what happen to the tb2000 its not there tonight looks like its hacked gone

greenspun.com : LUSENET : HumptyDumptyY2K : One Thread

tb2000 is missing where did it go. looks like a hack job.

-- y2k aware mike (y2k aware mike @ conservation . com), December 29, 1999

Answers

Hi, Mike!

Say, I'm glad you're here. I have been waiting for someone from the tb2000 group to show up here. What the hell happened over there? I'm gone for a couple of hours and look what happened...:-) I guess the place was overrun by trolls and hackers. Sheesh! Now what?

-- Sharon (Sking@drought-ridden.com), December 29, 1999.


Oh there is no place like home!! But this place will do for now!!

-- (SgtHansSchultz@stalag13.com), December 29, 1999.

Hi sharon,I was afraid as we get closer to events unfolding the spooks would try to shut down the server. We need to post updates to keep others informed of the sit rep in our areas to help others make an informed accessment of the y2k sitution. So far things are quiet no noticable deployments. If they are deploying extra personenl or equipment it is being done low key, Nothing noticeable yet.

-- y2k aware mike (y2k aware mike @ conservation . com), December 29, 1999.

Yep... the usual suspect showed up and was posting non-stop. I usually just lurk but was so glad to find others here that I'm moved to post!

-- themom (themom@canoemail.com), December 29, 1999.

Bok's chatline is a madhouse. Jillions of conversation threads are going at once. They just gave out Humpty Dumpty access, so the crowd will be coming over for drinks.

Must have been a crazy night I missed. I logged on and got Phil's message.

did C4I post as he said he would? What did he have to say?

-- Nancy (wellsnl@hotmail.com), December 29, 1999.



I was scanning threads around 11:00 EST. Refreshed the New Answers page, but couldn't open any threads. I came back around 11:45, then got Phil's message for practically everything. Checked the prep forum, same thing :-(

-- Tim (pixmo@pixelquest.com), December 29, 1999.

hmmm...

Well it looks like it's up to all the King's Persons to put the forum back up again.

Maybe Koskinem can help...

-- Nailbender (not@midnight.net), December 29, 1999.


December 28. How ironic.

-- Tim (pixmo@pixelquest.com), December 29, 1999.

Hopefully the site will be reinstated prior to the end of the year. Informed people need a place to communicate information at this crucial point in time.

-- BAnders (BMAONE23@aol.com), December 29, 1999.

Hi, again!

Yes, it is ironic that this occurred tonight. There has been some speculation that the prez was supposed to make some kind of announcement. I don't know if it is connected or not. It may just be the usual ding-a-lings throwing a wrench in the works. However, it does effectively keep us from being able to keep each other informed of the regional situations. Very disappointing. But hey, here we are together again! Keep on typing!

-- Sharon (Sking@drought-ridden.com), December 29, 1999.



Whew! Good to find some of you. What a mess! I'm able to post new threads to TB2000. Should I post an alert directing people to this site? I'm a little worried about doing that since the hacker(s) haven't found their way here yet.

-- (RUOK@yesiam.com), December 29, 1999.

I'm here, will send people from Bok's over this way.....

-- bardou (bardou@baloney.com), December 29, 1999.

I am glad folks are finding their way over here. I don't know if it should be posted over there or not...I can't even get in over there now. I sure hope that it will be back up tomorrow. If not, I guess I will meet you guys here again tomorrow! Stay in touch everyone. Those goons would like nothing better than to scatter us. Good night!

-- Sharon (Sking@drought-ridden.com), December 29, 1999.

Bardou! Good to see you. I haven't been able to get into Bok's chat room for ages...java script error. Gawd, I hope this gets straightened out soon!

-- (RUOK@yesiam.com), December 29, 1999.

Folks, do you want to know what happen, or do you want to talk about a needless items????

The board has been hit...

-- Primus the Last (I_have_had_it@sick.com), December 29, 1999.



Whew! heya! Hope they can revive the old posts.

