Author Topic: ---WARNING--- - password hacking attempt on many accounts -- UPDATE -- (Read 22018 times)

saint · « **on:** February 15, 2011, 10:20:19 pm »

Someone has been attempting to hack user accounts here today using an automated process with multiple IP addresses. Dozens of regular posters are being targeted. If your password isn't a good, secure, hard to randomly crack/guess password, you are strongly encouraged to change it to one that is.

UPDATE 02-18-2011

The password hacking attack does not appear to be related to any other issue at BYOAC. There is a mass-attack against SMF forums (and others, such as PHPboard) in general. More info here: http://www.simplemachines.org/community/index.php?topic=421603.msg2949285#msg2949285. The attacks against BYOAC match this pattern exactly. I do not believe Driver-Man is related to this at all.

I am taking various measures against the attacks. There have not been any successful attacks that I am aware of anywhere. I now consider this a low threat level. Make sure you have a good, non-dictionary based password and beyond that I would not worry about it.

I will note if anything changes in this arena.

--- saint

yotsuya · « **Reply #1 on:** February 15, 2011, 11:08:37 pm »

Man, I wish there was something we could do about it/him.

SavannahLion · « **Reply #2 on:** February 15, 2011, 11:30:38 pm »

All it does is prove just how wrong the punk is. If he was right there would be no reason to act like an
---uvula---.

trevski · « **Reply #3 on:** February 16, 2011, 07:59:35 am »

ooh, I wonder.

Man, what a dips**t

Hoopz · « **Reply #4 on:** February 16, 2011, 08:00:33 am »

Quote from: trevski on February 16, 2011, 07:59:35 am

Man, what a dips**t

You can call him a dipshit or anything else. The site has an auto censor. I call him a ---P&R denizen--- amongst other things.

CheffoJeffo · « **Reply #5 on:** February 16, 2011, 08:35:48 am »

I think it may be time to take up a collection to send someone down to visit spacies and deal with this ---P&R denizen---.

I would volunteer, but I think that perhaps Xiaou with his death punch may be more suitable.

Ed_McCarron · « **Reply #6 on:** February 16, 2011, 08:41:44 am »

---steaming pile of meadow muffin---, so I should change my password from "12345?"

stu33 · « **Reply #7 on:** February 16, 2011, 08:52:50 am »

That's the same combination I have on my luggage!

shfifty · « **Reply #8 on:** February 16, 2011, 08:53:50 am »

he should get a Shinkuu Hadouken to the face

HaRuMaN · « **Reply #9 on:** February 16, 2011, 09:11:36 am »

maybe I should change mine... mine is "password"

HaRuMaN · « **Reply #10 on:** February 16, 2011, 09:13:25 am »

Here's a dumb question, say he was able to hack a mod's account... would that give him access to the forum user's passwords? Or is that encrypted somewhere (I hope).

emphatic · « **Reply #11 on:** February 16, 2011, 09:13:56 am »

Quote from: HarumaN on February 16, 2011, 09:11:36 am

maybe I should change mine... mine is "password"

That's really clever.

Samstag · « **Reply #12 on:** February 16, 2011, 09:21:44 am »

I'm pretty sure I'm okay. Mine is Hq71d4AQr2KsN4f2S, so only the most persistent of hackers could hope to crack it.

newmanfamilyvlogs · « **Reply #13 on:** February 16, 2011, 09:22:14 am »

If his un-proxied IP was recorded, I wonder what could be done by contacting his ISP? We know his real name, his home address.. I recall seeing a plausible DOB somewhere.

He's lived in NZ since at least 2004:
http://www.trademe.co.nz/Electronics-photography/TVs/Standard/CRT/21-53cm-and-under/auction-62790078.htm

I suppose it's at least possible he's no longer living in the area and the person whose address is findable is just family.. here in 2008 is selling various household items:
http://web.archive.org/web/20080512072008/http://www.trademe.co.nz/Members/Listings.aspx?member=487159

The account is now closed.

leapinlew · « **Reply #14 on:** February 16, 2011, 09:32:31 am »

Thanks saint

I added a number 7 to my "123456" password to make it more secure.

saint · « **Reply #15 on:** February 16, 2011, 09:40:53 am »

Quote from: HarumaN on February 16, 2011, 09:13:25 am

Here's a dumb question, say he was able to hack a mod's account... would that give him access to the forum user's passwords? Or is that encrypted somewhere (I hope).

I don't have access to passwords. I can change them, but not tell you what they are.

saint · « **Reply #16 on:** February 16, 2011, 09:42:18 am »

Quote from: leapinlew on February 16, 2011, 09:32:31 am

Thanks saint

I added a number 7 to my "123456" password to make it more secure.

Attaboy.

