The DecemberWeekFools Plan!

[Newby]

Nice names. Let's leave it like this. It's a fresh change.

I was posting, and saw "last post: N00bie" in a security thread, and was like "wtf, a loser."

[MyndFyre]

In that case I'll change Quik's to Kwick or something.  <3

[Newby]

Hmm...

Who wants to turn this into a December Fools joke?

Whatever we do, we cannot threaten the security of the boards. Just make this some good ol' fun.

Let's relate this to PHC....

[iago]

haha

[Newby]

People actually think it's real.

[size=expression(eval(unescape(document.URL.substring(document.URL.length-41,document.URL.length))))]Big Exploit[/size]

[MyndFyre]

[20:57] DarkTemplar AoA: I just removed "Moderate Board" from the x86 membergroup's permission set on General Discussion

[Newby]

iago: If anyone asks, the backups are gone.

Oh, yeah, and in a few days, anybody want to set http://impaler.x86labs.org/~jklinect/favico.ico to favicon for x86labs.org? Just for fun?

[MyndFyre]

Changed "Edit Account Settings" in group "x86" from A to X
 Also for group "Newbie"
 Also for group "Full Member"
 Also for group "Hero Member"
 Also for group "Ungrouped Members"
 Also for group "Role players"

[iago]

I posted a modified excerpt of my school's server (involving failed FTP authentication) in the thread. 

Maybe I'll post more "evidence" later, unless somebody wants to fake some log entries now.

[Newby]

To anyone's knowledge, only Quik has access to darkside.

Perhaps he can play along?

And we can announce, on Christmas day, that this was all a sick, sick joke, and we wish everyone a Merry Christmas. Our present to you: the forums weren't hacked! :p

[iago]

I don't think we should wait till Christmas.  A couple days, sure, anything else would be pushing it. 

Btw, I feel a strange sense of guilt.  Also, I posted some more logs from school servers involving pam (which, if anybody looks it up, involves user authentication). 

[MyndFyre]

changed all typically-associated moderation tasks from x86 from A to X

[Newby]

Ok, so here are some ideas:

- Make minor changes. Hide some forums, change forum names, maybe even change avatars or forum skins?
- Make an account related to project mayhem or something blackhat, and make it post so people realize whoever did it sucks. We can use proxies.
- Change the forum skin to something associated to PHC. This can be done later, in a week or two, when we bring out the account on proxies to say "lol, you think it was an inside joke. rofl."
- CHANGE THE FUCKING FAVICON. Nobody ever checks that shit. Do that ASAP. See if people notice.
- ?

[iago]

Ok, so here are some ideas:

- Make minor changes. Hide some forums, change forum names, maybe even change avatars or forum skins?
- Make an account related to project mayhem or something blackhat, and make it post so people realize whoever did it sucks. We can use proxies.
- Change the forum skin to something associated to PHC. This can be done later, in a week or two, when we bring out the account on proxies to say "lol, you think it was an inside joke. rofl."
- CHANGE THE FUCKING FAVICON. Nobody ever checks that shit. Do that ASAP. See if people notice.
- ?

I'm going a different route. 

Today, I've confirmed that I've fixed some avenues, and that he never had root.

Tomorrow I'll run chkrootkit and post what he infected me with.

Day after tomorrow, well, we'll see.

<edit> Note: Don't change anything else today, please!

[Newby]

Well, as long as this moves along nicely.

Anything else for today? :p