Facebook to be hacked

[Riotpolice]

Originally Posted by GG_Guru

Facebook most likely won't get hacked. I mean we're talking about a billion dollar industry here. I'm pretty sure security will be extremely tight which would make it a daunting task for anyone to break through the system.

If enough people are willing to hack facebook, I'll bet it could be done.

[fido123]

Originally Posted by Emithith

The name Anonymous is misleading. I hear that they are an actual group of people (1-??? people).

"Anonymous" is nothing more than a description for the users base (like how the people who frequent this forum are the "Anonymous" of FFR) of 4chan or any other 4chanesque site. It's just A LOT of people who sometimes bandwagon on somebody elses idea. It's not some organized organization or even any kind of organization. A lot of retards try to tell people it's like that and they're a part of that but it's just bullshit.

Originally Posted by Emithith

They DDOS'd Minecraft and brought it down for a day.

You can't DDOS minecraft but you can DDOS minecraft servers. I'm pretty sure there really aren't any official servers so you'd have to DDOS a whole bunch of unrelated servers. In short what you're saying is bullshit.

Originally Posted by -zeroSKILL-

You try to belittle them. Alone they are nothing more than kids with programs, as a collective they can pose a serious threat.

A script kitten is somebody who uses a bunch of pre-made scripts/programs to do everything for them. In actuality security experts and real hackers use these scripts too but can do much more. The worst a mass of script kittens can do is DDOS which isn't even really hacking.

Originally Posted by -zeroSKILL-

Brute forcing amongst dozens of users won't take nearly as long as a single hacker. They make their mark by working collectively. I'm not saying it's a reason to fear them, but do take them seriously when they choose to act as a group.

They're trying to hack facebook. Not facebook user accounts.

Originally Posted by -zeroSKILL-

The attack may last only a short while before they're caught, but they are capable of far more damage than they actually do. They're just pussy about it because of prison time. After a certain point the actions they commit are no longer just breaking the law, but become acts of terrorism or near that level. Next to no one smart enough to pull off the kind of stuff they do is dumb enough to go to prison for years because of malicious actions on the interwebz. They'll keep it "small" but noticed. Less jail time if caught.

Finding an intrusion all depends on how the hacker intruded and what he's doing to cover up his tracks. It's not really a matter of time rather than leaving stuff behind or "tripping an alarm" and people finding it which could be immediate.

Originally Posted by -zeroSKILL-

The internet is scary vulnerable. As a collective society we just have so many rules in place on it that it's not worth the risk of doing certain things. Stuff on the internet is unfortunately tracked very carefully, and every proxy/vpn you use keeps records of your connections. You are rarely ever truly anonymous.

https://www.torproject.org/

Originally Posted by -zeroSKILL-

If I wanted I could easily pull password hashes off of FFR, and set a program to decrypting those password hashes to plaintext.

I wouldn't be surprised if you were able to decrypt whatever hash FFR uses assuming it's something like SHA and not AES/Blowfish but I'm pretty sure you're full of bullshit cause I doubt you could hack into a webhosting service's system.

Originally Posted by -zeroSKILL-

Hell, it's scary knowing how easy it is to do it. If it weren't for the law cracking down so strictly on certain types of e-threats, the internet would be a far more desolate place than it is now, left only to the coding monkeys.

If you know so much about hacking and could hack web servers with your eyes closed please exploit this program to say "You got it" by typing in something other than passwrd. Extremely basic shit:

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

int chkauth(char *password) {
        int auth_flag = 0;
        char buffer[16];
        strcpy(buffer, password);
        if(strcmp(buffer, "passwrd") == 0)
                auth_flag = 1;
        return auth_flag;
}

int main(int argc, char *argv[]) {
        if(argc < 2) {
                exit(0);
        }
        if(chkauth(argv[1])) {
                printf("%s\n", "You got it");
        } else {
                printf("%s\n", "Nope");
        }
}

If you fail to do this I'm just going to assume you're like every other 12 year old wanna be hacker on the internet since claiming to be a hacker and not knowing how to exploit the gaping hole in this program is like saying you're a master shoe maker but can't even tie a pair. Stop pretending you know what you're talking about cause I doubt you even know how to compile that.

