Principia Discordia

Principia Discordia => Two vast and trunkless legs of stone => Topic started by: Faust on May 14, 2010, 11:08:28 AM

Title: Your attention is desired regarding a security issue
Post by: Faust on May 14, 2010, 11:08:28 AM
For a substantial period of time, a number of users contact information was available on google due to a mistake made by Enki.

Anyone who's contact information is hidden from other users is unaffected.

The people effected were the ones who posted in Paynes book of revelations style thread which I cant seem to find a link to right now.

So what does this actually mean?
It means that email and messenger addresses like AIM or MSN that you allow other users to see was indexed by google. Your accounts are in no danger of being hacked (well, any more then usual), but it does mean some of you will have been receiving a lot more spam lately, or had more bots add you on messenger programs as a result of them being found on google.

Once I find the thread I will be posting the list of everyone who was effected
Title: Re: Your attention is desired regarding a security issue
Post by: Pope Pixie Pickle on May 14, 2010, 01:47:19 PM
I got some crazy spam pm on my MSN for some no strings sex dating site.

First spam on that account ever.

:facepalm:

FUCK YUO ENKI!
Title: Re: Your attention is desired regarding a security issue
Post by: bds on May 14, 2010, 02:23:18 PM
You know, I did get a bunch of spam accounts trying to add my hotmail a while back. I wonder if it was this.
Title: Re: Your attention is desired regarding a security issue
Post by: Eater of Clowns on May 14, 2010, 05:43:25 PM
WAY TO GO PAYNE.
Title: Re: Your attention is desired regarding a security issue
Post by: Doktor Howl on May 14, 2010, 05:45:51 PM
Quote from: EoC on May 14, 2010, 05:43:25 PM
WAY TO GO PAYNE.

wut
Title: Re: Your attention is desired regarding a security issue
Post by: Payne on May 14, 2010, 05:47:01 PM
http://www.principiadiscordia.com/forum/index.php?topic=20535.0

Yeah, I was wondering why I was receiving much more spam than usual, but I only shrugged my shoulders said something like "meh" and then pressed delete. (well, after taking advantage of some REALLY good deals).

Payne
Eve
Fred
Richter
The Other Anonymous
Hoopla
Hawk
the TGRR account (currently unused)
P3nT
LMNO
Nigel
Burns
Jenne
BDS
RWHN
the Cain account (currently unused)
Cram
Honey
Sheered Völva    ( :argh!:)

are all that posted in that thread.
Title: Re: Your attention is desired regarding a security issue
Post by: Eater of Clowns on May 14, 2010, 05:47:22 PM
Quote from: Doktor Howl on May 14, 2010, 05:45:51 PM
Quote from: EoC on May 14, 2010, 05:43:25 PM
WAY TO GO PAYNE.

wut

He said it was from Payne's book of revelations?  I thought blaming it on Payne made sense.   :oops:
Title: Re: Your attention is desired regarding a security issue
Post by: Payne on May 14, 2010, 05:48:31 PM
Quote from: EoC on May 14, 2010, 05:43:25 PM
WAY TO GO PAYNE.

Just cause you don't know how to receive my spiritual wisdom like a good little altar boy.
Title: Re: Your attention is desired regarding a security issue
Post by: Thurnez Isa on May 14, 2010, 05:49:23 PM
awwww

but spam makes me feel wanted by someone
:x
Title: Re: Your attention is desired regarding a security issue
Post by: Payne on May 14, 2010, 05:50:56 PM
Then you should have posted in my thread and received both salvation and great deals. I let Enki take care of the great deals thing so I can later chase him out of the Temple, yanno?
Title: Re: Your attention is desired regarding a security issue
Post by: Jenne on May 14, 2010, 07:32:54 PM
I have been gifted with Payne's salvation AND spam?

It's my lucky day! :D

I get tons of spam anyway, so I didn't notice much difference.  Wish the "fun" viagara ones would come back, though... :(
Title: Re: Your attention is desired regarding a security issue
Post by: Telarus on May 14, 2010, 07:40:29 PM
Is that why registration is off? I had a friend who tried earlier today and said it wouldn't let her register.
Title: Re: Your attention is desired regarding a security issue
Post by: P3nT4gR4m on May 14, 2010, 09:09:44 PM
I CAN HAZ BIGGER JOHNSON!!
:ronpaul:
Title: Re: Your attention is desired regarding a security issue
Post by: Faust on May 14, 2010, 09:10:22 PM
Quote from: Telarus on May 14, 2010, 07:40:29 PM
Is that why registration is off? I had a friend who tried earlier today and said it wouldn't let her register.

What? Registration is not off. Tell him to try again.
Title: Re: Your attention is desired regarding a security issue
Post by: Jenne on May 14, 2010, 09:14:07 PM
...Faust assumes there are no womens on the internets ITT...

/being a real shit today, sorry...
Title: Re: Your attention is desired regarding a security issue
Post by: Faust on May 14, 2010, 09:24:01 PM
Quote from: Jenne on May 14, 2010, 09:14:07 PM
...Faust assumes there are no womens on the internets ITT...

