Note to staff...

Saga2001 · #1 11-29-2001, 02:39 PM

Well there are quite a few things that are very dangerious. With a VERY simple cgi script that someone could include in their signature on this very board they could pull out (if you have wsftp_le or wsftp program) your ftp password and rc and account passwords from registry, I personally keep all of my passwords printed out and/or memorized. Because there are very many potental dangers, or at least all accounts i care about i watch out for. Just a note.
--PastAusitin

Faheria_LAT1 · #2 11-29-2001, 07:32 PM

I have no clue how it works, but would it break through a firewall?

grim_squeaker_x · #3 11-29-2001, 07:41 PM

Quote:

Originally posted by Faheria_LAT1
I have no clue how it works, but would it break through a firewall?

Only if their IP has acces to your computer (At least that's the case in most firewalls on their default settings)

cds96 · #4 11-29-2001, 08:17 PM

hi, i need your email pastaustin

Psyker · #5 11-30-2001, 12:39 AM

that's why I don't want to use WS_FTP, I want to use Cute

however, FTP Commando is working fine for me

Sigla · #6 11-30-2001, 02:13 AM

Quote:

Originally posted by Psyker
that's why I don't want to use WS_FTP, I want to use Cute

however, FTP Commando is working fine for me

FTP Commander is the Demigod of all FTP Programs. Ever.

Saga2001 · #7 11-30-2001, 06:15 AM

Quote:

Originally posted by Faheria_LAT1
I have no clue how it works, but would it break through a firewall?

This has nothing to do with the firewall, it goes thru that, your browser accepts it no matter what. And all i am saying is be careful where you go.

,
--PA

Psyker · #8 11-30-2001, 07:22 AM

Quote:

Originally posted by Sigla

FTP Commander is the Demigod of all FTP Programs. Ever.

haha, yeah

Brad_Elven · #9 11-30-2001, 07:23 AM

i am scared for my soul

Sigla · #10 11-30-2001, 07:25 AM

Quote:

Originally posted by Brad_Elven
i am scared for my soul

Just bow before the awesome presence of FTP Commander and all will be well.

Psyker · #11 11-30-2001, 07:43 AM

Quote:

Originally posted by Sigla

Just bow before the awesome presence of FTP Commander and all will be well.

that's correct.

Sigla · #12 11-30-2001, 08:12 AM

Quote:

Originally posted by Psyker

that's correct.

It's so correct, that it generates a small amount of Street Cred.

Saga2001 · #13 12-04-2001, 11:22 AM

Quote:

Originally posted by Brad_Elven
i am scared for my soul

good!!! suffer!!!
lol j/k

ZanderX · #14 12-04-2001, 12:49 PM

I fail to see how a cgi script could remotely access your computer without you activating it.

Saga2001 · #15 12-05-2001, 03:33 PM

well i have been looking in my perl book for bout a half hour, i'll keep looking.
the commands i believe are geykey(), delkey(), and addkey(). they do exist.

Kumada · #16 12-05-2001, 04:09 PM

u popen program and it steal passwerd k

Psyker · #17 12-05-2001, 11:35 PM

Quote:

Originally posted by Saga2001
well i have been looking in my perl book for bout a half hour, i'll keep looking.
the commands i believe are geykey(), delkey(), and addkey(). they do exist.

do you mean getkey(), by any chance?

Sigla · #18 12-06-2001, 03:18 AM

Quote:

Originally posted by Psyker

do you mean getkey(), by any chance?

That would make a little more sense.

Slaktmaster · #19 12-06-2001, 03:25 AM

Psyker · #20 12-06-2001, 04:11 AM

geykey()

JubeiSaotomeX · #21 12-06-2001, 04:37 AM

AbsoluteFTP is what I use, it owns me

ZanderX · #22 12-06-2001, 05:40 AM

Regardless, a CGI script cannot access your computer unless you directly activate it. It cannot remotely access your computer via pop[ping up in, say, a javascript window.

Milkdude99 · #23 12-06-2001, 05:47 AM

Hmmmm I have Cute FTP Pro Version 2 , the latest and a firewall with modified settings which also works with a virus program , about the only way you could get on my comp is with a hammer and chisel, at least if you try I know the instant someone does and it is automaticly blocked.

Sigla · #24 12-06-2001, 07:08 AM

Quote:

Originally posted by Milkdude99
Hmmmm I have Cute FTP Pro Version 2 , the latest and a firewall with modified settings which also works with a virus program , about the only way you could get on my comp is with a hammer and chisel, at least if you try I know the instant someone does and it is automaticly blocked.

Sometimes the old tools work best, you know. A lot of damage can be done with a hammer and chisel. Especially to wimpy computer casing. lol

Milkdude99 · #25 12-06-2001, 08:07 AM

Quote:

Originally posted by Sigla

Sometimes the old tools work best, you know. A lot of damage can be done with a hammer and chisel. Especially to wimpy computer casing. lol

ROFL how true

Sigla · #26 12-06-2001, 08:53 PM

Quote:

Originally posted by Milkdude99
ROFL how true

*cough* Sorry, I.. uh.. come from a family with a background of machinery assault.

Saga2001 · #27 12-07-2001, 12:55 AM

Quote:

Originally posted by cds96
hi, i need your email pastaustin

[email protected]
[email protected]
[email protected]

Saga2001 · #28 12-07-2001, 01:03 AM

Actually it is very possible for someone to put a CGI script in like an image include on their sig without you activating crap, obviously you have never written perl or cgi there are sites that when you come on it tells you info about your computer that it gets FROM THE REGISTRY, you can think what you like but a lot of valuable information is stored in your registry, personally i delete the ftp keys and write them down and use command line ftp, for important things at least, i am just saying watch out, and don't tell me its not possible i have made one to make sure. So just be careful.
--PastAustin

Ziro- · #29 12-07-2001, 10:34 AM

Quote:

Originally posted by Saga2001
well i have been looking in my perl book for bout a half hour, i'll keep looking.
the commands i believe are geykey(), delkey(), and addkey(). they do exist.

rofl....geykey.....

Saga2001 · #30 12-07-2001, 01:36 PM

Quote:

Originally posted by Ziro-

rofl....geykey.....

die and sink into the ground and rot, when did you start playing graal again? a week ago?