Suspects who could have been hacked

[domhnall]

On a more Realpolitik note, it would also give us free us up to go on about Digg hacking*; we couldn't do that without an explanation.

If Natmus doesn't do it can someone else?

*Isn't a bit convientient that the tabs bar was full of Digg related links? Why let us know? That gives us an out with Pantheon. Digg tactics and so forth. Is it possible that someone else would have reason to do this? Someone in PAIN perhaps? Should we assume it's Digg anyway because it suits us.

[domhnall]

WYSIWYG

There isn't an official MT line on this, and I don't think there will be.

The demands for an explanation are both understandable and problematic; the thread in question WAS Nat's explanation. The thread was published in it's entirety and, as such, you know as much as we do.

Natmus got access to an account of a player he thought was quitting and decided to play a practical joke with it. That is all there is too it.

Many in MT would like to see a compensation deal worked out, me included.

LACK OF MORKIN OUTRAGE

As it happens there is no discussion about this in the Morkin private section, although this would be our standard approach. There isn't anything to discuss.

The original Morkin are friends first and IK players second. We were NEVER going fall out over a computer game; also noone was going to be forced to play a certain way.

So accommodations were made.

This is how Corleth came into existence. Ashimar, Patton and their dark posse were Black Oping from the get go. Patton and Ashimar enjoy deviousness for its own sake; their replies were in character if you like.

Meanwhile, the rest of Morkin were able to play the much straighter game we were comfortable with while everyone could still be part of the same group. Note that of the other replies Arminius was unhappy, I was surprised, and Skulkrin Bait just posted about a separate issue relating to this player.

No doubt you have all wondered at the reasoning behind Morkins sister alliance structure. Well, this is it.

[domhnall]

Thoughts?

Rereading it, I suspect it's too long and waffley allowing for nitpicking. A bullet point thing might be better.

[Sol]

I say we don't release a public statement...It won't change a thing.

[Dalfiatach]

Yeah, like we didn't officially declare war we just keep our mouths shut and let the hyperactive kiddies yap away on the forum.

I had an idea last night - if it comes to it, and DBS demands compensation backed up by all the other alliances, then our offer should be this:

"Alright so, pick 25 of all these isles we've taken from DIGG and we'll help you colo them."

[digital]

Yet again I have to agree with Sol. I think that we all keep quiet about everything. You just have to take a look at the digg war to find that it's annoying the hell out of them that we haven't declared an official war.

Keep quiet and new threads will over take it.

[Sol]

Yeah. That's the idea. No compensation. No explanation. No talk. Complete blackout. Explain to those who really matter but other than that, everyone can go Chiavata! themselves.

If we say anything, it will only cause us headaches and people picking the bad side of anything we say. If we don't say anything, they can continue talking, but sooner or later they're going to run out of things to say. And then what?

And, if someone did get access to this forum, there are a lot of bad things that can be found that they can reveal about us. No point in clearing up the dark truth. let them think what they must. In the end, we will continue the fight. The enemy does not change.

[Clausewitz]

Trying to absorb/deflect some of the heat on the IK forums...

I might be the guy DIGG hates more than anyone. Throw a dog his favorite bone, and he'll forget about the sock he's currently chewing on...

[Clausewitz]

Success?

Page 6 of the current thread. Predictable DIGG venom and personal attacks. Tom jumps in and says, "Is it any surprise Morkin isn't compelled to answer to such a mob?" (or words to that effect).

Sakian says "I think this blew up when Clause made accusations against DIGG".

Nobody outside DIGG has yet to show further indignation, and it may have successfully been discounted (or at least the seed of doubt planted) that it is standard DIGG black ops, and their standard IK forum rhetoric and personal assaults.

We'll see how it plays out over the next day or two...

NOTE: I know the "comms blackout" is the official party line, but I figure I'm in a bit of a unique situation...

[Aesir]

It is funny how phil refuted my claim that forum admins can change user passwords..

he's outright lying there.. not that it really matters i guess.

[ashimar]

I was an inch away from a reply, but...I am glad I haven't posted it. Clausewitz and Gauge and Tom, go ahead with what you're doing and perhaps Eproxy should let it rest now. They'll just fret more and more when this is turned into an official "one Digg show".

We may open a completely new thread at some point if we've decided on what to put in it. I find it very funny how they all want an official declaration here, an official declaration there and ofcourse all that nonsensical rubbish of respect and what not. I'd almost say it's cultural, that obsession with respect/status/standing whatever. I'm so relieved as a Dutchie I don't have that problem at all.

[Clausewitz]

ashimar said:

We may open a completely new thread at some point if we've decided on what to put in it. I find it very funny how they all want an official declaration here, an official declaration there and ofcourse all that nonsensical rubbish of respect and what not. I'd almost say it's cultural, that obsession with respect/status/standing whatever. I'm so relieved as a Dutchie I don't have that problem at all.

As the resident Yankee apologist (and by that, I mean constantly apologizing for my countrymen ), I would offer that it is not an American failing to be so focused on formal declarations, responses, ranks, standings, etc., but rather an institutional failure.

DIGG has found their only purpose in this game to be the coveted #1 rank, and they lack the great minds necessary to "think outside the box". They have fallen into a mental construct of how proper wars are fought, how proper politics are conducted, and believe that the way they do it is *coughHUBRIScough* the only way that such affairs should be conducted.

Anyhow, glad to have your endorsement on this one, Marc. I will be gone for another long week of work, and only stopping in during the early morning hours and late, fatigued, sore evenings. Somebody else is going to have to carry the torch, if we're going to continue planting the doubt and letting DIGG dance what has become a one-alliance-show-of-outrage.

[SkulkrinBait]

Apparantly their admins can see the encrypted passwords on the database. Of course, sha-1 is practically impossible to decrypt, but there are ways to brute force defeat it, the fact that they can see (apparantly) the passwords on the database (even if they are encrypted) makes me more convinced that they did hack me via their forums.

I'm not working today so I might have a go at writing a piece of code to "break" that password on the forums they've set as a challenge, but it would only work if it's a word in the dictionary. My password was a word in the dictionary, albeit one you never use in everday language. My new password has a number in it and is misspelt, so this method wouldn't crack it.

[Shendemiar]

Getting user passowrds is trivial. You snatch them before they are crypted.

[SkulkrinBait]

Sure, but just in case:



<?php

//$target = "15cd982272dcb1ef737cbe7c2c18eeeafecb93fb";

$target = "ed421c35417f4de7c64a7ae212c0a721f6436e9b";

$pathToFile="includes/badwords.txt";//set this to where you have the profanity filter file.
$badwords=file($pathToFile);

for($i=0;$i<count($badwords);$i++)
{
$badwords[$i] = preg_replace("/(\015\012)|(\015)|(\012)/","",$badwords[$i]);
echo $badwords[$i];
echo " encrypted: ";
$enc = sha1($badwords[$i]);
echo $enc;
echo "<br>";
if ($enc == $target)
{
echo "<br>Cracked! the word was $badwords[$i]<br>";
}
}
?>



That will check an sha-1 encrypted/hashed password against what is in the textfile "badwords.txt" and output the result if it finds a match. All I need to do now is to find some source that contains a lot of words, an online dictionary or such. If you wonder why it's "badwords" it's based on some code that I wrote as a profanity checker.

We can't see passwords on here, even encrypted ones can we Shendemiar?