Tech Support > Computers & Technology > Virus & Worms > Re: DANGEROUS new internet security hole
Re: DANGEROUS new internet security hole
Posted by Laura Fredericks on December 13th, 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 13 Dec 2003 22:08:26 +0100, Gabriele Neukam
<Gabriele.Spamfighter.Neukam@t-online.de> wrote in
post:
Absolutely, Gabriele. ;-) The story's all over the
place... But you know Sooooooooooge -- trying to
impress his script kiddy friends. ;-) Anyone with
half-a-brain already knew about this exploit, because
they read computer security sites on a regular basis.

There was no reason for him to create demo links on
his site, 'cause these demos *already exist*. He's
just trying to make himself into some be-all, know-all
god, ya know? <snicker> Like it was *him* that
discovered this exploit! ROFLMAO! Note how he doesn't
cite even one source in his post! ;-)

All Sooooooooge had to do was make a post saying, "In
case you missed it..." and provide a URL to one of the
MANY credible source articles -- so as not to insult
the intelligence of the *rest* of us. ;-)

But what do you expect from a known coderipper and
plagiarist? ;-)

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2
Comment: http://www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBP9uOW6RseRzHUwOaEQJ3OgCff2WxdWGEyd2DZwvEewfImN Im5xMAoPaE
St1ft3XpAnoWVSxgtqX2rtLw
=pEX+
-----END PGP SIGNATURE-----

--
Laura Fredericks
PGP key ID - DH/DSS 2048/1024: 0xC753039A

http://www.queenofcyberspace.com/usenet/

Remove CLOTHES to reply.

Posted by Mal on December 13th, 2003


Laura Fredericks wrote:
Hmmm. Yep, would be nice if the appropriate finder of this issue is
cited.

Just checked out the first link on Sug's site
(http://dino-soft.org/security/vun1.html)

<title>Internet Explorer Vulnerability</title>
<meta NAME="KEYWORDS" CONTENT="zapthedingbat; window; location; link;
href; url; vulnerability; exploit; proof of consept; bug; news;
security;" />

(continues)

Now let's look at the original POC page:
http://zapthedingbat.com/security/ex01/vun1.htm

<title>Internet Explorer Vulnerability</title>
<meta NAME="KEYWORDS" CONTENT="zapthedingbat; window; location; link;
href; url; vulnerability; exploit; proof of consept; bug; news;
security;" />

(continues)...


So this page has been directly "borrowed" from Zapthedingbat's POC page
and even contains the exact links back to ZaptheDingbat's page and the
spelling issues? Hmmm. More interesting. (*cough* -- everyone knows what
often goes here when talking about Sugien)

At least the 2nd page has been given some original thought... even
without it's reference to the proper finder.

Posted by Guillermito on December 13th, 2003


Mal <Mal_Murray@Hotmail.com> wrote:

Haha. The good thing in alt.comp.virus is that some things never
change

We can add this to the (already long) list:

http://groups.google.com/groups?selm...asynchrone.net

--
Guillermito
http://www.guillermito2.net

Posted by Sugien on December 14th, 2003



"Mal" <Mal_Murray@Hotmail.com> wrote in message
news:3FDB9ABE.5FF09703@Optusnet.com.au...
If I had been trying to steal anyones thunder I would *not* have left the
stuff in from the orignal POC. However knowing that those in the know would
check the source I chose to leave it in and figured if they were interested
enough in it that they would look at the source. I am just not one much for
sending out *shouts or greets* to someone for puting up a POC which I think
others need to be made awaare of and then I likewise make a copy of their
page and then so as to have it up in more then one place put it on my
server.
If you would give it some thought , in order for it to work from my ISP
corectley some changes needed to be made; but *no where* did I or would I
make any type of statement about my having either discovered or created
something I had not, reguardless of what others may try and say differently
because of what they consider to be past what evers.



Posted by Heather on December 14th, 2003



"NewGyi" <nunya@business.com> wrote in message
news:QridnaFB6tE4S0aiRVn-jw@bright.net...
I sincerely doubt it!! Perhaps if you could learn how to set your clock
properly, then you might be considered half-way intelligent. Or perhaps
this is just Soooooooge, pretending to be you.......and was in such a
rush, he/you forgot to set the Time Zone.

