You'll like this...

[Commando]

This story only you guys will get.

So my govt laptop goes missing. Kinda big deal. My dumb@## left my govt ID in it(happens every so often). Our comps, you have to insert your ID to log on.

NMCI confiscated my computer. NMCI(Navy Marine Corps Internet) (big brother that everyone hates, civilian contractors). They came in and ganked my laptop without letting anyone know.

I kinda suspected that's what happend. You can imagine how quickly our computers get absolutley slammed by too many user accounts and an unclean registry. Well of course I go in to clean it out. It doesn't work. Dell laptops have their bios locked. I figure this out and search how to bypass it(bad idea on a govt connnection). I find a key but when I download it via a proxy it gets blocked. Oh well, I wait till tommorow. I f%Ckin forgot the boot disk I was going to use and left it in the drive. That's why my computer got confiscated.

Here's the kicker:

Dude, computer dorks that work for the govt are total boobs. I get to play dumb and watch NMCI get in trouble, because they took my laptop without telling anyone.

You poor guys can't blend in because you work in computers. No one has any idea where I work. I love it, and my govt laptop rocks performance wise because of it.

I just thought ya'll would appreciate this.

[lukeisthecoolest]

ahhhhhhhhh wat :?

the gov stole ur gov lappy?

gov philosophy: "the people shouldn't be afraid of their government, the government should be afraid of their people"

does anyone know where this is from ;)

[Crazy Buddhist]

That is so typical. Here's a similar exprience I had in a commercial environment:

1994 I was working for one of the biggest media organisations in the UK. The subdivision I worked for decided to install a company wide sales management software.

As I had tested and used the software for a year the decision was based on my experience and report on the software. It was ordered, installed and launched.

Someone came round to my office and asked me to sign a piece of paper for them toscan into the system so I could send signed faxes right from my computer. I refused to sign it. Asked why I told them "you haven't implemented the system securely - if I sign that anyone in this company can send a fax to my bank, signed apparantly by me, asking them to transfer my money somewhere else - you have got to be kidding if you think I am signing".

"Our system is secure", I was told by the MD of the company who installed it, "and you have to sign this paper".

"F*ck off out of my office", I told him, "walk upstairs and go and see Richard E. (our CEO). by the time you get there I will prove to you this system is so badly implemented you will have to change the whole thing".

He stormed out and headed upstairs. I sent the CEO a petition by fax, signed by about 140 of the sales staff who's names had been scanned, asking him to look into the security issues I was raising. It took me less than a minute to get to pushing the send fax button.

I strolled upstairs grabbing a coffee on the way to find the MD of the computer company trying to tell our CEO I'd hacked the system. There was an investigation. I told the CEO exactly what had gone on and why the file structures they had used couldn't be secure.

Two weeks later it was officially reported in a company wide memo that a major security hole had been breached and that it had been discovered because of the "innappropriate activities of one employee" but that the "threat had been contained and appropriate action taken".

That appropriate action: The CEO bought me lunch hehe ... but they weren't going to admit publicly what had really happened.

CrazyB

[Omega]

ahahaha, that's awesome CB.

I like proving when things aren't secure too, or proving that people aren't anonymous on the internet

I got somebody's name, they were acting all high and mighty saying I would never find them and about 30 minutes later I was talking on the phone with them, a person I had never met or talked to in my life before ;)

Computer and internet security can be really really fun things to mess around with, so long as you don't do anything illegal =/

[Wasabisam]

gov philosophy: "the people shouldn't be afraid of their government, the government should be afraid of their people"

does anyone know where this is from ;)

V For Vendetta Great movie ( sorry for off topic lol )

Sam

[calumc]

great stories!! +rep to both of you!

[Luke122]

I got somebody's name, they were acting all high and mighty saying I would never find them and about 30 minutes later I was talking on the phone with them, a person I had never met or talked to in my life before ;)


I've done that too..

Someone msn'd me, no idea who they were and just making threats and insults, etc.

10 mins later, I phoned him up and told him his street address. Turns out he was a 13 yr old kid. He was terrified.

I said, "Next time you think about doing something like that, remember how fast I found out where you live. The next person might just ring your doorbell and kick your ass instead of phoning you and warning you."

