"New" Low - Hacking

[NenMaster]

u think they dont seed there bt releases with hacked boxes?

[holyangel]

I don't think you can use those hacked servers to seed bt releases unless you managed to script yourself a bt seeding kit, which I don't see many hackers have actually.. it's more like edu users helping to seed files.

Originally Posted by bayoab

You can get a bot on a shell if you want. Or buy some hosting with an enormous amount of transfer. Also, Norton does NOT detect iroffer. Norton cannot detect the majority of rootkits. In my experience Trendmicro is the only scanner which detects iroffer rootkits via web scan. (I have not tried f-secure, kav, panda, sophos.)

lolz shell don't need space to host files? We're talking about gigz of files on a single XDCC Bot and shell hosting company only offer like 10mb or maybe 20mb and they stated there very clearly no XDCC Bots allowed. So either you are buying a hacked shell unknowingly or your shell is provided by a friend of yours.

Originally Posted by bayoab

Only the really good rooters go this far. The majority of rooters are stupid and dont even bother hiding it. They can be found with a little bit of searching.
(Also clearly there when you port scan it).

o.0 majority of rooters are stupid.. hmm not really. They aren't even considered rooters in the first place just idiots who thinks they are smart after reading some how to root a server guide. I aren't sure if you can detect the program if you port scan your pc on what program is currently running on what port, haven't tried it out on myself yet hehe
But I'm pretty sure even if they root your pc, you won't even notice it at all.

Originally Posted by bayoab

16k/s fserves worked fine back 3 years ago. There were no hacked bots, just people on dsl/cable and a few edu. Infact it was better back then because you could get older stuff. Bots typically do not have the space for full archives.

It's the same still nowadays, there are still fserve in anime channels and also fservers only channels. You just have to look for those files yourself, but you normally won;t cause your first reaction is to look for files off the XDCC Bots as firstly it's faster and more easy and you are lazy. Also, anime channels love to ban the command @find for what reason I aren't sure, but this make it very impossible to find old files in a channel full of like say 500+ voice. And back then internet was still slow, no one knows what's speed, but too bad.. the world change and everything is about speed today.

Originally Posted by bayoab

The typical rootkit installs a) 1-2 iroffers b) 1x serv-u ftp. FTP's are rarely hacked compared with xdcc and usually offered by people on edu's because they are rarely much of an issue for the student if properly admined.

Don't mind me, but you speak like a nood learning how to root and getting the wrong concept. iroffer is installed on your pc, that's a must, followed by some .bat files and a serv-u.ini file and a custom version of serv-u which pratically doesn't even need installing, it just load up, exec the program to run, and you get yourself a ftp server and from there you setup a bot, simple as that. They also installed other files like FireDaemon which allows you to run program remotely I think and also a dameware program which also you to control a win nt computer remotely. Further on, a scanning kit is also setup on your computer and from there you get another bot which will help you scan ip range for possible hacking win nt computers.
And you don't hack ftp, firstly you don't even load the rooting kit up ftp in the first place. They actually access into your window admin a/c and load the files up from there, I will not go into details there. But they need the ftp to exec files though, meaning run and start programs by executing them. However some computers have programs which sort of disable the exec command on ftp, I dunno how nor why but once the server can't be exec, it's simply setup as a ftp server. And thus getting a ftp server and xdcc bots is the same way. And each xdcc bots comes with a ftp also btw.

[bayoab]

I've heard about BT hacks, never have seen one though. It's basically a modified bt client in silent mode.

Originally Posted by holyangel

I aren't sure if you can detect the program if you port scan your pc on what program is currently running on what port, haven't tried it out on myself yet hehe
But I'm pretty sure even if they root your pc, you won't even notice it at all.

All but one rootkit ive seen responded to a port scan. (That rootkit was a piece of work ) As for the user not noticing, this is semi-true. There are signs of it, but most users arent very sharp. Some will say "Yea, my computer has been acting strange"; others will be clueless. It depends on the situation. Some people even go "My computer has a virus" or "My computer is slow" or "Something is eating up my hd space".

Also, anime channels love to ban the command @find for what reason I aren't sure...

@find is banned beacuse the majority of fserves do not support it, and in the old days, before they fixed it, that command would cause excessive load to fserves. Some scripts have optimized @find since then to make it run without excessive server load. Most places still agree that its spammy and since most do not support it, they don't allow it.

Don't mind me, but you speak like a nood learning how to root and getting the wrong concept.

Actually, it is part of my job to de-root machines. This is based on the information ive collected from the 20 or so machines from which i have removed various hacks.

They also installed other files like FireDaemon which allows you to run program remotely I think and also a dameware program which also you to control a win nt computer remotely. Further on, a scanning kit is also setup on your computer and from there you get another bot which will help you scan ip range for possible hacking win nt computers. ....