This may be an unrelated attack. I know of at least one other SMF forum undergoing a similar attack.

newmanfamilyvlogs · « **Reply #17 on:** February 16, 2011, 09:44:53 am »

Maybe setup a honeypot account and see what happens?

shilmover · « **Reply #18 on:** February 16, 2011, 10:22:01 am »

obviously, I have missed something as I have no idea who you are talking about...

Hoopz · « **Reply #19 on:** February 16, 2011, 10:35:35 am »

Quote from: cotmm68030 on February 16, 2011, 09:44:53 am

Maybe setup a honeypot account and see what happens?

The old Pooh Bear defense?

Donkbaca · « **Reply #20 on:** February 16, 2011, 10:37:07 am »

done - password changed to Hackerlicks2balls

figured the number 2 would prevent him from figuring it out...

ErikRuud · « **Reply #21 on:** February 16, 2011, 10:56:14 am »

Is it ok to use my cat's name as my password?

His name is "p#4dgtoxg@t%htkafe". I change his name every 30 days.

opt2not · « **Reply #22 on:** February 16, 2011, 11:08:51 am »

Wow, if it's "you-know-who", his dedication to ---meecrob----baggery is astounding.

Dartful Dodger · « **Reply #23 on:** February 16, 2011, 11:12:50 am »

My password is so secure I don't even know it.

I've had this computer for over 7 years. I think the last time I had to enter a password was a few years ago when arcadecontrols.com switch servers or something.

(I had forgotten my password then too.)

wp34 · « **Reply #24 on:** February 16, 2011, 11:36:23 am »

Quote from: ErikRuud on February 16, 2011, 10:56:14 am

Is it ok to use my cat's name as my password?

His name is "p#4dgtoxg@t%htkafe". I change his name every 30 days.

Mikezilla · « **Reply #25 on:** February 16, 2011, 12:11:47 pm »

God that is such ---That which is odiferous and causeth plants to grow---. What a low life scumbag. That cat one was pretty funny though.

missioncontrol · « **Reply #26 on:** February 16, 2011, 12:32:58 pm »

what if your password is a censored word, does that mean you password is actually what the auto-censor changes it to?

newmanfamilyvlogs · « **Reply #27 on:** February 16, 2011, 01:22:41 pm »

My password has an MD5 hash of 'xxxxpleasedontstealpasswordsxxxx'

ark_ader · « **Reply #28 on:** February 16, 2011, 02:24:27 pm »

Really, what is in your account for him to steal?

Time to have a peek and remove any details that might incriminate you or put your personal life into Jeopardy.

I have a SMF forum on my site that was retired on the grounds that it was targetted by hackers.

Maybe Saint should migrate to IP Board. Yes it costs to subscribe, but it is more secure.

If everyone donated 50c Saint would have enough cash to have it.

Thanks for tell me though, and I have changed my password from ataridigdug to........

saint · « **Reply #29 on:** February 16, 2011, 02:25:50 pm »

For what it's worth, I have no indicators that we *have* been hacked. My warning about your password is precautionary (and good advice in general)...

ark_ader · « **Reply #30 on:** February 16, 2011, 02:32:53 pm »

Quote from: saint on February 16, 2011, 02:25:50 pm

For what it's worth, I have no indicators that we *have* been hacked. My warning about your password is precautionary (and good advice in general)...

You do not have a three try lockout or something similar for an indicator?

saint · « **Reply #31 on:** February 16, 2011, 02:42:09 pm »

Quote from: ark_ader on February 16, 2011, 02:32:53 pm

Quote from: saint on February 16, 2011, 02:25:50 pm
For what it's worth, I have no indicators that we *have* been hacked. My warning about your password is precautionary (and good advice in general)...

You do not have a three try lockout or something similar for an indicator?

The behavior looks a lot like a brute force attack. No one account is ever attempted more than once in a row, though repeated periodically. It's pretty much:

Try a username/password. Fail
Try another username/password. Fail
Try another username/password. Fail
.
.
.
Try the first username/password. Fail

Each from a different IP address with random time intervals between.

A 3 tries and you're locked won't really work in this attack due to the long time intervals and IP hopping, unless someone sees something I'm overlooking? Suggestions welcomed of course... I am banning the IP addresses used in the attack which is having a pretty good effect in stopping the attempts, but more IP addresses are easy to get...

ark_ader · « **Reply #32 on:** February 16, 2011, 02:45:05 pm »

Perhaps you should disable the avatar uploading facility just to be sure, and purge all avatars from the board.

You can have members email you their avatars later on. If it was my site, I would do this immediately.

