IRC log for ##guleague on 20080219

00:19.58*** join/##guleague Ebert (n=EbErT@adsl-156-23-42.asm.bellsouth.net)
00:20.13*** mode/##guleague [+v Ebert] by ChanServ
00:21.24kierraEberto!
00:24.59Eberthey K, how are ya
00:29.00gubotNew news from gumatches: Feb 19 00:25 => The Dark Side:4, Sunway:4
00:29.21AHA:D
00:30.05whodaman:D
00:30.14Winnya tie is almost as bad as a fail
00:30.28Winny:p
00:32.49Ebertthx for being optimistic win
00:33.04WinnyEbert, optimisim is my middle name
00:33.10whodamanheh
00:33.14whodamanWinny, we're below them
00:33.23whodamanso we got points :)
00:33.24whodamanand anyways
00:33.32whodamanwe capped 2 times in the last 2 mimutes
00:43.21*** join/##guleague ViciousM (n=max@cpe-024-211-248-161.nc.res.rr.com)
00:44.51*** mode/##guleague [+v ViciousM] by ChanServ
01:05.08*** join/##guleague uso (n=uso@84-72-8-253.dclient.hispeed.ch)
01:05.08*** mode/##guleague [+o uso] by ChanServ
01:06.42whodamanwb uso
01:09.05gubotNew news from gumatches: Feb 19 01:04 => Sunway:3, [No Skill Attached]:3
01:09.15whodamanalmost
01:09.19AHAmeh
01:09.36AHAhey
01:09.39AHAmeanie
01:09.42kierrawinny, for the lower team a tie is better than a loss :P
01:09.53AHAwhodaman*
01:09.55AHAnot Winny
01:10.03kierra~poke Winny
01:10.14aptACTION cuts down a small tree, sneaks up behind Winny, pokes Winny repeatedly, hilarity ensues.
01:10.14Winny~bonk kierra
01:10.15aptACTION bonks kierra over the head
01:10.17AHA~kill NSA
01:10.18aptACTION shoots a magneto-ionized meson gun at NSA
01:10.20kierra:P
01:10.23AHAyay
01:10.24AHAwe win now
01:10.32Ebert~smack aha
01:10.33aptACTION smacks aha upside the head.
01:10.42AHAgg Ebert :)
01:11.01Ebertu2, it was the "geriatrics of champions" game
01:11.09AHAhehe
01:11.17AHAvery close at tims
01:11.19AHA*times
01:11.27AHAalmost stoped you on that last cap
01:12.15Ebertafter i fell through the crack :/
01:12.40whodamanthat's what SHE said
01:13.21AHAheh
01:13.27AHAEbert, yeah, you saved us there :p
01:19.18*** part/##guleague kierra (n=jolie@c-68-35-238-65.hsd1.fl.comcast.net)
02:09.12gubotNew news from gumatches: Feb 19 02:06 => Sunway:6, Inexorable Crazy Fiends:1
02:10.58*** join/##guleague whodaman- (n=whodaman@pdpc/supporter/student/whodaman-)
02:10.58*** mode/##guleague [+v whodaman-] by ChanServ
02:37.17gubotNew news from gumatches: Feb 19 02:29 => Team of Champions:6, The Dark Side:2
03:07.19gubotNew news from gumatches: Feb 19 03:01 => Team of Champions:7, Inexorable Crazy Fiends:1
03:09.39*** part/##guleague Ebert (n=EbErT@adsl-156-23-42.asm.bellsouth.net)
03:37.23gubotNew news from gumatches: Feb 19 03:34 => Team of Champions:9, Inexorable Crazy Fiends:1
04:11.39*** join/##guleague brad (n=brad@moooo.org)
04:11.39*** join/##guleague gubot (n=bzbot@moooo.org) [NETSPLIT VICTIM]
04:11.40*** mode/##guleague [+ov brad gubot] by irc.freenode.net
04:59.56*** join/##guleague ViciousM (n=max@cpe-024-211-248-161.nc.res.rr.com)
05:00.45*** join/##guleague QuantumT1m (n=tim@62-249-230-206.no-dns-yet.enta.net)