[XcOM]

I've doen that before, someone MSN'ed me, and started making threats, within about 20 min, i sent him an e-mail with:
He full name, Address, Phone number, Mobile number, where he banked, all his other e-maill address, Where he worked, He mum & dads name, and to top it off, the name of his dog.

It ended with next time, think before you act, maybe the next person won't be as lazy as me. I jut sent an e-mail, who knows what someone could do if they had the engery and could be bothered.

XcOM

[Quakken]

Some kid was insulting me online, i got his name and called him up


Wow, how did you do that?
google search? some other thing?

whatever it is, It would be hilarious to do that to somebody, only walk up to their house and crack them upside the head with a baseball bat.

[xRyokenx]

Heh... I'm curious how that works too...

But yeah, good stories, lol. Many kudos to you CB for that excellent "comeback."

[XcOM]

it normally starts with an e-mail address, the trace them via that and the connection thay have made with you,

I don't go into detail here as it can be considered a breach of persional privacy, thus deaming it illegal.

[Luke122]

Good call Xcom.. I was going to explain my process too, but you are right.. could be considered illegal. Let's just say google, phonesearch, and mapquest.

[D1337]

I call bs. Sure, it might be possible to get SOME information if the person is extremely stupid.
Otherwise i doubt you can get all that info without having access to some gov database (irs,dmv, fbi etc.)

Prove it. If you accept it ill pm you my msn email, then ill send you a few im's and we'll see how far you get.

[Omega]

It depends on the person, too. The kind of information they have out on the internet, if you have their name, etc.

I was on IRC.

I got the person's name. Googled it. Got a site where they said the school they went to. Confirmed it with the person (Remember, they knew I was doing this and such). I checked their hostmask and got their general area. Typed in the name of the school and general area, found out what town. Since I had the town and name, I 411'd their house.

Also, you don't need government access to get it. Just a little work and knowledge. you could traceroute, reverse lookup, etc.

D1337, PM me your name and age. I'll see how far I can get.

[Crazy Buddhist]

From this post anyone with a very minimal amount of knowledge could find my home address in about ten minutes.

They still wouldn't know what is waiting for them behind the door. :)

CrazyB

EDIT: It won't be totally straightforward. if you want to prove your skills PM me the answer, not in the forums please and I'll +rep you for the hell of it.

[Omega]

Damnit, CrazyB, Now you're making me flex my google-fu trying to figure out how you think this would be easy

I've been going at it for a good 10 minutes at least and All I've found has been your website, some irrelevent crap, and something about blogger meetups...

[Crazy Buddhist]

Said it won't be easy. Let me help: you did take a step forward. Then the backward ones negated it :)

[D1337]

It depends on the person, too. The kind of information they have out on the internet, if you have their name, etc.

I was on IRC.

I got the person's name. Googled it. Got a site where they said the school they went to. Confirmed it with the person (Remember, they knew I was doing this and such). I checked their hostmask and got their general area. Typed in the name of the school and general area, found out what town. Since I had the town and name, I 411'd their house.

Also, you don't need government access to get it. Just a little work and knowledge. you could traceroute, reverse lookup, etc.

D1337, PM me your name and age. I'll see how far I can get.

thats cheating, he claimed to have done it solely by an msn account. Which wont get you that far. I know how it's done..

[Omega]

Hmm, well

I am going to go take a shower to mull this over in my head a bit (and the fact that I need a shower anyways)

[Crazy Buddhist]

Hmm, well

I am going to go take a shower to mull this over in my head a bit (and the fact that I need a shower anyways)

While you are in the shower I have composed a Haiku for you.

carefully step back
take just one more little step
and then know whois

You may note I have used the traditional 5-7-5 syllable pattern of the Japanese form. Although I practice the more fluid form of English language Haiku which allows greater flexibility, I find the strictures of the Japanese form sometimes to be quite endearing.

Here's another poem I wrote when our dearly beloved Mr Osborne tried to kill himself on a quad bike. This is here just to amuse you, which it may or may not do.

Ozzy on a quad bike
Like a Bat Out of Hell
Crash
Oh no - that was Meatloaf

;)

CrazyB

[.Maleficus.]

