My apology. Where should I write? I have limited permission here on Reddit. I was posting on "remove-the-mod", but I was told that the mod of that area got banned or something similar.

I am angry, anyway. Because I have to fix the database of my website, cleaning it out the garbage. Again! I am angry because it's a silly way to use the personal free time. And I am going to fly to norway soon to run a new job. If they don't stop, I won't have free time to fix the MYSQL database of Wonderland, and I will simply be put offline =(

Yup indeed Cool! At the end, it was useful for learning a lot of urban-dictionary =P

Good occasion to learn PHP (and ruby), web-languages that I have never considered interesting for my needs since I have always been more interested in HDL and C (i.e. in cpld/fpga, and in microcontrollers). Never played with web-sites, MYSQL etc.

Now I am learning PLC for industrial automation. And a new language, since in Norway they don't speak English as the preferred language.

This story must end. I posted more for a vent, as well as for finding some good technical and tactical advice.

are you one those nice guys from Nekochan?

I am migrating the server's database to BTRFS: it allows daily snapshots. It should help in doing the backup and restoring MYSQL database in case of disruption. I am not an expert of "websites", anyway o_O

I'm getting flashbacks to the Philmarilion.

Yes, this silly sentence gives me a flashback to a sentence written in Nekochan, so you are probably a member of that website. Who? RaionFox's sockpuppet, I suppose. Maybe I am wrong, anyway, and unfortunately, here you can't hide your ass behind a clicky group of suckup users.

Look at the status of my website: do you see? Corrupted again by an idiot who needs to put his shit into my website, and I have to lock the whole server to find the vulnerability. SHT I can't spend so much time for babysitting people like your mates!

So, tell your mates that you are really a group of disgusting person, only able to offend at a different level of increasing annoyance, and, considering that you are all grown men, that is a shitty shame!

obsessively stalkerish behavior

do you understand that I have attacks even on ebay, and ebay is the way I get money? Yes, it happens!

seriously you want to call the police?

Seriously, what is the alternative? Should I put my server offline? Because of their attacks? Do you know they tried to doxx (= extract emails) my users by attacking the userprofile-module? This because on PHPBB this module has some vulnerabilities.

If the answer is yes, then ok, Wonderland will burn in /dev/null.

Want my advice? Take down your site burn your reddit account. Lay low for a while.

it may be done

Then register at some of the sites I mentioned and share your projects and for sale ads there.

but I am not interested in "amiga", anyway thanks for your advice

Don't reuse any usernames

even on eBay?

you'll be excused for less than perfect English.

do you find my English so "shitty", it was depressing and demotivating

ah, okk. This makes sense for me. In fact, I was asked if I preferred a job in California (hot and sunny) or a job in Norway (cold and snowy). I am a beach-boy, I really like the sea, and the company that is employing me is a multinational corporation with a lot of offices around the world. Unfortunately, the office in Australia was already assigned. Anyway, even if I need to learn the Norwegian language to operate there, I instinctively sent my preference to the office in Norway. They speak English, but in the contract, it's written that I need that they prefer dialogs in Norwegian. Of course a minimum of survival Norwegian for the first three years, anyway, so you have a soft curve for learning.

I was surprised of my choice, taken instinctively, therefore surprising since I have always admired the USA: big streets, big towers, big cars, also I have always watched the Baywatch series, as well as other television products made in the USA. And I flew there a couple of times, but it was for vacation.

So, I am a European-man, I'd best stay in Europe =P

sure, I just wonder WHAT can drive a mind to write the following

• "so I be one day minding my own business on the web. this shit is hotter than some thick bitches, but alla sudden my homies be totes tripping. we'll be on da Kik talking about the brothers and bitches and the hos. but them niggas then say they be doing my bitch. niggas u tryina play my ass or something? I grab my gun and totally say 'I'm coming for you and my bitch u tripping monkeys." So I go to the first homie. "Nigga open the fuck up I know you be there smokin crack up in this hose!" Then that nigga come and play all tough till I point my gun wit da clip at him. He begs and pleads. I be a good guy so I spare his stupid ass. The. I go to the next nigga and smash his three hunnit with a bat. Nigga diserved it. Then I go home, slap and fuck the bitch before throwing her ass out. Man my homies are terrible niggas!" ( written here)

I don't understand this post. I partially understand the content, but I don't understand the reason. What was that? A proof of underground style? Razism (because my skin is black)? Or what?