06:05.37gubotNew news from gumatches: Feb 19 05:57 => Inexorable Crazy Fiends:6, Team of Champions:5
06:45.42gubotNew news from gumatches: Feb 19 06:43 => Team of Champions:7, Inexorable Crazy Fiends:2
07:35.47gubotNew news from gumatches: Feb 19 07:28 => Team of Champions:14, Inexorable Crazy Fiends:3
08:58.41*** join/##guleague Gilly (n=btw@83.146.211.140)
08:58.41*** mode/##guleague [+v Gilly] by ChanServ
09:15.54*** join/##guleague quantumdot (n=jmlopez@about/essy/Charm/quantumdot)
09:15.54*** mode/##guleague [+o quantumdot] by ChanServ
09:31.47*** join/##guleague gubot` (n=bzbot@moooo.org)
10:14.09*** join/##guleague Dessy (n=Dessy@88-134-79-92-dynip.superkabel.de)
10:14.09*** mode/##guleague [+o Dessy] by ChanServ
11:01.27*** join/##guleague Upsetter (n=scratch@i577B5FD0.versanet.de)
11:01.27*** mode/##guleague [+o Upsetter] by ChanServ
11:02.00*** join/##guleague ViciousM (n=max@cpe-024-211-248-161.nc.res.rr.com)
11:04.49*** mode/##guleague [+vvvv think_tank gubot` QuantumT1m ViciousM] by brad
11:51.21*** join/##guleague Wits (n=Warinthe@1.168.188.72.cfl.res.rr.com)
11:51.22*** mode/##guleague [+v Wits] by ChanServ
12:02.32*** join/##guleague Dessy2 (n=Dessy@88-134-79-92-dynip.superkabel.de)
12:17.04*** kick/##guleague [Dessy!n=jmlopez@about/essy/Charm/quantumdot] by quantumdot (quantumdot)
12:18.50*** mode/##guleague [+o Dessy] by ChanServ
13:14.59*** part/##guleague Upsetter (n=scratch@i577B5FD0.versanet.de)
13:32.09gubot`New news from gumatches: Feb 19 13:31 => [phagozytose]:6, whatever.:2
14:02.12gubot`New news from gumatches: Feb 19 14:01 => Sunway:4, Enough Is Enough!:4
14:02.39whodaman-2 points
14:02.40whodaman-:P
14:02.41whodaman-we'll live
14:20.07*** join/##guleague Upsetter (n=scratch@i577B5FD0.versanet.de)
14:20.13*** mode/##guleague [+o Upsetter] by ChanServ
14:30.51whodaman-did bzf just crash?
14:30.57whodaman-I was unexpectedly quit
14:31.48tswhodaman-: AOL.
14:32.42ts~seen uso
14:32.44aptuso is currently on ##t42 (13h 27m 36s) #bzflag (13h 27m 36s) ##guleague (13h 27m 36s), last said: 'gah, 75.31 :)'.
14:34.38Dessylinks-clan.net is running ;)
14:34.41Dessy5154
14:34.44Dessygu map
14:34.47Dessyold style
14:35.01whodaman-meh
14:35.04Upsetterlol Dessy
14:35.15Dessy:D
14:36.03tsI don't understand it..I thought the map should run in a rotation, automatically restarting server
14:40.38tsWorks again now
14:50.17gubot`New news from gumatches: Feb 19 14:41 => Enough Is Enough!:3, [Links]:3
15:50.24gubot`New news from gumatches: Feb 19 15:45 => [phagozytose]:8, Enough Is Enough!:1
15:57.36*** join/##guleague Upsetter (n=scratch@i577B5FD0.versanet.de)
15:57.36*** mode/##guleague [+o Upsetter] by ChanServ
16:05.09*** join/##guleague AHA (n=aha@unaffiliated/aha)
16:05.09*** mode/##guleague [+v AHA] by ChanServ
16:06.05*** join/##guleague AHA_ (n=aha@unaffiliated/aha)
16:06.05*** mode/##guleague [+v AHA_] by ChanServ
16:06.27*** part/##guleague AHA_ (n=aha@unaffiliated/aha)
16:38.03*** join/##guleague Zaa (n=Zaa@c-24-218-225-143.hsd1.ma.comcast.net)
16:39.01Zaahihi
16:39.24AHAhihi
16:39.40whodaman-..
