Author Topic: Explanation of recent, inexplicable bans!  (Read 20062 times)

0 Members and 1 Guest are viewing this topic.

Offline S-U-P-E-R

  • My Butt is Ready :reggie;
  • Score: -63
    • View Profile
    • oh my god
Explanation of recent, inexplicable bans!
« on: February 10, 2008, 02:42:44 AM »
Someone finally waltzed into one of our awful forum script's giant, gaping security holes. Unless you are actually a terrible poster that deserved to be banned, I guess!

 

Offline Shift Key

  • MISTER HAPPY-GO-LUCKY
  • Score: 9
    • View Profile
Re: Explanation of recent, inexplicable bans!
« Reply #1 on: February 16, 2008, 02:24:20 AM »
Someone finally waltzed into one of our awful forum script's giant, gaping security holes. Unless you are actually a terrible poster that deserved to be banned, I guess!

Yeah, that was my research and investigation that showed it up. Turns out there was a Fusetalk vulnerability that the Bannings page wasn't locked down (which was confirmed by a simple Secunia query a few days later), and any registered user could come in and ban anyone else. I've got the entire hilarious chat log which demonstrated the ability to ban random people, Ty included:

Shifty: ahahahahahahahahaha
Shifty: i'm in your ban lists
Shifty: can't see anything though
Shifty: as in "there's no banned users" which is hard to believe
Peeack: aahahah
S-U-P-E-R: hrm
Peeack: that it is
Peeack: well i'm off for a while, i have two OS's to install on this pc!
S-U-P-E-R: i have a hunch that there's at least two seperate banlists
S-U-P-E-R: like it'll track ones done through the on-page pulldowns separately from the ones through the admin panel
Shifty: and now i caused a rails error
Shifty: ah
S-U-P-E-R: HOWEVER, i don't know this for sure
Shifty: that's probabl why, as i'm running this from the forums main page
Shifty: urg, admin login page.
Shifty: can't get past you just yet
Infernal Monkey: hahahah
Shifty: lets see if i can ban someone randomly
Shifty: awesome, i just banned PIAC from somewhere
S-U-P-E-R: ahahah are you serious
Shifty: reason: FREE KEVIN
Shifty: yeah, see if you can track it down
Shifty: because i can basically cruise to www.nintendoworldreport.com/forums/banning.cfm and do just that
Infernal Monkey: hahahahahahhaha
Berto2K: hahaha
S-U-P-E-R: ahahah holy ****
S-U-P-E-R: the pulldown menu banlist was cleared
Shifty: did i do that?
S-U-P-E-R: maybe that happened when the server moved
S-U-P-E-R: and yeah, piac is the only one on it
S-U-P-E-R: LOLLLL
Shifty: hahahahaha do i win the internet?
Shifty: ****, i'm getting a beer for that
Shifty: who else deserves a ban?
S-U-P-E-R: i don't think you did
S-U-P-E-R: every active poster and admin
S-U-P-E-R: do it and maybe we can get the new forum up this week so "this doesn't happen again"
Shifty: ban someone noteworthy?
S-U-P-E-R: every active poster and admin
S-U-P-E-R: just camp out the online user list and ban everyone that logs on
Infernal Monkey: looooool
S-U-P-E-R: and i'll not know about it
S-U-P-E-R: p.s. i have warned the entire staff several times of exploits 
Shifty: oh, but that's cos you'll get banned to oh wait surprised ruined
S-U-P-E-R: that's fine i don't care
S-U-P-E-R: besides i think i have parachute accounts
Shifty: GP has been banned
Infernal Monkey:  yes!
S-U-P-E-R: hahahahahahahahahahah holy ****
S-U-P-E-R: i can't login to the admin page anymore
S-U-P-E-R: double lollllllllllllllllllllllllllll
Shifty: HAHAHAHHAHAHAHA
Hybrid Hunter: LOL
Infernal Monkey: NWR quality internets
Shifty: and that was an easy effort
S-U-P-E-R: how long did this take you, like 30 minutes to destroy the forum
Hybrid Hunter: can they trace it to you shifty?
Infernal Monkey: hahahahahahhaahha
S-U-P-E-R: who gives a **** what are they gonna do
Shifty: it took me two minutes of reading scripts and then i went straight to the page
Hybrid Hunter: blame australia
S-U-P-E-R: banning *!*@*.au
Infernal Monkey: they'll chuck publisher press releases at you shifty, watch out
Shifty: acutally, lets see if i even need a login to do this
Shifty: yeah, i need to supply a login
S-U-P-E-R: make sure you get every admin
Shifty: hahahaha
S-U-P-E-R: i'm going to be the first person that gets aimed about this by the other staff

After that it degenerated into chaos once RABicle and PIAC heard about their unbannings...

So yes, that was why the forums were down. At least it was acted on promptly and resolved quickly. Thanks staffers!

