Slashdot Mirror


Anonymous, People's Liberation Front Build Anonymous Data-Sharing Site

suraj.sun writes with these snippets from an article at Ars Technica: "Hacker group Anonymous and the People's Liberation Front have created a data-sharing site called AnonPaste.tk, meant to host pastes of code and other messages without any moderation or censorship of the information posted. The new site, which uses a free .tk web address, allows users to set a time for the paste to expire. It claims that data is encrypted and decrypted in the browser using 256 bit AES, so the server doesn't see any of the information included in the paste.The site says it's taking donations in the form of WePay or BitCoins. ... AnonPaste is built using open-source software called ZeroBin, created by French developer Sebastien Sauvage. According to Infoweek Sauvage has experience in creating online authentication systems for French banks, suggesting the creator knows a thing or two about encryption of data. Still, on the software's information page, Sauvage reminds potential users that ZeroBin software can not protect against potential Javascript attacks. 'Users still have to trust the server regarding the respect of their privacy,' he says. 'ZeroBin won't protect the users against malicious servers.'"

137 comments

  1. Honeypot by Anonymous Coward · · Score: 0

    Not that I trust so-called "Anonymous" in any way, shape or form, but I trust governments even less

  2. .tk, seriously? by jamesbrx · · Score: 5, Insightful

    This site will get it's domain removed faster than I can post this comment. The .tk admins have a long history of blatantly removing anything that might cause trouble, are porn and/or hijacking domains that are popular. Great choice there, indeed.

    1. Re:.tk, seriously? by The+MAZZTer · · Score: 2

      .tks are just frames to another site. So just bookmark the real one if you're concerned about the .tk breaking.

    2. Re:.tk, seriously? by smi.james.th · · Score: 1

      I suspect that it was because .tk is free... If they wanted to pay for a domain, then some Anonymous member would likely have to give up some personal details... (Disclaimer, haven't read TFA so what I said could be complete bull.)

      --
      One thing I know, and that is that I am ignorant...
    3. Re:.tk, seriously? by cloricus · · Score: 3, Insightful

      Why would they want to take down what may become the most effective honey pot in history?

      --
      I ate your fish.
    4. Re:.tk, seriously? by Anonymous Coward · · Score: 5, Funny

      They should have set their servers up in Judea.

    5. Re:.tk, seriously? by Anonymous Coward · · Score: 0

      Fuck off!

    6. Re:.tk, seriously? by Anonymous Coward · · Score: 0

      They should have set their servers up in Judea.

      oh now that is quite clever, i applaud you sir

    7. Re:.tk, seriously? by rs79 · · Score: 1

      I'm a bit leery about .tk too.

      You know, we don't really need to use a domain for this. What's google's DNS server? It probably does have a domain but everyone knows it's 8.8.8.8

      Use a domain by all means. But on the main page put the current IP and make sure the website works with an IP address as well as a domain.

      A good tld to use for a domain like this is .ARPA. They never expire and they're just another TLD. If you own an IP, you have an arpa address you can use for anything you want.

      You can use one in an NS record, but I haven't yet found an icann registrar that will take .arpa as a domain, it says it's invalid (never mind it's the first tld ever)

      --
      Need Mercedes parts ?
    8. Re:.tk, seriously? by Monty+Worm · · Score: 1
      (disclaimer: I am a former employee of Dot.TK)

      The reason most domains get removed from the .tk name space is that they breach the terms and conditions that users supposedly agreed to when signing up. This includes (but probably isn't limited to): Drugs, alcohol, tobacco, sexual content, piracy, and other illegal activities.

      And in an attempt to reply to as many of the points raised in other replies as possible:

      • Most of the hijacked domains were (in the time I was there) taken down after requests by their mainstream counterparts. From what I understand, this is essentially required to hold a trademark to defend it, or delayed legal attempts to regain it may treat it as abandoned.
      • It's a full Registry/ *and* Registrar. If users only want URL forwarding, they can have it. If they want to add A, CNAME, and MX records (IP6 wasn't supported yet when I left, but that was a while back) that's another option. Your own Name Servers? Not a problem.

      Knowing the company, it'll probably remain for a few days, while the traffic builds up. Then it'll be taken down. At which stage, Anonymous will either start a massive hack attack on Dot.tk, or they'll simply create another domain name elsewhere, creating an electronic variant of whack-a-mole (close domain, another opens up)

      --
      ... and today's pet project has ... been discarded for lack of time.
    9. Re:.tk, seriously? by Anonymous Coward · · Score: 0

      They should have set their servers up in Judea.

      Splitter!

  3. Major Fail: ZeroBin requires the JavaScript by xiando · · Score: 4, Interesting

    I am NOT about to let you or your anonymous friends run JavaScript in my browser. No. That would compromise my security. The idea outlined in the summary sounds good, but the JavaScript-based implementation is bad. EPIC FAIL. Think of the Tor-users! They are not about to let their anonymity go by submitting to the evil JavaScript World Order.

    1. Re:Major Fail: ZeroBin requires the JavaScript by The+MAZZTer · · Score: 1

      If you are concerned that much about anonymity that you turn off JS when you use Tor you should probably be using the Tor Browser bundle instead to ensure you look just like any other Tor user.

      Also I doubt a Slashdot editor would let a malicious website get into an article link.

    2. Re:Major Fail: ZeroBin requires the JavaScript by Anonymous Coward · · Score: 0

      Slashdot editors? Doing some actual work? You must be new here.

    3. Re:Major Fail: ZeroBin requires the JavaScript by e**(i+pi)-1 · · Score: 2

      javascript is the best option. I would trust it more than any other implementation because is a language which by nature open source, i.e. http://www.peoplesliberationfront.net/anonpaste/lib/sjcl.js http://www.peoplesliberationfront.net/anonpaste/lib/base64.js All the encryption is done in the users browser and not on the server and one can see the code. So, download all the source files first, analyze whether there is something strange in the source and then everytime, before using the tool, check whether the source has changed.

      What I do not understand however is for what this could be useful.

    4. Re:Major Fail: ZeroBin requires the JavaScript by Anonymous Coward · · Score: 0

      The encryption uses Javascript. There really isn't another way to do that type of stuff from the browser unless you want to allow extensions or plugins, which is obviously much worse than Javascript.

    5. Re:Major Fail: ZeroBin requires the JavaScript by allo · · Score: 3, Informative

      you can have only one of them:
      - no client side scripting
      - client side crypting/decrypting

      but do not worry, javascript is sandboxed to the site's context.

    6. Re:Major Fail: ZeroBin requires the JavaScript by Tom · · Score: 3, Informative

      Javascript isn't half as evil as you make it.

      It's main failing is that it sucks for crypto. A quick reference I could dig out:
      http://www.matasano.com/articles/javascript-cryptography/

      Basically, it has several problems, the main one being that where they write "random key" in the "browser" box in their little flowchart it should honestly say "weak pseudo-random key".

      --
      Assorted stuff I do sometimes: Lemuria.org
    7. Re:Major Fail: ZeroBin requires the JavaScript by chill · · Score: 1

      Sigh...

      Long reply deleted after I read the entire page you linked to. Saved myself some embarrassment there.

      Thanks for that link. :-)

      --
      Learning HOW to think is more important than learning WHAT to think.
  4. Cool, but... by betterunixthanunix · · Score: 4, Interesting

    ...we already have lots of ways to do this. We can encrypt and post to Usenet. We can use extensions like FireGPG to encrypt on post to websites. So why use a system where we place all our trust in the service provider, which is both theoretically risky and has failed in the past:

    http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/

    --
    Palm trees and 8
    1. Re:Cool, but... by gl4ss · · Score: 1

      well yeah, but could you provide a one liner url to those?

      --
      world was created 5 seconds before this post as it is.
    2. Re:Cool, but... by betterunixthanunix · · Score: 1

      Probably not; more like one URL and a decryption key that would be pasted in somewhere. Really though, an extension like FireGPG that provides this capability would be a lot better -- I do not want to trust some server to send me my decryption program every time I want to access a file. This may even be worse than Hushmail, since any of the people who are accessing the file could be targeted; the server could merely flag the data it wants to decrypt, and wait for the first person with that URL to come along and open it.

      --
      Palm trees and 8
    3. Re:Cool, but... by elucido · · Score: 2

      ...we already have lots of ways to do this. We can encrypt and post to Usenet. We can use extensions like FireGPG to encrypt on post to websites. So why use a system where we place all our trust in the service provider, which is both theoretically risky and has failed in the past:

      http://www.wired.com/threatlevel/2007/11/encrypted-e-mai/

      Exactly.

      The other problem is it takes specialists to actually use this encryption in the context they are talking about. Anyone with the special skills to have to use this sort of encryption would exercise great caution.

      That website Anonpaste is going to have to have a darknet backend of some sort. It's also going to need a distributed decentralized DNS because governments are going to attack the DNS when they figure out they cannot DDOS the servers.

      Finally these servers have to be protected and secure. The best place to put them would be in bunkers, caves, and other hard to reach places. If they finally got up that satellite dish they were talking about launching then they could use that too.

    4. Re:Cool, but... by elucido · · Score: 2

      Probably not; more like one URL and a decryption key that would be pasted in somewhere. Really though, an extension like FireGPG that provides this capability would be a lot better -- I do not want to trust some server to send me my decryption program every time I want to access a file. This may even be worse than Hushmail, since any of the people who are accessing the file could be targeted; the server could merely flag the data it wants to decrypt, and wait for the first person with that URL to come along and open it.

      If it's a honeypot it's not going to work anyway. But honestly I don't see the PLF offering a honeypot. Anonymous and the PLF are two different entities. PLF are serious and are highly skilled while Anonymous is populated but anybody whether they are serious with skills or just teenagers looking for lulz.

    5. Re:Cool, but... by Anonymous Coward · · Score: 0

      when you post a message to usenet, it's like posting an email to any random web server: it provides a way to anyone to register your connection and therefore leave a paper trail, which is then propagated to every usenet server.

      With a HTTP interface, you explicitly connect to a single server which does not propagate by design your personal information to any number of servers. If that server puts in place security and privacy measures, you essentially have an anonymous messageboard.

    6. Re:Cool, but... by betterunixthanunix · · Score: 1

      when you post a message to usenet, it's like posting an email to any random web server: it provides a way to anyone to register your connection and therefore leave a paper trail, which is then propagated to every usenet server.

      Which is why people use these:

      https://en.wikipedia.org/wiki/Anonymous_remailer

      --
      Palm trees and 8
    7. Re:Cool, but... by Anonymous Coward · · Score: 0

      FireGPG is officially discontinued. Some people are still maintaining it on github. But nobody should use FireGPG because it's broken by design. It uses the textarea on the page for the user to input the plaintext, and only then encrypts it. Unbelievable.

  5. Almost as anonymous by Hentes · · Score: 1

    as DDoSing websites.

  6. OHAI, FBI!!!! *waves* by IonOtter · · Score: 1

    Trying another false-flag operation? Going for #Anti-Sec 2?

    --
    [End Of Line]
  7. Server cannot see the data? by Sun · · Score: 1, Insightful

    It claims that data is encrypted and decrypted in the browser using 256 bit AES, so the server doesn't see any of the information included in the paste.

    And where does the key come from? If from the server, then the data is not encrypted at all.

    Shacahr

    1. Re:Server cannot see the data? by Sun · · Score: 3, Informative

      Okay, I take it back. It seems that the reading URL contains the decryption key. That's actually quite nice.

      The key seems to be stored in the in-page bookmark (the part after the "#"), so there is even a chance it won't be available through the server's logs. I have not checked whether it is the client or the server that produces the URL for reference. That might mean a trip to the server after all, but given the design of the rest, there is hope it was done properly after all.