Damnit, CrazyB, Now you're making me flex my google-fu trying to figure out how you think this would be easy

I've been going at it for a good 10 minutes at least and All I've found has been your website, some irrelevent crap, and something about blogger meetups...
Same here.

You're using a proxy? Because your IP was of no help at all. I think I have your full name though, and almost your address. Almost.

[Crazy Buddhist]

Same here.

You're using a proxy? Because your IP was of no help at all. I think I have your full name though, and almost your address. Almost.

No proxy. And no more clues.

There is no safety in privacy. And privacy is an outright lie in any case. Safety only comes through being awake to truth.

CrazyB

ps. My one month anniversary of joining this forum today :)

[Omega]

hmm

Well, I DID find out that your webserver is in Panama. And I have the phone number for it's data center.

hmm

[Crazy Buddhist]

Omega read the Haiku above.

;)

[Omega]

I read the whois one. I'm still a little confused (and have no freakin' idea how Mal got your IP addy, which I would imagine to be quite useful)

[Crazy Buddhist]

I DID find out that your webserver is in Panama.

That is a widely publicised fact even in this forums (http://www.thebestcasescenario.com/forum/showpost.php?p=123161&postcount=42)

It's for political freedom.

:)

CrazyB

[Omega]

That is a widely publicised fact even in this forums (http://www.thebestcasescenario.com/forum/showpost.php?p=123161&postcount=42)

It's for political freedom.

:)

CrazyB

That was easy, though. I pinged it, got the IP address, then ran a IP whois and got that datacenter.

I'm still trying to figure out how Mal got your IP addy.

[D1337]

sent him a pm containing some stuff, i never pmed him in the first place so i didnt know what info he was giving out or what he wanted us to find =/

he seems to be kinda popular in the Buddhist blog community.

[Crazy Buddhist]

D

Is winning so far and has my name and mobile telephone number right :)

Wrong address though :(


;)

CrazyB

[Omega]

Call him, ask for address

I love social engineering. Why hack the computer for the password when you can ask the user for it? =D

[.Maleficus.]

...Duh.....

I forgot the server he ran wasn't at his home... IP was for the webserver...

Damn. Back at square one. Still think I have your name though.

[D1337]

I dont like haiku's nor any poem.
Im still confused about the "care of" oh well.

and to be honest after i whois'd your website, i didnt go back. but now checking it, it gives away alot of stuff.

btw you should update WP 2.0.5 can be exploited and it doesnt require more then 10 mins of work. 2.2.2 is the latest version.

btw2- east coast to london is most likely considered long distance -.- plus he would have my phone # and that would make it slightly easier to find out my info =o

[Crazy Buddhist]

I dont like haiku's nor any poem.
Im still confused about the "care of" oh well.

and to be honest after i whois'd your website, i didnt go back. but now checking it, it gives away alot of stuff.

btw you should update WP 2.0.5 can be exploited and it doesnt require more then 10 mins of work. 2.2.2 is the latest version.

btw2- east coast to london is most likely considered long distance -.- plus he would have my phone # and that would make it slightly easier to find out my info =o


I'll give you server rights and a Gig of free space if you wanna do the admin. I cant be arsed.

CrazyB

[Crazy Buddhist]

I dont like haiku's nor any poem.
Im still confused about the "care of" oh well.

"Care of" means at someone elses address.


and to be honest after i whois'd your website, i didnt go back. but now checking it, it gives away alot of stuff.

It's meant to. As I said there is no security in privacy. There is only security in being open to the truth.


btw you should update WP 2.0.5 can be exploited and it doesnt require more then 10 mins of work. 2.2.2 is the latest version.

See post above


btw2- east coast to london is most likely considered long distance -.- plus he would have my phone # and that would make it slightly easier to find out my info =o

Use skype? And I wouldn't have your number - caller ID does not work internationally.

CrazyB

[.Maleficus.]

....

Jesus, I'm scared for my life now. I hate all these damn exploits and ****. I mean, it's fun to see what you can do without really having any knowledge at all, but then, when you think about what a n00b like myself can accomplish (having no knowledge at all really) and then what someone who is good at it, it's damn creepy.

