Re: Prosba o pomoc z Optimus Net ( friko.onet.pl) - ktos mnie zapisal do 1000 list dyskusyjnych na Deja.com

Autor: Jacek (expert_at_friko1.onet.pl)
Data: Thu 05 Aug 1999 - 17:30:35 MET DST


Majster wrote:
>
> Jacek <expert_at_friko.onet.pl> wrote in message
> news:37A88796.3A61_at_friko.onet.pl...
> > Prosba do Optimusa Onet Friko
> >
>
> No nie, od miesiąca się tak nie uśmiałem.
> No Jacuś. Lubisz pisać, polubisz i czytać.
>
> Majster.
Sluchaj Majster,
twojej pomocy i rady mi trza.

Ta mozliwosc zapisania kogos do 1000 grup dyskusyjnych, obslugiwanych
przez Deja.Com
to jest najwieksza odkryta przeze mnie security hole w internecie
od 5 lat.

Sam Deja.Com uniemozliwia taka operacje, gdyz subskrypcje do Deja.Com
(List.deja.Com) trzeba potwierdzic ze swojego konta.
Do kazdej grupy oddzielnie.

Poniewaz tego nie robilem i sie nie zapisywalem
to sa 3 opcje.

Hacker wszedl na konto friko.onet.pl i zapuscil program ktory zapisywal
i potwierdzal zapisanie sie ( wymaga praw dostepu administratora friko )

2. List.Deja.Com ma bug i automatycznie zapisuje ludzi , ktorzy wchodza
na portal

3. Serwer przesylajacy ten mail-bombing @borg.byd.top.pl
ma czlowieka z softem, ktory moze zapisywac ludzi do tysiecy grup do
Deja.Com

Gdyz z tego serwera otrzymalem kilka postow od Michala :
j.nizej, a caly ten spam i mail-bombing idzie przez ich serwer.

czekam na odpowiedzi i wyjasnienia.

Received:
                                     by friko1 (mbox expert) (with Cubic
Circle's cucipop (v1.31 1998/05/13) Thu Aug 5 14:22:52
                                     1999)
                             X-From_:
                                     errors_at_list.deja.com Wed Aug 4
13:56:38 1999
>From errors_at_list.deja.com Wed Aug 4 13:
                                     56:37 1999
                            Received:
                                     from borg.byd.top.pl
([195.117.74.5]:53777 "EHLO borg.byd.top.pl" ident: "root") by
friko.onet.pl
                                     with ESMTP id <1553339-8728>; Wed,
4 Aug 1999 13:56:17 +0200
                            Received:
                                     from ivpm1.dejanews.com
(vpm1.deja.com [208.10.192.63]) by borg.byd.top.pl (8.8.8/8.8.8) with
                                     SMTP id NAA09131 for
<xyva666_at_topnet.pl>; Wed, 4 Aug 1999 13:47:50 +0200 (CEST)
                                     (envelope-from
errors_at_list.deja.com)
                                Date:
                                     Wed, 4 Aug 1999 13:47:50 +0200
(CEST)
                          Message-Id:
                                    
<199908041147.NAA09131_at_borg.byd.top.pl>
                                Path:
                                    
nntp1.deja.com!nnrp2.deja.com!nntp2.deja.com!news.maxwell.syr.edu!news.icm.edu.pl!not-for-mail
                                From:
                                     "Michał 'CreeD'
Szostakiewicz"@borg.byd.top.pl
                                  To:
                                     unlisted-recipients:; (no To-header
on input)
                      X-Mozilla-Status:
                                     0001

" <=?iso-8859-1?q?"micha=b3_'creed'_szostakiewicz"=0d?=>
Subject: Re: faq
Date: Tue, 3 Aug 1999 01:51:30 +0200
Organization: http://news.icm.edu.pl/
Lines: 21
Message-ID: <7o5b87$r76$4_at_sunsite.icm.edu.pl>
References: <OPHl3.2462$D4.40613_at_news.tpnet.pl>
<3797A28B.57C23BED_at_kki.net.pl> <slrn7phb4j.a82.jp_at_localhost.localdomain>
<379B7938.2B856573_at_kki.net.pl> <slrn7po873.52c.jp_at_localhost.localdomain>
<379D7919.FAB1793_at_kki.net.pl>
NNTP-Posting-Host: pb146.warszawa.ppp.tpnet.pl
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Trace: sunsite.icm.edu.pl 933638215 27878 212.160.53.146 (2 Aug 1999
23:56:55 GMT)
X-Complaints-To: abuse_at_news.icm.edu.pl
NNTP-Posting-Date: 2 Aug 1999 23:56:55 GMT
X-Newsreader: Microsoft Outlook Express 4.71.1712.3
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.1712.3
Errors-To: errors_at_list.deja.com
To: "pl.comp.demoscena_at_list.deja.com" <pl.comp.demoscena_at_list.deja.com>
Reply-To: "pl.comp.demoscena_at_list.deja.com"
<pl.comp.demoscena_at_list.deja.com>