IIRC firedaemon allows a user to run multiple commands from 1 command line. (It's a legit program if you do a google search). Serving zombies rarely come with scanning kits. Usually zombies are one type or the other: serving or search/attack. What usually happens is that if one person who loads a kit onto a computer never seals the exploit he uses, other people will take the computer over for themselves. So one computer will have 3-4 bots on it before someone competent finally seals the hole (or the admins find it).

[Kenjo]

I think some mod or admin should remove this topic because well the log shows a lot of people IP's. If some movie/anime business sees this and looks at the log and see those IP's. They might sue them because thats what is happening the USA right now(RIAA), it will cost those people maybe thousands of dollars. Those people might sue animesuki because animesuki let this user show the log in this topic with their IP's. Even my IP shows in that log and I don't want to get sued.

[holyangel]

ah nice to see someone who de-root pc, maybe we could get down and have a chat on msn one day.

[Anime-FAN]

Hmm... I have to say this. First of all sorry for the bad grammar as I am not very good in english.

If you are all wondering... "what the hell with the hacked bots, can't they buy it legally", it cost USD 20 - 50 for one bot(Depend's on the package). Do you think other's fansubber chanel would buy it too? Since they're only doing the anime for free and get no profit from it. I won't point out which channel... but if u notice some of the channel has more than 4 bot's... from there u can make a conclusion

The guy that post this thread... probaly want's a revenge...
Since we kicked him out of the channel... for trying to take down #Suteki-Yume

One last thing...
Can any of the admin edit digusted post? Remove the url in it...

[holyangel]

haha I paid $80 just to get a 6mbps 8gigz hdd package >_< seriously it's damn expensive, and suprisingly I'm still paying lolz

[SierraSonic]

Here's a screenshoot for you all to stare at



The conversation was set in #A-M channel @ irc.mircx.com

Originally Posted by disguested

Here's the link, it's a screenshot (if you want the whole screenshot I can post it, but someone needs to host it).

it's villagephotos, so if someone could host this in case it goes down it'd be appreciated

[zalas]

Originally Posted by SierraSonic

Here's a screenshoot for you all to stare at

The conversation was set in #A-M channel @ irc.mircx.com

It looked to me like he was joking around. I mean... why would you announce that you were going to root some .edus...? That's like "I'm gonna go steal a BMW, brb."

[bayoab]

Originally Posted by zalas

It looked to me like he was joking around. I mean... why would you announce that you were going to root some .edus...? That's like "I'm gonna go steal a BMW, brb."

And we all remember the group with the famous topic "Looking for rooters"

[Garylisk]

Wow, sick stuff for non-profit fan activities... These people need to realize one important thing: This is not a contest, there's no need to underhandedly screw someone to get ahead. There is no "ahead". Give it a rest.

As for the fansub scene getting linked to the warez scene.. that's a scary thought, but it's true. Look at some of the otrrent sites out there... They're half anime, half warez, with porn ads. I used to be into all the warez BS, with the leet pplz, and nuking, and DoS attacks, and all that other immature crap... but now that I've grown up, I realize how stupid it all is. I really don't want fansubbing, something that I love, to be connected with the kind of community that the warez community is... but it's happening. I wish it could be stopped... but as long as people who just want something for free are out there, and they're anime fans as well as pirates... guess I'll just have to deal with it. :P


Whatever.

[Anax]

I'm very sad to see this happening. When Animefactory had to choose a new IRC network, one network (I won't say which one) we decided not to go with because there were whole channels devoted to setting up botnets for distribution.

It's such an incredibly uncool thing to do that... well, I was just floored.

[Kasshin]

If you are scared of getting hacked, get AVG. I installed iroffer on my own computer and avg constantly detects it as a virus / trojan horse / whatever.

[DarKBoArDeR]

not to get into it much but "hacked" computers are used more than some of u realize. i personally dont have a problem with them as im sure many others feel the same. im not exactly proud to say it but the use of "hacked" computers as xdcc bot, bt seeds, http servers, and ftp servers has helped the fansubbing scene grow rapidly. many of u would have to wait much longer for the anime that you want without bots. don't get me wrong, i am in no way condoning hacking or anything of that form, but they do help alot

[AnimeFangirl]

Admission of guilt, perhaps? I don't think the majority of leeches care where the bots come from, but this sort of thing will present a legal problem sooner or later. Even if hacked xdccs do work, I think groups should start looking into legal alternatives to hacking.

[Anax]

Wait. You're not condoning it, but in the same breath you're saying that it's helped the digisubbing scene and has helped a lot?

Um. Waiter? Reality check, please?

And just as a note, while chances are decent that nobody is going to come after you for fansubbing or distributing non-US-licensed anime (although, yes, it is illegal to distribute it), you can expect that people *will* come after you for hacking into boxes. Sure, they might not know the machine has been hacked. Sure, some people will just cuss and reinstall things to get a secure system again.

But remember that sysadmins are some of the most cussedly irritable and persistent people out there. They don't *like* people who mess with their machines, their networks, or just in general make more work for them. So at some point, some sysadmin with a bone to pick is going to follow you up on that breakin, contact the FBI, and come down on you like the proverbial ton of bricks.