      Shachar

    2. Re:Server cannot see the data? by Anonymous Coward · · Score: 0

      Okay, I take it back.

      Right after getting moded up. How convenient!

      Next time before spreading FUD check your fact. Jumping to conclusion only make you sound intelligent in your head.

      Do the right thing, report your own comment for removal. (click the fag icon)

    3. Re:Server cannot see the data? by terrox · · Score: 1

      why wouldn't the # part of the URL be stored in logs? anyone with the URL and anyone looking at the URL history/logs etc can therefore unencrypt the text, this makes no sense to me.

    4. Re:Server cannot see the data? by Sun · · Score: 2

      Because the # part is intended for the local browser. It is not part of the URL sent to the server, it is intended to tell the browser to go to a certain bookmark (anchor, in HTML jargon) inside the page.

      You will notice that if you change just the part after the # and hit "enter", the browser does not refresh the page. That's because it does not think anything changed that is worth notifying the server.

      Shachar

    5. Re:Server cannot see the data? by Anonymous Coward · · Score: 0

      His first comment doesn't contain anything false, just a question. It's not FUD. FUD would be this:
      Where does the encryption key come from ? From the server of course, this is clearly some scheme to get a bunch of interesting information directly to whoever runs their site.

    6. Re:Server cannot see the data? by Anonymous Coward · · Score: 0

      Not entirely true. A website can make the browser transmit the URL fragment with an onhashchange event. Even with Javascript disabled, there is an attack vector over CSS.

  8. Oh yeah? by Rydia · · Score: 3, Funny

    Well, Anonymous is going to start their OWN pastebin! With hookers! And blackjack!

  9. Sounds a lot like nonsense by Anonymous Coward · · Score: 0

    Sorry, the whole story doesn't make much sense. If anyone can access the pastebin, then anyone can see its contents, including the server, no matter how encrypted the data is stored on it. If not anyone can access the server then it's not a public pastebin, but an encrypted fileserver and whoever accesses it would need to password first.

    1. Re:Sounds a lot like nonsense by elucido · · Score: 3, Insightful

      Sorry, the whole story doesn't make much sense. If anyone can access the pastebin, then anyone can see its contents, including the server, no matter how encrypted the data is stored on it. If not anyone can access the server then it's not a public pastebin, but an encrypted fileserver and whoever accesses it would need to password first.

      The smart way is just to encrypt your data with PGP or AES and then upload it to piratepad.

      This Anonpaste wont be useful unless you connect to it anonymously. What they are promising is they wont censor your shit if you post something tragic.

  10. Isn't "peoples" and "libertarian" together a contr by dbIII · · Score: 0

    Isn't "peoples" and "libertarian" together a contradiction? Most forms of "libertarianism" appear to me to be "I'm all right Jack and the people can just go and suffer if they didn't manage to get rich".

  11. My link by Anonymous Coward · · Score: 0
  12. Re:Isn't "peoples" and "libertarian" together a co by Blaskowicz · · Score: 1

    "liberty" and "libertarian" are separate concepts.

  13. Re:Isn't "peoples" and "libertarian" together a co by Blaskowicz · · Score: 1

    oh, I thought Palestinians did it!

    the "People's Liberation Front", which no one has ever heard of till now, can be easily mistaken for the Popular Front for the Liberation of Palestine.

  14. It's like piratepad by elucido · · Score: 1

    It claims that data is encrypted and decrypted in the browser using 256 bit AES, so the server doesn't see any of the information included in the paste.

    And where does the key come from? If from the server, then the data is not encrypted at all.

    Shacahr

    http://beta.piratepad.net/front-page/

    Actually I'd say piratepad is slightly better.

  15. There are some problems with it by elucido · · Score: 1

    I suspect that it was because .tk is free... If they wanted to pay for a domain, then some Anonymous member would likely have to give up some personal details... (Disclaimer, haven't read TFA so what I said could be complete bull.)

    But since they aren't giving us detailed technical specifications we "experts" cannot check it to determine what those problems might be. I'd like to discuss the technical specifications but I would think something like this would have to be set up with a special protocol and decentralized DNS. I would expect it to be on the darknet.

    1. Re:There are some problems with it by spydir31 · · Score: 4, Informative

      It runs on ZeroBin, which uses client side javascript to generate a random 256bit AES key, then compress and encrypt the text before sending it to the server. Comments are also compressed and encrypted. The key is never seen by the server, so the server can't decrypt your data.

      It uses the Stanford Javascript Crypto Library for its AES code, and its codebase is available on github.

      The system is vulnerable to an MITM attack, also a server admin may be able to reveal the poster's identity, but not the post's content

    2. Re:There are some problems with it by Meneth · · Score: 2

      The server operator could modify the javascript it sends to the client, so that the client sends either the key or the plaintext to a place of the operator's choosing.

    3. Re:There are some problems with it by spydir31 · · Score: 3, Interesting

      The server operator could modify the javascript it sends to the client, so that the client sends either the key or the plaintext to a place of the operator's choosing.

      That would fall under the same category as MITM in this case. You still need to trust the server (or a server, if you prefer)

      You could move the client side code to a browser addon/extension, but you'd still have the problem of trusting the extension to behave

    4. Re:There are some problems with it by elucido · · Score: 1

      It runs on ZeroBin, which uses client side javascript to generate a random 256bit AES key, then compress and encrypt the text before sending it to the server. Comments are also compressed and encrypted. The key is never seen by the server, so the server can't decrypt your data.

      It uses the Stanford Javascript Crypto Library for its AES code, and its codebase is available on github.

      The system is vulnerable to an MITM attack, also a server admin may be able to reveal the poster's identity, but not the post's content

      Revealing the posters identity is worse than revealing the posters content! That is a huge security hole.

      Also where is the key stored? Expect the government to investigate and interrogate whoever has the keys.

    5. Re:There are some problems with it by friend+function · · Score: 2

      Also where is the key stored? Expect the government to investigate and interrogate whoever has the keys.

      According to the ZeroBin website, the key is not "stored;" it is part of the URL string (which never goes to the server). For example:

      http://sebsauvage.net/paste/?e4af05540340d85a#zLtQuuHWSJgl3z12lIAJy3ZZeyTdC3dVarlGH8R+TZ4=

      You give the link to your friends. The link contains both a paste ID as well as a key. You and your friends' browsers use the key to decrypt the data for the given paste ID.

      Also, there's no inherent reason to distrust Javascript running on an "Anonymous"-run website any more than you'd distrust any other site's Javascript (or pastebin.com's, for example). In any case, the source is open (and if you have the technical ability to analyze it for holes/backdoors/weaknesses, you can).

    6. Re:There are some problems with it by TheCarp · · Score: 1

      Hmmmm yes...or javascript? Could be a bookmarklet even.

      Store it locally, so changes can't be made on the fly if the server gets 0wn3d. Individuals who really care can download the known good client from a specific source. Then they have to trust that source, but only once, and can verify their copy both at time of download and at any later date, with a simple hash.

      That removes the need to trust each server using it, and only needing to trust that you got it from a good repo where the code is being actively maintained. At some point you need to trust that the code is being reviewed and someone would eventually catch a trojan version, one way or another.

      However, thats a lot easier with one repo that many people use, than many repos that few use (which is what you have when each instance distributes its own client). Of course, then you get into versions, and updates for each client....

      --
      "I opened my eyes, and everything went dark again"
    7. Re:There are some problems with it by CodeHxr · · Score: 1

      You give the link to your friends. The link contains both a paste ID as well as a key. You and your friends' browsers use the key to decrypt the data for the given paste ID.

      So, anyone that uses it not only has a potential key stored in their browsing history (if they are a newbly-type user), but even more importantly, their ISP has a history URLs requested, which *definitely* has the key posted.

      Granted, the key is random every time and, in theory, the server should be deleting what you posted after the time you specified, but one can't really verify that and we're back to trusting the server again.

    8. Re:There are some problems with it by Anonymous Coward · · Score: 0

      No, a bookmarklet (=Javascript browser bookmark) wouldn't prevent MITM attacks because Javascript on a web page can see what a bookmarklet sees and does. The attacker could trigger an event as elements of the page are accessed by the bookmarklet, or watch for variables being changed with a setInterval, or even spoof the bookmarklet's behavior. Same for a Greasemonkey userscript. The only thing that could prevent this is blocking all scripts on the page, but that breaks most interactive websites.
      Instead of a bookmarklet, it would have to be a browser feature or browser extension with a dedicated storage and DOM that is not accessible by web pages, and a recognizable special UI that people can personalize (for example with a doodle they draw at install time) to prevent spoofing of the decryption UI by a malicious server/MITM.

    9. Re:There are some problems with it by TheCarp · · Score: 1

      Which explains why noscript blocks bookmarklets from working on pages where it isn't allowing scripts. Makes sense.

      Actually, the beginings of this sounds like FireGPG, which I believe is no longer under active development. However, it had an API to be called by scripts on sites that wanted to directly support it...however, it could easily be used by copying text and telling firegpg to decrypt it, or encrypting text with it and pasting it.

      --
      "I opened my eyes, and everything went dark again"
  16. Re:OHAI, FBI!!!! *waves* by elucido · · Score: 2

    Trying another false-flag operation? Going for #Anti-Sec 2?

    It's not that simple although I do see your point considering Sabu was their snitch. I doubt the FBI infiltrated the PLF though. PLF are far more skilled and very much professionals.

    I'll say it again, anyone who actually has a need to use encryption of this sort properly would need specialized skills to begin with. The PLF is not going to provide any sort of training. So basically if you have a need to use this then you already know how to become Anonymous on the internet. If you don't then you shouldn't be using something like this in the first place.

    And no I don't think it's about the FBI because there are intelligence agencies all around the world other than the FBI who wont like this either. It's all the global government agencies that will hate this in general. It's global government agencies vs Anonymous.

  17. If you use AnonPaste you're one of them by elucido · · Score: 3, Interesting

    According to what Pastebin says about Anonpaste just using Anonpaste could mean you have something to hide and if you have something to hide it means you need to be investigated.

    Although Anonymous has used the news of AnonPaste to taunt Pastebin, Vader isn't worried about the popularity of his own site. He does see problems with the general idea of the new paste site though. "Having this new anonymous paste service online will most likely mean that less 'sensitive information' is posted on Pastebin.com, which we like," Vader told Ars, "But we think this new totally anonymous Paste site will be used mainly by people who have something to hide, people who are posting things that really shouldn't be posted. We see no benefit for normal legitimate users to use it over the currently existing paste websites. We are afraid that this site will be bombarded with people's personal information, credit-card details, and things such as child pornography."

    If you use Anonpaste then the governments will claim you're a credit card thief, a child pornography, or a terrorist, because why else would you want to use something like Anonpaste?

    My advice is don't post on Anonpaste. Read Anonpaste but don't post a damn thing. If someone really knows what they are doing they probably don't need Anonpaste but if they somehow did then they weighed the risks already.

    1. Re:If you use AnonPaste you're one of them by sixtyeight · · Score: 1

      If you use Anonpaste then the governments will claim you're a credit card thief, a child pornography, or a terrorist, because why else would you want to use something like Anonpaste?

      Politicians are a lot less quick to use that, "Only criminals demand their right to privacy" routine after a few demands for public strip-searches.

      Interestingly, the political corruption in the U.S. is getting resolved by, of all people, the military.

      --
      The Wolfpack Project: BitCoin + Crowdfunding = Political Accountability
    2. Re:If you use AnonPaste you're one of them by Anonymous Coward · · Score: 0

      Not very long ago some people came under investigation for not having a mobile phone, or not taking their mobile phone into a meeting, meaning they couldn't be tracked. This was considered to be highly suspicious behavior and probably illegal. Soon, it will be mandatory for all new cars in the States to have black box data recorders to monitor all their movements in real time. What could possibly go wrong with that? And the next step? Probably sometime soon, people like you, elucido, will decide that it's fine for the government to surgically implant GPS trackers in everyone's heads. Why wouldn't you want them to be able to track you, after all, if you have nothing to hide?

