unforum

Ehsan · Entrenched Joined: 09 May 2003 Posts: 992

Hacking and misc issues

bill · Unfettered Joined: 25 Sep 2002 Posts: 614 Location: Tampa

eep!

They left ssh open AND an ingame login works on it? ssh by itself in not unusual. It's a tool webmasters use regularly to manage their servers. Leaving unprotected accounts like that out in the open is just plain dumb.

Drool

Any chance the other stuff is ingame?

**Posted:** Mon Jan 10, 2005 12:51 pm

_________________
Bill
http://deaddrop.us/
Dedicated to Alternate Reality Gaming

Ehsan · Entrenched Joined: 09 May 2003 Posts: 992

Just to clarify, the ingame login doesn't work.. if it did, I would say the whole thing is ingame..

**Posted:** Mon Jan 10, 2005 1:09 pm

yanka|tage · Guest

Re: Hacking and misc issues

**Posted:** Mon Jan 10, 2005 1:23 pm

burningsquid · Boot Joined: 03 Dec 2004 Posts: 16

When the nmap references started popping up ingame, I portscanned the site. There's alot of stuff open there that shouldn't be open on a webserver. Poking around, it looked like it wasn't ingame, so i decided to leave it alone.

It is concievable that the PMs intended the server to be fair game for screwing around with, but since they have made absolutly no references to this, i am inclined to leave it alone and stick to things that are obviously ingame.

I would seriously hope that people don't start trying to run exploits unless it is abundantly clear that it is part of the game.

**Posted:** Mon Jan 10, 2005 2:15 pm

orphaen

I can link the file from here if you wish, send me an AIM to orphaenx and I'll pop over here and plunk it down.

**Posted:** Mon Jan 10, 2005 5:40 pm

_________________
Here I am, Paradox Personified.

simo66 · Guest

I am tempted to believe that nmap has nothing to do with it as all those files were uploaded in 2005 whereas every bit of evidence before now has indicated that the ingame year is 1999

**Posted:** Mon Jan 10, 2005 7:53 pm

Clockwork · Greenhorn Joined: 05 Jan 2005 Posts: 3

**Posted:** Mon Jan 10, 2005 8:04 pm

orphaen

Those aren't in-game pages though. See the normal background? Smile

**Posted:** Mon Jan 10, 2005 8:16 pm

_________________
Here I am, Paradox Personified.

simo66 · Guest

**Posted:** Mon Jan 10, 2005 9:39 pm

AnthraX101 · Entrenched Joined: 18 Mar 2003 Posts: 797

Why exactly do you think it's dedicated?

DNSStuff reports 250+ domains share that sever, which would support the large number of services that are running on it. It's also possible that it's some sort of load balancing system, and there really is a single server. I'm just confused as to why you think that's how it is.

You pretty much have to have an SSH server on a server like that, it's one of the few secure ways to administer it.

AnthraX101

**Posted:** Mon Jan 10, 2005 10:06 pm

_________________
VGhlcmUgaXMgbm8gc3Bvb24u
ll----ll--ll--ll----l---ll---llll---ll--l--ll---llll-ll-l-ll-llll--l-.