-- Hokie (nn@va.com), December 29, 1999.

Primus, I don't know anything about security. Is the "robot" Phillip described readily available knowledge, or can we narrow down leads?

-- Hokie (nn@va.com), December 29, 1999.

Leads?

The first leads *I'd* consider are the vandals who've been attacking the site non-stop for the past week or two -- the ones who delivered up a series of ultimatums essentially threatening to destroy the site.

Looks like they pulled it off. In which case, I'd hope they find their asses in jail before the night is over.

-- Ron Schwarz (rs@clubvb.com.delete.this), December 29, 1999.


Hokie:

I am not totally sure just what happen. I do know this. LL(the bitch) and friends visited the site and from there it wall all down hill. I did e-mail myself the list of msg before it all went to Hell. I have been watching this board for over 4 hours and I am sick of the way things have turned our. I MEAN I AM REALLY MAD!!!

Not that it will do any good. Some people, I mean some people...

-- Primus the Last (primus@mountain.hom), December 29, 1999.


Picked this up off the Debunkers board. Cherri seemed to think Lisa had accidentally crashed the board. First message is hers. Wolverine disagrees, and explains the technicalities. I think it looks like we got hacked.

Cherri's message: Posted by (209.244.110.69) Cherri on December 28, 1999 at 21:39:02:

The other night when someone posted the information to the TB2K chatroom I went and read for a while. I cut and pasted this little bit of info that was posted, now I am glad I did so we would not be blamed for what has happened to TB2000 tonight.

(lisa@casa) for you folks that have CDROMS, i'm trying to download TB and can burn it onto CDs and mail it to interested parties........ (resolved) No kidding, Lisa? Gosh, how did you do that? ------------------------------------------------------------------------------

Wolverines message

Posted by (212.7.45.161) W0lv3r1n3 on December 28, 1999 at 21:46:45:

In Reply to: Is Lisa crashing TB2000? posted by Cherri on December 28, 1999 at 21:39:02:

From what she said, she was planning to use a diallup, and even with a webstripper, I think a Solaris box can withstand a multiple page grab. This smacks more of a robot DOS attack. Big bandwidth. The MIT servers arent THAT fragile surely.

-- (TrollPatrol@sheesh.now), December 29, 1999.


Hi guys!!! I checked here about 45 mins ago and not a soul, so glad I checked back...

Phil's note says: multiple simultaneous robots hitting the site WOW

I also checked over at yahoo chat (it was suggested by a thread a day or two ago), Sysman posted a very nice request to use their forum and then I read their response to the possibility of us going there and the answer is, they would not appreciate our reparte.

-- Sammie (sammiex0@hotmail.com), December 29, 1999.


Hey, I made it here. Didn't like the withdrawal pains...they were hurting.

-- Debi (LongTimeLurker@shy.com), December 29, 1999.

Yahoo wouldn't be a good choice. It is dominated by cpr and his lapdogs. I believe Ed is the only one with the delete key to this Humpty Dumpty forum. If we're all going to relocate here, I hope he's willing to let our regular sysops have delete keys, too.

-- (RUOK@yesiam.com), December 29, 1999.

If I recall, there was a thread asking how to download the database. There were so many threads popping up that I overlooked it...was focusing on stocks and oil.

Anyone recall what was in that thread? Was there anything in it to give anyone ideas?

This free-flow of info can be a double edged sword. Guess it depends on whose hands it falls into. Does make one stop and think...

-- Tim (pixmo@pixelquest.com), December 29, 1999.


It's fast and loose at Bok's chat room...now I can catch my breath.

-- TM (mercier7@pdnt.com), December 29, 1999.

Hmm...well, hope she enjoys her cd...

I concur with the LL terrorism on the board as well.

-- Hokie (nn@va.com), December 29, 1999.


Hi all, will check in here for forum regulars. Man I hope we have not lost all of the messages. I just KNEW I should have printed out more.