Is it possible for people to not be found out? Yes. But adding to a crime that is generally overlooked (distributing fansubs) a second crime that generally gets a whole lot of people upset (compromising a computer system) seems like a *real* bad plan.

[Zerox20]

It really is Ironic even having this thread, Obviously people know the bots are not even legal, If you don't know me, then you know I do bots for anime-kraze etc blah blah. But look at it from this perspective all of those bots "you lowdown hackers what are you doing!" I gurantee you have downloaded from a hacked XDCC bot, its a means by which distribute files and its getting very bad. There are a lot worse situations then anime channels rooting bots. All of those underground channels you guys goto and download your favorite windows copy from BlahXDCC01 is autorooted and those channels have in the thousands. Its one of those things people complain, but if there were no XDCC bots, people would whine about BT being too slow all the time. IF there was no BT, people would whine about the slow Fservers and waiting in ques. Yes, they are hacked XDCC Bots, Yes they are edu's or other vuln. computers running the iroffer scripts. Just a note, a good 'hacker' knows how to root that bot and not set it to 75 sends and watch it go above 10,000 KB and laugh and gloat heh, just a note.

As for de-rooting, most users usually do find the files its not like its really hard once you look. Depends on the person who rooted them. But Admins are getting smarter now, finally! Back to my point, people download from XDCC bots all the time, its hard to sit here and watch people post images about all the bad things people do. BitTorrent is becoming illegal too, I know comcast has sent out notices regarding its use for illegal file sharing, the same with emule.

[AnimeFangirl]

So you're saying hacking is bad, but it doesn't matter because everyone does it? Well, I don't know if "everyone" does do it, but even if they do, I still think fansubbing groups should start looking for alternatives to hacking in order to distro their stuff. I also agree with Anax that this sort of thing could have serious consequences somewhere along the line.

[complich8]

I was going to write an even longer than usual rant here, and piss a lot of people off. Then I realized that it was too huge. So I cleaned it up and posted it here

I'll piss even more people off with this somewhat smaller rant though.

The short summary goes back to the old "ethics" argument.

Ethics are sets of principles of right conduct.
The "complich8" code of ethics is "whatever is practical and doesn't hurt anybody." I like this code, and stick with it. It keeps me from hurting people, and keeps the things in my life functional. This is the one I live by and support. It's quite pragmatic and very workable. I drive 5 over, I don't drink and drive.

The "legal" code of ethics is "don't do anything illegal" -- and is a very loose code because of that. You can do a LOT within strictly legal ethics, such as taking advantage of people by selling to them while they're not completely informed. This is harmful but not illegal. On the other hand, you also aren't driving 5 over, and are probably doing 5 under.

However, "ethical fansubbing" doesn't fall into either of these. Ethical fansubbing says "it is wrong if it's illegal this way, but not wrong if its illegal this way." In the eyes of the law, the difference between "owned by a japanese company" and "owned by an american company" is nonexistent. It's still intellectual property, you're still infringing on it. One falls under international intellectual property laws, one falls under more strict national ones.

A japanese company can turn around and slap a cease and desist on my group right now, and can go sue for damages for lost income in less appealing dvd licensure deals, because we've quelled part of their market. It'd fly in court, too, probably. Just like an american company can take licensed subbers to court for the same. Sue for damages, no prob.

So why don't they? I don't know. Probably because it's a combination of a bad business practice suing your best promoters and your best customers, and an unfeasible business model (a company can't live off litigation alone, as we'll be seeing with SCO sooner or later). It's more profitable for bandai to release gits:sac dvds to the world than for them to come hunting for me and zerox as leaders of groups that subbed it. Hell, they could get about 8 grand in value from me right now, and I know zerox isn't worth much more. That's the profits from probably 800 copies of a single dvd in the set. I know I'm planning on buying those dvds... its bad business to attack me, when they can do what they did (namely say to us "hey, can you stop that?").

Anyway, "ethical fansubber" ethics are what happens when you take a real code of ethics and swing a big baseball bat at its knees. It doesn't stand up anymore. You can say you're "ethical" and you can be right, but not because you're following a coherent set of right actions, but because you're following an incoherent set of lies to yourself. It's going to get licensed most likely, so quit being selfish and wait for the dvds.

Rooting boxes is a practical thing. To you it's illegal so wrong. To me it's too risky, so not worth it. To the rooters out there, it's easy and not a big risk, so it's practical.

Anyway, I've probably pissed off enough people, and I'm sure that this'll lead this thread into yet another flame war, but it's ok, I have my asbestos underpants on.
[edit: forgot my point for a second there, had to put it in]

[q8p]

I wonder how many people would soil their drawers if I went through popular anime channels and reported edu xdcc bots (discovered by successfully starting a transfer and grabbing the reverse dns of the IPs by connection rather than user) to abuse@*.edu =P