How can I track an IP address, or can someone do that for me if I give you the IP address?

help Wrote:
-------------------------------------------------------
> How can I track an IP address, or can someone do
> that for me if I give you the IP address?


Write your internet service provider along with a $10 check requesting the account information of that IP address. You will get the full name, social security #, and mailing address of the account holder. They will also send you an internet activity log of that person for the last six months.

Hope this helps.

http://cqcounter.com/whois/

A Hackers Manifesto

Another one got caught today, it's all over the papers. "Teenager Arrested in
Computer Crime Scandal", "Hacker Arrested after Bank Tampering"... Damn kids.

They're all alike.

But did you, in your three-piece psychology and 1950's technobrain, ever take a
look behind the eyes of the hacker? Did you ever wonder what made him tick, what
forces shaped him, what may have molded him? I am a hacker, enter my world...
Mine is a world that begins with school... I'm smarter than most of the other
kids, this crap they teach us bores me... Damn underachiever.

They're all alike.

I'm in junior high or high school. I've listened to teachers explain for the
fifteenth time how to reduce a fraction. I understand it. "No, Ms. Smith, I
didn't show my work. I did it in my head..." Damn kid. Probably copied it.

They're all alike.

I made a discovery today. I found a computer. Wait a second, this is cool. It
does what I want it to. If it makes a mistake, it's because I screwed it up. Not
because it doesn't like me... Or feels threatened by me... Or thinks I'm a smart
ass... Or doesn't like teaching and shouldn't be here... Damn kid. All he does is
play games.

They're all alike.

And then it happened... a door opened to a world... rushing through the phone
line like heroin through an addict's veins, an electronic pulse is sent out, a
refuge from the day-to-day incompetencies is sought... a board is found. "This is
it... this is where I belong..." I know everyone here... even if I've never met
them, never talked to them, may never hear from them again... I know you all...
Damn kid. Tying up the phone line again.

They're all alike...

You bet your ass we're all alike... we've been spoon-fed baby food at school when
we hungered for steak... the bits of meat that you did let slip through were pre-
chewed and tasteless. We've been dominated by sadists, or ignored by the
apathetic. The few that had something to teach found us willing pupils, but those
few are like drops of water in the desert. This is our world now... the world of
the electron and the switch, the beauty of the baud. We make use of a service
already existing without paying for what could be dirt-cheap if it wasn't run by
profiteering gluttons, and you call us criminals. We explore... and you call us
criminals. We seek after knowledge... and you call us criminals. We exist without
skin color, without nationality, without religious bias... and you call us criminals.

You build atomic bombs, you wage wars, you murder, cheat, and lie to us and try
to make us believe it's for our own good, yet we're the criminals.

Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging
people by what they say and think, not what they look like.

My crime is that of outsmarting you, something that you will never forgive me for.

I am a hacker, and this is my manifesto. You may stop this individual, but you
can't stop us all...

After all, we're all alike.

+++The Mentor+++

you really expect people to read that? ooh hackers man-e-fist-o

help Wrote:
-------------------------------------------------------
> How can I track an IP address, or can someone do
> that for me if I give you the IP address?


Track and IP address? As in follow it around? Or log the websites it is visiting?

You can't do either. The IP address doesn't physically move, and unless you have access to a machine somewhere on the network between that computer and the rest of the internet, you can't log its traffic.

-----------------------------------------------------------------
The function of conservatives is not to meet every liberal program or scheme with a denunciation or a destructive counterscheme, but rather to weigh its advantages and defects, supporting the first and challenging the second. A declaration of ideological warfare against liberalism is by its nature profoundly unconservative. It meets perceived radicalism with a counterradicalism of its own.

I don't expect you to read it, worn out as you doubtless are by your YouTube "workout" this evening.

That's funny, Mentor.

Changing a CSS attribute like the cursor is not impressive. In fact, it is annoying.

Stop it BB.

-----------------------------------------------------------------
The function of conservatives is not to meet every liberal program or scheme with a denunciation or a destructive counterscheme, but rather to weigh its advantages and defects, supporting the first and challenging the second. A declaration of ideological warfare against liberalism is by its nature profoundly unconservative. It meets perceived radicalism with a counterradicalism of its own.

Thurston Moore Wrote:
-------------------------------------------------------
> body{cursor:default}
>
> Changing a CSS attribute like the cursor is not
> impressive. In fact, it is annoying.
>
> Stop it BB.


