The author implies that the whaops hackers had their own malware, written in Delphi, to do the on-lan redirection.
Yeah, and on rereading the original article, the hack was just guessing the passwords to admin AIM accounts. I hope it wasn’t mine! From my perspective that is “works as designed”. I don’t think the TFA was ever put into AIM login, but it was all a while ago. But anyways, nice to seem one of the dumb names I came up with in the press. I also wrote wam (web authentication module), Hermes (messenger of the Gods - like buddy list but where users could add data sources to the list, with filters or alarms), Ewoks (“external web Oscar knowledge server”, an http server that allowed for easy integration into the server message framework we used) and re-wrote morf “master Oscar registration facility”. The original was a custom written no-SQL DB and we moved it to Sybase with sharding.). All C. All event loop based. All really solid infrastructure written by people doing it for the third time. Fun times. Had an actual agile process and brought the coolness of the internet to many people for the first time.
Don't forget that PayPal's original idea was a Palm Pilot app that replaced all those pesky hardware tokens.
Presumably PayPal were intending to do an app + hardware module - or was this essentially "LeT's MaNaGe RSA KeYs UsInG NoN MeMoRy PrOtEcTeD CoMmOdItY HaRdWaRe RuNnInG a NoN SaNdBoXeD KeRnEl"?
In retrospect, this would have been at least as good as the real securid dongles.
Also by then, the super genius software folks started getting replaced by MBAs who would rather developers be idle than work on stuff that wasn’t prioritized.
And I don't know if these things had protections against being opened anyway.
Waiting for the code to roll to get through a couple jumphosts is pretty excruciating.
Did a super quick search and found some real throwbacks:
It's amusing to think back at how hilariously insecure the entire platform was. Really crazy in retrospect. I made so many friends then, don't know what you have until it's gone.
I even stole juberti's name and took "Justin" (aim only account) until it was frauded by opsec44 at the behest of a snitch very late to the game calling himself "defiant"
Kim zetter wrote about our antics 20 years ago I am just posting this here because the title is misleading and is demonstrative of the author's ignorance and absence from the scene given we dont know each other and I consider myself aoleet in a very very small circle. I know dime (Dave) and his brother that's mentioned in the article. My boy helped him write his fdo token scanner in addition to making his own *toolZ. I do not know this author.
Nice pictures but they are not even his. Clout chaser.
E: The author is kevin/pad. A groupie from conferences with no technical apitutde. U may know him as the founder of the Minerva token which got owned (since technically inept)
Anyway, read this article like it was written by a groupie and not an authority on the subject /active participant.
When cryptome.org got defaced and hacked we were monitoring pad snitching in email@example.com emails from firstname.lastname@example.org.
Clout chaser and groupie for sure
There are no more new AOLers and those with fun memories associated with the platform are always going to be more special to me than many others just because that's where I learned to computer and I've many delightful experiences there.
Let's clarify everything since you are a liar.
> We (dfntsc) hacked Cris,Merlin, Gandalf, and whaops.
You hacked CRIS and Merlin like everyone else. You never popped WHAOPS. Ever. I'd need a more reliable source than you - you're a known liar and you've only publicly proven it ITT.
> The author is kevin/pad. A groupie from conferences with no technical apitutde.
I rarely if ever hung out in SE/phreaker conferences with you skids. After my time. You mean to imply that the second you popped up I was a groupie? You were brand new, and you've never left that category in my mind because your skills haven't progressed. I have no technical aptitude? The same week I turned in a Slack RCE you were bragging about simple XSS on Twitter. You've always been a charlatan.
> Anyway, read this article like it was written by a groupie and not an authority on the subject /active participant.
A groupie? Not an authority on the subject? I've been in contact with Dime about the post. Since you "know" him - ask him yourself. Then ask him whether he sent me his Delphi browser for my own personal use around the time WHAOPS got popped.
> When cryptome.org got defaced and hacked we were monitoring pad snitching in email@example.com emails from firstname.lastname@example.org.
You dumbasses used my website as a launchpad to claim the defacement.
Nobody ratted on you.
Someone, other than me, e.g. not "email@example.com" emailed the cryptome guy a URL to your thread. I had to shut down yayo.org with a disclaimer saying we didn't endorse illegal activity. Nobody wanted skid heat from a website defacement. You idiots were barely allowed to hang out with us as is and cryptome only sealed the deal. Never change Justin. Apologies to the rest of you for the AODrama - but I felt obligated to reply to this disgruntled lunatic and his readers with some unbiased clarification based in reality. You've always been a pain in my ass, dude. Get off my jock once and for all. The cognitive dissonance involved in you calling me a groupie.
and not for nothin' we're in our thirties null - but i'll happily go back and forth with you if you want brokeboi
Commenters here need to follow the rules regardless of how wrong someone is or you feel they are—maybe you don't owe them better, but you owe this community better if you're participating in it. Our goal is to be a web forum that doesn't eventually fry itself the way they usually do.
this guy is baiting me
that is what gaslighting looks like
this guy wasn't even around yet when whaops was hacked by dime. that's how new he is. i've been chatting with dime and he confirmed his friend didn't "help him code" anything
"null" here is slandering me over a personal beef spanning 15 years, and on reddit he was doing it in conjunction with xyrix and/or virus - due to the same 15+ year personal beef i have with that whole crew - or they have with me, rather. they follow me around the internet and attack like hyenas when i write or do anything public facing. these dudes are factually obsessed with me and i'm still not entirely sure why. it's flattering at least
null, you're not an authority on some shit you weren't even around for. calling me a groupie spectator to aol hacking, or to imply i didn't surf lan and wreck 500 - 1,000+ ints throughout my ao-career. you're out of your mind. nobody actually in the know would make the claim that pad wasn't deeply involved in ao-hacking. i was there in 1997 loading up punters for aol 2.5 - whereas you didn't come around until 2004. an authority. ha
as far as what's written about me - none of it was planted, or because i was caught for ridiculous bullshit like bothering celebrities and people with lexnex xs
Btw: anyone know where hypah is these days?
Note the "Customer account search" with which you can easily find anyone who has ever used Amazon.
ah yes, IRC