/being a real shit today, sorry...

whoops, I didn't see the her above.
Title: Re: Your attention is desired regarding a security issue
Post by: NWC on May 14, 2010, 09:24:04 PM
This is why I try to avoid posting in threads.
Title: Re: Your attention is desired regarding a security issue
Post by: Jenne on May 14, 2010, 09:25:42 PM
Quote from: NWC on May 14, 2010, 09:24:04 PM
This is why I try to avoid posting in threads.

I was going to post something lame.  But then I realized you meant the OP.  My apologies if you read my lameness, I eraseded it.
Title: Re: Your attention is desired regarding a security issue
Post by: Jenne on May 14, 2010, 09:26:15 PM
Quote from: Faust on May 14, 2010, 09:24:01 PM
Quote from: Jenne on May 14, 2010, 09:14:07 PM
...Faust assumes there are no womens on the internets ITT...

/being a real shit today, sorry...

whoops, I didn't see the her above.

I  know, I had fun at your expense.  I'm a little whacked out.
Title: Re: Your attention is desired regarding a security issue
Post by: Faust on May 14, 2010, 09:27:00 PM
Quote from: Jenne on May 14, 2010, 09:26:15 PM
Quote from: Faust on May 14, 2010, 09:24:01 PM
Quote from: Jenne on May 14, 2010, 09:14:07 PM
...Faust assumes there are no womens on the internets ITT...

/being a real shit today, sorry...

whoops, I didn't see the her above.

I  know, I had fun at your expense.  I'm a little whacked out.
s'cool
Title: Re: Your attention is desired regarding a security issue
Post by: Mesozoic Mister Nigel on May 14, 2010, 09:38:26 PM
Fucking Enki. That little shit thinks he's smarter than everyone and can do what he wants to do, and the direct result is a predictable clusterfuck. He needs the tar kicked out of him.
Title: Re: Your attention is desired regarding a security issue
Post by: Faust on May 14, 2010, 10:25:21 PM
Quote from: The Good Reverend Payne on May 14, 2010, 05:47:01 PM
http://www.principiadiscordia.com/forum/index.php?topic=20535.0

Yeah, I was wondering why I was receiving much more spam than usual, but I only shrugged my shoulders said something like "meh" and then pressed delete. (well, after taking advantage of some REALLY good deals).

Payne
Eve
Fred
Richter
The Other Anonymous
Hoopla
Hawk
the TGRR account (currently unused)
P3nT
LMNO
Nigel
Burns
Jenne
BDS
RWHN
the Cain account (currently unused)
Cram
Honey
Sheered Völva    ( :argh!:)

are all that posted in that thread.
danke
Title: Re: Your attention is desired regarding a security issue
Post by: NWC on May 14, 2010, 10:29:52 PM
Quote from: Jenne on May 14, 2010, 09:25:42 PM
Quote from: NWC on May 14, 2010, 09:24:04 PM
This is why I try to avoid posting in threads.

I was going to post something lame.  But then I realized you meant the OP.  My apologies if you read my lameness, I eraseded it.

No problemo. I avoid reading threads as well, so I would've been none the wiser had you not told me. I appreciate the honesty!

Anyway my joke was dumb. Knew it and posted it anyway.
Title: Re: Your attention is desired regarding a security issue
Post by: ñͤͣ̄ͦ̌̑͗͊͛͂͗ ̸̨̨̣̺̼̣̜͙͈͕̮̊̈́̈͂͛̽͊ͭ̓͆ͅé ̰̓̓́ͯ́́͞ on May 14, 2010, 11:56:12 PM
What exactly did Enki do, if you can say without compromising securitay.
Title: Re: Your attention is desired regarding a security issue
Post by: NotPublished on May 15, 2010, 12:04:45 AM
I couldn't help  but laugh when I read "Enki"
Title: Re: Your attention is desired regarding a security issue
Post by: Faust on May 15, 2010, 12:12:35 AM
Quote from: Ne+@uNGr0+ on May 14, 2010, 11:56:12 PM
What exactly did Enki do, if you can say without compromising securitay.
Put simply, he hosted a file on his server that contained data only a Logged in member here should be able to see, such as msn, aim or contact emails, thus making them publicly available on google.
Title: Re: Your attention is desired regarding a security issue
Post by: ñͤͣ̄ͦ̌̑͗͊͛͂͗ ̸̨̨̣̺̼̣̜͙͈͕̮̊̈́̈͂͛̽͊ͭ̓͆ͅé ̰̓̓́ͯ́́͞ on May 15, 2010, 12:16:22 AM
Quote from: Faust on May 15, 2010, 12:12:35 AM
Quote from: Ne+@uNGr0+ on May 14, 2010, 11:56:12 PM
What exactly did Enki do, if you can say without compromising securitay.
Put simply, he hosted a file on his server that contained data only a Logged in member here should be able to see, such as msn, aim or contact emails, thus making them publicly available on google.

It seems you don't think it was malicious.