[Crazy Buddhist]

....

Jesus, I'm scared for my life now. I hate all these damn exploits and ****. I mean, it's fun to see what you can do without really having any knowledge at all, but then, when you think about what a n00b like myself can accomplish (having no knowledge at all really) and then what someone who is good at it, it's damn creepy.


If the CIA want to see whats on your HDD they don't need to enter your appartment.

EDIT: and they are not the most expert people at this.

[Airbozo]

If the CIA want to see whats on your HDD they don't need to enter your appartment.

EDIT: and they are not the most expert people at this.

Both of these are the correct motorcycle....

...and they do NOT need any paperwork...

BTW: I am the easiest to find...

[Crazy Buddhist]

Both of these are the correct motorcycle....

...and they do NOT need any paperwork...


Indeed and since the last week or so, as I understand it, in the US they do not even need to ask a judge for a warrant or explain themselves to anyone.

[Crazy Buddhist]

Ok you guys are soooooooooooooo slow at this. Here is another clue:

I don't only own one domain name and you can find out the others quite close to home

[D1337]

how are phone numbers in the uk split up?
like in the us its ###-###-####
first three is the area code..

once i figure out how it is in the uk i should be able to get more stuff

PSS i saw the hamburger one but i didnt investigate it because the page came up blank so i assume it went back to the company but ill check the whois now.

[Crazy Buddhist]

D

Is winning so far and has my name and mobile telephone number right :)



mobile .. area code ... mobile ... area code .... ummm .. dunno bout the US but all you'll get from those three digits in the UK is my service provider.

[Omega]

you also have to keep in mind that I'm not bothering anymore. I know I won't get it any time soon and there's little reward for doing so.

[D1337]

but i could skype your service provider.
"hello my name is and im using ### as my phone number. i didnt get my phone bill in the mail this month, could you please tell me what address its being sent to?"

lol but im not gonna call them. to much of a hassle for a fun game


contactprivacy.com, enjoyyourburger.com@contactprivacy.com
96 Mowat Ave
Toronto, ON M6K 3M1
CA
+1.4165385457

not yours anymore. dammit time to check the other one.

[Omega]

D, that's why I love social engineering. You can call schools, ISP's, and such, etc.

=D

[D1337]

got his address
my first time was close, i blame who ever did the whois for freedomforall.

[Crazy Buddhist]

but i could skype your service provider.
"hello my name is and im using ### as my phone number. i didnt get my phone bill in the mail this month, could you please tell me what address its being sent to?"

lol but im not gonna call them. to much of a hassle for a fun game

wouldn't get you far .. passwords and all ... and .. I don't get a bill so they would know you weren't me for asking that question lol


contactprivacy.com, enjoyyourburger.com@contactprivacy.com
96 Mowat Ave
Toronto, ON M6K 3M1
CA
+1.4165385457

not yours anymore. dammit time to check the other one.


EDIT: removed the easy bit as D got there and the game is over.

[Crazy Buddhist]

got his address


You're welcome to pop round for tea or a beer when you are in town :)

[D1337]

cheers lol. still didnt get much out of those haiku's.
you gonna leave the ****um8 with just that picture or are you gonna do something with it later on?

[Crazy Buddhist]

havent really decided yet have two plans, one for fun the other for money:

fun: develop an open contribution satire site

money: develop a picture ranking service linked into all the social networking sites, users email their friends a link or go public and get rated "would I ****um8?" ... there's so many voyeurs and so many posers out there waiting to be preyed upon for their eye-time ad$$$ ... Then sell it.

Haiku:

carefully step back
take just one more little step
and then know whois

we're on the web .. every click is a step .. he went to my site then looked elsewhere. if he had stepped back to my site and taken one particular step from there he would have arrived at the correct station. You know the rest.

[Omega]

I can't be arsed. Right now.

I might try again later.

[intergalacticman]

haha victory, i found it!!!!!

[Crazy Buddhist]

Man you edited that while I was reading yr 1st post. I went to reply and that came up ^^^^^ hahahahahahhahahahaha

[intergalacticman]

yeah was about to give up, then i saw omegas post about ****um8 and i was like , its worth a shot.

