Letter now Court case

**sodusme** · 04-04-2013, 03:43 PM

Originally Posted by MarvinGardens

Explain why you the "God of anonymity" could not figure out how someone spoofed your name on this forum. You just may be a legend in your own mind.

Oh I see you don't have access to the 'visiting' room....

Originally Posted by pugsycan

Look at the links the names are definitely different But is it a code for S
anyone explain how

Originally Posted by sodusme

Yup the idiot used Unicode and apparently thought nobody would figure it out.

Code:

http://www.utf8-chartable.de/unicode-utf8-table.pl?start=1024

Here is the code he used:

Code:

U+0455 ѕ	d1 95	CYRILLIC SMALL LETTER DZE

I knew it was a code by reading on the VB help boards and originally thought ASCII. You guys have ASCII blocked but apparently not Unicode.

I also know that he surfed from

Code:

http://coverproxy.com

as well. He didn't cover his tracks very well.

This is a snippet of a conversation I had with upper management concerning the 'situation'. I also know what board he was from since there is only one board that has my birth date visible. I won't make you privy to the rest of the conversation but did you notice the registering and posting stopped?

Got any more questions about what I know or don't know?

I didn't think so....

P.S. Since you are apparently familiar with the situation you can also tell the individual that I cracked into the Yahoo account he set up by guessing his 'uncles' name. Not too smart to mess with those that have more knowledge then you do is what I always say.

**sodusme** · 04-04-2013, 03:45 PM

Originally Posted by alex70olds

LOL Not going to screw with the RJ site, but we can talk about this privately. There is always a way to beat everything, but you know this. Most people dont even know how to find their cookies, much less edit hex (That is where it gets fun, spoofing the AE detector to think you are a member of staff lol). Anyway, back to your regular scheduled programming

Firefox has a nice little add-on to do this. I swear the guys that code for Firefox are nothing but two bit hackers.

**alex70olds** · 04-04-2013, 04:03 PM

Originally Posted by kenkell1

Mmmmmmmm Cookies. Dip them in Whiskey and call it a day

Hope you have a lot of whiskey lol.

Cookie Information - http://www.satfix.net/forum.php
NAME __utma
VALUE 15880372.654572852.1364486535.1365083820.136508627 2.19
DOMAIN satfix.net
PATH /
EXPIRES 4/4/2015 11:05:07 AM

NAME __utmz
VALUE 15880372.1364486535.1.1.utmcsr=(direct)|utmccn=(di rect)|utmcmd=(none)
DOMAIN satfix.net
PATH /
EXPIRES 10/3/2013 11:05:07 PM

NAME __utmb
VALUE 15880372.22.10.1365086273
DOMAIN satfix.net
PATH /
EXPIRES 4/4/2013 11:35:07 AM

NAME __utma
VALUE 15880372.654572852.1364486535.1365083820.136508627 2.19
DOMAIN satfix.net
PATH /
EXPIRES 4/4/2015 11:05:07 AM

NAME __utmz
VALUE 15880372.1364486535.1.1.utmcsr=(direct)|utmccn=(di rect)|utmcmd=(none)
DOMAIN satfix.net
PATH /
EXPIRES 10/3/2013 11:05:07 PM

NAME __utmb
VALUE 15880372.22.10.1365086273
DOMAIN satfix.net
PATH /
EXPIRES 4/4/2013 11:35:07 AM

NAME bb_lastvisit
VALUE 1364486310
DOMAIN www.satfix.net
PATH /
EXPIRES 3/28/2014 3:55:59 PM

NAME bb_lastactivity
VALUE 0
DOMAIN www.satfix.net
PATH /
EXPIRES 3/28/2014 3:55:59 PM

NAME bb_userid
VALUE 69934
DOMAIN www.satfix.net
PATH /
EXPIRES 3/28/2014 3:55:59 PM

NAME bb_password
VALUE 71320f49f4094f9119948050ebf1c43b
DOMAIN www.satfix.net
PATH /
EXPIRES 3/28/2014 3:55:59 PM

NAME editor_height
VALUE qr%23100px
DOMAIN www.satfix.net
PATH /
EXPIRES 4/4/2014 11:03:39 AM

NAME editor_height
VALUE qr%23100px
DOMAIN phoenix.satfix.net
PATH /
EXPIRES 2/19/2014 10:19:30 AM

NAME vbulletin_userlist_hide_avatars_incomingreqs
VALUE 0
DOMAIN phoenix.satfix.net
PATH /
EXPIRES 1/15/2014 6:05:04 PM

