeph> play
<q_Q> im on loonix and i cba to do sudo apt-get install wine
<q_Q> if you're nice to me
<q_Q> i would be nice to you
<Zeph> sorry im not going to auto for you even when i don't auto for myself
<q_Q> ok
<q_Q> so ill ask nicely
<q_Q> FOR THE LAST TIME
<q_Q> Who can?
<Zeph> idk, someone who autos... markus maybe
<q_Q> how many hours before he is ACTIVE
<Zeph> i dunno
<q_Q> usually?
<Zeph> about this time usually
<q_Q> eye am niec
<q_Q> get on irc.h4cky0u.org #h4cky0u
<Zeph> idk excatly
<Zeph> no im fine thanks
<q_Q> u wont get haqd
<q_Q> u cant get remotely haqd
<q_Q> its impossible
<q_Q> unlezz u dont patch
<q_Q> ofcourse
<Zeph> but i got other things to do apart from joining random channels
<q_Q> or we got moar 0dayz
<q_Q> now
<q_Q> thats not very nice
<q_Q> it will lead to some of your data being "erased"
<Zeph> right..
<q_Q> ok
<q_Q> have fun
<q_Q> MOMMA I DONT PATCH@@@@
<q_Q> FUQ@@@
<q_Q> I
<q_Q> DONT
<q_Q> PATCH@@

Long live Fawki! Also, everyone change their passes

From: Rasta Magician
nice on fawk. i'd like to see that thread too :p

however i do suspect that if they got a password it would be mine or hobbit's, because they have posted nothing which is above mod OR from dev section.

i have changed my pw btw.

~RM

Have "I" posted anything since wednesday night? If I have it was not me. I left home at 5:30am thurday and just returned now.

Zeph, still doesn't prove more than that he just has some SSRL's pass…

Rasta Magician, think outside the box, by "Hobbit is an admin" I meant that if he had the db he could of said shit from the admin forums… Get it?

Well, shouldn't this by Fakawi clear this whole thing up?

I have placed a thread so deep into this board that noone can see but me, so, hackers, come and rape me! I dare you. Tssss.

If that "hacker" is able to reach into that thread and tell Wizzup/Fakawi what they posted, then we have conclusive proof that he is able to reach into database. If not. Well, change your passwords.

From: n3ss3s
Rasta Magician, think outside the box, by "Hobbit is an admin" I meant that if he had the db he could of said shit from the admin forums… Get it?

N3ss, your box is too big.

~RM

Fawk, you've got backups of the DB, correct?
Because going under the assumption that you do… the worst that could possible happen to us just the release of our Ali Raper… (which sounds like its already happened anyways to some extent…)

He doesn't even have the latest version of the sudoku script.. Obviously it was leaked to him or he got it awhile back (from pwnaz0r's account?).

Or he DLed the DB at that time, and only piped up about it recently.

He has access to #ssrl though, and the key was changed pretty recently

From: The Claw
He has access to #ssrl though, and the key was changed pretty recently

Even so, that doesn't prove anything…

When was the key changed and when was the latest version?

Key was changed a week or a week and a half ago.

So if he DLed the DB after the key was changed he should have the latest version of the script (unless he didn't read thru the whole thread). Same applies for having access to an account. So that either means leak, or he was doing something stupid/illogical.

Also, the other day, he was logged into #SSRL as q_Q and someone asked, is the forum still compromised, and then he replied 'if im in here then it means it is'. He could have let other people (who could clearly see him on the userlist) reply, but he chose to reinforce the idea that he had current access to the forum. Which makes me think he doesn't. Maybe I'm reading into it too much.

Something else to note is that he didn't know peoples names (besides credits in the script). Which would mean a leak or having the DB are both more likely than having access to an account. Or he was lying.

I think it would be a good idea to keep an eye on their forum.
If there seems to be something going on with accounts being hacked, I could always change all passwords, and send everyone a mail to change their pass.

From: Wizzup?
I think it would be a good idea to keep an eye on their forum.
If there seems to be something going on with accounts being hacked, I could always change all passwords, and send everyone a mail to change their pass.

Randomizing the passwords? Then with an email saying what it is?

From: Nava2
Randomizing the passwords? Then with an email saying what it is?

Possibly. But vBulletin can just send a mail + link that allows resetting it to whatever you want without knowing the old one.

Do not underestimate the possibility that it is someone using a semipublic computer, like a little brother or a school"mate" on the same computer as one of our SSRL's.

I have seen that one before.

Or, it could even be one of the SSRL's themselve.

Is anyone directly in contact with this guy through PM's on their board? This would clear this issue up.

From: WT-Fakawi
Do not underestimate the possibility that it is someone using a semipublic computer, like a little brother or a school"mate" on the same computer as one of our SSRL's.

I have seen that one before.

Or, it could even be one of the SSRL's themselve.

Is anyone directly in contact with this guy through PM's on their board? This would clear this issue up.

Do not forget they were able to view the moderator forums. So that really leaves it up to a small group.

~RM

From: Rasta Magician
Do not forget they were able to view the moderator forums. So that really leaves it up to a small group.

~RM

^^ Since when?

I thought they couldn't see above SSRL?

From: Hobbit
^^ Since when?

I thought they couldn't see above SSRL?

I no longer have the conversation, but they showed me the title of a thread i recently created in mods' forums.

~RM

That doesnt mean they have access, I remember a while ago someone did the same thing with SSRL (I think)

I don't really know about the exploit stuff in depth, but if CMPS has got something to do with iSpy (the understanding I've gotten), doesn't that kind of say that there has been some bug that enabled someone in right place at right time to see a thread created or a post made, in a section that even isn't in their rank?

Zing! Remember how n3ss3s got hacked by someone from rsbot, by the java applet stealing his passes? Q_q is an rsbot user/idles in their IRC or something, could have easily been him. Then he just had to wait till everyone forgot about n3ss3s's hacking to bring this up. The exploit on the CMPS would of been how he got the mod thread's title.

From: The Claw
Zing! Remember how n3ss3s got hacked by someone from rsbot, by the java applet stealing his passes? Q_q is an rsbot user/idles in their IRC or something, could have easily been him. Then he just had to wait till everyone forgot about n3ss3s's hacking to bring this up. The exploit on the CMPS would of been how he got the mod thread's title.

I have yet to find the 0day in CMPS. I can't find any ATM.

If it's a 0 day you can't find it duuh, as it's a 0 day.

From: Markus
If it's a 0 day you can't find it duuh, as it's a 0 day.

Hence the fact I am looking at the code myself… I wasn't google'ing for it.

Update to 3.8.2?

Well someone could check my IPs, but I don't think he's got access to my acc anymore…