It is, however, harmless compared to some of the other CSS modifications to hit this site recently...

We explore... and you call us
annoying. We seek after knowledge... and you call us annoying.

yeah what he said.


does anyone know a good doctor? my wrist is hurting and i think it may be carpal tunnel. it all sort of started this evening. i wasnt doing anything too strenuous. but it hurts really bad. any suggestions would be very helpful thank you

Honey, it's time to go to bed!

Aw, Mom, I'm middle of something really important.

Nothing that can't wait until tomorrow. It's bedtime for you.

C'mon, I'll tuck you in.

Aww, shucks, Mrs. M....

Can't Mentor stay up for just a little while longer?

Mentor's Mom Wrote:
-------------------------------------------------------
> Nothing that can't wait until tomorrow. It's
> bedtime for you.
>
> C'mon, I'll tuck you in.

your mom talks to you on the internet.

Harry Tuttle Wrote:
-------------------------------------------------------
>
> It is, however, harmless compared to some of the
> other CSS modifications to hit this site
> recently...
>


None of the CSS modifications are harmful. Just annoying.

The logout script one is a little bit harmful, though.

I wish I had thought to use WWW::Mechanize in a perl script to retrieve the HTML from http://rolo.99k.org/index.php and capturing it to a text file, without using my browser. By the time I thought to actually write a little script, it had been changed to a "HELLO WORLD!" page.

-----------------------------------------------------------------
The function of conservatives is not to meet every liberal program or scheme with a denunciation or a destructive counterscheme, but rather to weigh its advantages and defects, supporting the first and challenging the second. A declaration of ideological warfare against liberalism is by its nature profoundly unconservative. It meets perceived radicalism with a counterradicalism of its own.



Edited 2 time(s). Last edit at 10/21/2009 12:16AM by Thurston Moore.

bloody blisters Wrote:
-------------------------------------------------------
> does anyone know a good doctor? my wrist is
> hurting and i think it may be carpal tunnel. it
> all sort of started this evening. i wasnt doing
> anything too strenuous. but it hurts really bad.
> any suggestions would be very helpful thank you


Use your other hand, and pretend that it's eesh.

(As if you hadn't already tried that.)

BB, let me take a look at that hand.

I have a wonderful soothing lotion that should fix that right up...

hey fuck you Guy.


oh and tried it doesnt work that well. my "other" hand is just not as coordinated as the "go to" hand

Thurston Moore Wrote:
-------------------------------------------------------
> None of the CSS modifications are harmful. Just
> annoying.

You know what I mean.. I don't mean they can kill you or your computer. I mean harmful to the functionality of the forum, or harmful to the ideal of free speech.

>
> The logout script one is a little bit harmful,
> though.

You sure it's not just annoying?

>
> I wish I had thought to use WWW::Mechanize in a
> perl script to retrieve the HTML from
> http://rolo.99k.org/index.php and capturing it to
> a text file, without using my browser. By the
> time I thought to actually write a little script,
> it had been changed to a "HELLO WORLD!" page.

All I got out of this was that you tried to catch something like a charmander but its vitality was too high for your jigglypuff so it escaped...

Mentor's Mom Wrote:
-------------------------------------------------------
> BB, let me take a look at that hand.
>
> I have a wonderful soothing lotion that should fix
> that right up...


do tell

I'll just pour some on... there.

Now, rub briskly.

See how it warms up?

Work it down a little lower.

That's better.

Aaaahhh.

Very nice.

Just a little to the... oh, you figured it out. Very, very good.

is it cheese?

Quick, Mentor! bloody is distracting your mom so you can say "goodbye!" to bed time!

Take a nibble and decide for yourself.

I like to watch... heh heh

im lactose intolerant

Well then you'll be perfectly fine.

See?

Doesn't that look appetizing?

Fresh country pie.

Harry Tuttle Wrote:
-------------------------------------------------------
> Thurston Moore Wrote:
> --------------------------------------------------
> -----
> > None of the CSS modifications are harmful.
> Just
> > annoying.
>
> You know what I mean.. I don't mean they can kill
> you or your computer. I mean harmful to the
> functionality of the forum, or harmful to the
> ideal of free speech.
>

Yeah, I didn't think you meant bodily harm or anything. But changing a cursor or hiding a post is not a permanent thing.