    3. Re:If you use AnonPaste you're one of them by Anonymous Coward · · Score: 0

      This response is scary when you think about it - what a statement on how democracies are run these days.

    4. Re:If you use AnonPaste you're one of them by Pubstar · · Score: 1

      Took me a total of 5 seconds to google Anonpaste + ArsTechnica. http://arstechnica.com/open-source/news/2012/04/anonymous-builds-its-own-pastebin-like-site.ars Seriously, would it have been that hard to search for?

    5. Re:If you use AnonPaste you're one of them by mrmeval · · Score: 1

      Not posting that up front is disingenuous at best and why should I work to find it when it's something you're pushing?

      --
      I'd go on a Vegan diet but the delivery time from Vega is too long. --brownkitty
    6. Re:If you use AnonPaste you're one of them by elucido · · Score: 1

      Not very long ago some people came under investigation for not having a mobile phone, or not taking their mobile phone into a meeting, meaning they couldn't be tracked. This was considered to be highly suspicious behavior and probably illegal. Soon, it will be mandatory for all new cars in the States to have black box data recorders to monitor all their movements in real time. What could possibly go wrong with that? And the next step? Probably sometime soon, people like you, elucido, will decide that it's fine for the government to surgically implant GPS trackers in everyone's heads. Why wouldn't you want them to be able to track you, after all, if you have nothing to hide?

      I don't make those types of decisions. In fact I don't decide any of this. Don't try to pin the blame on me.

    7. Re:If you use AnonPaste you're one of them by Pubstar · · Score: 1

      Go check usernames. I was not the parent, I merely looking at the quote he used, specifically the 'Vader told Ars' part, and took a wild stab in the dark that it was ArsTechnica... you know, since they refer to themselves as Ars in their articles.

  18. Monty Python teaming up with Anonymous? by Anonymous Coward · · Score: 5, Funny

    Would that be the Peoples Liberation front of Judea or the Judean Peoples Liberation Front?

  19. Only a contradiction in US-speak.... by Ellis+D.+Tripp · · Score: 2

    Only in the US has the word "libertarian" been co-opted by the free-market uber alles, Ayn Rand worshiping, "I've got mine so fuck you!" crowd.

    In the rest of the world, the word "libertarianism" is quite similar in meaning to "anarchism". In fact, many anarchists (including Noam Chomsky) use the term "libertarian socialism" to describe their philosophy, as the term "anarchism" has been tainted with connotations of rioting, looting, burning police cars, and punk-rock wannabees.

    --
    Remember "News for Nerds, Stuff that Matters"? Help make it a reality again! http://soylentnews.org
    1. Re:Only a contradiction in US-speak.... by Anonymous Coward · · Score: 0

      Say What you socialist puke, big govmt, gimme all your shit crook?

    2. Re:Only a contradiction in US-speak.... by Mr.+Slippery · · Score: 2

      Only in the US has the word "libertarian" been co-opted by the free-market uber alles, Ayn Rand worshiping, "I've got mine so fuck you!" crowd.

      As one of Kim Stanley Robinson's characters put it, "That's libertarians for you -- anarchists who want police protection from their slaves."

      The typical usage in the U.S. is different because right-wong people opposed to the regulation of big business tried to steal the term in the 1950s. They've managed to bamboozle a lot of folks over the years, but more and more Americans are coming to realize that "libertarian capitalism" reduces in the end to nothing but plutocracy: a state powerful enough to create and enforce so-called "property rights" on the behalf of capitalists, but not to put any leash on those capitalist's exploitation of people or the planet.

      --
      Tom Swiss | the infamous tms | my blog
      You cannot wash away blood with blood
  20. Re:Isn't "peoples" and "libertarian" together a co by Anonymous Coward · · Score: 0

    libertaianism (lower case L) is a left-wing socialist anarchist movement/ philosophy that has a long history, the world over.

    Libertarianism (upper case L) is a, recently created, right-wing political party in the United States that has almost nothing in common with libertarianism as the entire world uses the term.

    The confusion was probably accidental. Since Americans are so poorly educated / unaware of history (even their own), someone probably just thought libertarian sounded good and took it, not understanding what it currently meant, nor its long history.

    *disclaimer, I am a U.S. citizen.

  21. still a problem by allo · · Score: 1

    where does the decrypting code come from?

    lets assume an attacker has the server under his control. he will not only be able to modify the scripts to send the content of the decrypted paste back, he can even send the entered password to the server.

    so its still more insecure than crypting off-browser and pasting it then. But better an encryption, which is secure most the time, than no attempt at all. You can just not guarantee, it will be encrypted or safe. So do not use it, if you know better. But encourage people who have the options to use it or do not encrypt at all, to use it.

    1. Re:still a problem by iserlohn · · Score: 1

      Actually, a much more secure version of this is https://ezcrypt.it/ with which the decryption key can also be further encrypted with a password.

    2. Re:still a problem by allo · · Score: 1

      as long as its done by javascript, which comes from this site, they may replace the javascript with a logging version. so you cannot win without using a trusted program (which should be installed locally, so nobody can secretly replace it).

  22. WTF? by kelemvor4 · · Score: 1

    I thought most of anonymous was in prison after that last big bust a month or two ago. Didn't even know they were still operating.

  23. Don't You Mean... by Jane+Q.+Public · · Score: 1

    ... the Judean People's Front?

  24. Can't tell if sarcastic or real... by Anonymous Coward · · Score: 0

    But in case of the latter, it was but a drop in the ocean. Quite frankly I believe highly publicised busts like that only serve to strengthn Anonymous "member-wise".

  25. Typical Anonymous by sixtyeight · · Score: 1

    Can someone please tell me what's supposed to be so politically edgy about creating yet another disordered, unregulated system?

    That kind of jumbling and lack of accountability is pretty much the problem with our political system, and yet Anonymous sells it as subversive and avant-garde. It's not.

    Then when you ask Anonymous what it thinks it's trying to accomplish, rather than sending you a sheaf of redacted government memos they just tell you, "There is no such thing as Anonymous." If life were a party, Anonymous would be the geeky attention-seeking teen off in the corner snorting handfuls of GHB.

    It'd be nice if groups "there's no such thing as" didn't make headlines so often. I can't take them seriously.

    --
    The Wolfpack Project: BitCoin + Crowdfunding = Political Accountability
    1. Re:Typical Anonymous by Anonymous Coward · · Score: 0
      Don't you have a facebook wall to go post on?

      Can someone please tell me what's supposed to be so politically edgy about creating yet another disordered, unregulated system?

      Explain your sig then:

      The Wolfpack Project [bit.ly]: BitCoin + Crowdfunding = Political Accountability

    2. Re:Typical Anonymous by Anonymous Coward · · Score: 0

      The problem is not lack of accountability in the political system.

      The problem is that the people in the political system want to force the rest of us to be always accountable, while they themselves keeping the luxury of unaccountability.

      Anonymous is about levelling the playing field: Allow everyone, not just those in the political system, to be unaccountable.

    3. Re:Typical Anonymous by sixtyeight · · Score: 1

      The problem is that the people in the political system want to force the rest of us to be always accountable, while they themselves keeping the luxury of unaccountability.

      We appear to be using two different definitions of "accountability".

      People used to be accountable to themselves and each other - and through them, the law. If you violated rights, you had to make amends or become an outlaw. Laws were made to uphold standards of rights and values that people had in common - they were a formalized system of basic human decency.

      In time, the representatives we delegated to maintain that system turned the concept of "accountability" on its ear, pretending that they, as public officials, were entities in and of themselves - with an agenda all their own. So today, people often think of "accountability" only in their redefined, bastardized usage: accountability to the whimsical edicts of legislators. But this is the idea of accountability being made to stand on its' head. There is no accountability without self-accountability, just as there is no control without self-control. The idea of being held accountable to an arbitrary, whimsical system is the idea of being accountable to a non-system - in other words, arbitrary edicts and mandates from authority figures. Slavery. In this modern usage, "accountability" doesn't mean anything valid. It becomes a socially acceptable substitute for "slavery", and I'm not using it that way because it would be rather bizarre and unconscionable. I mean real, legitimate, true accountability.

      Anonymous is about levelling the playing field: Allow everyone, not just those in the political system, to be unaccountable.

      Chaos is just as much a threat to rights as tyranny. Is that not self-evident to you?

      It's like they're people who are tired of freezing, and so they set themselves on fire. Spectacular, but utterly useless.

      Groups like Anonymous seem to get quite a kick out of thumbing their noses at the authority figures in the room. If only they'd realize that as members of We, the People, we are the authority figures, and the politicians are required to be our representatives, they could start reasserting a legitimate, functional society. And they'd realize that doesn't happen by adopting the position of the incorrigible adolescent truant; it takes people actively being functional human beings. That's the only way you get a functional society.

      --
      The Wolfpack Project: BitCoin + Crowdfunding = Political Accountability
    4. Re:Typical Anonymous by sixtyeight · · Score: 1

      Don't you have a facebook wall to go post on?

      Touché, sir. You cut me to the quick.

      Can someone please tell me what's supposed to be so politically edgy about creating yet another disordered, unregulated system?

      Explain your sig then:

      The Wolfpack Project [bit.ly]: BitCoin + Crowdfunding = Political Accountability

      Certainly. Which word gave you difficulty?

      --
      The Wolfpack Project: BitCoin + Crowdfunding = Political Accountability
  26. Re:Isn't "peoples" and "libertarian" together a co by Jeremy+Erwin · · Score: 1

    Go see "Life of Brian."
    SPLITTER!

  27. "Great minds think alike..." by Anonymous Coward · · Score: 0

    By disallowing adbanners & javascript (where unnecessary), plus plugins I don't need? They're ALL "power-saving webpages" for me (as well as faster, & more secure).

    Additionally? Since I use what's below, I get there FASTER, SAFER, & just overall, better + more reliably...

    APK

    P.S.=> How? Simple: The custom hosts file I utilize for one!

    Combine it with judicious layered security measures like cutting the indiscriminate usage of javascript (especially where I don't need it, & same with plugins like FLASH?) - you get what I get - Faster, Safer, & better reliability (even a bit better 'anonymity' vs. tracking + DNS request logs).

    My hosts file current has 1,772,964++ entries, vs. known bad host-domain names (which IS the majority of what you use, hence the DNS system itself being in place, faults & all, as well as malware makers because these are RECYCLABLE, & the RBN was doing it like mad) & growing CONSTANTLY via a DelphiXE2 64-bit system I've rewritten for the 5th time since late 2003!

    That, & then even "layering in 'defense-in-depth'": AdBlock addons for FireFox + Opera, IE TPL's for IE...

    (Even though they're less efficient than a hosts file which is merely a filter for the IP stack running in PnP designed Ring 0/ RPL 0/kernelmode vs. browser addons running as 'extra-weight' on usermode/ring 3/rpl 3 webbrowsers)...

    HOWEVER - AdBlock can't:

    ---

    1.) Speedup my access to sites that are my favs. as hosts can via "hardcoding" those favs entries in it

    2.) Adblock won't protect external to browser email programs (like Outlook) either...

    3.) Neither can firewalls on #1...

    ---

    Anyhow/anyways:

    Between those 3 measures (custom hosts files & using javascript + plugins where needed only & judiciously)?

    I am NOT 'burning more power, CPU cycles, RAM, & other forms of I/O (as a local DNS program would (faults in recursive mode especially) OR a separate system doing so - and of course, I get there faster, safer, & more reliably!