RayB · « **Reply #33 on:** February 16, 2011, 03:32:49 pm »

So Driver-~~Man~~Boy is a 14 year old script-kiddie. That actually explains a lot.

pinballwizard79 · « **Reply #34 on:** February 16, 2011, 04:22:37 pm »

who are we talking about, ive been a good member I deserve to know

SavannahLion · « **Reply #35 on:** February 16, 2011, 04:30:30 pm »

Quote from: ark_ader on February 16, 2011, 02:45:05 pm

Perhaps you should disable the avatar uploading facility just to be sure, and purge all avatars from the board.

You can have members email you their avatars later on. If it was my site, I would do this immediately.

It's not, so we have little to worry about in that regards.

polaris · « **Reply #36 on:** February 16, 2011, 04:36:31 pm »

Quote from: leapinlew on February 16, 2011, 09:32:31 am

Thanks saint

I added a number 7 to my "123456" password to make it more secure.

hey we're password buddies, i never thought someone would pick the same as me, odds must be like 1 in a 100, maybe more.

ChadTower · « **Reply #37 on:** February 16, 2011, 04:37:59 pm »

Actually, this might just be Stingray trying to get in after a few beers.

Quote from: saint on February 16, 2011, 02:42:09 pm

The behavior looks a lot like a brute force attack. No one account is ever attempted more than once in a row, though repeated periodically. It's pretty much:

Try a username/password. Fail
Try another username/password. Fail
Try another username/password. Fail
.
.
.
Try the first username/password. Fail

Each from a different IP address with random time intervals between.

A 3 tries and you're locked won't really work in this attack due to the long time intervals and IP hopping, unless someone sees something I'm overlooking? Suggestions welcomed of course... I am banning the IP addresses used in the attack which is having a pretty good effect in stopping the attempts, but more IP addresses are easy to get...

hypernova · « **Reply #38 on:** February 16, 2011, 05:57:50 pm »

I've always been more of a "pound of cure" kind of guy myself, rather than the "ounce of prevention."

Because, hey, more is better. Duh!

Donkbaca · « **Reply #39 on:** February 16, 2011, 06:04:19 pm »

Just do what I do with passwords. Change it every week. Start of with -99bottlesofbeeronthewall

Edgedamage · « **Reply #40 on:** February 16, 2011, 06:09:28 pm »

I will miss my old one:
C U Next Tuesday

wp34 · « **Reply #41 on:** February 16, 2011, 06:36:16 pm »

Quote from: Edgedamage on February 16, 2011, 06:09:28 pm

I will miss my old one:
C U Next Tuesday

Shouldn't it be See You Next Wednesday?

http://en.wikipedia.org/wiki/See_You_Next_Wednesday

missioncontrol · « **Reply #42 on:** February 16, 2011, 06:43:55 pm »

Quote from: wp34 on February 16, 2011, 06:36:16 pm

Quote from: Edgedamage on February 16, 2011, 06:09:28 pm
I will miss my old one:
C U Next Tuesday

Shouldn't it be See You Next Wednesday?

oh great, now you told everyone his new one...

DaOld Man · « **Reply #43 on:** February 16, 2011, 07:29:40 pm »

Ive changed mine to a language that you would have to rip out your tongue to say it correctly.
But translated to English it is "drowssap"
Ingenious!

RayB · « **Reply #44 on:** February 16, 2011, 07:35:36 pm »

mine requires 4 digit ALT codes to enter. Takes me 10 minutes to log in.

Donkbaca · « **Reply #45 on:** February 16, 2011, 07:39:39 pm »

That's because you are an arcade dork Ray

Donkbaca · « **Reply #46 on:** February 16, 2011, 07:40:38 pm »

double post!

NipRing · « **Reply #47 on:** February 16, 2011, 07:41:15 pm »

I just got this email, dont know if its legit, i didnt click on any link, but i did goto byoac via my normal bookmark and changed my passord.
"Dear NipRing,

This mail was sent because the 'forgot password' function has been applied to your account. To set a new password click the following link:

IP: 76.10.222.100

Username: NipRing

Regards,
The Build Your Own Arcade Controls Forum Team."

SammyWI · « **Reply #48 on:** February 16, 2011, 07:43:02 pm »

Just got the same thing myself. Our script kiddie is still going.

upprc04 · « **Reply #49 on:** February 16, 2011, 07:43:56 pm »

I got that too. Instead of trying to hack peoples account he is just trying to reset the passwords I guess.

Same IP: 76.10.222.100

NipRing · « **Reply #50 on:** February 16, 2011, 07:46:48 pm »

Why is this person even bothering, what is there to gain?

bitbytebit · « **Reply #51 on:** February 16, 2011, 07:47:26 pm »

I just got the same email, same IP address being used. So they are for some reason doing the forgot password thing for peoples accounts now, guessing they aren't going to exactly get anywhere doing that, hopefully. It is strange they are trying that, hopefully they haven't got some sneaky loophole, I really don't see what the purpose would be otherwise.

wp34 · « **Reply #52 on:** February 16, 2011, 07:50:30 pm »

I got one as well.