> >
> > The logout script one is a little bit harmful,
> > though.
>
> You sure it's not just annoying?

Harmful in that it actually changes something in your browser, as in it erases a cookie. If someone was able to keylog or packet sniff, and forced you out of a website (imagine a banking site) they could then capture your password when you log back in again.

Just logging someone out is harmless, but it can be half of a more harmful attack.



>
> All I got out of this was that you tried to catch
> something like a charmander but its vitality was
> too high for your jigglypuff so it escaped...

Not sure what either of those are.

I wrote a perl script that would request the text from the rolo.99k.org site without rendering the page in a browser, but just writing the text to a file. But by the time I thought to do so, 4200cc had already changed it to just output "Hello world!".

-----------------------------------------------------------------
The function of conservatives is not to meet every liberal program or scheme with a denunciation or a destructive counterscheme, but rather to weigh its advantages and defects, supporting the first and challenging the second. A declaration of ideological warfare against liberalism is by its nature profoundly unconservative. It meets perceived radicalism with a counterradicalism of its own.

Me oh my that country pie.

Boy, I'll say! Your mom is a real peach. Too bad blisters food allergies are spoiling the mood.

Gee, I'm delicate.

+++The Mentor+++ Wrote:
-------------------------------------------------------
> I like to watch... heh heh

That's enough packet-sniffing, BB.

Time for you to dig in.

i dont have any utensils.


packet sniffing?

You better dig in! Don't act like you never seen a peach pie before!

my wrist hurts and i have a headache. maybe another night

bloody blisters Wrote:
-------------------------------------------------------
> i dont have any utensils.
>

Man! With a pie like that, you don't need no utensils. You don't even need a napkin. Just get the filling all over ya.

you dont know how long that pie has been sitting on a shelf under a heat lamp. it could be all moldy or filled with swine flu

Harry Tuttle Wrote:
-------------------------------------------------------
> Boy, I'll say! Your mom is a real peach. Too bad
> blisters food allergies are spoiling the mood.


Yes, he is a little slow on the uptake.

Speaking of which, it's past my bedtime. Big day tomorrow.

Well, toodle-oo. Perhaps I'll see you again... Harry.

G'nite.
Attachments:

Mentor's Mom Wrote:
-------------------------------------------------------
> Yes, he is a little slow on the uptake.
>
> Speaking of which, it's past my bedtime. Big day
> tomorrow.
>
> Well, toodle-oo. Perhaps I'll see you again...
> Harry.
>
> G'nite.

Golly, that's not the position I was hoping you'd take, Mrs. M...

So long...

help Wrote:
-------------------------------------------------------
> How can I track an IP address, or can someone do
> that for me if I give you the IP address?


This sounds like an inkahootz post. Probably trying to find out personal info on his latest internet enemy.

help Wrote:
-------------------------------------------------------
> How can I track an IP address, or can someone do
> that for me if I give you the IP address?



"the wisdom of the wise will perish, the intelligence of the intelligent will vanish."

The logout script is still up, its not html so the source code wont show anything, it is a harmless php script. I wouldn't do anything to harm you guys like the harmless batch file i posted annoying but harmless.

Google it, tons of hacks and pages out there that will show you.

4200cc Wrote:
-------------------------------------------------------
> The logout script is still up, its not html so the
> source code wont show anything, it is a douchebag
> script. Because I am a total douchebag.

--------------------------------------------------------------
13 4826 0948 82695 25847. Yes.

Lurker. Wrote:
-------------------------------------------------------
> Google it, tons of hacks and pages out there that
> will show you.


Php? I don't think so.

4200cc Wrote:
-------------------------------------------------------
> The logout script is still up, its not html so the
> source code wont show anything, it is a harmless
> php script. I wouldn't do anything to harm you
> guys like the harmless batch file i posted
> annoying but harmless.


Sorry, but PHP is a server side scripting language. There's nothing PHP can do on the client side.

You have removed the javascript or other client side executable and it only outputs this now:

Content-type: text/html

</body></html>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8" />


<title>Hello World Thu, 22 Oct 2009 01:38:47 -0400</title>

</head>
<body>

Hello World!
</body>
</html>


You've obviously scrubbed it since being called out.