    "Nothing rides for free", but when I have 'passengers' that set the rest of my 'riders' @ risk, or suck up power they could use too? OUT THE DOOR THEY GO... as dead-weight - hence no local DNS server running here (no thanks, I've seen TOO MUCH of them being DNS-poisoned redirected)... but?

    I do use them, external to my system & in a "layered triumvirate zone-defense type formation", & GOOD SOLID filtering ones vs. malware, phishing, & the like:

    ---

    Norton DNS:

    198.153.192.1
    198.153.194.1
    198.153.192.60
    198.153.194.60
    198.153.192.50
    198.153.194.50
    198.153.192.40
    198.153.194.40

    OpenDNS:

    208.67.222.222
    208.67.220.220

    ScrubIT DNS:

    67.138.54.100
    207.225.209.66

    ---

    Layered into BOTH my hardware-side router(s) & my IP stack settings in Windows for DNS servers... they filter vs. known bad sites/servers/hosts-domains & IP addresses, & vs. phishing/spamming (even pr0n)...

    I use Opera 12 64-bit build 1380 & it has a FLASH only on demand option I use, and in FireFox (WaterFox &/or PaleMoon 64-bit) I use Adblock + NoScript also + IE has TPL's in place too (alongside hosts files covering them ALL in "layered-security"/"defense-in-depth" fashion), which of course saves power too & of course, keeps you "proof" vs. Adobe's FLASH (which with JAVA/javascript, are the MOST used "attack vectors" there is)...

    And... there you are!

    Oh, how could I forget this: Prepare for the "trolls" & their ad hominem attacks, & effete 'retaliation' vs. my statements here, via down moderations of this post, lol... call it a "hunch/prediction", or just a trend I've noted whenever I mention hosts files!

    Gee - I wonder what they're afraid of from hosts files, most of all?? Not... lol!

    ... apk

    1. Re:"Great minds think alike..." by Anonymous Coward · · Score: 0

      Oh, how could I forget this: Prepare for the "trolls" & their ad hominem attacks, & effete 'retaliation' vs. my statements here, via down moderations of this post, lol... call it a "hunch/prediction", or just a trend I've noted whenever I mention hosts files!

      Don't worry, we'd expect a kook who advocates the use of hosts files to "block malware" (and who's been known to write a little himself hmmm APK author of apkapp2backgrounddaemonprocessengine.exe?) to expect ad hominem attacks.

      Anyway, doofus, this is impressive. You've gone from promoting hosts files as a way to block malware sites (despite the ease with which they can be bypassed, from using wildcard DNS and dynamic hostnames - server697.awesomemalwarefromapk.com - to just using IP addresses), to actually suggesting people HARD CODE the addresses of frequently used websites in their HOSTS files.

      WTF? Did you start to believe your own propaganda about how you managed to prove all your critics were wrong (which they weren't BTW), and felt "Oh noes! People are going to take me seriously!" and started posting that for effect, or are you seriously doing that?

      Please let me know what bank you use. I'll be sure to bid on their old IP range when they next migrate to a new IP block.

  28. Addendum/Edit/Correction of myself... by Anonymous Coward · · Score: 0

    "I use Opera 12 64-bit build 1380 & it has a FLASH only on demand option I use, and in FireFox (WaterFox &/or PaleMoon 64-bit) I use Adblock + NoScript also + IE has TPL's in place too (alongside hosts files covering them ALL in "layered-security"/"defense-in-depth" fashion), which of course saves power too & of course, keeps you "proof" vs. Adobe's FLASH (which with JAVA/javascript, are the MOST used "attack vectors" there is)..." - by Anonymous Coward (ME, apk) on Sunday April 22, @01:31PM (#39763905)

    Toss FlashBlock in there too, for FireFox... sorry, was writing too fast, & didn't put it in there also!

    APK

    P.S.=> Better ME correcting myself, than some "nitpicker troll", ala "Cardinal Richelieu"... apk

  29. Sounds kinky! by Anonymous Coward · · Score: 0

    No thanks, not interested in ur "StRaNgE-PhAnTaSiEz", lol!

    * Just as I predicted - the "trolling worms" show up...

    APK

    P.S.=> For someone that tosses names the way you do, what's it like doing it as a TOTAL COWARD, by posting as ac & not even letting us know who you are? You & YOUR KIND online, & in life?? Make me LAUGH... lol!

    ... apk

  30. URL by kangsterizer · · Score: 2

    Make sure you don't put the URL that matter in the article!
    That could be thousand of ads prints for missed !

    The link is http://www.anonpaste.tk/

    1. Re:URL by kangsterizer · · Score: 1
  31. Additionally, since u called me "nerd"? by Anonymous Coward · · Score: 0

    Show us you've done this or better -> http://lemoynedolphins.com/sports/mlax/history/mlaxletterwinners

    (Check "K" section, & my name in 1985)

    * Where I was also an NCAA 1st string lettering athlete for a many time national OR divisional champion in a sport that's faster & harder than football imo & yes, I played both...

    Heck, I even scored on the many, Many, MANY time Division I national champ in Syracuse U. preventing shut outs (my school's NEVER been shut out in that sport by the by) - I played with OR vs. most of their squad in highschool & middleschool/junior high, so it only made sense I could "run with the best the nation has to offer", anytime...

    (Before I became medically ineligible after my 2nd season there due to physical problems)

    In a sport that even the GREAT Jim Brown of NCAA & NFL fame said:

    "I'd play lacrosse 6 days of the week & football on Sundays" as to what he thought of it.

    (So... "that all said & aside": You can call me "nerd" all you like, but I don't know too many "nerds" that can make the claim I just did, & back it up too - now, let's see YOU do the same... ok? Good luck... I have the feeling you can't...)

    APK

    P.S.=> Of course, you're also posting as a TOTAL anonymous coward, & that speaks WORLDS of your nature (trolling worm, nothing more)...

    ... apk

  32. Wait... by flibbidyfloo · · Score: 1

    Is it the Judean People's Liberation Front, or the People's Liberation Front of Judea?

  33. Woao. by sebsauvage · · Score: 3, Informative

    Woao. My name on the front page of Slashdot. Now I can die. :-D

    If you don't trust AnonPaste, you can just install ZeroBin (the opensource software AnonPaste is based on) on your own website.

    1. Re:Woao. by Anonymous Coward · · Score: 0

      Nice work. Have you considered adding support for CCM/OCB2 for message authentication?

  34. WoW... U have "issues"! apk by Anonymous Coward · · Score: 0

    "Let me guess, your asshole ruptured because you let some huge, hung nigger give you a harsh dicking and it destroyed your anus for good. How close am I?" - Anonymous Coward on Sunday April 22, @03:13PM (#39764789)

    See subject & as I suspected: U called me "nerd" but you can't do THAT anymore, now can you?

    ANSWER = No Sir...

    * Additionally - on how you called me a "nerd" & said some very "StRaNgE" things earlier, indicative of your "tastes" (lol)?

    Well... I don't see you having done any better on that account of athletic performance either, per my question I put to you, so... "proof's-in-the-pudding" that you're "projecting" w/ the name you called me!

    Only problem is, I'd wager you haven't done well on the 'nerd front' either... lol!

    I've also done "pretty OK" in my time in the computer sciences arena also!

    (After all, you obviously haven't done well athletically & I have in my past... so your calling me a nerd here -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39764523 ? Your point is "moot", & typical of your always FAILING off-topic illogical ad hominem attack attempts, that fail as per your usual, in the light of facts I put up here vs. your 'accusations' -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39764709 )

    APK

    P.S.=> Quit projecting, do something useful w/ your time instead of being a troll (& not just ANY type of troll - the "lurk & stalk + harass by ac posts variety", lol, the 'lowest' of the breed in fact)...

    ... apk

    1. Re:WoW... U have "issues"! apk by Anonymous Coward · · Score: 0

      Like I have to prove myself to some idiot host-file faggot who gets his assrammed by bull-nigger nightly (you have admitted this before and are now trying to cover up your history because you don't want the news of your AIDS to spread before you can infect more little faggots).
      And just for your information, you pathetic geek, I was an alternate in the 1978 olympics in ribbon twirling. So stick that up your ass and massage your fucking prostate with it before you call me a weakling again, nerd.

  35. And don't forget Wikileaks' connections, please by sgt_doom · · Score: 1
    And lest anyone forgets, because it's supposed to drag out forever, Anna Ardin (a k a Anna Bernardin), the accuser of Wikileaks' Julian Assange, worked for (and may still work for them) the Bonnier family through one of their tabloids, while the two sisters of Claes Borgstrom (one of the two partners of the law firm representing Anna Ardin in trying to get Assange extradited to Sweden) work for the Bonnier family, and Thomas Bodstrom (the other partner of that law firm, who was the Justice Minister of Sweden who colluded with the American CIA to extreme rendition to innocent Arab-Swedes, later exonerated in court) publishes through the Bonnier family.

    Oh yeah....and presently Thomas Bodstrom and family are living a short drive from the CIA's HQ in Northern Virginia, USA.

    1. Re:And don't forget Wikileaks' connections, please by squiggleslash · · Score: 1

      And Assange works for RT, Russia's state-owned Putin-controlled Fox News equivalent.

      It might be best to ignore the figureheads, and concentrate on the content.

      --
      You are not alone. This is not normal. None of this is normal.
  36. Sounds great. by caluml · · Score: 1

    Sounds great.

    Now, how can I be sure that the Javascript executing in my browser, a:. isn't malicious, and b:, hasn't been intercepted and changed by someone in the middle?

  37. Prove it then (& sorry to disappoint you but.. by Anonymous Coward · · Score: 0

    "Like I have to prove myself to some idiot host-file faggot who gets his assrammed by bull-nigger nightly" - by Anonymous Coward on Sunday April 22, @06:30PM (#39766081)

    You've already proven yourself in all your posts (as a "ne'er-do-well" & troll... nothing more) - & please: QUIT PROJECTING on things that obviously have happened to yourself, since you "harp on it" constantly in your replies here!

    ---

    "(you have admitted this before and are now trying to cover up your history because you don't want the news of your AIDS to spread before you can infect more little faggots)." - by Anonymous Coward on Sunday April 22, @06:30PM (#39766081)

    LOL - Well... Sorry to disappoint you: I don't have AIDS, and I am not a homosexual, so... go "find yourself another dish - I am NOT ON THE MENU", lol...

    ---

    "And just for your information, you pathetic geek, I was an alternate in the 1978 olympics in ribbon twirling." - by Anonymous Coward on Sunday April 22, @06:30PM (#39766081)

    Ok, see my subject-line above - Prove it!

    Man... that's all I've ever asked of you - you never do though... I can say I am Mr. Bill Gates too, you know? However, I don't.

    ---

    "So stick that up your ass and massage your fucking prostate with it before you call me a weakling again, nerd." - by Anonymous Coward on Sunday April 22, @06:30PM (#39766081)

    First of all - you're VERY "StRaNgE"... lol!

    Secondly?

    Ahem: WHERE DID I CALL YOU A "WEAKLING"?

    Hmmm??

    (You're either hallucinating, or you have issues (which I am fairly certain by this point you do on several levels, many of which you project here constantly)).

    * That you're bitter about your life is also quite evident as well... & good luck proving your statement above is all I can say to you by this point.

    APK

    P.S.=> Whose fault is THAT though, on both accounts per the above (being a "ne'er-do-well" & obviously projecting + bitter about your obviously wasted life)? Your own - nobody else's... apk

  38. Re:Prove it then (& sorry to disappoint you bu by Anonymous Coward · · Score: 0

    Are you calling me a liar, you semen drinking cock addict? How fucking dare you! It's bad enough that you continue to come on here and tell us all about your faggot exploits and having sex with niggers in truckstop restrooms, but now you challenge the fact that I am a professional athlete and call me a loser? Well FUCK YOU, you hopeless faggot. I could sue you for libel you know. When Jesus comes back you will be thrown into the lake of fire to burn for all of eternity unless you pull your fist out of your boyfriends ass and repent right now and apologize to me right away.