CheffoJeffo · « **Reply #53 on:** February 16, 2011, 07:56:48 pm »

Me three.

SavannahLion · « **Reply #54 on:** February 16, 2011, 08:18:45 pm »

Reporting in that I too got the email attempt. Obvious attack vector on that one. Might I suggest that Saint temporarily disables the password recovery module/code and switch to a manual request system? Or maybe use a capta? At least for the time being.

missioncontrol · « **Reply #55 on:** February 16, 2011, 08:24:03 pm »

me too:

Quote

Dear missioncontrol,

This mail was sent because the 'forgot password' function has been applied to your account. To set a new password click the following link:

IP: 76.10.222.100

Username: missioncontrol

Regards,
The Build Your Own Arcade Controls Forum Team.

Hoopz · « **Reply #56 on:** February 16, 2011, 08:33:46 pm »

Yep, I received it also. He's picking people that haven't previously been involved in his threads which may mean that it isn't dipshit after all.

NIVO · « **Reply #57 on:** February 16, 2011, 08:36:50 pm »

Quote from: ChadTower on February 16, 2011, 04:37:59 pm

Actually, this might just be Stingray trying to get in after a few beers.

Quote from: saint on February 16, 2011, 02:42:09 pm

The behavior looks a lot like a brute force attack. No one account is ever attempted more than once in a row, though repeated periodically. It's pretty much:

Try a username/password. Fail
Try another username/password. Fail
Try another username/password. Fail
.
.
.
Try the first username/password. Fail

Each from a different IP address with random time intervals between.

A 3 tries and you're locked won't really work in this attack due to the long time intervals and IP hopping, unless someone sees something I'm overlooking? Suggestions welcomed of course... I am banning the IP addresses used in the attack which is having a pretty good effect in stopping the attempts, but more IP addresses are easy to get...

nah. He would have mistaken you for a zombie and shot his way in by now.

DaOld Man · « **Reply #58 on:** February 16, 2011, 08:37:57 pm »

I got same thing AFTER I changed my password.
I thought it may be just part of the password change routine, but didnt click on it just in case.

Ok dude (You know who you are D-Man), if you are still able to read our posts, please, GET A LIFE!

SavannahLion · « **Reply #59 on:** February 16, 2011, 08:39:40 pm »

Quote from: Hoopz on February 16, 2011, 08:33:46 pm

Yep, I received it also. He's picking people that haven't previously been involved in his threads which may mean that it isn't dipshit after all.

It really doesn't matter. That list is short so he's probably just going down a list of names. He doesn't care as long as he does some damage.

missioncontrol · « **Reply #60 on:** February 16, 2011, 08:40:36 pm »

Jokes on him, not only did I change my password, I then changed it back just to mess with him

saint · « **Reply #61 on:** February 16, 2011, 09:32:53 pm »

Quote from: SavannahLion on February 16, 2011, 08:18:45 pm

Reporting in that I too got the email attempt. Obvious attack vector on that one. Might I suggest that Saint temporarily disables the password recovery module/code and switch to a manual request system? Or maybe use a capta? At least for the time being.

Good suggestion - implemented.

saint · « **Reply #62 on:** February 18, 2011, 08:10:30 am »

The password hacking attack does not appear to be related to any other issue at BYOAC. There is a mass-attack against SMF forums (and others, such as PHPboard) in general. More info here: http://www.simplemachines.org/community/index.php?topic=421603.msg2949285#msg2949285. The attacks against BYOAC match this pattern exactly. I do not believe Driver-Man is related to this at all.

I am taking various measures against the attacks. There have not been any successful attacks that I am aware of anywhere. I now consider this a low threat level. Make sure you have a good, non-dictionary based password and beyond that I would not worry about it.

I will note if anything changes in this arena.

--- saint

WhereEaglesDare · « **Reply #63 on:** February 18, 2011, 11:20:38 am »

Quote from: HarumaN on February 16, 2011, 09:13:25 am

Here's a dumb question, say he was able to hack a mod's account... would that give him access to the forum user's passwords? Or is that encrypted somewhere (I hope).

Mods dont have access to PWs on SMF, they can reset them though.

twisty · « **Reply #64 on:** February 18, 2011, 01:21:58 pm »

He was doing the mass password recovery routine at MW concurrent with it happening here. This was 100% confirmed as being him by matching IP's. (And we don't use SMF either.)

