Advice from an Ethical hacker regarding your passwords

[lllN30lll]

thought i'd help a few of you lot out and explain how an Ethical hacker works.
this bit of text is taken from a member of another biker forum, after his Paypal account was hijacked, as well as his email adressI posted this little titbit to show him how it was probably done.


he said:-

[colin1]

how do you get access to the forum database in the first place ?
____________________
colin1 is officially faster than god

[lllN30lll]

by Exploiting it, weakest forums are Invision forums, then Phpbb forums, Vbulletin etc.

Invision are mostly Perl exploits
Pbpbb is all Xss
Vbulletin Xss
____________________
Turbo R1
CRF450R

[Suzuki]

I don't think your idea of 'Ethical Hacking' and my idea of ethical hacking really line up.

First you say it's 'advice from an ethical hacker'

then you say "the way I hack Paypals/cc ..."

Ethical hackers don't hack paypal accounts and credit cards.

If you're hacking paypal accounts I wouldn't call you an ethical hacker, i'd call you a cunt. If you really are doing that then you deserve to be fucking castrated.

Twat.
____________________
<Simple> no I'm shaven Jon
<Simple> it is a big enough hole.. I'll leave it now
Ride: 1999 Suzuki GSXR600 (yellow/black) IRC: Stats - Relationship Map

[veeeffarr]

I agree,

You're not an ethical hacker, you're just a mong script kiddie with a neat little GUI program to do it all for you.



T

[lllN30lll]

[Suzuki]

[strag]

I think thats sage advice about passwords.
____________________
carbon bling

[veeeffarr]

Can you program, N30? C++/# along with ASM?

Or are you just someone who calls themselves a hacker but in reality reads forum posts and downloads GUI programs to do the hard work?

[stinkwheel]

Or use a fucking long word that doesn't appear in the dictionary?

I'm a big fan of 15+ letter passwords.

No good hacking my paypal because I don't use paypal for that exact reason. No good hacking my BB passwords because they are pathetically simple and if posting messages under my name gives you a hardon, spank away. You can't replicate my style of writing so it would quickly become obvious that it wasn't me.
____________________
“Rule one: Always stick around for one more drink. That's when things happen. That's when you find out everything you want to know.”
I did the 2010 Round Britain Rally on my 350 Bullet. 89 landmarks, 3 months, 9,500 miles.

[m99dws]

[Itchy]

[techierob]

I honestly don't believe you made this post this for the benefit of other forum users. You're clearly trying to show off, but you haven't produced anything that your average 10-year-old isn't already capable of using a few lame windows apps and some spare processor cycles.
If you really wanted to demonstrate some technical ability, then you'd either produce patches for the forum systems to remove the database exploits, introduced password triviality checking to limit brute-forcing, or else you'd have written your own bots to go out and do the whole thing for you.
Having done more than my fair share of penetration testing in the past, I can tell you that the objective is to produce more secure systems - not to brag to your mates how you cracked an account and make pointless suggestions to random users.

[Metal_Mickey]

You seem to be confusing what you are (a script kiddie), with a hacker. You are not a hacker, let alone an ethical / white hat hacker.

[Dom]

As techierob says that reads so much like 'Look at all the clever stuff I can do!' when in truth there's not a thing there that couldn't be achieved by a trained chimp.

Copying and pasting exploits into software that the web host hasn't got around to updating cannot even come close to being ethical. Ethical would be going round and emailing everyone running out of date software to let them know the risk it poses, and given you're getting as far as running databases through some password guessing app you're clearly not doing that.

I'm just pleased to see that 99% of the emails on that list of yours look like automated registrations by spammers so they'll be useless whether the program guesses their passwords or not.
____________________
Photos and that

[m99dws]

[veeeffarr]

OMGZ AT TEH START BUTTON REGHACK!~"!~@":!

[GodzGift]

Ok I’m not going to jump on the bandwagon here though i do admit the replies are coming from people who are both correct and they feel strongly towards being hacked like most people would. What needs to be established is, if a topic was created with the following message

[Dom]

I think the phrase 'Ethical hacker' is what has people's backs up. It's not ethical to offer advice on passwords to a one small forum and then to go ahead and punish the remaining 99.99999999% of net users who have not been warned and are largely unaware.
____________________
Photos and that

[MarJay]

Script Kiddie would have been a more accurate term!
____________________
British beauty: Triumph Street Triple R; Loony stroker: KR1S; Track fun: GSXR750 L1; Commuter Missile: GSX-S1000F; Cheap project: CBR900RR FireBlade
Remember kids, bikes aren't like lego. You can't easily take a part from one bike and then fit it to another.

[veeeffarr]

I agree, it's the 'bigging up of oneself' that I disagree with, but lets not forget that the topic brings up a very important issue and probably is in fact quite helpful.

Another top tip is to keep all of your passwords in a safe place written down a on a piece of paper, hackers can't read paper in a drawer

This also means you can be more random with your passwords and gives you no excuse to have to use the same password for everything

[Dom_]

How is he punishing them?

Yeah, i also think he's a cunt cock twat.

[Dom]

[Dom_]

I see your point, but i still don't think he's punishing them.

[Dom]