  39. Re:Prove it then (& sorry to disappoint you bu by Anonymous Coward · · Score: 0

    You're losing it.

  40. Ca y est Seb ! Tu y es !! by lexa1979 · · Score: 1

    Congratulation Sebastien for finally making it on Slashdot !! Ca ne te fait pas l'effet d'un gateau d'anniversaire ? Au plaisir de continuer à te lire via shaarli ;0)

  41. seems down at the moment by Anonymous Coward · · Score: 0

    It seems to be timing out for me. You can use Anonb.in for your text storage as well. http://anonb.in/

  42. Re:OHAI, FBI!!!! *waves* by squiggleslash · · Score: 2

    I knew that this was a false flag operation as soon as I saw Anonymous was teaming up with the People's Liberation Front, and not the Liberation Front of the People. Splitters!

    --
    You are not alone. This is not normal. None of this is normal.
  43. Trashing a troll with facts, easily... apk by Anonymous Coward · · Score: 0

    "Don't worry, we'd expect a kook who advocates the use of hosts files to "block malware"" - by Anonymous Coward on Monday April 23, @07:59AM (#39769305)

    Hosts files work for that, because the majority of what malware makers use IS host-domain names (because they are recyclable, the RBN was notorious for it in fact).

    Hosts files also get you speed back that you pay for, and far more (not just functioning for extra layered security).

    QUESTION: How often do you see an IP address in the address bar in your webbrowsers, or in emails?? Perhaps 1/2 of 1% of the time, IF THAT???

    When you do, doesn't that signal "warning" to you???? It ought to... & then, if they're bogus, add them to a firewall rules table. Pretty simple...

    HOWEVER: Hosts files work vs. known bad hosts-domains, and they can do things firewalls & adblock can't, like:

    ---

    1.) Speedup access to your fav. sites via hardcodes of your fav. sites & blocking adbanners

    2.) Circumvent DNSBL's if unjust

    3.) Get you past tracking like DNS request logs & other trackers online too!

    ---

    Care to debate ANY of that?

    ---

    "(and who's been known to write a little himself hmmm APK author of apkapp2backgrounddaemonprocessengine.exe?) " - by Anonymous Coward on Monday April 23, @07:59AM (#39769305)

    Which I had lowered to ZERO THREAT LEVELS @ Computer Associates by passing ALL 21 QUESTIONS FOR REMOVAL they had for that... they should have removed it period (it's not even scriptable for attack - no argv/argc commandline possibles in it either).

    Computer Associates was found to be a pack of LITERAL CRIMINALS afterwards ('oddly', lol, not):

    http://www.sec.gov/news/press/2004-134.htm

    FOR ACCOUNTING FRAUD!

    Addtionally?

    Their security suite was sold off later as well, that's right...

    E.G.-> A company I worked for full-time was using it & forced us to sell it in fact, but tore up emails left & right from customers, we removed it ourselves...

    Any questions as to WHY IT WAS SOLD OFF by CA??

    This has also happened on "false positives" to some other notables, like Nir Sofer of NIRSOFT, and even Dr. Mark Russinovich of Microsoft (psexec & other pstools being abused by malwares).

    LATELY? I've proven 6 antivirus makers wrong yet again as well, & they have rescinded false positives for my new 'APK Hosts File Engine 5.0++:

    (6 Major ones in Symantec/Norton, ClamAV, Arcabit/Arcavir, Comodo, McAfee, & yes, DrWeb).

    So far?

    ---

    1.) Arcabit/ArcaVir (found it was a "false positive")

    2.) Symantec/Norton (found it was a "false positive")

    3.) ClamAV (found it was a "false positive")

    4.) COMODO (found it was a "false positive")

    5.) McAfee (in process now w/ J. Walter/D. Meier @ McAfee)

    6.) DrWeb (in process, bit of a language barrier to the Russians there)

    Of 68 total antivirus scanners that found my program "ok"!

    (ALL found it "ok" in the 64-bit model, but only those above 'flagged it' false postive, & ONLY in the 32-bit model - which I KNEW was wrong, because the code is literally 99.9% the same in both memory bounds compilations, differing only in resource strings that say "32-bit" vs. "64-bit" - this has happened to Nir Sofer of NIRSOFT as well & we discussed that much via email recently (and in the past))

    ---

    Anyhow/anyways:

    4/6 of those above so far have "retracted/recanted" their false positives on a program I wrote that another security community organization's hosting (malwarebytes/hpHosts) for me (very cool of them). The others (McAfee & DrWeb) are slow about it (McAfee, & I have a DIRECT CONTACT there name J. Walter &/or D. Meier)...

    IF ANYONE DOUBTS THIS? CONTACT: malwarebytes/hpHosts site admin Mr. Steven Burn, a co

    1. Re:Trashing a troll with facts, easily... apk by Anonymous Coward · · Score: 0

      Oh for the love of...

      You haven't addressed anything I said other than by pretending it doesn't matter. You've added to your ludicrous "Manually add hosts to HOSTS for zoomificated fast web sparkle plenty!" claim by suggesting people add real sites to it to get around DNSRBL lists (who? Sending email? Not gonna work. Receiving it? That's about the worst way of doing so, as the major list checker modules and scripts don't look at your hosts file!. I don't even know what you were trying to say with the latter.

      Hmmm, who should I trust? The security professionals at CA (it's a tad unlikely, BTW, that their programmers ran their accounting department), or the author of apkrunmalwareinthebackground.exe, whose product is blacklisted by rather a large number of anti-malware organizations, including the highly respected Thor Schrock, a world renowned computer consultant whose built up his one man operation into a multimillion dollar, and highly respected, paragon of the Nebraska business community?

      (You wrote the world infamous APK Tools in your mother's basement, correct?)

      I think the answer's fairly obvious. Don't you?

  44. Funny U avoid questions I asked (not)... apk by Anonymous Coward · · Score: 0

    See subject-line & quit avoiding questions I ask here http://yro.slashdot.org/comments.pl?sid=2802947&cid=39771369

    APK

    P.S.=>

    "Hmmm, who should I trust? The security professionals at CA (it's a tad unlikely, BTW, that their programmers ran their accounting department)" - by Anonymous Coward on Monday April 23, @02:21PM (#39773989)

    You don't READ do you?

    First - They're a pack of KNOWN criminals!

    Secondly, they're the bunch that added to the IKARUS database had to downgrade my program to ZERO THREAT LEVELS!

    Put it THIS way: Were I to write a malware? I wouldn't be SO STUPID as to leave my name in it for Pete's sake in the resource strings... lol!

    (It's not even scriptable for attack, lol), & should have removed it period AS I PASSED ALL 21 OF THEIR QUESTIONS FOR REMOVAL!

    So, what happened to them?

    LMAO - THEY'RE NO LONGER WITH COMPUTER ASSOCIATES & GOT SOLD OFF...

    Yea - "real good stuff" there, when a company DIVESTS THEMSELVES OF THAT CREW, eh? Not... lol!

    ---

    ", or the author of apkrunmalwareinthebackground.exe, whose product is blacklisted by rather a large number of anti-malware organizations," - by Anonymous Coward on Monday April 23, @02:21PM (#39773989)

    LMAO, yea, with ZERO THREAT LEVEL & again: I passed all 21 questions for removal too!

    The other "antimalware companies"? They share databases, faults & ALL!

    Please - Don't TRY to tell us no 'false positives' happen... I just caught 6 major antivirus companies (of 68 total) IN FALSE POSITIVES ON MY LATEST WARE!

    (See my last post - Did you miss THAT too? )

    Again: Funny CA took the "advice" of those "security pros", lol (not) & CA SOLD OFF THE VERY SUITE YOU SPEAK OF, too!

    They took their faulty DB as "the word of God"... well, funny "lil' ole' me" proves them wrong, eh?

    Everytime too... lol!

    Face it - CA sold off that 'security suite', because it stunk - so badly in fact, it tore up emails in a company I worked for & we had to REMOVE IT!

    (We were being forced to TRY sell it to customers before that, but not after THAT mess!)

    ---

    "including the highly respected Thor Schrock, a world renowned computer consultant whose built up his one man operation into a multimillion dollar, and highly respected, paragon of the Nebraska business community? " - by Anonymous Coward on Monday April 23, @02:21PM (#39773989)

    LMAO - Question (you'll avoid it again as you did my others I asked in my last post you replied to troll):

    Does "THOR SCHMUCK" even HAVE A CSC DEGREE?

    Not as far as I know... lol, thus, he's FAR from an "authority figures"... especially in the computer sciences.

    THOR SCHMUCK's an "SEO" optimization goof, nothing more (saw his pyramid scheme "who wants to be the next internet millionaire", what a joke)...

    He's a "fake-it-till-you-make-it" nobody with no real qualifications in the comptuer sciences... period.

    Do me a favor though: Tell him TY TYMKOVICH says "hi" & thanks for the 5 grand too (lol, he got chumped - some "smart guy" he is, lol...).

    ---

    "(You wrote the world infamous APK Tools in your mother's basement, correct?)" - by Anonymous Coward on Monday April 23, @02:21PM (#39773989)

    Actually I wrote it in the home I own... lol, boy you are reaching for straws, aren't you? This only tells me you're "on the ropes", like usual, trolling by AC too, along with you avoiding questions I asked of you in my last post!

    Also - Why don't you post as WHO YOU ARE?? Because I utterly DUSTED you in my last reply, hence you resorting to illogical off-topic ad hominem attacks now... lol!

    ---

    "I t

    1. Re:Funny U avoid questions I asked (not)... apk by Anonymous Coward · · Score: 0

      What questions? You need to answer mine first, not saying "Wah! Wah! Mean man said things! I'm going to pretend they're not important when actually they blow me out of the water".

      You don't READ do you? First - They're a pack of KNOWN criminals!

      OMG! You ACTUALLY BELIEVE CA's PROGRAMMERS ran its ACCOUNTING DEPARTMENT! You really are THAT FUCKING STUPID!

      Do false positives happen? Maybe: BUT AS I SAID, TONS of MALWARE COMPANIES, not just CA, think it's MALWARE.

      Including Thor Schrock.

      And Thor Schrock runs a MULTIMILLION DOLLAR COMPANY. Does he have a degree? Probably, but even if he doesn't, NEITHER DOES BILL FUCKING GATES. Are you REALLY saying, Mr I-live-in-my-mothers-basement, that you're SMARTER than BILL FUCKING GATES?

      Given the choice between believing THOR SCHROCK, who runs a MULTIMILLION DOLLAR BUSINESS that's the TOAST of NEBRASKA, and someone living in their parent's basement, who am I going to believe?

      No contest there! Also, do you have a legitimate argument against Mr Schrock? Because thus far your criticisms are:

      1. You don't know if he has a degree or not. Not, note, that he doesn't, just that you don't happen to know.
      2. He has a very difficult to spell name. So difficult that you have to write a Yiddish slur instead.

      Who do you think I trust? Known Malware author APK who writes clearly bogus advice about security policies and can't even defend it or have the honesty to withdraw it, or the next Bill Gates? No contest there!