Posted by Laura Fredericks on December 14th, 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 13 Dec 2003 22:33:25 -0800, "NewGyi"
<nunya@business.com> wrote in post:
Does his ass taste good?

So you're one of his many Chillicothe cousins he sent
the animated gif to of his (purported) 18" schlong...
That explains a lot.

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2
Comment: http://www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBP9vueaRseRzHUwOaEQIiDgCg2umV8eo/fVfbB0HfHNNl3uFVhQ8AoOyp
KNP9xXekF2UYdcLkUAdDESds
=HaCk
-----END PGP SIGNATURE-----


Posted by Laura Fredericks on December 14th, 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 13 Dec 2003 22:17:00 -0800, "NewGyi"
<nunya@business.com> wrote in post:
Why am I not surprised? Lol.

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2
Comment: http://www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBP9vrLaRseRzHUwOaEQIUdwCg5SF/elDTsv5qKF+d+fjS3k5SieAAnR1L
TJSZMWEI0fgvFbUOTP2/Or/K
=hVSO
-----END PGP SIGNATURE-----

--
Laura Fredericks
PGP key ID - DH/DSS 2048/1024: 0xC753039A

http://www.queenofcyberspace.com/usenet/

Remove CLOTHES to reply.

Posted by Laura Fredericks on December 14th, 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 14 Dec 2003 09:03:26 +1000, Mal
<Mal_Murray@Hotmail.com> wrote in post:
Ha! So obvious a rip! He even picked up the author's
typo, i.e. "consept".

What a dimbulb. ;-)

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2
Comment: http://www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBP9vsNKRseRzHUwOaEQLfxACgpTrnIOuow9wU9PKZpQ0Aly lc/aQAn2GO
0sYUd28/PX+OoBsVqJfjHmmM
=k5E5
-----END PGP SIGNATURE-----

--
Laura Fredericks
PGP key ID - DH/DSS 2048/1024: 0xC753039A

http://www.queenofcyberspace.com/usenet/

Remove CLOTHES to reply.

Posted by Laura Fredericks on December 14th, 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 13 Dec 2003 22:17:00 -0800, "NewGyi"
<nunya@business.com> wrote in post about The Sugien:
(Rod! ROD! Get back here, NOW! We need you *post
haste*!)

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2
Comment: http://www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBP9vs7qRseRzHUwOaEQKoGwCfV2GfGki8suC9YXdYZ5JkUN nV9YgAn0En
uabbAhKu0niIRiGzuYlh26ms
=cVK3
-----END PGP SIGNATURE-----

--
Laura Fredericks
PGP key ID - DH/DSS 2048/1024: 0xC753039A

http://www.queenofcyberspace.com/usenet/

Remove CLOTHES to reply.

Posted by Laura Fredericks on December 14th, 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 14 Dec 2003 03:43:03 GMT, "Sugien"
<dinosoftYOURSTUPIDCOMENTS@adelphia.net> wrote in
post:
"Shouts or greets"??? What are you stupid, or
sumthin'? (Oh wait...)

The media all credited him and posted the url to his
poc on his site. Why couldn't YOU?

Coderipper.

Plagiarist.

Dimbulb.

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2
Comment: http://www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBP9vt8qRseRzHUwOaEQIWfwCgoRf7q9usR727HPUqlJ4iv1 FPcNcAn3YV
hHBTtj11i4SNjK7J1VYrcxY0
=gXKP
-----END PGP SIGNATURE-----

--
Laura Fredericks
PGP key ID - DH/DSS 2048/1024: 0xC753039A

http://www.queenofcyberspace.com/usenet/

Remove CLOTHES to reply.

Posted by Laura Fredericks on December 14th, 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 13 Dec 2003 22:33:25 -0800, "NewGyi"
<nunya@business.com> wrote in post:
ROFLMAO!

Is that what you think a web page's "source code" is
for? For attributions?

ROFLMAO!