-- Dian (bdp@accessunited.com), December 29, 1999.

snowleopard6 reporting in. Probably our next fallback site should be Energyland, as was offered by Rick if we lose this one. Must of struck a nerve with someone, or Lady Logic was Hillary (not)! Regards!

-- (snowleopard6@webtv.net), December 29, 1999.

I don't think her CD endeavor is the problem. From the sound of her original post, she was going to have a program walk the links and download each page, once. In other words, it would behave as if it were one user. A very *active* user, but still, one user.

From the blurb P.G. posted, it sounds like a concerted attack -- multiple scripts hitting concurrently as fast as they can. That's not how one person downloads a bunch of links. That *is* how a pack of vandals bring a site to its knees.

Here's hoping for a *speedy* series of arrests.

-- Ron Schwarz (rs@clubvb.com.delete.this), December 29, 1999.


howdy y'all;

Glad to see there is still life out here ... :-)

-- hiding in plain (sight @edge of.nowhere), December 29, 1999.


We have a confession, heh:

http://18.24.3.72/bboard/q-and-a-fetch-msg.tcl?msg_id=0028Oc

Phil Shut Down TB2000 and Prep Forum Due to Excess Traffic -- People Archiving, like ME!

I'm horrified. Are there others or was just my friend on the Teleport Pro and a cable modem? On the one hand, we stopped. On the other it shows a major vulnerability. Can we get it back. I'll die to be responsible for this.

-- Dancr (addy.available@my.webpage), December 29, 1999

I believe Phillip posted his list of demands to restart that board...

-- Hokie (nn@va.com), December 29, 1999.

---------------------------------------------------------------------- ----------

how much is this computer he wants? I think he's not serious about that.

-- Dancr (addy.available@my.webpage), December 29, 1999.

-- Hokie (nn@va.com), December 29, 1999.


Folks the hour is near. The primary point NOW is to stay focused.

Time is running out. The one thing I would like to know, is how can we track down ladylogic? I would like to find out her e-mail address (real one), where she lives, anything. I will be on the phone tomorrow morning looking for her. I will not just standby and let one person bring down a whole board. She spammed the board in spades tonight and she was one of the last persons that posted before the crash.

I have only been on this site for a few weeks. But, in that time I have learned more, laughed harder then I can remember. If we can not hold it together now when all we are dealing with is a crazy on the net, what are we going to do, when things get really bad?

-- Primus the Last (primus@mountain.home), December 29, 1999.


Ron,

It sounds like Wolverine's explanation would agree with yours. If true, I hope there will be arrests, too! I don't get the impression, though, from Phil's message that he plans to pursue it. I would've liked to see his message say something like, "To the hacker crashing my server: I am on your heels, and you WILL be caught! Offenders will be prosecuted to the fullest extent of the law!" Instead, we get that message about buying him a new computer if we want the site back. I felt like I had been slapped twice. First hacked, then blackmailed.

-- (RUOK@yesiam.com), December 29, 1999.


From what you guys are saying, doesn't sound like dancr could have caused this; poor kid.

-- Hokie (nn@va.com), December 29, 1999.

Do you think that message is really from Phil? I figured it was part of the hacker mess...

-- Do you think? (doyouthink?@iwondertoo.com), December 29, 1999.

I think the Phil letter was legit; it came up in pieces well after the drama of the hack.

-- Hokie (nn@va.com), December 29, 1999.

Hacker would have at least gave us a xerox of his butt or something.

-- Hokie (nn@va.com), December 29, 1999.

Can someone tell me exactly what happened?

-- Hiding in Plain (Sight@edge of.nowhere), December 29, 1999.

Hiding, from my end, it seemed like our typical lag, just kept getting worse, and longer periods of "server busy" or downloading a blank page.

You saw Phillip's note, right? Or you wouldn't be here.

I don't know what else I could say.

-- Hokie (nn@va.com), December 29, 1999.


