Update on Hacking...

[TomFulp]

Ok, just to calm down the fears, here is more specific info on what to look for.

1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

This issue should be resolved soon.

[DuMa-RyoHahn]

Have you contacted any people to question them?

[MsiUrine]

thank god u caught this bfore it got way too outta hand

[Omnibus]

At 10/31/02 09:13 AM, TomFulp wrote: Ok, just to calm down the fears, here is more specific info on what to look for.

1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

This issue should be resolved soon.

I think movies that simply redirect you have a file size of 0k, correct? Maybe people should not watch movies under a certain filesize to be safe, since its most likely a piece of shit anyway.

[NeMeSiSM66]

Glad you cleared some of this up Tom. I'm sure this will ease a lot of people's fear.

[panchan]

At 10/31/02 09:13 AM, TomFulp wrote: Ok, just to calm down the fears, here is more specific info on what to look for.

1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

This issue should be resolved soon. the guy named greenclock i think hes in on it cause he hacked my computer........>:O oh and happy halloween^_^

[Sizzler]

At 10/31/02 09:13 AM, TomFulp wrote: 1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

Sounds good so far, Tom.

I also belive people should be very careful when clicking links on the BBS (see previous NG News item); only click links from those who you trust, or better yet, log-out before you click them.

At 10/31/02 10:29 AM, Omnibus wrote: I think movies that simply redirect you have a file size of 0k, correct? Maybe people should not watch movies under a certain filesize to be safe, since its most likely a piece of shit anyway.

Don't forget that some good submissions are also re-directs. Like Hacky The Rackoon, for example; it's only 24k.

[DJViper]

But the thing I'm wondering is what would the hackers use with just the Newgrounds.com password.... What bad thing can they do?

[miket86]

At 10/31/02 09:13 AM, TomFulp wrote: Ok, just to calm down the fears, here is more specific info on what to look for.

1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

This issue should be resolved soon.

the very thing happened to me this morning. i was watching the movie 'my love....' by 'sausage_man'. once the film started it opened up a new page. i reported this in the review of that movie. it may have been blammed now, as it's score was about 0.6 wen i watched it, but i hope this helps.

[miket86]

yea, it has been blammed. a little off subject, but does anyone know wen 'super console wars 2' will b out. it says august 21 on the makers site, and i know that movies can takes months, or even longer to make, but i'd love to know.

[QuarterMelonClock]

At 10/31/02 09:13 AM, TomFulp wrote: Ok, just to calm down the fears, here is more specific info on what to look for.

1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

This issue should be resolved soon.

Tom, I'm assuming you are aware that there are many security holes in the NG system, Not only with peoples personal privacy, but also holes an the system. I know for a fact that auto voting scripts are possible. And i figure there are other risks involving scripts in flash Movies and the scripts that run NG.

I'm just wondering if you're working to fix these, or addressing them as they appear.

-QMC :)

[QuarterMelonClock]

At 10/31/02 09:13 AM, TomFulp wrote: Ok, just to calm down the fears, here is more specific info on what to look for.

1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

This issue should be resolved soon.

OH, and it won't HAVE to connect to another page to send the info. Using the XMLsocket, you can send any info you wish to another server from the flash file sitting on NG's server.

[whew]

At 10/31/02 11:16 AM, miket86 wrote: yea, it has been blammed. a little off subject, but does anyone know wen 'super console wars 2' will b out. it says august 21 on the makers site, and i know that movies can takes months, or even longer to make, but i'd love to know.

you wanna see how long a movie/game can take? wait for pico 2 with the rest of us buddy....

[miket86]

At 10/31/02 11:31 AM, whew wrote:

At 10/31/02 11:16 AM, miket86 wrote: yea, it has been blammed. a little off subject, but does anyone know wen 'super console wars 2' will b out. it says august 21 on the makers site, and i know that movies can takes months, or even longer to make, but i'd love to know.

you wanna see how long a movie/game can take? wait for pico 2 with the rest of us buddy....

yea lol. but good things come to those who wait!

[Rehm]

I feel a bit offended, you say "hacking", hacking is harmless bug fixing and security flaw patching, I do these things, and some other stuff, there for I am a hacker, the idiot jerking around doing this is a script kiddie, and most likely a cracker, just thought I'd bring it up, hehe, peace out.