Just thought you should know that.

newmanfamilyvlogs · « **Reply #65 on:** February 18, 2011, 01:29:47 pm »

Please forward relevant logs:

From: spaterson@woosh.com
CC: abuse@woosh.com

Quote

Hello,

That IP address (203.211.81.166) is part of a dynamically allocated range.

In order to unambiguously identify the user, we require require logs
(httpd, mail, etc), with timestamps.

We will also need need copies of any unacceptable content (eg, in this
case a sample of the unsolicited emails with headers).

We require this in order to highlight any specific breaches of our Terms
and Conditions to the end user, and for our records.

Regards,
Simon Paterson
Woosh Wireless Limited

twisty · « **Reply #66 on:** February 18, 2011, 01:48:31 pm »

Quote from: cotmm68030 on February 18, 2011, 01:29:47 pm

Please forward relevant logs:

Time to go fishing in my raw access logs and forward the requested info.

saint · « **Reply #67 on:** February 18, 2011, 01:53:56 pm »

Quote from: twisty on February 18, 2011, 01:21:58 pm

He was doing the mass password recovery routine at MW concurrent with it happening here. This was 100% confirmed as being him by matching IP's. (And we don't use SMF either.)

Just thought you should know that.

Well heck, then I don't know. I matched 1 IP which I assumed was due to using the same proxy service... I'll go dig through my logs again.

Dexter · « **Reply #68 on:** February 18, 2011, 02:07:10 pm »

LOL!!!!!

Saint,

over on that alt.games.mame thread you linked to, a user with no previous posts , no profile and iffy e-mail address just posted about how great drivermans 720 driver is.....

twisty · « **Reply #69 on:** February 18, 2011, 02:43:32 pm »

Quote from: Dexter on February 18, 2011, 02:07:10 pm

LOL!!!!!

Saint,

over on that alt.games.mame thread you linked to, a user with no previous posts , no profile and iffy e-mail address just posted about how great drivermans 720 driver is.....

Hmm...I don't think it's a good idea to give the ---tallywhacker--- free advertising. At the very least it's going to annoy the AGM regs there.

twisty · « **Reply #70 on:** February 18, 2011, 02:47:41 pm »

Quote from: saint on February 18, 2011, 01:53:56 pm

Well heck, then I don't know. I matched 1 IP which I assumed was due to using the same proxy service... I'll go dig through my logs again.

Oh, it's definitely him. Prior to that it was the PM flooding.

I've since made script changes to shut it all down. And now I am working diligently to shut him down.

saint · « **Reply #71 on:** February 18, 2011, 03:02:03 pm »

Quote from: twisty on February 18, 2011, 02:43:32 pm

Quote from: Dexter on February 18, 2011, 02:07:10 pm
LOL!!!!!

Saint,

over on that alt.games.mame thread you linked to, a user with no previous posts , no profile and iffy e-mail address just posted about how great drivermans 720 driver is.....

Hmm...I don't think it's a good idea to give the ---tallywhacker--- free advertising. At the very least it's going to annoy the AGM regs there.

Twisty's putting me to shame today

I did not think that through.

CheffoJeffo · « **Reply #72 on:** February 18, 2011, 03:19:04 pm »

Quote from: saint on February 18, 2011, 03:02:03 pm

Quote from: twisty on February 18, 2011, 02:43:32 pm
Quote from: Dexter on February 18, 2011, 02:07:10 pm
LOL!!!!!

Saint,

over on that alt.games.mame thread you linked to, a user with no previous posts , no profile and iffy e-mail address just posted about how great drivermans 720 driver is.....

Hmm...I don't think it's a good idea to give the ---tallywhacker--- free advertising. At the very least it's going to annoy the AGM regs there.

Twisty's putting me to shame today I did not think that through.

The folks at AGM were annoyed with him long before you mentioned his thread (and there are 5 or six at last count).

To their credit, they have handled him better than anybody else has so far.

twisty · « **Reply #73 on:** February 18, 2011, 03:41:38 pm »

Quote from: saint on February 18, 2011, 03:02:03 pm

Twisty's putting me to shame today I did not think that through.

No shame intended, it was only a suggestion

Gatt · « **Reply #74 on:** February 18, 2011, 08:11:25 pm »

Sorry guys, I've been lurking on this, but I have a new favorite gem. In reading through the posts someone linked above, I found this gem from abaraba...

Quote

you should realize that there is hardly many people in the world with such a unique knowledge as mine, i could practically make the whole Google Earth myself, which i did of course, and render their whole stupid team useless as they are..

From the top-secret link.