 Message from the Deja.com forum:
 pl.comp.demoscena
 Your subscription is set to individual email delivery
 oO---------------------------------------------------------Oo
 SPONSOR
 No gimmicks - just great value! Long distance with Qwest.
 State-to-state calls 9c cents a minute, all day, every day with NO
 monthly fee. Sign up today and start experiencing the difference.
 http://gp1.deja.com/emc?id=1002485&site=dn.vpmail
 oO---------------------------------------------------------Oo

 _____________________________________________________________
 Deja.com: Share what you know. Learn what you don't.
 http://www.deja.com/
 * To modify or remove your subscription, go to
 http://www.deja.com/edit_sub.xp?group=pl.comp.demoscena
 * Read this thread at
 http://www.deja.com/thread/%3C7o5b87%24r76%244%40sunsite.icm.edu.pl%3E

i drugi:
Received:
                                     by friko1 (mbox expert) (with Cubic
Circle's cucipop (v1.31 1998/05/13) Thu Aug 5 14:22:18 1999)
                             X-From_:
                                     errors_at_list.deja.com Wed Aug 4
13:58:50 1999
>From errors_at_list.deja.com Wed Aug 4 13:
                                     58:48 1999
                            Received:
                                     from borg.byd.top.pl
([195.117.74.5]:65041 "EHLO borg.byd.top.pl" ident: "root") by
friko.onet.pl with ESMTP id
                                     <1553508-8728>; Wed, 4 Aug 1999
13:57:02 +0200
                            Received:
                                     from pilnet.pila.top.pl
(root_at_pilnet.pil.pl [195.205.225.2]) by borg.byd.top.pl (8.8.8/8.8.8)
with ESMTP id NAA09238
                                     for <xyva666_at_topnet.pl>; Wed, 4 Aug
1999 13:48:35 +0200 (CEST) (envelope-from errors_at_list.deja.com)
                            Received:
                                     from ivpm3.dejanews.com
([208.10.192.61]) by pilnet.pila.top.pl (8.9.3/8.9.1a) with SMTP id
OAA47440 for
                                     <xyva666_at_topnet.pl>; Wed, 4 Aug
1999 14:00:00 +0200 (CEST)
                                Date:
                                     Wed, 4 Aug 1999 14:00:00 +0200
(CEST)
                          Message-Id:
                                    
<199908041200.OAA47440_at_pilnet.pila.top.pl>
                                Path:
                                    
nntp1.deja.com!nnrp2.deja.com!nntp2.deja.com!logbridge.uoregon.edu!hammer.uoregon.edu!news.icm.edu.pl!not-for-mail
                                From:
                                     "Michał 'CreeD'
Szostakiewicz"@pilnet.pila.top.pl
                                  To:
                                     unlisted-recipients:; (no To-header
on input)
                      X-Mozilla-Status:
                                     0001

" <=?iso-8859-1?q?"micha=b3_'creed'_szostakiewicz"=0d?=>
Subject: Re: Offtopic: Winda, Linuch i cala reszta.
Date: Tue, 3 Aug 1999 01:51:49 +0200
Organization: http://news.icm.edu.pl/
Lines: 20
Message-ID: <7o5b8q$r7l$4_at_sunsite.icm.edu.pl>
References: <1207174049_at_rape.muzz.org>
<OIWn3.17429$D4.248763_at_news.tpnet.pl> <slrn7q16oq.sc.nova_at_rape.muzz.org>
NNTP-Posting-Host: pb146.warszawa.ppp.tpnet.pl
Mime-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
X-Trace: sunsite.icm.edu.pl 933638234 27893 212.160.53.146 (2 Aug 1999
23:57:14 GMT)
X-Complaints-To: abuse_at_news.icm.edu.pl
NNTP-Posting-Date: 2 Aug 1999 23:57:14 GMT
X-Newsreader: Microsoft Outlook Express 4.71.1712.3
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.1712.3
Errors-To: errors_at_list.deja.com
To: "pl.comp.demoscena_at_list.deja.com" <pl.comp.demoscena_at_list.deja.com>
Reply-To: "pl.comp.demoscena_at_list.deja.com"
<pl.comp.demoscena_at_list.deja.com>

 Message from the Deja.com forum:
 pl.comp.demoscena
 Your subscription is set to individual email delivery
 oO---------------------------------------------------------Oo
 SPONSOR
 No gimmicks - just great value! Long distance with Qwest.
 State-to-state calls 9c cents a minute, all day, every day with NO
 monthly fee. Sign up today and start experiencing the difference.
 http://gp5.deja.com/emc?id=1002485&site=dn.vpmail
 oO---------------------------------------------------------Oo

 _____________________________________________________________
 Deja.com: Share what you know. Learn what you don't.
 http://www.deja.com/
 * To modify or remove your subscription, go to
 http://www.deja.com/edit_sub.xp?group=pl.comp.demoscena
 * Read this thread at
 http://www.deja.com/thread/%3C7o5b8q%24r7l%244%40sunsite.icm.edu.pl%3E



To archiwum zostało wygenerowane przez hypermail 2.1.7 : Tue 18 May 2004 - 18:50:33 MET DST