  45. Oh, on JAY LITTLE too? by Anonymous Coward · · Score: 0

    LMAO - he got DUSTED by me @ Windows IT Pro on Exchange Server http://www.windowsitpro.com/article/internals-and-architecture/the-memory-optimization-hoax

    PERTINENT QUOTE:

    "*******

    XADM: The Extensible Storage Engine Database Engine Contributes to Virtual Memory Fragmentation Exchange 2000 Server, like many large scale programs, may experience virtual memory (VM) fragmentation. Over time, the server may not perform well, & you may not be able to mount storage groups because of VM fragmentation.

    http://support.microsoft.com/default.aspx?scid=kb;en-us;324118

    XADM: You Experience Excessive Virtual Memory Fragmentation on a Heavily Loaded Exchange Server Your Microsoft Exchange 2000 Server computer may experience virtual memory fragmentation at a much greater frequency than you expect. As a result, you may have to restart the Exchange 2000 computer more frequently than you expect.

    http://support.microsoft.com/default.aspx?scid=kb;en-us;828934

    ----"

    Which Jay Little claimed he was "expert" on, & when I proved he was wrong on that much!

    (And yes, even Dr. Mark Russinovich and on more than just this - in the end, Microsoft HAD TO BACK DOWN on "dedicate all free RAM to cache" in VISTA, now didn't they? Yes, they did, lol!)

    He can't handle he was WRONG publicly in front of millions of readers!

    I.E.-> On how memory optimization tech can unfreeze/unhalt frozen exchange servers & using Microsoft's OWN DOCUMENTATION TO PROVE IT!

    (Some "exchange expert", eh? Not... that happens, due to memory fragmenation, which after a memory optimizer runs, the memory mgt. subsystem will reload the data from pagefile.sys into CONTIGUOUS BLOCKS, stopping that from happening...)

    Funniest part is, Microsoft's OWN TOOL, clearmem.exe, which functions the same as a GUI memory optimizer, was the tool noted to do it!

    LOL!

    You had better find "better experts" to refer to... lol!

    Jay Little, after THAT? He ran... well, not until he tried trolling me on another website NTCompatible.com & I blew him away on SSD/Ramdisks, and IRQL_NOT_LESS_THAN_OR_EQUAL_TO stopcode on BSODs... that means either a driver or hardware failure.. he blew it on THAT too!

    3 in a row... again, find better "experts" to troll me with, because thusfar, after you avoided questions I asked in my post you first replied to here -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39771369 because your avoding them only shows that you are NOT very "expert" in the computer sciences @ all yourself!

    Jay Little also got his website removed from his then hosting provider CrystalTech.com for making death threats to myself, and libeling me also... They told me he would just do it again, & he has...

    The mark of FAIL online? Is not admitting what the REAL STORY IS, and fatboy Jay Little doesn't do THAT does he?? Nope.

    You're not doing very well (piss poor is more like it, lol) - find better "experts" to go @ me with, because so far for you, it's been one HUGE "fail"...

    APK

    P.S.=> After Jay Little came into those forums trolling myself , along with Jeremy Reimer, another "fake-it-till-you-make-it" degreeless in the computer sciences moron who was:

    1.) Off-topic the entire time trolling

    2.) Libelled myself making 'songs' & edited 'pictures' of me

    3.) Email harassed me repeatedly, and was put on a tracking ticket for email harassment by his ISP Shaw of Canada

    4.) Impersonated myself on his website too

    Then. a Detective Felton of the Vancouver British Columbia police force got wind of it? Reimer PROMPTLY stopped!

    Reimer, like

    1. Re:Oh, on JAY LITTLE too? by Anonymous Coward · · Score: 0

      Hey, do you care to revive discussion on 4chan again?

  46. Time to dust you some more... apk by Anonymous Coward · · Score: 0

    Prove any of my points on hosts files incorrect here -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39771369

    (Clue: Wherever there is a QUESTION MARK -> ? answer it).

    Including whether your "expert" Thor Schmuck has a CSC degree or not, and ask him WHY "Spybot 'Search & Destroy'" isn't flagged as a malware by CA

    (Well, was, because they got SOLD OFF, lol... so much for your "experts" (not) again)

    OR, why PING isn't (because in version of many OS' it can issue a "ping of death" but this is largely corrected in newer OS versions of it)!

    I asked him that, he avoided it & shut up... lol, so much for your "expert" (wannabe is more like it).

    After all - 1 of the questions in Computer Associates database for removal in the 21 questions I passed, is does the program ALTER THE HOSTS FILE!

    SpyBot 'Search & Destroy' does that very thing but is not 'flagged' as a malware (but for good reasons, as does my soon to be released "APK Hosts File Engine 5.0++" from the malwarebytes/hpHosts sites (nice guys, fun to work with, ESPECIALLY Mr. Steven Burn!))

    Besides the day that GOOF Schrock can show he has not only has a CSC degree, but some professional world-class Fortune 500 coding &/or network engineer/admin experience OR things like I have done (would you like to see a SMALL PARTIAL LIST of my favs? Ask!)? Is the day you can call "your hero" an expert in computing!

    (I do by the truckloads as to all of that, as well as being past the AAS in CSC degree mark, 80/120 into the B.S. in fact, credits-wise I earn when I work too concurrently, alongside an MIS minor from my 1st degree too)...

    There's a HUGE difference between Bill Gates, who actually created a programming environs (GW BASIC), & "Thor SCHMUCK", lol!

    * By the way - I 'dusted you' on Jay Little too, with proofs, as is per my usual -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39776295

    (Please - get better "experts" here to help you, you NEED it!)

    APK

    P.S.=> Good luck! On hosts files especially? Well, I've dusted FAR better than yourself on them, many, Many, MANY TIMES here on /. alone (& recently a pack of 'security guru wannabes' from the UK too, this week alone)... apk

    1. Re:Time to dust you some more... apk by Anonymous Coward · · Score: 0

      (Clue: Wherever there is a QUESTION MARK -> ? answer it).

      You first. You've yet to answer any of my original points, instead choosing to pretend the problems are minor or changing the subject.

      I've explained how HOSTS files do not block IP addresses or dynamically generated hosts names. You've yet to either explain how to use a HOSTS file to do so (probably because you can't) or withdraw your ridiculous recommendations.

      Yes, I read your "answers". They weren't answers. I've explained that numerous times now. Either explain, now, how to block 18.58.3.23 and dsl-100-23-57-04.ko.superdoopernet.cn from your hosts files (knowing the latter will appear with millions of different combinations of numbers), or STFU and apologize.

      Here's a tip: when your "proof of efficacious" posts actually quote people who claim your idiotic "solutions" have merely "reduced" the number of pieces of malware they download, rather than eliminated them, then you've failed. Why? Because most of the people reading this thread NEVER DOWNLOAD MALWARE TO BEGIN WITH. If someone using your technique is getting infected two or three times a month, then that's TWO OR THREE TIMES A MONTH more than ME. Or my wife. Or anyone reading your advice.

      I've also explained how your advice encouraging readers to use the HOSTS files for other purposes is bogus. You've argued it can be used to improve DNS look-up times - by encouraging people to hard code DNS lookups in their files. You've continued to do that EVEN AFTER I explained in detail how it's a massive security hole, and sheer idiocy to begin with.

      You've pretended it's a solution to RBLs, despite the fact that virtually nothing involved in RBLs READS INFORMATION from a damned HOSTS file, whichever side of the fence they are!

      And you have the GALL to criticize a major Nebraska business leader for rightly identifying the dangers of running software you've written? You actually think you're fit to KISS HIS SHOES?

      Has it occurred to you, for a second, that if you've managed to convince yourself you're a security expect, on the basis of something so easily DEBUNKED as a damned HOSTS file, you might... well, you might be writing malware and not even recognize it? That CA's ARMY of Programmer-Accountants (heh) might actually be on to something? That you're NOT QUALIFIED to know if your software is a security risk or not?

      Here's what I want you to do. There's still time. I want you to cut and paste the following message, and reply to everyone you've falsely attacked over the last few years. That includes Thor Schrock, owner of Nebraska's NUMBER ONE computer repair company. That includes Jay Little, not merely because you trolled him, but because of the pain and suffering you caused him when he felt compelled to review your software. That includes Jeremy Reimer, victim of threats to use SLAPP-violating lawsuits to harass him. And of course, everyone on Slashdot, and everyone who ever followed your advice.

      This is the message:

      Hi,

      Alexander Peter Kowalski here.

      I've been reviewing my life, and I may have made a few poor decisions and misjudgments along the way, and I'd like to express the following to clear the air a little.

      * I understand my software "apkapp2backgrounddaemonprocessengine.exe" has been identified by many groups as dangerous malware. I recognize that my limited knowledge of security might have resulted in me writing an application that malware experts see as being potentially dangerous, and I apologize for the hysteria I've expressed against those who have stated such opinions.
      * I have advised many people to use a customized "HOSTS" file to block malware and spam sites. I have since learned that my advice may have overstated the benefits of such a technique, and that using HOSTS in this way does not provide the protection that most people are looking for. In particular, sensible download and quarantine pol

  47. On your libeling myself... apk by Anonymous Coward · · Score: 0

    "Given the choice between believing THOR SCHROCK, who runs a MULTIMILLION DOLLAR BUSINESS that's the TOAST of NEBRASKA, and someone living in their parent's basement, who am I going to believe?" - by Anonymous Coward on Monday April 23, @06:54PM (#39776965)

    I don't live in my mother's basement - I own my own home & have for years! I doubt you do... lol!

    Plus, all the money in the world doesn't make "Thor SCHMUCK" an expert in computing!

    Who says Thor SCHMUCK has more "$" than I do also? Him??

    LOL!

    Fact: He can't even prove he has a degree in the computer sciences, or professional computing experience inside the Fortune 500 for Pete's sake, let alone disprove points I asked him, which he ran from & I pointed out in this post to you -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39777111 ).

    * Above all else, seeing you "running away" from disproving simple points I made on hosts files here -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39771369 that BLEW YOU AWAY is more than sufficient to show just how incompetent you are in the art & science of computing

    (Heck - from your statements? LOL, I'd bet you're probably the FOOL "Thor Schmuck" - I wish you'd get him in here, I would LOVE to publicly face that fool & destroy him technically on a public forums like this one... it'd be (I just gotta say it) "just too, Too, TOO EASY - just '2EZ'")..

    APK

    P.S.=> Plus, trolling me by AC posts on YOUR part?

    Please... grow some balls already, & disprove points I made on hosts files here -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39771369

    I see you've "taken off", & are ignoring that simple request... why's that?? WE KNOW WHY... lol! You've been "blown away by APK" (yours truly)...

    ... apk

  48. 4chan's home of "Anonymous" (no thanks) by Anonymous Coward · · Score: 0

    So, I see you're having trouble w/ this too -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39776295

    (in regards to Jay "fatboy" Little)

    This too -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39771369 where I merely asked you to disprove my points on hosts files!

    Why's that, hmmm? You can't... & that IS that.

    LMAO @ U: U FAIL, or better yet? This will "tell the tale" on you here -> http://www.youtube.com/watch?v=zVmBAd76kak from my fav. film this year (Capt. America)

    Yes, there also in the link about Blimp-Boy Jay Little??

    Unfortunately, I also took down a former "co-contractor/co-worker" for Sunbelt Software in the mid-to-late 1990's of mine Dr. Mark Russinovich (now @ Microsoft), as well in that exchange @ Windows IT Pro forums also...

    Dr. Mark Russinovich PhD, whose work I even corrected "rookie hardcodes" before that article & by telling him how/what/when/where/why it failed (pagedefrag.exe -> http://www.pcmech.com/article/defragging-the-windows-page-file/ ) to which he thanked me for in email)

    Hey - @ least he did THAT - he has class... Jay "fatboy" Little doesn't & got severely BURNED for it. Served him right, he brought it on himself.

    However, Dr. Mark's SUPPOSED to know the OS inside-out, & is often referred to as such...

    (Certainly as a PhD, & not to hardcode as well being a doctor of computing, literally...!)

    However... then, I blew his doors out for attacking a class of apps I wrote the 1st GUI model of!

    Bigtime... absolutely.