16:40.45*** join/##guleague Zaa (n=Zaa@c-24-218-225-143.hsd1.ma.comcast.net)
16:43.00*** join/##guleague whodaman (n=whodaman@pdpc/supporter/student/whodaman-)
16:43.01*** mode/##guleague [+v whodaman] by ChanServ
16:45.05*** part/##guleague Upsetter (n=scratch@i577B5FD0.versanet.de)
16:50.12*** join/##guleague R3laX (n=18b9a0f1@gateway/web/cgi-irc/bzflagr.net/x-d2610cc721cf564f)
16:54.55*** join/##guleague Zaa (n=Zaa@c-24-218-225-143.hsd1.ma.comcast.net)
16:55.44*** join/##guleague Zaa- (n=Zaa@c-24-218-225-143.hsd1.ma.comcast.net)
16:55.52*** part/##guleague Zaa- (n=Zaa@c-24-218-225-143.hsd1.ma.comcast.net)
16:58.42*** join/##guleague Zaa (n=Zaa@c-24-218-225-143.hsd1.ma.comcast.net)
17:17.51Zaa!back
17:20.48whodamanheh
17:21.31Zaa!fail
17:22.01whodaman...
17:22.29whodamanZaa, there's also a bot in here
17:22.33whodamanbut it has a different attention character
17:22.34Zaaman, that "3 dot silence" annoys me.
17:22.35whodaman~fail
17:22.40whodaman...
17:24.41whodaman~hi
17:24.42apthello, whodaman
17:24.48whodamansee, Zaa ?
17:25.15Zaaok :D
18:22.48*** join/##guleague Constitution (n=const@gateway.pct.civiltec.com)
18:26.47gubot`New news from gumatches: Feb 19 18:23 => Team of Champions:3, [Links]:3
18:37.46whodaman:o
18:41.23*** join/##guleague ChanServ (ChanServ@services.)
18:41.23*** mode/##guleague [+o ChanServ] by irc.freenode.net
18:41.32*** join/##guleague Upsetter (n=scratch@i59F7EDC1.versanet.de)
18:41.38*** mode/##guleague [+o Upsetter] by ChanServ
19:51.04*** join/##guleague whodaman (n=whodaman@pdpc/supporter/student/whodaman-)
19:51.04*** mode/##guleague [+v whodaman] by ChanServ
20:00.29*** part/##guleague Zaa (n=Zaa@unaffiliated/zaa)
20:11.37*** join/##guleague Upsetter_ (n=scratch@87.123.107.255)
21:16.03*** join/##guleague Zaa (n=Zaa@unaffiliated/zaa)
21:19.39*** mode/##guleague [+vvv Constitution Zaa Upsetter_] by brad
21:31.23*** join/##guleague Dessy2 (n=Dessy@88-134-79-92-dynip.superkabel.de)
21:50.29*** mode/##guleague [+o Dessy] by ChanServ
21:57.00whodamantelemarketer needs an admin, now
21:57.03whodamanbzf:54
21:57.23bradhe does?
21:57.26whodamanindeed
21:57.30bradwhy is that
21:57.39WinnyIll come and complain to him
21:57.43Winnymaybe h;ll go away
21:57.43Winny:P
21:59.04Winnywhodaman, why did you need brad to save tele?
21:59.12whodamanWinny, huh?
21:59.18whodamanhe said "get a fucking admin"
21:59.26Winnyheh
21:59.26Winnyfun
22:01.10tsWhat happened to fusion.guleague.org:5158 ?
22:01.23tsI get a connection refused (61) from it.
