Aftermath

I have to say I am incredibly disappointed with the direction or lack there of that the this the user revolt has taken. Kevin Rose posted this,

"But now, after seeing hundreds of stories and reading thousands of comments, you ’ve made it clear. You’d rather see Digg go down fighting than bow down to a bigger company. We hear you, and effective immediately we won’t delete stories or comments containing the code and will deal with whatever the consequences might be."

Everyone dugg it, then Kevin himself posted the numbers, and now all I see is a bunch of whiny ass people babbling out shit like this,

...
I truly cannot believe how many people decided they were going to stand up (while sitting down mind you) for a cause that 50% of them were not going to actively participate in anyway. If "protesting" or "sticking it to the man" as they call it, is in fact possible by simply clicking your mouse a few hundred times then I for one welcome our new carpal-tunnel ridden overlords.

IF we're all done acting like 5 year olds, I'm sure someone's got a great picture of a cute kitten in a computer to submit.

That's REAL Digg frontpage news... :)

For the love of all things holy. It was obvious that diggers DID recognize the importance of the issue at hand, but less than 24hrs later comments like the one above are getting Dugg hand over foot. I just don't get it? And for the record, let be clear on one thing, "protesting" and "sticking it to the man" can ABSOLUTELY, with out a doubt be accomplished with a few hundred clicks. A few million people clicking something a few hundred times.....hmmm that sound like a political bot net of sorts. Why wait for someone to create a bot net that actually stands behind a real cause or idea, not just extortion and greed, when we could do it with out all the zombie boxes? (Although I must say, Zombie box's are cool with me as long and they are not spamming and extorting).

Then there is this comment in direct response to Kevin's story, which it would seem by the number of Digg's clearly represents the overall attitude of the digg community.

"Well said. Can we move on now?"

This to me is what is really sad. Maybe the guy was right in the first comment above? Most of the people who were out there digging like mad last night were just a bunch of coffee shop revolutionaries, attention spans no longer than a few hours who have already moved on to the newest IPhone pictures , but I refuse to adopt that attitude (even though it may very well be true) simply because I am stubborn and I have faith in both political and conscious movement.
Really, if you sit back and look at it for a few minutes, what happened on Digg on May, 1st 2007 has some pretty interesting implications in the grand scheme of things. I encourage those of you who have yet to see it to take a closer look.

Internet Riot! 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0

I am purposing to take this thing beyond digg have a full blown Internet Riot! If you don't know whats going on yet, I'm not going to explain the numbers, 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0 but you can head over to digg.com and read up on it. Lets really open our vocal chords and yell this time. Go to every Blog you can find (including this one) and post the numbers! Hit fourms, and fill out contact forms loaded with the numbers. Don't forget to be crafty and throw in the MD5 of the numbers for good form. Lets make sure that we make our selves clear this time! You cannot stop us! Your censorship is useless!

What a beautiful screen shot of Digg.com's infamous front page:

Bust a Spammer In The Grill

Heres a good post from Craigslist that a friend of mine made some time ago. The success rate to this method is not 100%, but it will work a good amount of the time. This is written with the average end internet user in mind, but if you read past the part about how to identify spam it gets into the good stuff.

"I have not been on here a for awhile, and I am amazed to see how much spam is flooding this section.

Just quick heads up for those that don't know:

If a posting takes you to a link that has no where to click except for on advertisements then it is spam!

For example this site,
http://www.lowincomebostonapartments.com/portland.htm
which was posted earlier today on portland craigslist IS SPAM!!
There are no apartments at all for rent, what they are trying to do is trick you into clicking on the google advertisement, which intern earns them money for each click you make. Also, try swapping the the /portland.htm to any major city for example, /denver.htm and look what happens! These people are making good money off abusing CL!!

(white hat method)
CL is a great service, and the best way to keep it that way and stop greedy spammers (who are to lazy to make a decent living) is being informed about what you are clicking on, AND recognizing and flagging these posts as SPAM.

(black hat method)
Now, if you are like me, and you dont have any problems fighting fire with fire, there is another way to cripple these spammers and render their scam useless. Now, a little heads up. IF you choose to undertake this, I warn you now that this is may or may not be legal, and it IS NOT the most up and up way to stop this particular kind of spam. Also if you get in trouble, dont blame me because you are on you own with this!!!

Now on to the good stuff:
According to wiki, Click fraud is defined as the following,

"Click fraud occurs in pay per click online advertising when a person, automated script, or computer program imitates a legitimate user of a web browser clicking on an ad, for the purpose of generating a charge per click without having actual interest in the target of the ad's link. Click fraud is the subject of some controversy and increasing litigation due to the advertising networks being a key beneficiary of the fraud whether they like it or not."