Offline Caliban

  • In Space As Always
  • Score: 32
    • View Profile
Re: Explanation of recent, inexplicable bans!
« Reply #2 on: February 16, 2008, 02:30:24 AM »
Hilarious.

Offline MegaByte

  • NWR Staff... Can't win trivia
  • NWR Staff Pro
  • Score: 31337
    • View Profile
    • Konfiskated Teknologies Network
Re: Explanation of recent, inexplicable bans!
« Reply #3 on: February 16, 2008, 06:04:49 AM »
S-U-P-E-R: do it and maybe we can get the new forum up this week so "this doesn't happen again"
Son of a bitch.
Aaron Kaluszka
Contributing Editor, Nintendo World Report

Offline IceCold

  • I love you Vanilla Ice!
  • Score: 1
    • View Profile
Re: Explanation of recent, inexplicable bans!
« Reply #4 on: February 16, 2008, 07:52:33 AM »
Ahahaha, awesome..
"I used to sell furniture for a living. The trouble was, it was my own."
---------------------------------------------
"If your parents never had children, chances are you won't either."
----------------------------
"If it weren't for electricity we'd all be watching television by the candlelig

Offline S-U-P-E-R

  • My Butt is Ready :reggie;
  • Score: -63
    • View Profile
    • oh my god
Re: Explanation of recent, inexplicable bans!
« Reply #5 on: February 16, 2008, 09:12:33 AM »
Active sabotage is the only way to get things done around here. Fact

Offline Dasmos

  • Needs Him Some Tang in His Lollies
  • Score: 52
    • View Profile
Re: Explanation of recent, inexplicable bans!
« Reply #6 on: February 16, 2008, 12:02:24 PM »
loooooooooooooooooooooooooooooool. That's brilliant.
Images are not allowed in signatures. That includes moving images (video).

Offline Bill Aurion

  • NWR Forum Loli
  • Score: 35
    • View Profile
Re: Explanation of recent, inexplicable bans!
« Reply #7 on: February 16, 2008, 08:46:33 PM »
Hey, an insatiable desire for change demands drastic action... :music;
~Former Resident Zelda Aficionado and Nintendo Fan~

Offline Caliban

  • In Space As Always
  • Score: 32
    • View Profile
Re: Explanation of recent, inexplicable bans!
« Reply #8 on: February 17, 2008, 03:16:05 AM »
I hope someone on the podcast mentions this incident.

Offline Crimm

  • Get your unfiltered Bowsette here!
  • NWR Staff Pro
  • Score: 1147
    • View Profile
Re: Explanation of recent, inexplicable bans!
« Reply #9 on: February 17, 2008, 09:11:00 AM »
Shifty: because i can basically cruise to www.nintendoworldreport.com/forums/banning.cfm and do just that

Oh Goddamnit.
James Jones
Mondo Editor
Nintendo World Report

Offline Crimm

  • Get your unfiltered Bowsette here!
  • NWR Staff Pro
  • Score: 1147
    • View Profile
Re: Explanation of recent, inexplicable bans!
« Reply #10 on: February 17, 2008, 09:11:51 AM »
I hope someone on the podcast mentions this incident.

*sigh* yeah I guess we gotta at least pay it lipservice.
James Jones
Mondo Editor
Nintendo World Report

Offline S-U-P-E-R

  • My Butt is Ready :reggie;
  • Score: -63
    • View Profile
    • oh my god
Re: Explanation of recent, inexplicable bans!
« Reply #11 on: February 18, 2008, 12:04:02 AM »
call me a loose cannon


but mention that I get results

Offline Crimm

  • Get your unfiltered Bowsette here!
  • NWR Staff Pro
  • Score: 1147
    • View Profile
Re: Explanation of recent, inexplicable bans!
« Reply #12 on: February 18, 2008, 01:38:49 AM »
"Loose cannon"
James Jones
Mondo Editor
Nintendo World Report

Offline Svevan

  • Not Afraid of Being Afraid
  • Score: -9
    • View Profile
    • Continuity
Re: Explanation of recent, inexplicable bans!
« Reply #13 on: February 18, 2008, 02:05:44 AM »
I would like to mention that Ty gets results.
Evan T. Burchfield, aka Svevan
NWR Message Board Artist

My Blog

Offline MegaByte

  • NWR Staff... Can't win trivia
  • NWR Staff Pro
  • Score: 31337
    • View Profile
    • Konfiskated Teknologies Network
Re: Explanation of recent, inexplicable bans!
« Reply #14 on: February 18, 2008, 02:17:00 AM »
I would like to mention that Ty gets results.
... but not Brawl in the mail.
Aaron Kaluszka
Contributing Editor, Nintendo World Report

Offline NinGurl69 *huggles

  • HI I'M CRAZY
  • Score: 28
    • View Profile
    • Six Sided Video
Re: Explanation of recent, inexplicable bans!
« Reply #15 on: February 18, 2008, 04:41:22 AM »
owned so bad
:: Six Sided Video .com ~ Pietriots.com ::
PRO IS SERIOUS. GET SERIOUS.