[Sprite-]

Originally Posted by fido123

I wouldn't be surprised if you were able to decrypt whatever hash FFR uses assuming it's something like SHA and not AES/Blowfish but I'm pretty sure you're full of bullshit cause I doubt you could hack into a webhosting service's system.

In fact, it uses MD5 + salt encryption. Brian has no idea what he's talking about
I'd like to see anyone decrypt it.

[fido123]

I'd like him to even see him decrypt this:

331bf5d65fc1553676bd09ffad765d8d704412a7

It's SHA1

[championanwar]

Google+ owners responsible. .

[Tyson ultima]

Originally Posted by fido123

Reasons why your bs

Holy god........

[qqwref]

Originally Posted by fido123

script kitten

I lol'd

[hi19hi19]

Originally Posted by fido123

The most thorough shutting-down of another poster I've seen in a while.

Dear lord man that was pretty exhaustive.

p.s. I think I know the security flaw in that program and I don't even know what language it's programmed in lmfao

EDIT 2- hehe turns out I was right, dat AP computer science really coming through for me ^_^
I learned something new about programming today... *sigh* I really should learn something other than Java

[supermousie]

Errybody mad 'ere.

[MrGiggles]

'script kitten' is a new one

It's much more adorable than script kiddie. I like it.

[Thatskier]

Times like this I wish I learned computer science and the sorts.

Then again..

Physics> All sciences.

[Emithith]

lol fido, umad? What's with the hostile behaviour. I obviously don't know much about hacking, so why would you be so aggressive? x-x;

[leonid]

Originally Posted by fido123

blah blah

[-zeroSKILL-]

He's mad because he thinks I came in here trying to be a pro hacker or something I think. I know very little in terms of computer programming, and have only learned what I do know from independent research.

I'm not even going to bother to read what I wrote. I was drunk as hell and went off rambling, and it probably was a bunch of stupid crap I wrote, and I don't want to sit here sober and be reminded of how retarded alcohol makes me.

From memory, what I was trying to say is that it isn't hard to do the kind of stuff Anonymous does. A large group of people focusing their efforts on defacing websites can easily accomplish the task. It's just a matter of whether or not they are willing to risk the consequences that determines how far they go.

A weeks worth of studying, a few programs downloaded, and I can get personal data off of websites with weak security through very basic and crude forms of SQLi. I know next to nothing of the finer workings of how the programs work, or what the commands I type into the URL bar mean, but they get information that I really shouldn't be able to. I was recently trying to learn the finer points of SQLi just for fun, but it grew boring and tedious to learn. I'm not trying to be a pro hacker and go vandalize stuff on the net, I just find it fun to learn how to do it, and then be able to do it.

I'm not a hacker at all, and anything I wrote in my post is just stuff I've learned from reading. I am working on cracking that hash you posted though. No guarantees on when it'll be cracked. I'm currently running a dictionary attack on it. As long as it's not some stupid long 25 digit password full of random lowercase and uppercase letters with numbers and symbols mixed in that would take decades/centuries to bruteforce on a normal desktop PC, I should be able to get it. Assuming it's a reasonable length.

[supermousie]

I can never type coherently while drunk. Props to you.