So, what you do it take about five minutes of your day, and click on the SAME ad as over and over and over again on one of these sites (make SURE it IS a spamming site) and then just wait. It may take some time, upwards of a day for anything to happen, so be patient.;
Now, what happens is that this sets off red flags with the google people, and the person who owns that account (spammer) will have there google ad sense account frozen. Now for the good part, all the money that they have made and not been paid for up until this point, (which could be a whole lot) will be frozen as well. These ad sense accounts are bound to and confirmed by social security # and other things that are not easily scammed. So, although they may be able to setup another account and get back at it, it will not be easy and it will probably take time. "

Exposing a Script Kiddie

I'm not a huge myspace fan. I had a profile for awhile, but recently bailed on the whole thing. A few days ago I was checking out the myspace page for Radio Discon and I noticed that a comment had just been made from a friend of the station that obviously was not real.

"Oh, my fault I must have gave you the wrong link then. The people I use to
make make money should be just go here (click here).
Well I hope it works for you this time, remember that
if the site is not up they are not excepting anyone else. I told you I'm making
about $900 a week and it's consistent. Just make sure that you take taxes into
consideration, it's a little different than that job your always complaining
about.LOL anyways that is funny about Laura, what else did
she say about it? I'm not even going to worry about it ya know? Oh well,
call me later or I'll catch you on here, see ya. "

My curiosity set in and I decided to do a little research on the nature of this beast. The click here link directed you to game-blast.net/paidetc.php. Before clicking on the link I headed over to the root of the domain. game-blast.net/. It was an Apache server directory listing;

By navigating to the admin folder, game-blast/admin you end up at at jumbled up web page that will happily generate errors for you when clicking on some of the different links. At this point I went ahead and clicked on one of the PHP pages. game-blast.net/scout2.php. The page redirects you to some online money making scam. Not bad, considering it does not appear to be infecting you with malware or anything of the sort. I checked out a couple of the other pages from directory listing, including the original link that came in the myspace comment. What really got this scavenger hunt going was when I noticed the affiliate account being passed in plain text in the address bar of the scout2.php redirect.




Now I had someone to look for, Ksruckman. I started off with a simple Google search. Within 20 minutes I felt like I knew ksruckman, or Ralph Ruckman as he's known to Uncle Sam. After seeing that his PHP scripts were nothing but redirects to cheesy money making sites, I began the profile of ksruckman as a low end Internet scammer, or to be nice, marketeer. Most of my initial information came from forum posts. For example, on one site in the fall of 2006 he had some serious issues with premissions on his wordress blog. Someone kindly explained to him the CHMOD command and he was back on track. This lead me to believe that he likely knows very little about the back ends of websites, html, and/ or FTP. At this point I had pretty much pinned him as a script kiddie. As I read through various forum posts and searched popular photo sharing sites my profile became more in depth. On one set of forums he boasted on recent earnings of a Craiglist scam and then about his earning mantra of three dollars per site within the first five days. It really makes me wonder how different the Internet would be with out all the junk sites. Who's to judge though I guess? Moving along, just a few pages in to the Google search I stumbled across another huge piece of the puzzle, Ralph's eBay profile. For the most part he was purchasing Xbox live cards and the like. One auction in particular brought the search full circle:

Yes that's right, he bought the script off EBay. For less than $20 none the less. I'd imagine that he probably made a pretty good little stash of cash off the exploit. At this point, I'm feeling pretty satisfied, although I do still have a few questions about the specific exploit.

!EDIT!
I decided enough was enough, your name has been removed. Google should be clear of it soon.
Sorry Bro It Had to Be Done.

DRM and the new world order.

As a tech support representative I have been asked quite a few times in the past few months what I think about Windows Vista. As a side note, it should be noted that average caller in my support center tends to know about as much about computers as a squirrel does toasters. I have no problem with this as it pays my bills and I have reasonably good time doing it. In the past my responses to this dreaded question have remained trivial and and far from honest. I have found it much easier to respond with a simple "I'm curious to see" than to dig deeper into my philosophy on operating systems, open source, pirates and end users. Truth be told, aside from an episode of Security Now and a few articles here and there, I don't know much about Vista other than that it supports IPV6 and 64 bit processors.
What little faith I did have in Windows took a serious blow today when I read this article I found on Digg. http://polishlinux.com/gnu/drm-vista-and-your-rights/. I strongly recommend reading over this article. I used to think of DRM like the barking dog that never shuts up in your neighbors yard, yes its annoying, but if the music is turned up loud enough you won't hear it anyway. I am now realizing that this is not the case. The serious implementation of DRM into operating systems is a huge problem and will likely mark a whole new era of hell and headaches for the average end user. While companies like Microsoft and Sony struggle, kicking and screaming to hang on to old ways of doing business, it becomes more and more clear that the model of taking advantage people who don't know any better is not that all that cool. What I don't understand is how these companies really think that by implementing DRM they will be able to protect there products. The fact of the matter remains, no matter how hard they try, or how stiff the punishment, there will always be crackers and pirates. The end result to me really seems like Windows is polarizing the internet universe like never before. While typing this up at work, I recieved my first call on a Vista Machine. It was unable to connect to the internet, and I sent him off to the OEM for support. I only have one more day of work here and as far as I'm concerned I have no desire to learn about Vista unless I really have to.