I'm sure he's hoarding is super-secret Google Earth code too because Google will delete his code behind closed doors too. I'm guessing it runs on the satelite system he built and launched too, probably using the matter-antimatter drives he's powering from his home-built far superior collider.

yotsuya · « **Reply #75 on:** February 18, 2011, 08:29:29 pm »

You know what's even better? One of the links he provided was to his YouTube account, and according to that, he's 39 years old.

emphatic · « **Reply #76 on:** February 19, 2011, 04:46:24 pm »

I got a mass e-mail from this shady, disgruntled emu-dev tonight. I'm betting some more folks here will too.

yotsuya · « **Reply #77 on:** February 19, 2011, 05:06:18 pm »

I got one too.

ark_ader · « **Reply #78 on:** February 19, 2011, 06:47:03 pm »

I emailed the company from where the IP address came from, and now they want the logs for the attack.

If you want to contribute Saint, I'll forward the email address to you. Let me know.

Ken Layton · « **Reply #79 on:** February 19, 2011, 11:49:04 pm »

Quote from: emphatic on February 19, 2011, 04:46:24 pm

I got a mass e-mail from this shady, disgruntled emu-dev tonight. I'm betting some more folks here will too.

So did I.

Howard_Casto · « **Reply #80 on:** February 19, 2011, 11:58:09 pm »

Quote from: Ken Layton on February 19, 2011, 11:49:04 pm

Quote from: emphatic on February 19, 2011, 04:46:24 pm
I got a mass e-mail from this shady, disgruntled emu-dev tonight. I'm betting some more folks here will too.

So did I.

Ditto.

Gatt: That sounds like something I would say.

Of course I would be kidding... or at least half kidding.

That might be my new tag-line.

divemaster127 · « **Reply #81 on:** February 20, 2011, 09:35:49 am »

I received the mass email also

CheffoJeffo · « **Reply #82 on:** February 20, 2011, 09:40:55 am »

I guess driver-man doesn't love me anymore.

Encryptor · « **Reply #83 on:** February 20, 2011, 01:29:37 pm »

I also got the email. I've never had anything to do with him or commented in his mentally unstable rants. I did reply to it and let him know just how much I didn't like appreciate it.

Encryptor

Haze · « **Reply #84 on:** February 20, 2011, 03:44:13 pm »

Quote from: Encryptor on February 20, 2011, 01:29:37 pm

I also got the email. I've never had anything to do with him or commented in his mentally unstable rants. I did reply to it and let him know just how much I didn't like appreciate it.

Encryptor

It's unsolicited email, IE Spam, just forward it to his ISP along with all the other complaints.

May as well also show the usenet stuff as evidence, the way he's reposting the same copy+pasted text over and over again could also easily be classed as spamming, not that you'd notice on a newsgroup these days ;-)

ark_ader · « **Reply #85 on:** February 20, 2011, 06:38:37 pm »

Quote from: Haze on February 20, 2011, 03:44:13 pm

Quote from: Encryptor on February 20, 2011, 01:29:37 pm
I also got the email. I've never had anything to do with him or commented in his mentally unstable rants. I did reply to it and let him know just how much I didn't like appreciate it.

Encryptor

It's unsolicited email, IE Spam, just forward it to his ISP along with all the other complaints.

May as well also show the usenet stuff as evidence, the way he's reposting the same copy+pasted text over and over again could also easily be classed as spamming, not that you'd notice on a newsgroup these days ;-)

What if he is having a breakdown of some sort?

Haze · « **Reply #86 on:** February 21, 2011, 08:50:13 am »

Quote from: ark_ader on February 20, 2011, 06:38:37 pm

Quote from: Haze on February 20, 2011, 03:44:13 pm
Quote from: Encryptor on February 20, 2011, 01:29:37 pm
I also got the email. I've never had anything to do with him or commented in his mentally unstable rants. I did reply to it and let him know just how much I didn't like appreciate it.

Encryptor

It's unsolicited email, IE Spam, just forward it to his ISP along with all the other complaints.

May as well also show the usenet stuff as evidence, the way he's reposting the same copy+pasted text over and over again could also easily be classed as spamming, not that you'd notice on a newsgroup these days ;-)

What if he is having a breakdown of some sort?

rather irrelevant. he needs to be disconnected before he does some REAL damage to something. The hacking of the forums and other sites is a step too far.

if he needs actual help he should seek it, or those around him should seek it for him.

newmanfamilyvlogs · « **Reply #87 on:** February 21, 2011, 08:57:03 am »

More over this sort of activity seems to be pretty common for him. Go read some of the other forums he's been active in. It's all just batshit insane rambling. The conspiracy theory stuff is particularly golden.

danny_galaga · « **Reply #88 on:** February 22, 2011, 07:08:31 am »

Ok, password changed

SavannahLion · « **Reply #89 on:** February 22, 2011, 10:21:42 am »

Quote from: cotmm68030 on February 21, 2011, 08:57:03 am

More over this sort of activity seems to be pretty common for him. Go read some of the other forums he's been active in. It's all just batshit insane rambling. The conspiracy theory stuff is particularly golden.