22:01.48ts~bzfquery fusion.guleague.org:5158
22:02.03*** join/##guleague AHA (n=aha@unaffiliated/aha)
22:02.03*** mode/##guleague [+v AHA] by ChanServ
22:02.06whodamants, the server was hacked
22:02.08whodamanAHA, !
22:02.13tslol
22:02.19whodamannot funny
22:02.36tsIt was no joke?
22:02.40Winnyno joke
22:02.47whodamants, kein witz
22:02.50tsHow did that happen?
22:02.52Winnysome weird vulerability
22:02.54Winnynot sure yet
22:03.01whodamanthey cleared their traces
22:03.29Winnyyeah.. we're getting our provider to reinstall the OS soon
22:03.30tsBreaking out of chroot prision?
22:04.13bradvulnerability in what?
22:04.25bradprobably a stupid root pass :P
22:04.32bradlike .... ilovewinny
22:04.32Winnybrad, no root account enabled
22:04.39bradaww :(
22:04.42Winnythey logged in from and account that never existed
22:04.44Winny"system"
22:04.50bradnice
22:05.39Winny82.78.246.142 was their IP
22:05.59tsromania..hmm
22:06.16Winny~dns 82.78.246.142
22:06.26Winnyfun
22:07.24bradthose pesky romanians
22:07.46Winny:)
22:08.49tsOut of curiousity..do we have romanian league members?
22:09.11tsPerhaps we should compare the providers
22:10.20Winnyit wasn't that kind of hack
22:10.29Winnyit was hacked to get used to brute force people's SSH
22:11.21tsI don't understand.
22:11.33tsBrute force password guess?
22:11.35braddo you use debian?
22:11.42Winnyoohboontwo
22:11.55WinnyTS, that is what the hackers tried to do with it
22:12.25Dessyhm
22:12.26Winnybrad, ubuntu
22:12.38tsWell, but how did they come in? You need to know that or the server will get corrupted again
22:12.52tsubuntu on server? Eww
22:12.58WinnyFeb 19 13:10:04 server1 sshd[2472]: Accepted password for system from 82.78.246.142 port 4016 ssh2
22:13.01Dessywinny u cant reinstall the system yourself?
22:13.18bradyou know you can EASILY limit ssh access to only certain IPs?
22:13.20WinnyDessy, I'm not going to fly to tampa to install an OS
22:13.35Dessyu havent a controll panel?
22:13.36catayand also to only specific users
22:13.41tsWinny: I think system user shouldn't be able to login from remote.
22:13.43catayor groups
22:13.46Winnyit's a dedicated server
22:13.55Dessymine too
22:14.01Winnywhen we reinstall we'll do key-based auth
22:14.03Dessyand i can reinstall 24/7
22:14.03Winnynot password
22:14.05catayand use ssh block to protect against ssh brute force attacks
22:14.07Dessyif i want
22:14.24Winnycatay, the problem is, that user account never *existed* before
22:14.26Winnywe never made it
22:14.41cataywell, someone got in and created it probably
22:15.08Winnyhrm
22:15.11cataydid you run apache with some php apps?
22:15.19Winnyyes
22:15.27cataywordpress, phpadmin, ... stuff like that
22:15.30tsFirst came in, put in backdoor, then delete traces. :)
22:15.34cataymaybe some of those had a whole
22:15.38catay*hole
22:15.49Winnyhmm
22:16.21catayand if you are running an old 2.6.x kernel it was probably piece of cake to make use of a local exploit to gain root perms
22:16.39cataythere was currently one
22:16.50Winnyyeah, but you need an account to begin with for that exploit
22:16.52cataynot sure which distros were affected by it
22:17.04cataymaybe through one of these webapps
22:17.10tsCould also be remote exploits in kernel
22:17.29catayas www-data or the user which runs apache
22:17.57WinnyI thought www-data had limited access
22:17.57catayor through an account of a trusted user that got compromised
22:18.00Winnyohh, wait.
22:18.04Winnythe root exploit.
22:18.10Winnyhmm.