Can you say why or why not?
Title: Re: Your attention is desired regarding a security issue
Post by: NotPublished on May 15, 2010, 12:17:15 AM
Wait. Why the hell does Enki have data like this?
Title: Re: Your attention is desired regarding a security issue
Post by: Telarus on May 15, 2010, 12:31:19 AM
Quote from: Faust on May 14, 2010, 09:10:22 PM
Quote from: Telarus on May 14, 2010, 07:40:29 PM
Is that why registration is off? I had a friend who tried earlier today and said it wouldn't let her register.

What? Registration is not off. Tell him to try again.

I tried to reg for her as soon as she said it, and got the same message....

I'll try again.
Title: Re: Your attention is desired regarding a security issue
Post by: AFK on May 15, 2010, 12:33:54 AM
Well, I just set up a special hotmail account for my pd account, and I don't use it for anything else.  So no harm no foul on my end. 
Title: Re: Your attention is desired regarding a security issue
Post by: Vene on May 15, 2010, 12:37:24 AM
Quote from: Jenne on May 14, 2010, 09:14:07 PM
...Faust assumes there are no womens on the internets ITT...

/being a real shit today, sorry...
Womens have mandatory sex changes when they log onto the internet.

170% troof (which is 1% more troof than 169%)
Title: Re: Your attention is desired regarding a security issue
Post by: Faust on May 15, 2010, 12:44:01 AM
Quote from: NotPubli on May 15, 2010, 12:17:15 AM
Wait. Why the hell does Enki have data like this?
Because you and every other registered user can. Its not THAT major an issue, but it was one that needs to be addressed.

Quote from: Ne+@uNGr0+ on May 15, 2010, 12:16:22 AM
Quote from: Faust on May 15, 2010, 12:12:35 AM
Quote from: Ne+@uNGr0+ on May 14, 2010, 11:56:12 PM
What exactly did Enki do, if you can say without compromising securitay.
Put simply, he hosted a file on his server that contained data only a Logged in member here should be able to see, such as msn, aim or contact emails, thus making them publicly available on google.

It seems you don't think it was malicious.

Can you say why or why not?
Because the thread was printed in its entirety and was placed in a folder called stories. There is no problem with someone saving a thread to stick it in a hope chest for better days or whatever as long as its not put out into the public domain.
Title: Re: Your attention is desired regarding a security issue
Post by: Payne on May 15, 2010, 09:15:19 AM
Quote from: Faust on May 14, 2010, 10:25:21 PM
Quote from: The Good Reverend Payne on May 14, 2010, 05:47:01 PM
http://www.principiadiscordia.com/forum/index.php?topic=20535.0

Yeah, I was wondering why I was receiving much more spam than usual, but I only shrugged my shoulders said something like "meh" and then pressed delete. (well, after taking advantage of some REALLY good deals).

Payne
Eve
Fred
Richter
The Other Anonymous
Hoopla
Hawk
the TGRR account (currently unused)
P3nT
LMNO
Nigel
Burns
Jenne
BDS
RWHN
the Cain account (currently unused)
Cram
Honey
Sheered Völva    ( :argh!:)

are all that posted in that thread.
danke

NP, maestro.

Reckoned when it came to making these kind of announcements I should help out.

~~~Payne: Finding ways to become less of a Freelance Bum for at least a couple weeks now.
Title: Re: Your attention is desired regarding a security issue
Post by: Payne on May 15, 2010, 09:19:03 AM
And yeah, I doubt Enki was being malicious. Just being Enki. ie; All wrapped up in his own awesomeness and missing little details here and there.

I'm in much the same boat as RWHN, here. The hotmail account I set up for PD'ing is fine for trashing with spam. It's the one I use for anything that might end up giving me fucktons of spam anyway. I would have imagined that'd be the same for anyone who is making these details available to logged in any and all members of PD in the first place, though of course I may be wrong.
Title: Re: Your attention is desired regarding a security issue
Post by: the last yatto on May 15, 2010, 09:32:58 AM
spags should know better to host files without previewing them,

speaking of which HEY LIZARD DID YOU get the newer inttermitten nine uped yet?
Title: Re: Your attention is desired regarding a security issue
Post by: Triple Zero on May 15, 2010, 11:51:46 AM
Quote from: Ne+@uNGr0+ on May 15, 2010, 12:16:22 AM
Quote from: Faust on May 15, 2010, 12:12:35 AM
Quote from: Ne+@uNGr0+ on May 14, 2010, 11:56:12 PM
What exactly did Enki do, if you can say without compromising securitay.
Put simply, he hosted a file on his server that contained data only a Logged in member here should be able to see, such as msn, aim or contact emails, thus making them publicly available on google.

It seems you don't think it was malicious.

Can you say why or why not?

It was just a literal save of a thread. just as you would get when you press ctrl-S in your browser*. The thing is that includes the email and IM links, which you can normally only see when you are logged in. So if you save a thread like that, you shouldnt put it on the internet without stripping those email and IM links from it.

*except the HTML tags were stripped from it
Title: Re: Your attention is desired regarding a security issue
Post by: Faust on May 15, 2010, 11:57:31 AM
I think this has served its purpose, I'm going to de-sticky it this evening.