The deleted thread site is still active at "http:// 18.24.3.72/bboard/q-and-a.tcl?topic= TimeBomb%202000%20%28Y2000%29%20Deleted%20Thread". As a long time lurker (GI Docs husband) with some computer background I would agree that this is a hack job. This method could be done by anyone including trolls that are a sandwich shy of a picnic. Phill's message response may also prove to be an effective defense against this type of attack.

-- PA Engineer (PA Engineer@Longtimelurker.com), December 29, 1999.

The only person who can tell you *precisely* what happened is Phil Greenspun.

That said, here's what evidence the rest of us have available :

1. For the past week or two, there were an escalating series of threats against the system, including a few ultimatums from the abusers.

2. After a day or so of apparent "peace and quiet", there was a sudden flood of noise being posted by "ladylogic".

3. At the same time as the posting flood, an apparently coordinated series of attacks began, attempting to download the entire site multiple times.

4. *Also* coincident with the above two events, someone hacked into the system, and changed the root password.

This does NOT add up to the kind of thing you'd see if one person decided to archive the site for a CD by walking the links and saving the content. *That* would entail a *trivial* load on the server. And there is *NO* way that *any* number of people downloading content could *possibly* result in the root password being changed!

The only -- the *ONLY* -- explanation that fits *all* of the publicly known evidence is that a coordinated attack was launched for the purpose of taking over, and taking down the TB2000 forum server.

-- Ron Schwarz (rs@clubvb.com.delete.this), December 29, 1999.


Thanks y'all.

sheesh ... for first time in over a month, I take some time away from the computer for a "sanity night off." Guess I picked a bad time to refind my sanity huh?

I am thankful that an alternative was quickly established ...

If there ever was a group that I hadda be part of in times like these, I am glad it's y'all.

Blessings,

Rev. ThunderLight

-- Hiding in Plain (Sight@edge of.nowhere), December 29, 1999.


Ron, I believe you're right. I forgot about the part of Phil's message where he said the root password had been changed! Although a gracious host, Phil is a big-time polly. I don't think, after this attack on his server, he'll be too anxious to have TB2000 back again. Unless we buy him a new computer.. :-(

-- (RUOK@yesiam.com), December 29, 1999.

Longtime lurker. Sat down to review recent postings before turning in - what a shock when there was no TB200! It is interesting how rapidly we have started to find our way over here and re-establish the flow of information.

-- xraydoc (xraydoc1@excite.com), December 29, 1999.

Membership is NOT open -- this means "ladylogic" and her ilk will be denied access, and if they slip through, their accounts will be cancelled.

To join, sign up at http://www.onelist.com/community/TB2000-Alternate.

-- Ron Schwarz (rs@clubvb.com.delete.this), December 29, 1999.


I just had a lockout trying to post here. This forum may be on the hit list. We need an alternate soon. Somebody posted on TB2000 yesterday that they were setting up a mirror site, with the sysop's blessing. Anybody remember where the mirror site was supposed to be?

-- (TrollPatrol@sheesh.now), December 29, 1999.

I forgot to include the first line in that last post. Here's the entire thing:

I've created a ONEList forum for backup communications.

Membership is NOT open -- this means "ladylogic" and her ilk will be denied access, and if they slip through, their accounts will be cancelled.

To join, sign up at http://www.onelist.com/community/TB2000-Alternate.

-- Ron Schwarz (rs@clubvb.com.delete.this), December 29, 1999.


Thanks Ron, I bookmarked as a back-up.

-- Hokie (nn@va.com), December 29, 1999.

I think some of you are giving LL to much credit if you think she shut down Time Bomb 2000 and the Preperation forum. For the last week anything connected to y2k on AOL has been under fire. This includes freezing of chat rooms and lock-outs.
TPTB must have taken to heart the Naval War Colleges idea of monitering chat rooms and forums. How long this forum will stay open, I can only guess. I'm just glad it is for now.
As for the alternative site. I wish you luck there, but I'll never freely give out my real address.

-- SilentRunning (CanYouHearMe@Calling.You), December 29, 1999.