Many of which have nothing to do with MAME.

SavannahLion · « **Reply #90 on:** February 22, 2011, 02:06:32 pm »

Has anybody leveraged the "Report Abuse" function on that Polar Elephant ---steaming pile of meadow muffin--- yet? It is, after all, spamming this site with his crap.

yotsuya · « **Reply #91 on:** February 22, 2011, 02:13:35 pm »

I have, but it doesn't seem to do any good.

spacies · « **Reply #92 on:** May 24, 2011, 05:26:54 am »

Quote from: CheffoJeffo on February 16, 2011, 08:35:48 am

I think it may be time to take up a collection to send someone down to visit spacies and deal with this ---P&R denizen---.

I would volunteer, but I think that perhaps Xiaou with his death punch may be more suitable.

Ha ha. Actually I have moved cities and I drive through that suburb to my friends place about 3 times a week. Anyone got an actual address? I don't mind a bit of door knocking

Corbo · « **Reply #93 on:** May 24, 2011, 08:49:34 am »

My password is up,up, left, 1p start, coin 2, down.

torino · « **Reply #94 on:** May 24, 2011, 04:26:04 pm »

Quote from: spacies on May 24, 2011, 05:26:54 am

Quote from: CheffoJeffo on February 16, 2011, 08:35:48 am
I think it may be time to take up a collection to send someone down to visit spacies and deal with this ---P&R denizen---.

I would volunteer, but I think that perhaps Xiaou with his death punch may be more suitable.

Ha ha. Actually I have moved cities and I drive through that suburb to my friends place about 3 times a week. Anyone got an actual address? I don't mind a bit of door knocking

And why exactly would you want to do that?

What would you hope to achieve, and for what reason? You would knock at the door, and then? What would you say? Of course you would not do it, even if you had an actual reason for such risky stupidity, unless you really are stupid, but what in the world makes you post this nonsense in response to several months old thread, especially since Saint explicitly said the forum has NOT been hacked and the attacks are NOT related to the amazing Driver-man?

Are you "nz spacies", selling so called "arcade" cabinets with 60-in-1 bootlegs and PC/LCD monitors?

http://www.trademe.co.nz/Gaming/Arcade-pinball-machines/Complete-units/auction-378352357.htm

torino · « **Reply #95 on:** May 24, 2011, 04:46:42 pm »

Quote from: SavannahLion on February 15, 2011, 11:30:38 pm

All it does is prove just how wrong the punk is. If he was right there would be no reason to act like an
---uvula---.

Wrong about what?

CheffoJeffo · « **Reply #96 on:** May 24, 2011, 11:26:29 pm »

Lighten up.

You have been well behaved since you came back, so let's leave it that way.

And, remember, you were the one who said that 60-in-1s were legal because you paid taxes on them.

SavannahLion · « **Reply #97 on:** May 25, 2011, 12:20:45 am »

Quote from: CheffoJeffo on May 24, 2011, 11:26:29 pm

Lighten up.

You have been well behaved since you came back, so let's leave it that way.

And, remember, you were the one who said that 60-in-1s were legal because you paid taxes on them.

Yes, limit the nonsense to those few you've already infected. There those of us with real projects and we don't have the time nor desire to filter more nonsense from these forums.

spacies · « **Reply #98 on:** May 25, 2011, 04:38:08 am »

Quote from: torino on May 24, 2011, 04:26:04 pm

Are you "nz spacies", selling so called "arcade" cabinets with 60-in-1 bootlegs and PC/LCD monitors?

http://www.trademe.co.nz/Gaming/Arcade-pinball-machines/Complete-units/auction-378352357.htm

Watch your mouth! No that is not me. I have a nice collection of machines I imported from the USA and none run anything 'bootleg' pal.

The reason for digging up this thread was because I searched my username to try and catch up on old posts and saw this thread with Cheffos post about coming for a visit and the ---rectal-santizer--- who is hacking forums. I use to come here quite a bit and enjoyed my time here. Wether or not I would go for a 'visit', well I choose to not to reply to your comment.

SavannahLion · « **Reply #99 on:** May 25, 2011, 10:55:01 am »

You just did

torino · « **Reply #100 on:** May 25, 2011, 02:23:50 pm »

Quote from: spacies on May 25, 2011, 04:38:08 am

Watch your mouth! No that is not me. I have a nice collection of machines I imported from the USA and none run anything 'bootleg' pal.

I was just asking, sorry. So, maybe then we could indeed pay a visit to each other. Perhaps play some games, drink some beer, maybe snort some coke, or have a friendly fistfight? But, be warned! I'm very good at playing games.