[D1337]

its pretty easy to figure it out now, especially since i posted a question about ****um8 and its pretty obvious after i did that, that cb owned it.

[Scotty]

Anyone who can tell me the street i live in and my full name will get some rep. Bet its soo easy.

But i'm not telling you anything in this post.

PM the answer.

[intergalacticman]

wow not england again!!

[.Maleficus.]

Anyone who can tell me the street i live in and my full name will get some rep. Bet its soo easy.

But i'm not telling you anything in this post.

PM the answer.
Do you want your middle name too, or just first and last? 'Cause it took like 3 seconds for first and last (if you know where to look ;))

[Scotty]

i knew that would be easy lol you could try for my middle name i think it could be on the web. Think finding my school is pretty easy too.

[Commando]

Wow, I inadvertantly started a crazy googlethon security thread. Cool.

By the way, I never got in trouble, but I think getting a job with NMCI when I retire is kinda out of the question.

Take it easy.

T

[Crazy Buddhist]

Yeah it's definitely game over. D1337 Won. I didn't say there was a prize but D if you need $50 towards a modding project or piece of equipment let me know. You earned it :)

Luke122 is the coolest of the lot of you though ... because he picked up the phone and we said hello :) it's always good putting voices to online persona's so big :up: luke.

CrazyB

[intergalacticman]

haha nice

[D1337]

omg, really? Im probably gonna take you up on the offer, but if you change your mind ill be fine. (guessing paypal?)

Btw sorry about your medical history, it's sad that it happened to you, but atleast you brought it to the attention of alot of bloggers and other people.

[Crazy Buddhist]

omg, really? Im probably gonna take you up on the offer, but if you change your mind ill be fine. (guessing paypal?)

Btw sorry about your medical history, it's sad that it happened to you, but atleast you brought it to the attention of alot of bloggers and other people.

The offer stands man ... you played the game and won .. part of the game was me knwoing there was a prize and you not lol.

Re the med history: thanks. we're getting there but my MP is still being stonewalled in her investigations and I am being lead on a merry dance to ill health. If I can find a way to get the care I need outside of this country thats what I will do.

Needs must and all that :)

CrazyB

[intergalacticman]

eh, whatever, ill just surrender my personal security to complete strangers. try and find my first and last name, address (including street, city, zipcode, and state) and home phone #.
for bonus points find both of my home phones #'s and my cell phone #.

[intergalacticman]

crap, for some reason, 192.com and infobel.com are down. noooooo

BTW, i think it is so crazy how scotty uses "mates" instead of "friends"
classic british right there, eh.

[Crazy Buddhist]

BTW, i think it is so crazy how scotty uses "mates" instead of "friends"
classic british right there, eh.

chap, old fella, mate, buddy, bro, bredren .. we have more words for friends in British English than most people have ... friends

... but I rose to Scott's challenge ... sent him full name .. school (bit lucky) sisters name and achievements (also bit lucky) the name of the business his dad owns ... could have got his phone number easily there with a blag despite being ex directory. I think I may have scared him off and we're not mates now :(

kidding hehe

ask and ye shall get: intergalactic I'm on to you :D

CrazyB

[Scotty]

And he got it all right too.

I knew that finding my number would be the hardest part. I knew it was ex directory. I wasn't sure if it was on the web though.

[Crazy Buddhist]

intergalacticman you are not easily traceable by legal means. That may have something to do with you being a minor.

[D1337]

As far as im concerned, even with my full name (including middle) you wont get jack off google. You wont even find a website that show my full name publicly.

Typing in my address wont give you anything either.

With "my" land line phone number you'll get my address,and parents names but not vice versa. Thats because my dad has is own business and uses our home as his office =.=

Theres one site that has my brothers name but it only states his name, with further searching youll find out his old school's name.


Email addresses wont even display page results

Im non existent to the public eye on the Internet, which it will remain.

:)

[Omega]

If you type in my name, it's so horribly generic that you won't get anything for a loooooooooooooong, long time. And I like that.

[Scotty]

If you type my name you'll know something about me in seconds.