    See - PhD's don't matter to me, I take them on & dust them too... Especially when I can PROVE I am literally correct! And, I did... bigtime, see the link on Jay Little... lol!

    (MS did one before it in character mode, clearmem.exe, that is proven to unfragment RAM & get stalled or lagged Exchange Servers working again without reboots - which is part of how I absolutely "DUSTED" Blimp-Boy Jay Little, to which all he has now is a lot of "b.s." on his personal website... lol!)

    * HOWEVER - Unlike Jay Little? Well... Dr. Mark Russinovich of Microsoft I respect though!

    I even wished him well @ MS after that fiasco @ Windows IT Pro -> http://blogs.technet.com/b/markrussinovich/archive/2006/07/18/on-my-way-to-microsoft.aspx because he created ProcessExplorer (I can't & won't disrespect a guy that does that).

    In fact?

    I think HE ought to be the next guy to lead MS -> http://tech.slashdot.org/comments.pl?sid=2792155&cid=39718511 even though "lil' ole' me" has "proven the GOOD DOCTOR WRONG" & even had to show him how & WHY to correct wares of his before too.

    APK

    P.S.=> Poor trolls... above all else - Do you *think* I'm going to follow you links OFF of this site here, onto 4Chan, home of trolls/hacker-crackers, etc./et al?

    No, I don't *think* so... lol!

    ... apkDr. Mark's SUPPOSED to know the OS inside-out, even had to show him how

  49. U attacked me 1st - answer questions troll by Anonymous Coward · · Score: 0

    I answered EVERY 1 of ur questions point-by-point -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39771369 and when I asked some of you (mainly to disprove my points on hosts files giving users better SPEED, "Layered-Security"/"Defense-in-Depth", more RELIABILITY (vs. downed or redirect poisoned DNS servers in recursive mode), & more...

    TIME TO "DUST YOU COMPLETELY", AGAIN, "point-by-'so-called-point'" of yours, easily:

    * You were asked to disprove ANY points I raised on those notes where hosts files benefit users in quite a few ways... funny how you evade them!

    (NOT! Mainly because there IS NO DISPROVING THEM... they're 'solid' as this quote from Mr. Spock from StarTrek TOS -> "Sensors show the object's hull is SOLID NEUTRONIUM - A single StarShip cannot combat it!" - from the episode "The Doomsday Machine" by Norman Spinrad...)

    ---

    Ahem - BULLSHIT:

    "I've explained how HOSTS files do not block IP addresses or dynamically generated hosts names" - by Anonymous Coward on Tuesday April 24, @11:35AM (#39782485)

    QUESTION: Did I EVER say they blocked IP addresses? No...

    QUESTION: Do you know that I feed in bogus DNS servers into my hosts file, along with between a minimum typically of 50 to a current maximum of 5,000 bogus hosts/domains daily?

    I get them fed to me by the program I noted I wrote, every 15 minutes (faster IF I wish)... & yes, as soon as 17++ reputable sources get them whom I receive said data from? I get them... it's THAT simple.

    (It's "reactive technology", but FAR faster reacting than say, AntiVirus or AntiSpyware updates are, & it stops what people USE MOST (hence the existence of the FAULTY DNS SYSTEM itself): Hosts/Domain names...)

    ---

    More "b.s." from you:

    "Either explain, now, how to block 18.58.3.23 and dsl-100-23-57-04.ko.superdoopernet.cn from your hosts files" - by Anonymous Coward on Tuesday April 24, @11:35AM (#39782485)

    AGAIN/FIRST: Can YOU show us where I said I was blocking IP addresses in HOSTS files even ONCE in this exchange?

    Good luck - I never did!

    (Trying to put words in my mouth I never said, like your little impersonation of myself, not a 1st here by ANY means either? Piss poor... laughable!)

    SECONDLY: See above, again - As soon as the 17++ sources I get my data from for blocking bogus hosts-domains comes in, which is every 15 minutes here? It adds into my custom HOSTS file, & overwrites the master + backup copies, instantly (even flushing to disk avoiding power outages via the FLUSH call for file I/O). Immediate commits...

    ---

    Ahem: EVEN MORE BULLSHIT FROM YOU again (& this time I'll post a user who was being riddled by hundreds of them a month & isn't any longer, along with your "/. peers" and their opinions of HOSTS files efficacy on several grounds (speed, security, reliability AND even a bit more "anonymity" vs. trackings):

    "Here's a tip: when your "proof of efficacious" posts actually quote people who claim your idiotic "solutions" have merely "reduced" the number of pieces of malware they download, rather than eliminated them, then you've failed. Why? Because most of the people reading this thread NEVER DOWNLOAD MALWARE TO BEGIN WITH" - by Anonymous Coward on Tuesday April 24, @11:35AM (#39782485)

    That's right - because hosts in terms of "layered-security"/"defense-in-depth" ALONE (along with speed gains, reliability gains, & even "anonymity" gains vs. trackings) makes this SIMPLE PREMISE, the truth:

    "You CAN'T GET BURNED, if you don't go into the malware kitchen..."

    NOW, some words from folks here on custom hosts files' efficacy for added speed (via adbanner blocking & hardcodes of fav. sites), better "layered-security"/"defense-in-depth", better reliability (vs. downed or redir

    1. Re:U attacked me 1st - answer questions troll by Anonymous Coward · · Score: 0

      Good Danielsan. You killed ac troll on DNS propogation time and speed gains hosts give plus security and reliability but this was the clincher versus his theoretical garbage

      It can & DOES do that, easily... & changing it is easy too: Just "reverse DNS" ping (ping -a in Windows) the host-domain name to change... & as FAR AS THOSE CHANGING?

      Put it this way, by example (one I noted before): I have 250 of my favs in my HOSTS file, & only 6 have changed since 2006... that's about 1 per yr. IF that!

      (Trying to make it sound like a 'daily occurence' on your part? WEAK & untrue... period!)

      What makes me LAUGH MOST HERE? Is that DNS propogation from the TLD in arpa that maintain the information for host-domain name resolutions ( IPv4 uses in-addr.arpa and ip6.arpa is for IPv6. ) takes time itself...

      You could "theoretically" buy up those domains & in that timeframe, build a bogus site & hijack users that way too... so, your "puny sword"? Cuts BOTH ways... EXCEPT THAT WITH HOSTS FILES DOING A REVERSE DNS PING QUERY IS IMMEDIATE AND THE USER CAN EDIT HIS HOSTS FILE TO OVERCOME IT BEFORE THE DNS SYSTEMS PROPOGATES TO ALL DNS SERVERS!

      When I visit forums, take NTCompatible.com - their admin/owner changed his sites' address because he "shopped around" for cheaper hosting provider...

      What did he do?

      HE NOTIFIED ALL USERS ON EVERY PAGE OF HIS FORUMS & SITE!

      Which IS what good admins do... & as far as banks, do you *THINK* they wouldn't do the same? Guess again!

  50. Thank-U, & not done yet either... lol! apk by Anonymous Coward · · Score: 0

    "And you have the GALL to criticize a major Nebraska business leader for rightly identifying the dangers of running software you've written? You actually think you're fit to KISS HIS SHOES?" - by Anonymous Coward on Tuesday April 24, @11:35AM (#39782485)

    Kiss his SHOES? I beat his ass... lol, & he can kiss mine now...

    ---

    "Has it occurred to you, for a second, that if you've managed to convince yourself you're a security expect, on the basis of something so easily DEBUNKED as a damned HOSTS file, you might..." - by Anonymous Coward on Tuesday April 24, @11:35AM (#39782485)

    LOL, again: DO YOU HAVE A CSC DEGREE EVEN THOR?

    (Yes, "Thor Schmuck", I KNOW IT'S YOU NOW... lol! See below as to HOW I know...)

    Thor "Schmuck" shut right the hell up when I asked him questions on Spybot Search & Destroy!

    (Especially when I passed all 21 of CA's removal questions, which they should have removed that period instead of just lowering it to ZERO THREAT LEVELS... then again, they got BUSTED FOR ACCOUNTING FRAUD too & SOLD OFF THAT "Security Suite" of theirs that tore up customer emails where I worked too, lol... some "security pros").

    That's only a single app of 50++ I've written over time that did EXTREMELY well, see partial list below!

    (When "Thor Schmuck" can show he's done MORE, BETTER, & EARLIER than I have in the same arenas (tech trade shows of high repute, commercially sold softwares, & books/magazines/newspapers of GOOD repute? Well, then, he can TALK!)

    "My Name is Ozymandias: King of Kings - Look upon my works, ye mighty, & DESPAIR..."

    ----

    Windows NT Magazine (now Windows IT Pro) April 1997 "BACK OFFICE PERFORMANCE" issue, page 61

    (&, for work done for EEC Systems/SuperSpeed.com on PAID CONTRACT (writing portions of their SuperCache program increasing its performance by up to 40% via my work) albeit, for their SuperDisk & HOW TO APPLY IT, took them to a finalist position @ MS Tech Ed, two years in a row 2000-2002, in its HARDEST CATEGORY: SQLServer Performance Enhancement).

    WINDOWS MAGAZINE, 1997, "Top Freeware & Shareware of the Year" issue page 210, #1/first entry in fact (my work is there)

    PC-WELT FEB 1998 - page 84, again, my work is featured there

    WINDOWS MAGAZINE, WINTER 1998 - page 92, insert section, MUST HAVE WARES, my work is again, there

    PC-WELT FEB 1999 - page 83, again, my work is featured there

    CHIP Magazine 7/99 - page 100, my work is there

    GERMAN PC BOOK, Data Becker publisher "PC Aufrusten und Repairen" 2000, where my work is contained in it

    HOT SHAREWARE Numero 46 issue, pg. 54 (PC ware mag from Spain), 2001 my work is there, first one featured, yet again!

    Also, a British PC Mag in 2002 for many utilities I wrote, saw it @ BORDERS BOOKS but didn't buy it... by that point, I had moved onto other areas in this field besides coding only...

    Being paid for an article that made me money over @ PCPitstop in 2008 for writing up a guide that has people showing NO VIRUSES/SPYWARES & other screwups, via following its point, such as THRONKA sees here -> http://www.xtremepccentral.com/forums/showthread.php?s=ee926d913b81bf6d63c3c7372fd2a24c&t=28430&page=3

    It's also been myself helping out the folks at the UltraDefrag64 project (a 64-bit defragger for Windows), in showing them code for how to do Process Priority Control @ the GUI usermode/ring 3/rpl 3 level in their program (good one too), & being credited for it by their lead dev & his team... see here -> http://ultradefrag.sourceforge.net/handbook/Credits.html or here

  51. Maybe I misjudged the situation - apk by Anonymous Coward · · Score: 0

    OK, I have been rereading this -> http://apk.slashdot.org/comments.pl?sid=2802947&pid=39782485 and I may have been hasty.

    I have never claimed that using hosts is a solution to spam and viruses and malware, but I can see that people would think that is what I've been saying.

    I also see your point about Thor Schrock, although I suggest you READ http://www.thorschrock.com/2008/05/19/how-to-respond-when-people-threaten-to-sue-you-on-the-web/ and tell me whether Schrock is fair to call my software malware because he had an unrelated argument with me?

    In any case, I am not going to use exactly your apology, but I think I owe everyone an explanation and maybe should say sorry for where I have let my anger get the better of me:

    So...

    * I understand my software "apkapp2backgrounddaemonprocessengine.exe" has been described by some groups as dangerous malware. I apologize for the anger I've expressed against those who have stated such opinions, I don't agree with them and feel it is unfair of them to call my software that, but I respect that they have different opinions.