NAME vbulletin_userlist_hide_avatars_buddylist
VALUE 0
DOMAIN phoenix.satfix.net
PATH /
EXPIRES 1/15/2014 6:05:11 PM

NAME vbulletin_collapse
VALUE
DOMAIN phoenix.satfix.net
PATH /
EXPIRES 1/29/2014 3:44:37 PM

NAME __utma
VALUE 15880372.654572852.1364486535.1365083820.136508627 2.19
DOMAIN satfix.net
PATH /
EXPIRES 4/4/2015 11:05:07 AM

NAME __utmz
VALUE 15880372.1364486535.1.1.utmcsr=(direct)|utmccn=(di rect)|utmcmd=(none)
DOMAIN satfix.net
PATH /
EXPIRES 10/3/2013 11:05:07 PM

NAME __utmb
VALUE 15880372.22.10.1365086273
DOMAIN satfix.net
PATH /
EXPIRES 4/4/2013 11:35:07 AM

NAME bb_lastvisit
VALUE 1364486310
DOMAIN www.satfix.net
PATH /
EXPIRES 3/28/2014 3:55:59 PM

NAME bb_lastactivity
VALUE 0
DOMAIN www.satfix.net
PATH /
EXPIRES 3/28/2014 3:55:59 PM

NAME bb_userid
VALUE 69934
DOMAIN www.satfix.net
PATH /
EXPIRES 3/28/2014 3:55:59 PM

NAME bb_password
VALUE 71320f49f4094f9119948050ebf1c43b
DOMAIN www.satfix.net
PATH /
EXPIRES 3/28/2014 3:55:59 PM

NAME editor_height
VALUE qr%23100px
DOMAIN www.satfix.net
PATH /
EXPIRES 4/4/2014 11:03:39 AM

NAME __utma
VALUE 15880372.654572852.1364486535.1365083820.136508627 2.19
DOMAIN satfix.net
PATH /
EXPIRES 4/4/2015 11:05:07 AM

NAME __utmz
VALUE 15880372.1364486535.1.1.utmcsr=(direct)|utmccn=(di rect)|utmcmd=(none)
DOMAIN satfix.net
PATH /
EXPIRES 10/3/2013 11:05:07 PM

NAME __utmb
VALUE 15880372.22.10.1365086273
DOMAIN satfix.net
PATH /
EXPIRES 4/4/2013 11:35:07 AM

NAME __utmc
VALUE 15880372
DOMAIN satfix.net
PATH /
EXPIRES At the end of the Session

NAME bb_forum_view
VALUE 8f5ca8db8b6d80a0ead1e32403972fdc13b323e4a-1-%7Bi-27_i-1364936301_%7D
DOMAIN satfix.net
PATH /
EXPIRES At the end of the Session

NAME bb_thread_lastview
VALUE 5106c3b27f516f125a7ddb645ee812cf16769af0a-8-%7Bi-130664_i-1365083986_i-130693_i-1364497095_i-127046_i-1365090314_i-119515_i-1364916570_i-122676_i-1364841626_i-131180_i-1364917548_i-131222_i-1365019747_i-131261_i-1365088701_%7D
DOMAIN satfix.net
PATH /
EXPIRES At the end of the Session

**sodusme** · 04-04-2013, 04:03 PM

Originally Posted by Azul2

Rotten says there's a VB hack for MAC addy. However MAC addy can easily be spoofed.
A-2

There can't be....

The MAC of your computer/modem/router is never transmitted as far as a website. Only the MAC of the last hop is forwarded on to the website. Its done this way for troubleshooting purposes on the network. So its easier to tell at what 'hop' a packet is being dropped without tracing the traffic all the way back to the originating gateway. They'll see the MAC of their border router. MAC's stop transmission at Level 2 of the OSI model.

So good luck with that 'hack'. It ain't gonna tell you much.

**sodusme** · 04-04-2013, 04:08 PM

ROFLMAO.....

Um I'd lose that one parameter: deleted

That's only a salted MD5 hash bro'. A little time with JTR and that could probably be cracked. I don't run JTR but there may be others that do.

**sodusme** · 04-04-2013, 04:26 PM

HEHEHEHEHEHE

*EDIT* Didn't work anyhow. I checked it on my password. I think its MD5 then basically the MD5 hash with salt included within the MD5 hash. Its confusing on how its compiled and not really what I specialize in. I'd have to ask some buddies on one of the boards.

