Where did you learn your skills?

[Negative]

I don't know why I'm even bothering, but anyways:
"All of this" started not when I personally got tired of you (which was around two minutes after you joined), but when an admin got tired of you. Mods cannot block IP's, so there goes another theory of yours. I don't mind playing this game - it's my job; you on the other hand must be a total nut if you enjoy breaking the law (which is what you've been doing for the last couple of weeks) since you don't even get paid for it.

[Egaladeist]

Hi Neg,

I realize your hands are tied somewhat...but I don't see the point in this never-ending ' he makes an account ' ' gets banned ' senerio...

it would seem to me that the only way to get rid of him is for him to smarten up or to have everyone put him on ignore and he can post and talk to himself...

I posted in another thread a link to a site that claims that a person can be put on invisible which in effect makes that person as if he was on everyone's ignore list...

is something like that not possible?

Eg

[HTRegz]

Originally posted here by Egaladeist
Hi Neg,

I realize your hands are tied somewhat...but I don't see the point in this never-ending ' he makes an account ' ' gets banned ' senerio...

it would seem to me that the only way to get rid of him is for him to smarten up or to have everyone put him on ignore and he can post and talk to himself...

I posted in another thread a link to a site that claims that a person can be put on invisible which in effect makes that person as if he was on everyone's ignore list...

is something like that not possible?

Eg

Hey Eg,

You're not going to find anything loke that that will work. He's demonstrated time and time again that he has no life, no friends and no social activities, he spends his time on IRC and AO... Now that he's been banned from AO he feels his world closing in around him. His fears that he's a loser and will never amount to anything are beginning to come true and he feels like **** for still hiding in his parents basement. He's got nothing but time.. 24 hours a day to be exact because I'm pretty sure this is all he does.

Because he's using proxies, they can't easily define between him and a new member. You could end up losing all new members because they're all restricted on join. Then you end up with a manual approval of all accounts. Then he's just going to request thousands of new accounts.

The only way I can see it is to run a port scan on sign up, looking for common proxy ports and if it is a proxy server, not allowing registration but there are still non standard proxies out there... so that still wouldn't be 100% effective.

Peace,
HT

[Egaladeist]

Amazing isn't it!...with all these hacks and hackers and code specialists...no one has ever created a code to deal with something like this.

Eg

[Katja]

Eg, if there was a way to keep sites safe, this forum would have no reason to exist because then we'd have a proven security measure. Problem is that a site like AO will attract many hackers who just laugh about all those security people and make fun with them. Spec is just one of them...

About proxies... Some members will be behind some proxy most of the time anyways. When they're at work or school, for example. And many Chinese people. You could limit access from well-known proxies, though. Block them, for example. And I suggested a 'block by cookie' before in a different post which can be bypassed only by cleaning your cookies. (You could prevent members from becoming member if they have cookies disabled.)

Maybe one day some company will come with a secure identification method that becomes part of your browser. But a browser that cannot be used for (semi-)anonimous Internet access won't be really popular. (And a real hacker target.)

[AngelicKnight]

If you pay them no attention they'll get bored...

Back on topic --

I was a late bloomer. I realize most of you guys were tinkering with cards and motherboards long before puberty, but I didn't jump in until my late teens/early twenties. I was always a scifi geek though as a kid, so I knew I wanted a nice techy career. Hardly ever had a computer growing up though. But when I got to college, I first went for a comp. sci. degree, realized that was mental suicide for someone of my personality type, and switched over to MIS, and eventually graduated with a BS degree (I still find it amusing that I'm saying "BS degree", I'm sure that's loaded with irony ).

Anyway, that broke me into computers, but taught me squat about security. Where did I start learning security? Right here. For all those who've said AO is a worthless waste of cyber real estate, I will always argue to the contrary. I came in here around 2003ish or so, started reading the experts' posts, following links, wading through tuts, getting acquainted with the more contributing members, and so on and so forth. In fact, I'd say I owe most of my security knowledge to AntiOnline.

[edit]To Jupiter Media: Do not turn this post into a commercial until I get royalties. [/edit]

[jinxy]

I have always been interested in boxes that do stuff. It started with radios as a young nipper. I used to operate an old second WW radio out of a Halifax Bomber (Air Training Corps) three radios in one box all colour coded knobs I discovered computers later, a friend used to write his own games on a Sinclair ZX spectrum.

Even with all the enthusiasum I have for the things, I would not say I have any skills. Having said that, I have not come across something that I cant fix(read that for bodge)

As for all this crap with Spec, I have not got a problem with him, but he realy needs to take a look at the /. article, here :http://it.slashdot.org/article.pl?si...id=123&tid=219

Consultant Convicted For Non-Invasive Site Access

[rapier57]

Originally posted here by Katja
And I mean your skills that involve computer security, of course.

Started messing with analog computers back in 19-mumble-mumble, high school. Ya know. patch cords. Make a circuit. Display on the O-Scope.

Moved up to helping a friend with his Fortran homework in college. That was the old Fortran: coding sheets, keypunch, card trays, then hope and pray it runs.

Learned to make circuit cards for some of the old Univac computers, the ones that generated the targeting instructions for Polaris and Poseidon (MIRV) missiles. Got out of that business, heh heh, y'all are still alive!

Fortran coding again, in college. BASIC without a computer. Then I bought a KayPro II.

GW-BASIC, Z-80 assembler, FORTH and Turbo Pascal. Hardware hacked my KayPro to increase power and upgrade floppy drives. Reprogrammed CP/M WordStar 3.3 to be a killer word processing app.

VAX, PDP-11. Did some "white hat" hacking. My friend was in the IT dept at the college, and I compared notes with him when I found problems. Did you know that if the login app on the VAX was done using the interpretted language, you could hack into the OS with SU priv just by pressing the <Enter> key repeatedly after putting in phoney ID and password? PRIME's, BTW, had zip security, and interesting stuff inside.

... huge blur of the last 20+ years ...

Here I am!

It's a long, strange trip.

[Noia]

if you want, I could sit down and write something like that, should narrow it down some what... wouldn't use port scanning though, too invasive, would rather just parse every anon-proxy site I can get my hand on and produce ip lists from that, might also be an idea to write a BOPM plug-in, just for shits and giggles.

I suspect it would be a 1 hour, 2 max code jobie...

[Aspman]

Hey Jinxy I was in the ATC for 5 years too. Bit past the Halifax era but still in chipmonks

I didn't like computing at school I just liked computers for games but I've always had a bad habit of taking things apart to see how they worked. Never been so good at putting them back together.

I liked sciences at school and I did a science degree at Uni. Got into computers with my first PC then and did a post grad in IT. Then got a job as an ASP programmer on the cheap learning to do it on the job then in a school which really teaches you about security whether you like it or not.

All self taught until now. New employer provides training and has agreed to put me through CISSP but will own my ass for a few years after it.