board is secure, period, not when the board is secured from JW..
These are pretty much the same thing!
Yes, the message should be a bit better, but I’m at work and can only access the server from my phone! Otherwise I would get cracking on backups etc, aye.
But, no, the admin log need not show what happened. He can alter the DB at will.
ah well, at least we have a sandbox. ca va
but nobody using the board is to do that again or risk being banned.
that is hardly going to deter jon, the only registered user who bothers to exploit security issues with ILX code. banning doesn’t work on savvy enough regulars who repeat offend.
So what happens if PEW becomes computer literate?
mushroomcloud.jpg
So what happens if PEW becomes
literate?
armegeddon, ILX style:
LESS QQ, MORE PEW PEW
if the board were to continue running with code that’s that flawed, eventually sooner or later somebody would hack in & cause some serious problems, i mean, what happens the day that some random kid on the internets decides to delete the whole board?
Q(^.^Q)
So the argument is that JW exploited a hole in the code, and so now you’re shutting the whole thing down on principle? Why wouldn’t you have shut the whole thing down on principle years ago? Why is this different?
thanks heavens we have jon to speed the whole process up by forcing new code through, by demonstrating practically the flaws of the board that most people don’t understand nor give a shit about, ignorant fools that they are. without his unannounced intervention, commandeering of admin rights, useful testing of locking privileges and whatnot these things could’ve been done TOMORROW by somebody we neither know nor like!
if the board were to continue running with code that’s that flawed, eventually sooner or later somebody would hack in & cause some serious problems, i mean, what happens the day that some random kid on the internets decides to delete the whole board?
Yes. I figured it was an OK risk given that it hadn’t happened in all the preceding years, and the code would only be up for a few months till the switchover. Ah well.
So the argument is that JW exploited a hole in the code, and so now you’re shutting the whole thing down on principle? Why wouldn’t you have shut the whole thing down on principle years ago? Why is this different?
No, the argument is that the risk above is now too big to take. If Jon’s going to be such a loose cannon that he can’t restrain himself from hacking what we know to be insecure code, I’m not going to run around trying to stop him.
I think the point is, Jon found a HUGE security hole, exploited it, and the admins are not sure how he did it. Jon would probably not nuke ILE, but the hole is severe enough that if someone else found it, the consequences could be dire. Most importantly, there is currently no backup of ILX, so the entire history could be lost if someone exploited the hole.
So a combo of factors in play here. Can’t say I blame the admins. It’d be one thing if there were backups but in absence of them, it’s probably best to leave the site down.
neverforget.jpg
Point well taken.
This is still kinda funny, though.
This is different because years ago, nobody actually had hacked their way into getting database access. The board is not being shut down permanently, only ‘till it can be put up with the new code.
I guess the point is that in the first place it’s not OK for Jon, or anyone else to hack into the database, and more urgently, now that Jon has shown it can be done, it’s extremely likely that someone else will do it. Like the CSS flooding thing referred to upthread, Jon didn’t CSS flood the shimura curves thread, someone else did, but w/o Jon’s example of showing it could be done in the first place, it likely wouldn’t have happened.
(x-posts, in which everyone explains it better than I can :( )
jon, martyr that he is, doesn’t mind taking some stick for being the one to do the sabotage, in order to demonstrate the catastrophic effects of sabotage, were it to ever happen. better for it to be demonstrated by a guy popular and cherished enough on ILX than for it happen without provocation by some random schmoe. just because it never happened before doesn’t it mean it couldn’t happen TOMORROW, maybe even while you sleep. at night. are you afraid? not nearly enough.
I wonder what Jon used his admin privs for...?
lololo
SHOULDNT YOU DO BACKUP BEFORE ANYTHING ELSE IF THERES NO BACKUP WHAT IF THE HARD DRIVE JUST GOES AT ANY TIME IT DONT MAKE SENSE. WHY SPEND ALL THE TIME AND MONEY DOING PROGRTAMS AND SEND THE COMPUTERS AROUND THE WORLD IF YOU DONT HAVED TIME TO DO COMPUTER HARDRIVE BACKUP.
The hosts were supposed to be doing it. They haven’t (along with a shitload of other stuff). I was going to start doing my own this week, ironically.
so could one do the same thing to the sandbox?
Yes, naturally. Should I take it down too?
that seems unnecessary!
Doesn’t stet own thehold? I think if he thinks Jon can fuck that up, preventing that is kind of up to stet.