[-zeroSKILL-]

I have much practice. Any of the old VC regulars could tell you that~

[reuben_tate]

Originally Posted by hi19hi19

Dear lord man that was pretty exhaustive.

p.s. I think I know the security flaw in that program and I don't even know what language it's programmed in lmfao

EDIT 2- hehe turns out I was right, dat AP computer science really coming through for me ^_^
I learned something new about programming today... *sigh* I really should learn something other than Java

Lol, AP Comp Sci last year. XD I got an "eh..." score but it was good enough to get me the credit. =] But there is no shame in knowing just Java right now, it's a good programming language to learn the fundamentals of object-oriented programming. It's also strictly-typed which reinforces good programming habits. We'll learn some other programming languages when the time comes. =]

[Izzy]

Originally Posted by fido123

#include <stdio.h>
#include <stdlib.h>
#include <string.h>

int chkauth(char *password) {
        int auth_flag = 0;
        char buffer[16];
        strcpy(buffer, password);
        if(strcmp(buffer, "passwrd") == 0)
                auth_flag = 1;
        return auth_flag;
}

int main(int argc, char *argv[]) {
        if(argc < 2) {
                exit(0);
        }
        if(chkauth(argv[1])) {
                printf("%s\n", "You got it");
        } else {
                printf("%s\n", "Nope");
        }
}

This is bothering me, what is the answer? Does it have to do with putting in pointer deference as a string so when it copies it into buffer it copies something else?

Edit: nvm, I think I figured it out. I just don't understand why it wouldn't cause the program to crash.

[00Razor00]

1337 h4X0r5 in this thread.

[fido123]

Originally Posted by Emithith

lol fido, umad? What's with the hostile behaviour. I obviously don't know much about hacking, so why would you be so aggressive? x-x;

Sorry, I meant to say that from wherever you heard that Minecraft DDOS thing is bullshit, not that you were necessarily coming in here and making it up as it's more than understandable why most people would believe it. Wasn't trying to come off as aggressive to you although reading back on my post it seems that way. Sorry.

Originally Posted by -zeroSKILL-

From memory, what I was trying to say is that it isn't hard to do the kind of stuff Anonymous does. A large group of people focusing their efforts on defacing websites can easily accomplish the task. It's just a matter of whether or not they are willing to risk the consequences that determines how far they go.

Anonymous managed to hack a website who must have had the most insanely retarded IT staff in the world. They exploited a really simple hole and it's pretty shocking that a company as large as Sony didn't catch it. I can guarantee the vast, vast, VAST majorities of companies protect against SQL injection which is what brought Sony down.

Originally Posted by -zeroSKILL-

A weeks worth of studying, a few programs downloaded, and I can get personal data off of websites with weak security through very basic and crude forms of SQLi.

Then those companies pretty much have their doors open to anybody waltzing in and taking their data. You have to know how to find it, but any company who know's anything about security would have sealed those holes. I have a server in my basement beside me with a fairly fresh installation of Debian and hardly any security set up on it. It's a webserver so you can try your techniques at castro.homelinux.net. Give it a try.

Originally Posted by -zeroSKILL-

I know next to nothing of the finer workings of how the programs work, or what the commands I type into the URL bar mean, but they get information that I really shouldn't be able to. I was recently trying to learn the finer points of SQLi just for fun, but it grew boring and tedious to learn. I'm not trying to be a pro hacker and go vandalize stuff on the net, I just find it fun to learn how to do it, and then be able to do it.

Learning SQLi isn't going to help you much, other than understand one exploit which is just basically tricking a PHP/Perl/ASP webscript into running an altered database query through actually typing that query where the program is grabbing values out of. If you want to learn how to hack I suggest this book.

Sorry if I was a bit harsh on you but I guess you were drunk and were coming off as some kind of hacker extraordinaire. Just take it from me that hacking any website with even half assed security isn't going to be easy.

Originally Posted by Izzy

This is bothering me, what is the answer? Does it have to do with putting in pointer deference as a string so when it copies it into buffer it copies something else?

Edit: nvm, I think I figured it out. I just don't understand why it wouldn't cause the program to crash.

EDIT: Sorry read your comment wrong. It doesn't because there's of the buffer variable. Leaves enough room on the RAM to move things around without causing a segmentation fault.