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.2
Comment: http://www.queenofcyberspace.com/laura_fredericks.asc

iQA/AwUBP9v1XaRseRzHUwOaEQKnFACgwpJC8B2Feut4N9N/DpWnIegVibYAoN7Y
eLVVXw+3bls+b7nN+hESKOYV
=7qIF
-----END PGP SIGNATURE-----

--
Laura Fredericks
PGP key ID - DH/DSS 2048/1024: 0xC753039A

http://www.queenofcyberspace.com/usenet/

Remove CLOTHES to reply.

Posted by NewGyi on December 14th, 2003



"Guillermito" <guillermito@pipo.com> wrote in message
news:rv8ntvclbt6iarl7ebdakirpmqaj0c22lm@zobi...

I didn't see anywhere that he said he created it? I also do not see anything
wrong with his copying a POC expressly seeing as how he left the original
creators url to be pulled into the POC he put on his web site. Maybe if
more people were to copy POC's and put them up in more then one place then
others could find and be equipped to not be take advantage by them. If the
POC's are only on a page that very few know about then what is the point?
I (and a thing quite a few others) do NOT thing of Sugien as what you
and Laura and maybe a few others do; but we rather applaud his efforts. I
also thing that every one has taken code from everyone else and what you and
others can't stand is only that Sugien says he has done nothing wrong (and
he has not) and you and they can't stand it, that he had acquired a sort of
web fame by standing on the shoulders of midgets, and you and Laura are only
mad because you are not as famous or well liked as he/she is.
I have lurked here and other UseNet groups for some time and personally
I wish there were quite a few more like him. Even one of his worse
detractors (4Q) says that Sugien has not done any more code ripping then
that any other coder has it is just as 4Q says Sugien is just so "in your
face" with his "I have done nothing wrong"
Maybe if you and others would get off his case and spend more time
looking in your mirror and as the old saying goes "Let he that is without
sin cast the first stone". Maybe Sugien should just remember that if he
casts his pearls before swine he must expect for the swine to not
understand. After all afaik Sugien has never made dollar one with anything
he has ever created as he has said "Lego Style", and has only ever tried to
help people.
To my way of thinking, seeing as how he has only ever tried to help
people, I could care less how or where he got the code. If he ripped the
code from publicly available free source code and then creates something
useful and gives it away, I for one do not care if he doesn't credit the
original authors; because in this day and age of programming who is to say
who created something FIRST?


by the way
I figured I would post a LONG post; because , well just to see who would
say what, lol who knows maybe I will be accused of being the <cough> master
programmer/coderipper extraordinaire.



Posted by NewGyi on December 14th, 2003



"Laura Fredericks" <anonomiss@CLOTHEShotmail.com> wrote in message
news:qo2ntv033b2kva7gbn7vuhn98e82e78mor@4ax.com...
if that is the case then how do you know about it? because you sound like
you have less then half a brain

maybe he thought it was important enough to place on more then one! page

As long (quite some time; but now I choose to make my presence known) as I
have been lurking I have NEVER seen him even remotely act like he thinks
himself to be some kind of know it all; but only that he sincerely seems to
want to try and warn people. What's the foul? even his arch enemy 4Q says
on his page that Sugien has not done anything more then any other programmer
has ever done and that the only thing Sugien gets into trouble with you and
others is because Sugs' is just so in your face with "I have not done
anything wrong" and that I think is what rubs people the wrong way. Even
though he hasn't in my opinion done anything wrong or that any other
programmer has not, he just rubs you and others the wrong way; because you
think he may be gaining some limited fame for trying to help folks for free
that you and some of your cronies either can't or won't


Did you read something in his post that I could not see? I did not see
anywhere he said anything remotely resembling his having discovered it. The
source cited in the source where it should be.


Get off the guys back. Just because his posting style is not what you think
it should be what is the problem? How could he insult something
(intelligence) that by your comments you show you do not have?