    * I have advised many people to use a customized "HOSTS" file to block malware and spam sites. Some people may have misunderstood my advice and be assuming I am saying HOSTS does more than it does. Sensible download and quarantine policies, as recommended and practiced by most computer professionals, will eliminate almost all threats, but HOSTS files can help reduce infections for people who don't understand that.

    * I may also have recommended the use of HOSTS files for purposes that would introduce security risks and actually destabilize the networks on which they're used. In particular I happily withdraw the recommendation to cache commonly used website hostnames.

    * I have frequently ignored good advice by demanding evidence of qualifications, demanding questions be answered when they have been, and otherwise ignoring the information given to me. I apologize sincerely for this. I apologize in particular to the legions of computer professionals, from Thor Schrock - who I may have used juvenile insults against, to (by inference) Bill Gates, a man whose decisions I might not always agree with, but who has proven himself time and time again to be a quality business and technology leader.

    While we may continue to have disagreements, I recognize that my views may have been poorly expressed, and I sincerely apologize for my rudeness, my lack of respect, and the poor way in which I have handled myself, and I hope you will forgive me and give me a second chance to present my case.

    Sincerely,

    APK

    P.S. => Let's try being friends now OK? Stop calling my software malware, it's just a program to help apache users after all.

    1. Re:Maybe I misjudged the situation - apk by Anonymous Coward · · Score: 0

      impersonating him's low. This killed u http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783279 Sites will post a redirect for a long time and we've all seen that though it is rare as was stated. So your idea of trying to buy up an ip address block is useless to put malware onto people, and considering you come from 4chan, the home of the script kiddie wanna be hacker http://yro.slashdot.org/comments.pl?sid=2802947&cid=39778411 ? That figures and that you'd fail too. Users would be warned and are in those cases. You're a trolling fool that got destroyed on many levels. You did it to yourself.

  52. LMAO - Impersonating me NOW? I win... apk by Anonymous Coward · · Score: 0

    See subject-line above & no questions asked, this rings true, line-for-line & how they apply to each link I posted nex to them from this very exchange... @ this point & your blatant inability to disprove my points, and I dusted yours totally -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783015 ?

    Well... I suppose I can have a bit of FUN with this now, by analogous comparison... here goes, lol:

    ---

    "You tried to destroy it once before Commodore. The result was a WRECKED SHIP -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783015 and, a DEAD CREW -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39784057 " Mr Spock from StarTrek TOS episode "The Doomsday Machine", by Norman Spinrad

    ---

    "Sensors show the object's hull is SOLID NEUTRONIUM: A single StarShip CANNOT COMBAT IT!" - per Mr. Spock from the StarTrek TOS episode "The Doomsday Machine" & of course, this -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39771369 (just to "open the show", for starters).

    ---

    "It's hull is PURE NEUTRONIUM - there is NO KNOWN WAY OF BLASTING THRU IT!" - per Mr. Spock from the StarTrek TOS episode "The Doomsday Machine" & of course, this -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39771369 (just to "open the show", for starters).

    ---

    So, "Thor Schmuck" - A QUESTION:

    How many websites do you run pal?

    How many ADBANNERS DO YOU PROFIT BY, that hosts block so folks get what they pay for... in speed & bandwidth they get back plus screen real estate, security, & FAR MORE by using hosts files? Hmmm??

    (After all "Thor Schmuck": I know ALL about you, too, especially now... you'd be SURPRISED how too!)

    ---

    "You cannot succeed Commodore - you're only logical alternative is to return to the ship!" - Mr. Spock, StarTrek TOS episode "The Doomsday Machine" by Norman Spinrad & THIS of course -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783279

    ---

    "Matt, you'll be killed" - Capt. Kirk , StarTrek TOS episode "The Doomsday Machine" by Norman Spinrad & THIS of course -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783279

    ---

    "He's gone..." - Mr. Spock, StarTrek TOS episode "The Doomsday Machine" by Norman Spinrad & THIS of course -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783279

    ---

    "Sir, may I offer my condolences on the death of your friend... - Mr. Spock, StarTrek TOS episode "The Doomsday Machine" by Norman Spinrad & THIS of course -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783279

    ---

    "Deflector shields @ full power - they can't take much more of THIS - deflectors holding but WEAKENING... Sir, Deflectors Shields are gone!" - http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783015 per Mr. Spock from the StarTrek TOS episode "The Doomsday Machine" by Norman Spinrad

    ---

    "Deck 7 reports power failure on main energizers - implementing emergency procedures... Severe Casualties on decks 3 & 4. Damage control party sealing off innner hull rupture!" per

    1. Re:LMAO - Impersonating me NOW? I win... apk by Anonymous Coward · · Score: 0

      See subject-line above & no questions asked, this rings true - by Anonymous Coward on 2012-04-24 15:08 (#39785977)

      Just got off the phone with Ron Lynch from the Journal Star, biggest newspaper in Nebraska. Sunday's episode, Page 7, first section, HALF PAGE AD, with my apology to Thor Schrock. Try trolling me after that maybe? Costs $1,500, but it's worth it to clear the air.

      Trolls 0, Fairness and decency: 1. You lose, Slashdot trolls.

      APK

      P.S. Try to be more clever more time? The more I read your spoof, the less like me it looked like. Why would I post a long line of irrelevant movie TV/quotes? My posts are nothing like that.

    2. Re:LMAO - Impersonating me NOW? I win... apk by Anonymous Coward · · Score: 0

      U pwnd urself here badly http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783279 as anyone knows that when sites change ip addresses they tell their users by mails or on the site itself and put up redirectors for a long time after. Your idea since your from 4chan as you stated here is weak because of that much. Sites protect users against idiots buying up the old ip address block that way. Don't you know that? Apparently not.

    3. Re:LMAO - Impersonating me NOW? I win... apk by Anonymous Coward · · Score: 0

      Still trying to work out if this is for real or not, but I think I owe you the benefit of the doubt. Sorry tomhudson or whoever it is is trying to make you look bad by pretending your apology isn't one.

      Hope to have an intelligent discussion with you in future!

  53. LOL! AC pretends APK not APK! by Anonymous Coward · · Score: 0

    LMAO - Impersonating me NOW? I win... apk (Score:1) by Anonymous Coward on 2012-04-24 15:08 (#39785977) See subject-line above & no questions asked

    This is proof that SOME acs (tomhudson? gmhowell?) can't let go. Also why should I apologize if you're going to make up shit about me?

    Some ppl like to argue I guess... I'm over it. I'm not apologizing to the so-called trolls here, but some people I had disagreements with and went too far. You can make stuff up and pretend I'm not me all you like, but the emails I just sent to Thor, Jeremy, etc, have my real email on them so they can vouch for my sincerity.

    People can read what I've written and decide whether they think I would say sorry for going overboard. You trolls need to let go, stop impersonating me, and stop trying to argue. I will present my case professionally from here on, and anything signed "APK" that isn't professional will be seen as the fakes from trolls that they are.

    Sincerely,

    APK.

    P.S. I wouldn't quote ANY of the movies you mention, but as Arnie would say "Hasta La Vista, Baby". Trolls beware!

    1. Re:LOL! AC pretends APK not APK! by Anonymous Coward · · Score: 0

      U pwned urself in that stupid idea of urs sites protect against http://yro.slashdot.org/comments.pl?sid=2802947&cid=39786767

    2. Re:LOL! AC pretends APK not APK! by Anonymous Coward · · Score: 0

      U got royally pwnd. U did it to urself http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783279 you impersonating him now only shows us that much also. U FAIL troll.

  54. For everyone's reference & entertainment... ap by Anonymous Coward · · Score: 0

    StarTrek TOS "The Doomsday Machine" -> http://www.youtube.com/watch?v=Y9onOBZBR_k

    * Especially after this utter annihilation of the WEAK technically inept troll here being nuked by "yours truly":

    A Planet Killer...

    To go along with this -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39783015

    Also, of course, along with the post I am replying to here of mine, where I quoted from it to make analogies to EXACTLY what happened here and always does, when TROLLS attack me & fail poorly as usual -> http://yro.slashdot.org/comments.pl?sid=2802947&cid=39785977

    APK

    P.S.=> Enjoy - it's the BEST StarTrek TOS episode there is, alongside:

    "Balance of Terror"
    "Where no man has gone before"
    "The Cage"
    "Requiem for Methuselah"
    "Assignment: Earth"
    "Who Mourns for Adonis?"
    "The City on the Edge of Forever..."

    ... apk

  55. Tell me about it - Probably is tomhudson... apk by Anonymous Coward · · Score: 0

    Since he's known to troll myself & others here, & has 2 reg'd. accounts, ala ->

    barbara.hudson@unjava.com from http://slashdot.org/~Barbara%2C+not+Barbie

    =

    barbara.hudson@barbara-hudson.com from http://slashdot.org/~tomhudson

    Which pretty much PROVES that assertion along with this quote of his/hers here when he/she trolled me for months here (and doubtless hasn't stopped, breaking the rules of this forums telling others to join him/her in it & laws also for stalking etc./et al):

    http://slashdot.org/comments.pl?sid=1646272&cid=32150544

    "Wait until he starts on another kick, then reply to him as an AC. It's the new meme". by tomhudson (43916) on Sunday May 09 2010, @08:29PM (#32150544) Homepage Journal

    So, as you can see, quoted from TomHudson the "AC Stalker Troll" himself, right up there in black & white quoted?

    He's/She's telling others to "mod me down", because that's ALL he has vs. facts & figures etc. that I generally use - It's probably as you suspect yourself: Just another TomHudson anonymous reply attack on myself!

    I.E.-> It'd be pretty easy to mod herself up with a 2nd account and to mod others down with it too as well (her/his entire domain is trolltalk.com OR something, see her/his profile).

    (He/She has issues...)

    APK

    P.S.=> Still, you made a pretty big mistake in your saying you'd buy up an entire IP address block for a bank (mine) & then bushwhack me with it (yes, theory only, not saying you did that of course)... How so?

    Well, thing is, & like the example I used, because I've seen it before with NTCompatible.com & others??

    Sites & webmasters aren't stupid - they will email you, put up warnings all over their pages, & even do redirect pages for that domain & IP for ages to cover ANYONE trying what you stated

    ... apk

  56. You're welcome (see quote inside too) by Anonymous Coward · · Score: 0

    The trolling ac knob also didn't realize webmasters warn users when IP address blocks change on their sites' pages before it happens, by email to their registered users, and that for a LONG time afterwards the old site has redirectors setup to the new IP address range.

    He's a trolling noob and a fool.

    Oh, & THIS excerpt next below also supports my point on DNS propogation time also!

    PERTINENT QUOTE/EXCERPT (From Martin Baker & "The Register" this week no less):

    ---

    "The way that DNS works is that it's cached elsewhere across the internet so it will take the time that it takes those servers to get refreshed by the internet [to totally clear up], so it could take up to 24 hours for it to refresh all the way through" Martin Baker from http://www.theregister.co.uk/2012/04/26/uk2net_outage_in_ddos_attack/

    ---

    * So, so much for the ac troll's bullshit...

    (So, as anyone can clearly see? After that, he took off... as oer usual, & hilarious... he does so for obvious reasons, see below!)

    I.E.-> He trolls by AC, stalking me here constantly, and always "blowing it", hence you know he's just some stupid noob!

    (Since he doesn't dare do it by his registered username or I would throw his mistakes at him every time he trolls me that way (by his reg'd LUSER account here, which he doesn't DARE DO)).

    APK

    P.S.=> What the dumb bastard doesn't realize is, I don't make technical mistakes and talk out my ass on things I don't know about!

    (That is, unless I specifically state "hey, I am not sure of what you meant" or "I am not strong here so please help or answer this question" & that's not talking, that's asking for help OR clarification)...

    However, whenever I am attacked?

    I always come out on top in these tech debates with trolls, here OR elsewhere... I never fail in that much! apk