[Xiomar]

hacker:
SYLLABICATION: hack·er
PRONUNCIATION: hkr
NOUN: Informal 1. One who is proficient at using or programming a computer; a computer buff.
2. One who uses programming skills to gain illegal access to a computer network or file.
3. One who enthusiastically pursues a game or sport: a weekend tennis hacker.
ETYMOLOGY: Perhaps from hacker, amateurish or inept golfer or tennis player (possibly from hack1), or perhaps from hack, practical joke, clever scheme (from dialectal hack, to embarrass, confuse, play a trick on).

Use it as you will.

[Josh]

At 10/31/02 09:13 AM, TomFulp wrote: Ok, just to calm down the fears, here is more specific info on what to look for.

1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

This issue should be resolved soon.

Thats good to hear.

[kevr1]

At 10/31/02 09:13 AM, TomFulp wrote: Ok, just to calm down the fears, here is more specific info on what to look for.

1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

This issue should be resolved soon.

Don't these people have anything better to do?

[zex15]

Don't these people have anything better to do?

besides masturbating, no they don't.

[Impactnatious]

At 10/31/02 09:13 AM, TomFulp wrote: Ok, just to calm down the fears, here is more specific info on what to look for.

1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

This issue should be resolved soon.

Thanks for the info tom. I hope the hacker or hackers get years in jail for trying to wreck NG. >:(

[TomFulp]

At 10/31/02 11:20 AM, QuarterMelonClock wrote: Tom, I'm assuming you are aware that there are many security holes in the NG system, Not only with peoples personal privacy, but also holes an the system. I know for a fact that auto voting scripts are possible. And i figure there are other risks involving scripts in flash Movies and the scripts that run NG.

I'm just wondering if you're working to fix these, or addressing them as they appear.

-QMC :)

I think we have fixed auto-voting issues - but if you know someone who is still able to do it, let us know (or let us know how it is still possible). We try to fix any hole that is brought to our attention - so you are welcome to email me with a list of anything you know about.

-Tom

[Psycodude]

Hackers and people of that sort REALLY piss me off! When you find one of those assholes go cut off there nuts!

[ImportRacer666]

Glad to hear your working on the fixes Tom. As more NG users become familiar with web technologies, it will get harder and harder to keep things secure, but as long as you stay on top of it, everything should be ok.

To the guy who said hes a hacker...... don't make me laugh. First sign of a "cracker" (as you call it) would be to openly admit that they were a hacker. You would never know who the real hackers were unless you knew them as friends,family, etc. Don't fool yourself.

[bigbadev7]

How do you change your password?

[DaRkSpiT]

Tom Fulp wrote:

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

That means we should not see flash movies with a LINK to another webpage in it right? So that must mean we should not see ANY movie, because almost every single movie got a link to the creator's webpage... I'm conf0ozed!

[ImportRacer666]

At 10/31/02 02:34 PM, bigbadev7 wrote: How do you change your password?

When you sign-in, the main user menu opens in the same window. You have to click on your personal profile, enter a new password in 2 boxes, then press the submit button.

[Bill-The-Magic-Hobo]

i know this is as far away from subject as my as from a meat grinder but whats the highest experience ou can get?

[Bardock4]

At 10/31/02 09:13 AM, TomFulp wrote: Ok, just to calm down the fears, here is more specific info on what to look for.

1) The hacker will need a .swf file to run from NG in order for it to work.

2) The file will need to redirect you to a page on the hacker's site in order for it to send the info.

If any movie in the Portal redirects you to a new page, close the window, change your password, and don't open it again. If you notice something that looks especially suspicious, please notify [e-mail].

This issue should be resolved soon.

Excellent you finally gonna get ut resolved!

[ImportRacer666]

At 10/31/02 02:39 PM, Bill_The_Magic_Hobo wrote: i know this is as far away from subject as my as from a meat grinder but whats the highest experience ou can get?

There are 30 levels and 26 badges. its going to take a while to reach those levels.

[MrPrez]

At 10/31/02 03:57 PM, ImportRacer666 wrote:

At 10/31/02 02:39 PM, Bill_The_Magic_Hobo wrote: i know this is as far away from subject as my as from a meat grinder but whats the highest experience ou can get?

There are 30 levels and 26 badges. its going to take a while to reach those levels.

26 badges???? are you sure