I have followed this Sugien thing for some time and I have never found
anything that he has done that any other programmer hasn't. As for
plagiarism, how can you say that when you admit to STEALING screen captures
from his web page that says is not allowed and then create a page using
them? True plagiarism and stealing like you did are two different things.
I think you are more of a thief for stealing his copyrighted content and
then your admitting to stealing them and then warning anyone that views your
page to not do likewise and for them to not steal his stuff like what you
have. One other thing on his being a plagiarist, if I remember correctly
the person which Sugien was accused that of, posted saying he did not and I
read the local paper in which Sugien admitted the mistake and printed a
correction. Printing a correction sounds honorable to me and had he
intended to do then he would to my way of thinking never have had his column
print a correction.



Posted by Mal on December 14th, 2003


NewGyi wrote:


The original finder of a security vulnerability should be credited with
finding it.

Just copying it and repasting it somewhere else deprives them of the
credit/reputation they deserve for finding the issue.

While I don't agree with the original finder telling Microsoft the same
day they posted the POC to a security mailing list, I still feel that
they should get due credit for their research.

At the very least Sugien should have put something on that page advising
the source of the original POC, and having a link back to the original
finder's site.

Posted by Mal on December 14th, 2003


NewGyi wrote:

Interesting posting style. I for one will say that you may not be
Sugien, but have a lot of similarities with him:

http://groups.google.com/groups?num=...=Google+Search

Is the most obvious one that I found.

I could point out more similarities in the writing styles... but have
better things to do today.

Posted by James Egan on December 14th, 2003


On Sat, 13 Dec 2003 21:21:44 -0800, Bart Bailey <me2@privacy.net>
wrote:

The syntax and style bears closer resemblance to that of the poster
Buggar_Off but he hasn't been heard of for close on two years. Maybe
he's back with a different nym.


Jim.


Posted by Guillermito on December 14th, 2003


Bart Bailey <me2@privacy.net> wrote:

The IP too

NNTP-Posting-Host: 209.173.164.134

Which resolves to: chil-3com-1-cs-636.dial.bright.net (OH)

(Sounds like Chillicothe, heh?)

Looks like Soooge got a new ISP at bright.net two days ago to replace
or complement his usual adelphia.net. Then he did the obvious first
thing to do, before trying new nicknames: a test post.

http://groups.google.com/groups?selm...u tput=gplain

From: "Sugien" <dinosoftSTUPIDCOMMENTS@adelphia.net>
NNTP-Posting-Host: 209.173.164.136

Indeed. I love people who speak about themselves in the third person.
It tells a lot about how they construct a delusional universe around
themselves, because the reality does not seem good enough for them.

The good thing with Soooge is that he is easy to trace. Even if he
used a proxy or a remailer, the obvious thing to do to avoid being
traced, I'm sure I could code an heuristic detector of Sugien posts,
just from, as you said, the syntax and spelling

--
Guillermito
http://www.guillermito2.net

Posted by FromTheRafters on December 14th, 2003



"James Egan" <jegan@mailinator.com> wrote in message news:4rdotvkn6pv8hhsaev9mp7rnc8b1qfkkgu@4ax.com...
<Mr. Spock voice>

Right you are, Jim ~ fascinating....

</Mr. Spock voice>

Both were very "sugienesque".

Can anyone translate..

"Maybe if more people were to copy POC's and put them up in
more then one place then others could find and be equipped to
not be take advantage by them."

....into English?

It indeed looks as if Buggar_Off has buggared back.

...as for Sugien's post, it sure beats an AVG update notification. ;o)




Posted by Smitty on December 14th, 2003


Bart Bailey wrote:
Sort of like your use of "Damn Straight" and "Nadie Ninguno" 'nyms, eh
bin-Bailey? I nominate Bart as 2003's internet Kook of the Year!
--
Produced by Alan Smithee

Posted by Gabriele Neukam on December 14th, 2003


On that special day, Laura Fredericks, (anonomiss@CLOTHEShotmail.com)
said...

Now, now, Laura, if you let him down that hard, it will hurt him :-? Be
nice and tell him how to try harder.


Gabriele Neukam

Gabriele.Spamfighter.Neukam@t-online.de


--
Ah, Information. A good, too valuable theses days, to give it away, just
so, at no cost.


Similar Posts