DOES NOT PARSE
I’m only joshing about taking it down, rly. Please don’t fuck it though Jon, eh?
Yeah, but you’re quite within your rights to do so if you want to, or have to. Just saying, like.
Because me v everyone else counts in terms of opinions, obv.
well god forbid all our precious sandbox posts get deleted by JW in a fit of pique over kate st.c
Oh good for you and your not giving a shit. I kind of hate two people’s shite impacting on lots of other people, but hey you’re bigger and better than this board so well done you.
fuck this defense of jon, he’s acting like a spoilt child whether his intentions were ‘good’ or not.
tombot otm. everyone else hysterical.
OTFM. Cosign. Whatever the cool kids say these days.
erm, xpost.
what do you think should be done kenan?
RELAX
SAVE THE CHEERLEADER SAVE THE WORLD SAVE ILX AND TEH SANDBOX.
xpost And you know, fix stuff, and maybe shut the main board down for a while. Protect the database, sure. God knows I have countless jewels of wisdom stored there.
Jon’s getting tarred with his own brush from previous temper tantrums, but I don’t know that this one is particularly egregious...how long did he have admin privs before anyone noticed?
Not giving a shit vs thinking your post was dumb, TS.
I don’t think Jon’s intentions were good at all. I do think that making a point to state openly it was Jon instead of dealing with that some other way is just causing a tremendous amount more problems than there might’ve been otherwise though (though I can understand stet writing something like what is on the main ilx pg in anger).
BTW, while we’re fixing security holes, you do not need to have “revoke” powers to delete people’s mod privledges.
xpost I just feel like jon piddled on our collective leg, and it’ll wash out.
I do think that making a point to state openly it was Jon instead of dealing with that some other way is just causing a tremendous amount more problems than there might’ve been otherwise though (though I can understand stet writing something like what is on the main ilx pg in anger).
Yea, this is probably fair — and I was pissed. I’ll change it to something a bit less inflammatory when I get a chance.
Whatever Keith and Stet say is good by me—maybe Jon can make his own board in the interim (or perhaps we could, you know, just go somewhere else, ilx is fucking toxic these days)
i know this much: it’s not as good as it used to be.
There was something he posted earlier—a screengrab of something—where his login stuff include mod things. I sort of noticed, but didn’t think it that weird. That was maybe about 9 or 10 hours ago?
(weird enough that I noticed, not weird enough to alert others, that is)
maybe Jon can make his own board in the interim
he would’ve done this two years if he wanted to. there’s enough people and topics of interest to keep him here and obviously ilx is more desirable due to it’s huge audience and google profile (as long as you don’t mention people in any kind of bad light of course), despite it’s technical flaws which thankfully some people are only to willing to expose in as cynical a fashion as possible (how else would they get fixed otherwise?).
okay, done being hysterical. (i can’t drive b/c of law, can’t leave the house. whatevah.. i gots projects)
Well it’s not so bad that certain things JW said on the other board have been deleted—I have lost any sense of having ANY respect for the guy after that horrific bullying on that LJ thread. But perhaps this is because I live in a post-Jade environment and this is the ghost of Shilpa speaking.
i’ve lost count of people one could accuse of having bullied louis, mind you.
i think it’s around 12.
Steve, you know the thing I’m talking about, that was fucking disgusting and I can’t see how that could be defensible in any way! And you also know who did it!
Oh great!
I dunno what Starry’s referring to, maybe I missed all the fun? But there are a couple of people around here I wouldn’t miss for their sheer hatefulness, and JW isn’t one of them.
(what thing was this?!)
First you get the money. Then you get the amyl. Then you get the poppage.
yeah what happened 2 outrage starrysarah???? i missed it :‘(~
trees, welcome to my world. go cry about it.
From how I’m reading it here I don’t think the admins understand what I did. I don’t want to talk too much about what I did, but without knowing a little bit more about how stuff works, I couldn’t get access to the site at a global level let alone raw database access. I only every had moderator powers on ile. I made a little two little mod actions that showed up in the log and that was it. The same vulnerability would let me take moderator actions as any other moderator, but I decided not to do that as it would be really annoying to figure out what was going on.
I don’t really see the logic in keeping ilx down since only a few people know how to do this and in the like 20 hours I was mod for, I did nothing with it. As far as the defensibility of my own actions, that isn’t really pertinent to this.