When someone made it just a notch worse on eBay

I think a bit of clarity is in order. Not playing the blame game, but googling around for forum-alternatives, I still cannot see any mention in their Bazaar-area's rules that states that you’re not allowed to try and sell elsewhere as well. I can imagine many people listing on eBay, and also giving a heads-up on forum's bazaar too. The rules on some forum (including Nekochan) do clearly state no software sales, and I fully appreciate why that is the case (because it’s legally a very dodgy area seeing as a lot of EULA’s don’t permit the re-sale of licensed software – despite a lot of IRIX software being fairly abandoned these days). However, I don’t personally see why offering it on eBay with software would be a Nekochan violation. If eBay want to police that, I’d say it’s up to them – so long as the Nekochan sale does not include licensed software. Anyway, the crazy part is that nobody cared about WTF happened, not even if … it caused an extremely unpleasant situation with eBay, because someone ( I don’t know who ) wanted to be “so kind” to inform them about a “probably suspicious software” included with one of my auctions … and Ebay, suspecting it was something of illegal, reacted suspending my account for verification! It happened more than year ago, but it happened, and of course there was absolutely nothing wrong with my auction, the machine with the harddrive was picked up by me from a design studio, cleaned from the dust, checked by diagnostics, ram-maximized, refurbished and offered for sale! I was able to prove it and the problem was sorted out in a couple of weeks.

But it caused two weeks of stop, and ~100 euro wasted in the production of the document to prove it was not illegal software! My acknowledgments to those "nice nice nice guys!" (sarc)

Probably the cause

Probabily means that it's my opinion formed on the basis of incomplete information.

The admins don’t care, so there’s no higher authority among that tiny community, and nobody replied. May be it was a “blanket ban” by those guys with Bad-Cops-badges to ensure they can’t be touched by any US issues, and the crazy part is, even in the US, licensing on SGIs was never tied to the physical media! Those guys with badges are paranoid Bad-Cops, very paranoid for ancient software, and people in the forum won’t help (especially in public) because they’re too scared of getting jerked around by admins who are overly paranoid about someone coming after them for ancient software. They aren’t also usually prone to listen (especially if you are a foreign) as well as they aren’t usually prone to give explanations, not even if you are a new entry.

Nobody had never told me that the admin has gotten “Cease and Desist” orders from law firms representing various hardware and software manufacturers. Details completely unknown when facts happened along a shallow communication between mods and users.

Last, not the least, the recent embarrassing episode

Again my conjecture (yes, I am becoming paranoid), but ..during my presence in Nekochan I happened to offer a couple of PowerPC boards in bazaar. They were Arm System On Module soldered on backplane, I designed and made a few boards, offered for the purchase in Nekochan's bazaar. Someone noticed them and I was contacted by a couple of companies, interested in collaboration, and of course, I was interested in collaborating.

Due to my “special arrangement” with some special customers (whose software heavily involves Autodesk’s products, i.e. EagleCAD is now Autodesk's as well as Autocad), I then got a phone call by some men in black with Autodesk-badges, who wanted to verify a few things about the software I was using for the collaboration.

formally I was a freelancer, paid on demand for projects collaboration.

On Nekochan there is a “your last purchase” topic where I wrote that I had bought a second-hand laptop where I found EagleCAD installed on the harddrive with a professional license, of course, registered to the name of the laptop’s owner, and there must be some relation with the recent embarrassing experience triggered on what I had claimed to use to support my business.

