e.Digital Corporation (fka EDIG)

[Tinroad]

Re F.A.K.E. & RB Ignores/MemberMarks:
http://ragingbull.lycos.com/mboard/boards.cgi?board=FONX&read=385696

By: oktoberpest $$$$$
20 Mar 2002, 07:01 PM EST Msg. 385696 of 387064

ot: basher technique:
Hey guys I figured out something here! But I need your help - can you fix my MMs again - this time its for a good cause.

you can run a script clientside that permutes through 10 users and it will add or delete as many MMs as you want.

the userid (e.g. the highlight information/marks) are stored in an enigma/ MAYA cipher - in YOUR browser.

The technique they are using is to:

1. generate 10 users (or share 10 user cookie files)
2. modify the default cookie,
3. Send an HTTP GET string to the ignore URL
4. click reload, and ignore, run it again.

This is the technique that they are using to automagically log on as 10 different users in 30 seconds. They will also use this to generate new ids in case they are thrown off the board.

SKULLS and BONES likely does it.

The database updates on a 3 minute cycle. It looks like its SQL Server on the backend.

So the membermarks dissapear in about 3 minutes but the actualy operation takes only 30 seconds.

The membermark ignore is an HTTP GET included in PERL:CGI which will have certain characteristics I think I can identify

I am sending the script, the ciphers and the technique to Lycos - It is my belief that they can write a filter to delete the user accounts that run it.

Each user will have 10 accounts, approx. These accounts can be traded but are normally no more than 30 minutes old by the time they run.

The signup can be scripted as well.

If we succeed we will trap the bashers into doing nothing but recreate the user accounts - they will not be able to post!!

Raging bull spiders every day at 10 am to remove the spam.

They can extend a filter to remove the bash posts if I can profile them. That filter can run on a trigger here on a high volume board like this to test it - no problem.


Please MM me / I can't run the script on myself or anyone because then I would be doing system abuse. I need MMs to lure them back into stripping me down again. Theres something about the dummy accounts they are using that I havent been able to figure out - e.g. how many are real versus fake and how many users they correspond to. Several messages can be posted at once with this kind of script. Thanks in advance.