Also, I have no idea what Sarah’s saying. Maybe she should fuck off if she wants to slander me privately to everyone in the world?
In short, I don’t even know who you are or why you have a preexisting problem with me, but you can kindly get fucked and leave.
I did nothing with it.
Apart from banning another poster, you mean? I’m not going to join in the witch hunt, I don’t have any particular problem with you and 80% of the time you don’t even register with me. Still, not mentioning this is being a tad disingenuous and doesn’t exactly leave me inclined to believe everything else you’re saying.
xpost to JW: hmm. ultimately, it’s the admins’ decision what to do with the board. if they think what you’ve done warrants this response, jon, i support them—and i’d hope most of the rest of ILX would too. they, after all, are sensible people whom i trust. you’re a pest whom i don’t.
(and i don’t have a fucking clue what you did; i’m just back from a weekend away. all i can gather is that it involved hacking and dickery.)
i thought starry was initially referring to your ‘l0u1s takes drugs’ thread on IRE, but unsure.
I don’t want to talk too much about what I did
why not? sounds interesting!
The same vulnerability would let me take moderator actions as any other moderator, but I decided not to do that as it would be really annoying to figure out what was going on.
i’m sure they will appreciate this a lot, v thoughtful of u!
I don’t really see the logic in keeping ilx down since only a few people know how to do this
if only a few people know, why bother to demonstrate the flaw at all, as opposed to just contacting the coders discreetly?
As far as the defensibility of my own actions, that isn’t really pertinent to this.
convenient!
holy shit, jon banned someone. that is totally unheard of on ilx and would probably take hours if not weeks to undo. better shut the whole operation down, guys.
shut “faggot” mickey down more like
Apart from banning another poster, you mean?
jon was considerate enough to ban someone he knows doesn’t post on ilx at weekends...figuring it would be revoked before monday morning. i don’t think people really appreciate his thoughtfulness here.
Still, not mentioning this is being a tad disingenuous and doesn’t exactly leave me inclined to believe everything else you’re saying.
Well, I didn’t let’s say... lock ile... which is what in effect what has been done. Taking toys, and going home, etc
And banning someone from ile is not ok, but bullying several posters off of posting to threads you start and being a hateful lunatic is totally ok?
jon was considerate enough to ban someone he knows doesn’t post on ilx at weekends...figuring it would be revoked before monday morning. i don’t think people really appreciate his thoughtfulness here.
— sede vacante (n...) (webmail), February 11th, 2007 10:09 PM. (blueski) (later) (link)
Well, I figured I had already shown up in the admin log, so I might as well do something silly... but yea
Jon—the Lou1s J4gger drugz stuff on IRE—I obviously can’t link to it now, I think limited amount of people saw it, and I only saw it when someone else pointed me at it (and wouldn’t have seen it any other way). It was horrible stuff—you’ve got to see why people wouldn’t feel exactly great towards you after seeing it, right?? And after whatever you’ve done today—and we can at least agree you did SOMETHING—it’s not painting a great picture!
As Matt says though, most of the time you don’t register much with me, and I guess I don’t register much with you either, but why is it that whenever you DO it’s for things like this?
Oh, I thought you mean something else.
As Matt says though, most of the time you don’t register much with me, and I guess I don’t register much with you either, but why is it that whenever you DO it’s for things like this?
Because you only post on Chicago threads?
if only a few people know, why bother to demonstrate the flaw at all, as opposed to just contacting the coders discreetly?
all ilx got sonned this time. pwnd!
if only a few people know, why bother to demonstrate the flaw at all, as opposed to just contacting the coders discreetly?
— sede vacante (n...) (webmail), February 11th, 2007 10:14 PM. (blueski) (later) (link)
Honestly, I planned on doing something kind of silly and non harmful (taking over IDME) and then having them see what’s up.
Also, I still have hostile Canadian javascript
this is boring. i’m bored now.
you should go and visit mickey
Can we just fast-forward through the whole massive fight and get straight to the bit when Ronan posts a series of messages mocking the whole situation in a vaguely surreal manner?
you know the difference between a discussion/argument and a fite tho right?
a fite has css
i can’t wait until ilx goes back to normal! you know, when people are monstrous assholes spewing vile at each other and nobody shuts down the whole thing because of silly little incidents.
A fite has alpacas.
xpost, I was just talking about alpacas with tza and hstencil
ADORABLE!
Jon, I have HACKED YOUR LIFE. Next time you start wanking, remember who’s watching.