-----------------------------------------------------------------
The function of conservatives is not to meet every liberal program or scheme with a denunciation or a destructive counterscheme, but rather to weigh its advantages and defects, supporting the first and challenging the second. A declaration of ideological warfare against liberalism is by its nature profoundly unconservative. It meets perceived radicalism with a counterradicalism of its own.

Thurston Moore Wrote:
-------------------------------------------------------
> 4200cc Wrote:
> --------------------------------------------------
> -----
> > The logout script is still up, its not html so
> the
> > source code wont show anything, it is a
> harmless
> > php script. I wouldn't do anything to harm you
> > guys like the harmless batch file i posted
> > annoying but harmless.
>
>
> Sorry, but PHP is a server side scripting
> language. There's nothing PHP can do on the
> client side.

from what i gathered (didnt really look into it), the php page simply returned a http header that indicated the page had moved (code 302 - http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html ). internet browsers being gullible as ever will follow it to any address, including the address that will log you out of FU : http://www.fairfaxunderground.com/forum/login.php?40,logout=1

the only thing happening on the client side is the browser looking at the new location, no javascript voodoo.


"the wisdom of the wise will perish, the intelligence of the intelligent will vanish."

Wow its not a javasrcipt it wont blow up your computer, it is still up rolo.99k.org.

<?php
header("Location: http://www.fairfaxunderground.com/forum/login.php?40,logout=1");
?>

Very easy.

4200cc Wrote:
-------------------------------------------------------
> Lurker. Wrote:
> --------------------------------------------------
> -----
> > Google it, tons of hacks and pages out there
> that
> > will show you.
>
>
> Php? I don't think so.

I was referring to hacks on forum boards to get an IP address and do strange tricks.

Sorry for the bold red.



Edited 5 time(s). Last edit at 10/22/2009 04:03PM by Lurker..

Gravis Wrote:
-------------------------------------------------------
> Thurston Moore Wrote:
> --------------------------------------------------
> -----
> > 4200cc Wrote:
> >
> --------------------------------------------------
>
> > -----
> > > The logout script is still up, its not html
> so
> > the
> > > source code wont show anything, it is a
> > harmless
> > > php script. I wouldn't do anything to harm
> you
> > > guys like the harmless batch file i posted
> > > annoying but harmless.
> >
> >
> > Sorry, but PHP is a server side scripting
> > language. There's nothing PHP can do on the
> > client side.
>
> from what i gathered (didnt really look into it),
> the php page simply returned a http header that
> indicated the page had moved (code 302 -
> http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.
> html ). internet browsers being gullible as ever
> will follow it to any address, including the
> address that will log you out of FU :
> http://www.fairfaxunderground.com/forum/login.php?
> 40,logout=1
>
> the only thing happening on the client side is the
> browser looking at the new location, no javascript
> voodoo.


Okay, so 4200cc exposed a flaw in Phorum.

It's not Cary's fault, of course, but whoever wrote Phorum was being lazy.

An open logout php URL is plainly stupid.

There are ways to exploit such a logout script, like when someone has already compromised someone's computer, or worse, when they have compromised the host or the segment the host is on.

By forcing people to log out, anyone who has compromised clients or the network the host is on can then capture passwords.

Any PHP programmer worth their salt would make the link to the logout script include some sort of key specific to each cookie, before deleting that cookie. Nobody in their right mind would just delete a user's cookie just by clicking on a link.

The most basic security in this situation would send a session ID along with the CookieID, The session ID through the link, the Cookie ID through the cookies, thus eliminating anyone redirecting someone to a generic logout URL without sending their session ID by clicking on a URL that included it. The session ID would only be in the URL for each user, so a generic redirect would not know the thousands of session IDs, and thus would not log people out.

This is basic security. Phorum needs an upgrade.

-----------------------------------------------------------------
The function of conservatives is not to meet every liberal program or scheme with a denunciation or a destructive counterscheme, but rather to weigh its advantages and defects, supporting the first and challenging the second. A declaration of ideological warfare against liberalism is by its nature profoundly unconservative. It meets perceived radicalism with a counterradicalism of its own.



Edited 2 time(s). Last edit at 10/23/2009 03:12AM by Thurston Moore.

There are settings in the PHP.ini file that can eliminate that.

well, or 4200cc needs a life. Either/or.

Just sayin....

______________________________________________
I have had to change the addresses to my retaliatory blogs over half a dozen times.