[Crazy Buddhist]

If you type my name 7 of the first ten google results are me. 11 of the first 20.

One of my email addresses gets 9 hits all me :(

My main email draws a blank as do my phone numbers and address. And now anyone who tries to find me using above means won't find me. After playing that game Things needed rearranging.

CB

[.Maleficus.]

If you type my name into Google, I doubt you'll find _me_ in the first 20 pages. It just so happens I share a name with a guitarist :up:

[crenn]

Within the first 3 pages of google, when searching my username. All you'll find is post on TBCS and one of the weird sites I go to.

Feel free to find me and PM me my details, I will say this. Don't phone me please (either my home or mobile). However if you want a chat, just give me a number to call! Or skype. All you have is my username, and with that you can find a lot of information.

EDIT: Also finding what uni I go to and what course I do, won't get you bonus points :P

[Redundant]

If you type my name into Google, I doubt you'll find _me_ in the first 20 pages. It just so happens I share a name with a guitarist :up:
I share a name with a hockey player who got in trouble for using dope. :dead: (different middle name though)

Although, I was named after Sean Connery so that's nice. :) (same first name)

[Omega]

There are TONS of companies and such that have the same name as me. Plus, on the internet, there is maybe one or two places where I actually put my last name. Not that it matters, again, because it's generic.

[Crazy Buddhist]

There are TONS of companies and such that have the same name as me. Plus, on the internet, there is maybe one or two places where I actually put my last name. Not that it matters, again, because it's generic.

Still does not neccessarily make you hard to track. ;)

CrazyB

[Omega]

Yeah, but as I said in my response PM, that is my LAST cell number, and as I forgot to say, the city and zip you said are wrong (but only by about 10mi)

Also, damn you're fast.

[crenn]

So far CB is the closest to finding me!

EDIT: I should mention he's found:

-The lan party I go to
-My secondary email address

[Crazy Buddhist]

Yeah, but as I said in my response PM, that is my LAST cell number, and as I forgot to say, the city and zip you said are wrong (but only by about 10mi)

Yeah but in my last PM im not 10 miles away anymore ;) and I'm not trying to get closer. I think I have yr date of birth somewhere but anyway I have an idea so I could start looking at birth records, then get your parents names .. then I'd have your street address and phone number for sure. Otherwise I already have a list of 33 numbers and addresses I am sure it is one of lol.

... but thats enough of playing Sherlock Holmes for now and I don't want to annoy 32 Americans to whom I am a total stranger for the sake of a game.

I don't use anything but public source, by the way. Mainly google :)

Also, damn you're fast.

Thank you. Were you a lady in diferent circumstances I would reply quoting Chandler Bing from Friends "It bodes well for me that speed impresses you".

CrazyB

[Crazy Buddhist]

Yeah, but as I said in my response PM, that is my LAST cell number, and as I forgot to say, the city and zip you said are wrong (but only by about 10mi)

Also, damn you're fast.

Yeah but in my last PM im not 10 miles away anymore ;) and I'm not trying to get closer. I think I have yr date of birth somewhere but anyway I have an idea so I could start looking at birth records, then get your parents names .. then I'd have your street address and phone number for sure. Otherwise I already have a list of 33 numbers and addresses I am sure it is one of lol.

... but thats enough of playing Sherlock Holmes for now and I don't want to annoy 32 Americans to whom I am a total stranger for the sake of a game.

I don't use anything but public source, by the way. Mainly google :)

Thank you. Were you a lady in diferent circumstances I would reply quoting Chandler Bing from Friends "It bodes well for me that speed impresses you".

CrazyB

[jdbnsn]

Listen up, this is serious. We've gotten reports of this "social engineering" crap on our server. WHOIS has been pinging it lately and we are able to find out who it is. I'm going to say this once, ANYONE who tries to track down our member's personal information no matter how benign will be banned permanantly! No hesitations, no second chance. Clear?

[Crimson Sky]

Wow, how did you do that?
google search? some other thing?

whatever it is, It would be hilarious to do that to somebody, only walk up to their house and crack them upside the head with a baseball bat.


You're on thin ice. Should ban you just for that comment. Yeah massive head trauma from assault is hilarious.