Hello all. Good to see you. I finally went to Debunkies and asked someone to explain what the message meant (I'm not a techie or even remotely close to being one), I was, of course, ignored. Finally found my way here. What I surmise from these posts, is either hackers or something extremely rude. How unfortunate and how utterly uncalled for.

-- Casey DeFranco (caseyd@silcom.com), December 29, 1999.

SilentRunning -- I don't have a problem with anonymity, but you need to realize that for a listserv (mailing list server) to work, it needs an email address! [g]

You might want to consider creating a Hotmail or similar account to use for the listserv.

-- Ron Schwarz (rs@clubvb.com.delete.this), December 29, 1999.


Ron,I tried to register on the first page of the four,on the alternate Forum,but it won't even let me do that without a password.. can you email me ??? Cynthia

-- Cynthia Yanicko (yanicko@infonline.net), December 29, 1999.

Wow...guys...I was panic struck. couldn't get on TB 2000. Whoever put the link on MH's discussion group and big hug and kiss. You win the cupie doll of the year award! Thanks! At least I found some of you

-- moore dinty more (dac@ccrtc.com), December 29, 1999.

thought i'd check in here as TB2k has disappeared, presumably Ed has finally decided to take it off the air

any TB regs (or i mean oldtimers) here?

-- Sir Richard (richard.dale@unum.co.uk), December 29, 1999.


Pinkrock reporting in. Situation normal here. Welcome to the cyberwars.

Godspeed, you're gonna need it.

z

-- Pinkrock (aphotonboy@aol.com), December 29, 1999.


thanks Ron, I just signed up over at One List. Boks chat room gets pretty unmanageable. This must be an early taste of the 21st century.

-- Nancy (wellsnl@hotmail.com), December 29, 1999.

Thanks so much, Ron. Cynthia, I think you create your own password.

Is it just me, folks? There have been threads in the past about where we should go if the forum went down. I NEVER thought that was possible, short of an electrical or telecom failure. Even GIs can be infested with denial.

-- Brooks (brooksbie@hotmail.com), December 29, 1999.


always a lurker, can't believe I found you guys

I started going into withdrawl,somehow let lurkers

know what's going on and we will follow.

I can't begin to tell you all what this board means

to everyone. Thank you, Lil Red

-- Lil Red (Oh, No@this is horrible.com), December 29, 1999.


Thank God you are all posting again.I'm stressed enough without all this hacker garbage. Our site was hit in Oct-took us almost 10 days to get back up again.This grieves us so much. MH site is watching all and praying that the hacker falls into a deep hole :( You all have our support!

-- River (Riverwn@aol.com), December 29, 1999.

I need to BITE somebody... preferably a "parrotish" person... I am present and accounted for...

growlin' at the parrot...

The Dog

-- The Dog (dogdesert@hotmail.com), December 29, 1999.


Whew, so glad to find familiar names. I was starting to go through major withdrawal!!!

-- Susie used to be Claire (susie0884@aol.com), December 29, 1999.

PHEW!! I have been a long time lurker and am sure glad to see familiar names.I was there when TB2000 crashed and burned, it almost gave me a heart attack when it happened.I just want to say,"Thankyou" for all of the valuable information that I have gotten from you all.We must stand confident, as the final hour draws near.

-- Kev (home@last.com), December 29, 1999.

I noticed. I'm back. And angry at the violation of a robust community. It's good to see so many of you here. Thank you, Ed Yourdon. I, for myself, will try to think of the world post Y2K, and how we might contribute to it. I think the TB2000 community finding a way to find each other speaks to the strength of our connection. I, for one, need the support to help with the Y2K jitters as we approach the new millineum.

-- Leslie (***@***.net), December 29, 1999.

Hello, glad to catch up, been lurking for about a week and was shocked last night. I have an e-mail from phil at 1:38am after the crash, if you would like I'll post it. It might help.

Jim

-- Jim Eberle (jeberle@snsworld.net), December 29, 1999.


Moderation questions? read the FAQ