We all had a long talk, during the inspection, about – “hidden costs of using unlicensed software” – because, as you (‘d best) know – ” using pirated software, even unknowingly, can cause system failure, endanger your personal data, and negatively affect your business productivity” – So kind, guys! Their software is the fourth most pirated software in the world, according to a study by the Software & Information Industry Association. Including my copies of EagleCAD.

The academic personal edition they found installed on my laptop comes from my University, the license is registered in my name, while the professional edition comes from the purchase of a secondhand laptop, and the license is not registered in my name. And that was what the wanted to verify: original, or pirated? Where does the laptop come from? Let's contact the original owner!

No problem. But the attitude is irritating embarrassing! They justify telling that - "one of the most frequently pirated software from CadSOFT (now it’s Autodesk) obtained through torrents or cracks" -.

Oh, About that there was also a funny misunderstanding that needs to be clarified: on the forum I had written that – ” the autorouter program was modified to suit my needs “ – and someone must have thought that it was a "sneaky attempt to fool the license" while all of my researching activities (where I need to modify the autorouter) are done on gEDA, an opensource application installed on my HP-RISC/linux workstation. Thus, what got modified to suit my needs is a couple of source files covered by an opensource license.

Nothing wrong with it!

moral of the story: don't publish what you do, what you use, and don't expose your name and surname by email or forum's profile in the cyberspace of internet, because it can cause problems, time and money lost.

A mistake I won't repeat!

Some remark of vulnerabilities (Italian)

Written by a friend. It contains some links to articles that tell about insecurities. Good lecutures.

PHP e' una [schifezza](url=https://eev.ee/blog/2012/04/09/php-a-fractal-of-bad-design/) quando si cerca di fare qualcosa di minimamente sicuro; aggiunto a MySQL che a mio avviso è uno dei peggiori RDBMS*, rendere sicuro un sito PHP+MySQL è un'impresa titanica. A questo si aggiunge il fatto che phpBB non è proprio il campione di sicurezza.

E' quindi facile introdurre per sbaglio delle vulnerabilità anche gravi: basta dimenticarsi di fare un escape su un parametro di una query e bam hai aperto la porta al mondo.

Ricordo che la prima versione di commodorefangazette.com era fatta in PHP, e cercando di seguire tutte le best practices e controllando i parametri uno a uno veniva fuori uno schifo di codice che non finiva più. Quando abbiamo rifatto un sito simile in Python(web.py) + PostgreSQL, avremo praticamente scritto 1/3 del codice, in quanto psycopg2 (la libreria per connettersi a Postgre) già di suo convertiva i parametri alla query evitando possibili injection, e il motore di template faceva escape dell'HTML così era impossibile, di default, avere delle vulnerabilità XSS.

Se devi ripartire da capo, ti consiglio di lasciar perdere phpBB e passare a qualche altra soluzione; se vuoi rimanere su PHP+MySQL c'è Simple Machines Forum, altrimenti in passato ho provato nodeBB, che come indica il nome gira sopra node.js, altrimenti ci sono FlaskBB e Misago che sono in Python.

Installalo su un VPS fornito da un provider attendibile e che ha una protezione contro i DoS (come Digitalocean o Linode), fai un filo di hardening, ovvero rimuovi TUTTI i servizi eccetto HTTP/HTTPS, e cambia la porta SSH a qualche altro valore non standard (o togli SSH del tutto e usa la console del provider per fare manutenzione, o fai uno script che ti avvia SSH e dopo tot tempo te lo disattiva nuovamente).

Potendo inserire codice javascript arbitrario in un post, hai inserito una vulnerabilità che si chiama Cross-Site Scripting (XSS). Se dovessi fare io un exploit, sarei partito dal provare a catturare il tuo cookie di sessione, iniettando un codice JS che legge il cookie locale e in qualche modo me lo trasmette ad esempio facendo una chiamata a un qualche endpoint HTTP su un server di mio possesso. In questo modo, quando tu (amministratore) visiti la pagina con il codice iniettato, il tuo cookie di sessione viene inviato a me e lo posso usare per "loggarmi" con il tuo utente (in realtà non passi per il codice di login perchè phpBB riceve già il cookie valido e ti lascia passare). A questo punto sono dentro come amministratore (di phpBB) e provo a vedere se c'è qualcosa che posso usare per rompere ulteriormente, o sfruttare una vulnerabilità di qualche funzione di amministrazione per inviare comandi alla shell di Linux.