Quote

The reason for digging up this thread was because I searched my username to try and catch up on old posts and saw this thread with Cheffos post about coming for a visit and the ---rectal-santizer--- who is hacking forums. I use to come here quite a bit and enjoyed my time here. Wether or not I would go for a 'visit', well I choose to not to reply to your comment.

Yeah, but Saint said couple of times the forum has _NOT_ been hacked, and the attacks are _NOT_ related to Driver-man. What reason does that leave you with? Games, beer and coke?

torino · « **Reply #101 on:** May 25, 2011, 03:13:55 pm »

Quote from: CheffoJeffo on May 24, 2011, 11:26:29 pm

Lighten up.

You have been well behaved since you came back, so let's leave it that way.

And, remember, you were the one who said that 60-in-1s were legal because you paid taxes on them.

Yeah, and in fact they are legal, meaning - they are not prohibited - regardless of their "actual" would be status if someone who could do anything about it ever cared to do anything, or even be aware of it at all, for that matter. It's not the legality that is irritating in that case, it's the wording of the auction, lies and misleading, and the worst thing about it are the damn LCD/PC monitors in those otherwise nice cabinets, which they forget to mention in the auction. If they only explained their cabinet is NOT actually "real arcade cabinet", as they call it, and that in fact it could not take any genuine arcade PCB, then that auction would be completely fine by me. Do you agree, my friend?

I'm all lightened up, glittering in the flames of rage, as usual. Don't you miss me? We had such a good time, didn't we? Without me it's so boring around here, admit it! -- We discussed MAME legality, we talked about control input ports, there were some VGAtoTV drivers and ParallelPort drivers, we fixed YieAr driver and 720 driver, we took down Aaron and got rid of Derrick. Ah, those were the days. The Nephilim were on the earth in those days, and also afterward, when the sons of God came in to the daughters of men, and they bore children to them. Those were the mighty men who were of old, men of renown.

RayB · « **Reply #102 on:** May 25, 2011, 03:25:29 pm »

Quote from: torino on May 25, 2011, 02:23:50 pm

I was just asking, sorry. So, maybe then we could indeed pay a visit to each other. Perhaps play some games, drink some beer, maybe snort some coke, or have a friendly fistfight? But, be warned! I'm very good at playing games.

CheffoJeffo · « **Reply #103 on:** May 25, 2011, 04:28:12 pm »

Quote from: torino on May 25, 2011, 03:13:55 pm

I'm all lightened up, glittering in the flames of rage, as usual. Don't you miss me? We had such a good time, didn't we? Without me it's so boring around here, admit it! -- We discussed MAME legality, we talked about control input ports, there were some VGAtoTV drivers and ParallelPort drivers, we fixed YieAr driver and 720 driver, we took down Aaron and got rid of Derrick. Ah, those were the days. The Nephilim were on the earth in those days, and also afterward, when the sons of God came in to the daughters of men, and they bore children to them. Those were the mighty men who were of old, men of renown.

Actually, I have enjoyed your recent threads but didn't want to "out you" since you were being so well-behaved and not being, well, yourself.

I am curious to see which path you will follow now that you are, once again, out of the closet.

I do applaud the improvement in your unattributed quotes -- the scriptures are a more worthy source than a Wachowski teleplay (even if it was really fun to watch!), but you should remember what the Nephilim were ... and what happened to them.

saint · « **Reply #104 on:** May 25, 2011, 05:08:03 pm »

<--- patience these days for tomfoolery = 0. Word to the wise.

--- saint

yotsuya · « **Reply #105 on:** May 25, 2011, 05:35:11 pm »

Quote from: saint on May 25, 2011, 05:08:03 pm

<--- patience these days for tomfoolery = 0. Word to the wise.

--- saint


Main	Restorations	Software	Audio/Jukebox/MP3	Everything Else	Buy/Sell/Trade
Project Announcements	Monitor/Video	GroovyMAME	Merit/JVL Touchscreen	Meet Up	Retail Vendors
Driving & Racing	Woodworking	Software Support Forums	Consoles	Project Arcade	Reviews
Automated Projects	Artwork	Frontend Support Forums	Pinball	Forum Discussion	Old Boards
Raspberry Pi & Dev Board	controls.dat	Linux	Miscellaneous Arcade	Wiki Discussion	Old Archives
Lightguns	Arcade1Up	Try the site in https mode		Site News


Unread posts \| New Replies \| Recent posts \| Rules \| Chatroom \| Wiki \| File Repository \| RSS \| Submit news

Author Topic: ---WARNING--- - password hacking attempt on many accounts -- UPDATE -- (Read 22018 times)

bitbytebit