22:18.33catayit has limited access, but if can exploit the local root vulnerability , you are screwed :P
22:18.40catay*they
22:18.43Winnyyeah, just thought of that
22:19.00tsHint: OpenBSD is good for servers.
22:19.28Winnyhmm
22:20.58tsand of course, only allow ssh login from within your provider
22:21.37tsYou don't want people from .mm or .ro logging in to your server ;)
22:21.59brad.mm?
22:22.10tsMyanmar
22:22.42WinnyI suppose key-based auth would be good too, no?
22:22.42bradnever seen a .mm domain :P
22:23.02bradWinny: sure until you lose your key ;P
22:23.06Winny:P
22:23.21Winnysame thing with a password :)
22:23.27tsbrad: That's because they're offline from time to time ;)
22:23.45Winny~blame brad
22:23.46aptACTION blames brad (and Canada) for all the evil in the world
22:23.48Winnyaww
22:23.49bradknow any .mm domains then? I want 1!
22:23.52Winnywhy canada :(
22:24.04Winnytasty.mm? :p
22:24.07tswww.mm ? ;)
22:24.10bradmmmmmmmmmm.mm
22:24.18Winnymmoooo.mm
22:24.22Winnypalindrome!
22:24.32braddoesn't exist ts :P
22:24.42tsbrad: It does :p
22:24.49bradnot here
22:25.32tsHmm, it should
22:26.05tsSeems like my DNS doesn't know it :(
22:26.05bradwhois www.mm
22:26.06catayWinny: if the box is still up, run chkrootkit on it, could reveal if they tampered with important files
22:26.06brad<PROTECTED>
22:26.17WinnyI believe it is
22:33.57tsIt's still running and corrupted?
22:34.15Winnyno idea, we're still downloading the data backup
22:34.28Winnynot even sure if it's a rootkit
22:34.49tsIf you can't trust the installation and impossible to reinstall system..took the box down, ASAP
22:35.04tss/took/take/
22:35.14Winnywe're going to get sagonet to reinstall the OS once the backup is downloaded
22:36.17tsIs it a managed server?
22:36.27Winnyno, root
22:36.31Winnybut they will reinstall the OS for us
22:36.50tsThen it's your job to update system to be secure.
22:37.20WinnyThey provide reinstalls
22:40.58Dessywho is ur provider is there any website?=
22:41.37bradhttp://www.sagonet.com/ ?
22:41.54Constitutionyes
22:42.03Dessywich one do u have?
22:42.22whodamancustom
22:42.28ConstitutionDessy: does it matter?
22:42.43Dessyjust want to watch :)
22:42.47whodaman...
22:43.53Dessyhm
22:44.12Dessywhoda was haste jetzt wieder? :P
22:44.58Constitution~x de en was haste jetzt wieder?
22:45.00gubot`New news from gumatches: Feb 19 22:41 => [No Skill Attached]:4, BattleZoneBrothers (BZB):1
22:45.08whodamanlol
22:45.16whodamanhe asked what I had for a problem
22:45.17whodaman.
22:45.18Dessylol
22:45.41Constitutionbabelfish didn't do well, then ;)
22:46.09Dessy~x de en was hast du jetzt wieder
23:01.53Dessyok i go to bed, cya all :)
23:02.03Winnybye
23:09.21*** join/##guleague AHA_ (n=aha@unaffiliated/aha)
23:09.21*** mode/##guleague [+v AHA_] by ChanServ
23:31.27gubot`New news from gumatches: Feb 19 23:23 => [No Skill Attached]:5, BattleZoneBrothers (BZB):1
23:45.40*** join/##guleague think_tank (n=think_ta@c-71-194-147-60.hsd1.il.comcast.net)
23:53.41*** join/##guleague whodaman (n=whodaman@pdpc/supporter/student/whodaman-)
23:53.41*** mode/##guleague [+v whodaman] by ChanServ
23:56.19*** join/##guleague whodaman (n=whodaman@pdpc/supporter/student/whodaman-)
23:56.19*** mode/##guleague [+v whodaman] by ChanServ

Generated by irclog2html.pl Modified by Tim Riker to work with infobot.