Se non riesco a prenderti il cookie (perchè magari è impostato Http Only), posso sempre farti eseguire codice mio però nel tuo contesto, quindi posso eseguire qualsiasi call GET/POST in un contesto da amministratore; l'unica scomodità è che devo pensare alla sequenza di azioni in anticipo per codificarle tutte nel codice che vado ad iniettare, ma posso sempre usare questa tecnica per crearmi un mio utente amministratore che poi posso usare come descritto sopra.

Questa tecnica è circa un Cross-Site Request Forgery, con la differenza che grazie al XSS posso fare le chiamate direttamente dal tuo sito, bypassando limitazioni date dalla same-origin policy (tutte tecniche che comunque credo phpBB non abbia).

Some remark of vulnerabilities (what I have learned)

So, the db is gone damaged with no chance to be repaired, and I haven't yet understood what caused the corruption; a friend has recently pointed out some links to articles that tell about insecurities: good lectures that I want to share to those want to open a forum!!!

• PHP is a bad design
• MySQL is not a good RDBMS*
• PHP+MySQL is hard to be hardened
• Python(web.py) + PostgreSQL is better
• PHP+MySQL atlerantives: { nodeBB, FlaskBB, Misago }
• Javascript open vulnerabilities if your website allows HTML code injection (1)
• Cross-Site { Scripting (XSS), Request Forgery } may open the door to disaster

(1) Wonderland was written in PHP+MYSQL, and "HTML code injection" was implemented and Javascript allowed: a triplet of bad ideas that I wouldn't suggest you to repeat.

googling around, a lot of forums have the following

• BB code is On
• Smilies are On
• [ IMG ] code is On
• [ VIDEO ] code is On
• HTML code is Off <----- here we are :D

The civil way to discuss things in Nekochan

• "you smell of excrement [..] no one even thought you were clever and your projects were rubbish [..] You were/are a laughing stock [..] you waste of fucking matter! You are a complete fuckwit!" (by UUNIX, in public)
• "You fucking moron!" (by UUNIX, in public)
• "Yeah I'll send you some chips ... after I shit them out and mail them inside a pack full of horse turds. Stupid sod" (by someone in public, on my forum)
• "sajonara, dipshit" (by CommodoreJohn, in public)
• "he has become a political liability" (by Dexter1, in public)
• "He's a mook" (by RaionFox, in public)
• "really mentally ill and probably needs a lobotomy to return to normal" (by RaionFox, in public)
• "motherfucker" (by RaionFox, in public)
• "He has officially however lost any respect I did ..".. some time later .. "so he placed a request for software. I told him I just sold one, and he rudely responded 'I won't buy from you'. continuing to be a douche acting like the assclown" (by RaionFox, in public)
• "his sentences are on a retarded 13 year old level" (by RaionFox, in public)
• "I hope he gets that job in Norway guarding polar bears. He shares more in common with a polar bear than an actual human being." (by RaionFox, in public)
• " ... blablabla ... embarrassment for the retard" (by GRudolf94, in public)
• " ... blablabla Must be tough for him to write in English properly. Can't see the keyboard with his head that far up his ass." (by GRudolf94, in public)
• "you possess a lower IQ than my roommate's retarded pitbull" (by RaionFox in Public)
• " ... Portuguese man we have here who is apparently both dense motherfucker and unable to speak ..." (RaionFox, to a Portuguese dude ... in public, just to show how he hates foreigners)
• etc etc ... in public. Plus more insults in private

After the above, the only post from the mod is

• "Hi Everyone, It's one thing to document specific trolling behaviors, but it's another thing to get into name-calling and ad hominem attacks. Please avoid the latter, or this thread will be locked. Thanks, -jh" (josehill)

Very competent (sarc)!

