What.cd - Slow and steady wins the race

**ooblar** · 14.03.10, 14:44

Good point, never thought of that. So it was probably something else. What's scripts are really tricky.

**nperversion** · 14.03.10, 15:54

Knowing their paranoid level, I wouldn't be surprised if they eliminated that random salt on their site (although gazelle public version uses it), and even, store the passwords in plain text.

New user, password, mail, browser (without any addons installed that can link to my previous account), bittorrent client (from uT 2.0.0 to transmission 1.91), bittorrent port, cookies, ip (i went from a 2XX.XXX.XXX.XXX range one to a 9X.XXX.XXX one), no css leak, no cheating...etc

The only thing that stays the same is my ISP and country (not banned, obv

)

**TheUnknown** · 14.03.10, 15:59

It still seems like it would cause false positives. Esp since most people use weak passwords.

If you're gonna edit your post, then I'm gonna edit mine too. Judging by what you say, it is even less likely that they use the information. But you know, an innocent person would, in this situation report it and try to talk to them to get his account back because he would have NO idea why he was banned.

Now please stop hijacking the thread

**nperversion** · 14.03.10, 16:08

Yeah, they may have filters for the script for pw such as 123, 123456, 123123, password, asdfg...etc but my pw was REALLY long and special

That or someone here accessed to my IP here

(I don't use proxy for sb-i) but that would get half of us immediately banned from everywhere.

**TheUnknown** · 14.03.10, 16:15

I'd say that what you just said about IPs is more likely than them getting rid of password salts, just to give you an idea of how unlikely it is that they decided to store them in plaintext.

That would mean that anyone with DB access (which reduces to anyone with access to the server) could steal all the passwords and fuck everyone over. This is just not done nowadays.

I remember I prank hacked a forum 10 years ago that allowed HTML and Javascript, unescaped (so i locked everyone out for 2 days by making an account that had a javascript that closes IE). The admin finally got back at me by reading my password and changing it on other sites. He even got my AIM. luckily he was a nice guy and gave everything back.

**nperversion** · 14.03.10, 16:22

Well I guess only WhatMan should have full access to the DB. And yeah nowadays someone with skills can always fuck you over. I guess smart people use always different passwords for different scenarios, I'd never be using my local windows acc pw on anywhere else, and less on anywhere in internet.

**TheUnknown** · 14.03.10, 16:26

My computer password is not secure; I just avoid pissing people off.
Presumably, anyone who can access the site's config files will have access to the file that tells the webserver how to log in to the database, therefore anyone who works on the site would have it. I don't know how many people that is. But really, you should go complain and ask why you got banned.

**anon** · 14.03.10, 16:55

Originally Posted by nperversion

That or someone here accessed to my IP here

(I don't use proxy for sb-i) but that would get half of us immediately banned from everywhere.

I don't know what you're hinting at

**TheUnknown** · 14.03.10, 17:39

Just cause you're not paranoid, doesn't mean they're not after you.

**anon** · 14.03.10, 17:40

That's right, but how does it relate to nperversion's comment? Not even the admins here can get users' IPs, since they're not logged at all.

**TheUnknown** · 14.03.10, 17:52

Oh, I think he was joking. I know *I* was.

**nperversion** · 14.03.10, 18:01

EVERYONE GET OUT OF THE BOAT! ANON=WHATMAN

Yeah I was joking. I don't even know how they caught me. I'd really like to ask them in the disabled room but I know I won't be getting the answer obviously

**anon** · 14.03.10, 18:01

Originally Posted by nperversion

Yeah I was joking. I don't even know how they caught me. I'd really like to ask them in the disabled room but I know I won't be getting the answer obviously

"Do you want us to help you cheat", etc.

**nperversion** · 14.03.10, 18:04

Well it's not possible they disabled me for cheating, as I didn't even made an announce to the tracker. The account was only up for 1 day so I don't really know why I am b7.