**MarvinGardens** · 04-04-2013, 04:28 PM

Originally Posted by sodusme

Someone on staff thought it would be funny apparently. That nick was banned so as far as I know no one from outside the cpanel could 'log' into it....so the login had to have originated from someone here on staff.

Nope, no one from staff did it so your first "guess" was wrong.

Originally Posted by sodusme

Strange though that that nick was joined up some 50 registrars after me
How the hell does that happen?

You still couldn't figure out by yourself.

**pugsycan** · 04-04-2013, 04:39 PM

This has nothing to do with the thread so will stop now

Originally Posted by MarvinGardens

Nope, no one from staff did it so your first "guess" was wrong.

You still couldn't figure out by yourself.

**sodusme** · 04-04-2013, 04:39 PM

Originally Posted by MarvinGardens

Nope, no one from staff did it so your first "guess" was wrong.

You still couldn't figure out by yourself.

Like I said....is the posting and registering still going on?

Its a simple yes or no answer.

Who eventually figured it out? I took it for granite that they had ASCII and Unicode blocked on here or I would have known right away. That was the reason it led me to believe it was staff as they would be the only ones that could resurrect a banned nick. I was banned from here some time ago.

Lets not let this go sideways and turn into a p!ssing match. Since I can see you are wanting to feel 'superior'....I'll go ahead and be the bigger man (I am anyways) and walk away from this thread now.

Have a good day....and go ahead and say "HI" to Cadman for me will you?

**alex70olds** · 04-04-2013, 04:52 PM

Originally Posted by sodusme

HEHEHEHEHEHE

Attachment 18035

LMFAO I edited it, but good catch lol.

**Azul2** · 04-04-2013, 05:40 PM

Originally Posted by sodusme

There can't be....

The MAC of your computer/modem/router is never transmitted as far as a website. Only the MAC of the last hop is forwarded on to the website. Its done this way for troubleshooting purposes on the network. So its easier to tell at what 'hop' a packet is being dropped without tracing the traffic all the way back to the originating gateway. They'll see the MAC of their border router. MAC's stop transmission at Level 2 of the OSI model.

So good luck with that 'hack'. It ain't gonna tell you much.

Cool!!! I was wondering about that. I'm just a script kiddie. I'm not going to be the one to tell him though.
A-2

**sodusme** · 04-04-2013, 06:09 PM

Originally Posted by Azul2

Cool!!! I was wondering about that. I'm just a script kiddie. I'm not going to be the one to tell him though.
A-2

Eh Rotten's an OK guy I'm sure if you presented the question respectfully to him he wouldn't have a problem with you questioning it.

Basically the only 'device' that can see your MAC address is the next device in the path on the way to your destination. So in other words your ISP would see your MAC as you connect to any website....but even they only see your 'last' MAC so they would see your router MAC if you are behind one. They don't see your computer MAC ever. Then as your traffic passes through their (meaning the ISP'S) router and is forwarded to the next 'hop' or router.....that MAC is inserted in the packet and forwarded on and so on and so forth....until your packet reaches its final destination.

The packet will contain the MAC of the last device through which it passed when it arrives at the website. Every router builds a table of all connected devices and forwards the packet based on that table. Your i.p. remains constant through the entire packet travel but your MAC does not it will be swapped out at each 'hop' or router.

**rainman2** · 04-04-2013, 07:52 PM

If I change my i.p. address can the man get me again.

**alex70olds** · 04-04-2013, 07:57 PM

Originally Posted by rainman2

If I change my i.p. address can the man get me again.

I depends on what they got before. At some point you have to take a look at risk vs reward, or return on investment.

**rainman2** · 04-04-2013, 08:46 PM

Damn I send somebody a pm and it's advertised in the shoutbox. Nothing like saying HEY Dick I'm here

Thread: Letter now Court case

Thread Tools

The Following User Says Thank You to sodusme For This Useful Post:

The Following User Says Thank You to sodusme For This Useful Post:

The Following User Says Thank You to alex70olds For This Useful Post:

The Following User Says Thank You to pugsycan For This Useful Post:

The Following User Says Thank You to sodusme For This Useful Post:

The Following User Says Thank You to alex70olds For This Useful Post:

The Following 2 Users Say Thank You to sodusme For This Useful Post:

The Following 2 Users Say Thank You to alex70olds For This Useful Post:

Posting Permissions