The Psychology of Insults

The desire to put others down may be as old as...chickens. Posted Nov 21, 2016, by Nigel Barber Ph.D. Nigel Barber Ph.D.

Motivated by Anger?

Chickens are famous for having a pecking order, in which the bottom chicken in the hierarchy is pecked by everyone else and the top chicken is not picked on by anyone. The chicken hierarchy is settled by physical aggression.

In a verbal society, such as the human one, physical aggression is less often used to settle issues of status: These are mostly deferred to verbal interactions. An insult can thus be interpreted as an attempt to reduce the social status of the recipient and raise the relative status of the insulter.

If that logic is correct, we can assume that insults are often motivated by anger surrounding issues of status insecurity. Many insults are reactive: They are responses to real or imagined slights from others, such as a person accidentally cutting in front of someone else in a line.

We live in a period of extreme concern about how we are perceived by others; social psychologists are charting a steady increase in narcissism among college students.1 There is little consensus about why this is happening, but some scholars believe that the more children are measured on evaluative scales—aptitude tests, IQ scores, and GPA—the more sensitive they are to threats to their social rank.

Of course, this narcissism trend is only accentuated by social media, where participants are subject to unrelenting evaluation by other network members who encourage participants to inflate their egos, often at the expense of others.1 Concern with how one is perceived creates social insecurity that may be relieved by lashing out at other chickens (or people) in the area. Social networks are replete with individuals who deliver stinging rebukes because they enjoy doing so, and because they are mostly exempt from the reprisals that one might expect for real-world put-downs.

Content: Status, Competence, Sex, and Hygiene

The purpose of a put down is to reduce someone else in the imaginary status hierarchy. So it is hardly surprising that insults will often refer to a person's social status in terms of ancestry, lack of prestige, or membership in a despised out group; for example, Nazis or vagrants. Otherwise, the content of insults across the ages is monotonously predictable: Many insults feature a sexual component, refer to sexual organs, or bring up shameful or ineffectual sexual behavior. In addition to status and sexuality, insults inflict shame by mentioning unappealing traits—fatness, shortness, baldness, spottiness, and contagious diseases.

Another way of taking a person down is by questioning their intelligence or general mental competence; for insult purposes, recipients are invariably "stupid" or "crazy."

The pecking-order logic of insults means that if the recipient is shamed, then the insulter rises in status relative to the victim: The insulter is the one doing the pecking rather than getting pecked. Not all insults are equal, of course: Some pecks miss their mark and have no impact upon relative status.

Aim: An Arrow Shot Over the House That Hits No One

We live at a time when insults are dispensed so freely that they threaten the financial viability of social media platforms like Twitter. Indeed, Twitter recently issued a code of conduct for users designed to exclude the worst offenders; other sites like Facebook have quickly followed suit.

For those who enjoy distributing insults, the internet is a perfect environment, one that can offer a shield of anonymity and an absence of consequences. The larger question is whether the frequency of ill-motivated personal attacks will ride the wave of increasing narcissism or succumb to social controls?

Is There a Future in Insults?

Effective communities maintain solidarity by keeping direct insults to a minimum. Hence the elaborate traditions of politeness and respect found in real-world communities of the past; people behaved that way to avoid unnecessary anger, disputes, and violence.

Online communities are becoming more concerned about the destructive consequences of tolerating the flamers, trolls, and vandals in their midst and are instituting mechanisms for group punishment in which those who violate codes of decency are identified and excluded.

Such mechanisms are already ingrained in applications such as Uber and Airbnb. Soon social media will also be regulated—and it's about time. The only problem is that users may ultimately receive an online civility score that will boost collective narcissism—and make us want to peck our neighbors even more.

The chickens are restless!