Actually they can, and do every day. Every time you follow a law, its a choice, every time you break one... knowingly,.... its a choice. You can cram your republic up your ass, I never signed the constitution. I never pledged any allegiance to it in my entire adult life. I was born here, and intend to stay, no matter what the thugs in power decide they have the power to do... more power to them, they are not MY leaders.
I care more about people being thrown in jail to endure years of incarceration than some worthless soldiers toy.
And I don't mean to imply the toy is worthless, I care more about such a person than a platoons entire lives, because they are volunteers who sign up for dangerous operations, this guy is having years of his life ruined by government stupidity.
Fuck soldiers, I don't even see what the need for them is. They don't do anything that we couldn't do with militias. Or well they DO a lot of things we couldn't do with militias, but thats why I like militias better.
Yup. Though, I tend to include the USAs rather broken form of "Democracy" on the "nondemocracy" list.... alot of people don't get.... I ONLY criticize the US (generally). Its not that I think Cuba is great... or that China is wonderful (but truth be told, they seem to be way more open and making a lot more progress towards openness than I ever would have predicted 10 years ago, never mind 20.... not giving them a pass, just, some credit for improvement).
I always get "Where would you rather live". Nowhere, I think this place is the best there is, but that doesn't mean I think its sufficiently good. There is no such thing, always strive for better.
That said, I answer your question as no. Its not "acceptable".... but how "Acceptable" is it that the US jails people for growing plants that it doesn't like? Its put people in jail for decades for nothing more than that. How is that acceptable? I see it as just as bad...but the difference.... we also have the highest per capita incarceration rates.
We have LOTS of what I would term "unacceptable imprisonment" right here.
Depends on your definition of "broken". Tor tries to do more than obscure what you are sending. Anyone who has an exit node can sniff your traffic unencrypted... anyone with enough middle nodes is likely to own a whole circuit of yours eventually.
Even without enough to get your whole circuit, packet timing on the end server could be enough, if they have your entry node, to tie the whole connection back, even without the middle hops.
I am sure there are even more clever attacks....none of which involve actually breaking crypto. SSL is enough to keep communications private, tor attempts to defeat traffic analysis too, which is a much harder problem.
How exactly does tor attempt to block file sharing? Aside from recommending against certain things like bittorrent (which is pretty pathological on the tor network for various reasons, the designs just do not play nice with eachother), I am unaware of any such attempt.
In fact, I believe there are a few file sharing sites in.onion space. I don't use them, but I am pretty sure I have seen them.
I also ran a tor exit node from my home for a while. Not recommended for a few reasons, but I did. The worst that ever came from it? I found that I couldn't use my IP to post on craigslist anymore. Never heard a peep from my ISP (was comcast at the time), nothing.
I initially resisted facebook. As recently as 4 years ago, I had accounts on both, but used myspace to the exclusion of facebook. I NEVER liked the whole "exclusive niche" that facebook initially tried to be. I never wanted a facebook account, and only ended up gradually moving over as facebook became more useful for talking to people that I knew.
I know that "4 years ago" was about the point where it started to change because one of the last things I did on myspace was meet the girl who would become my wife.
I just logged into myspace this past weekend, as I do about every 6 months to a year. It was... wholly different. Nothing like I remember, I could barely find any of the old social networking stuff.... as a social networking site, it has castrated itself. I can't imagine anyone wanting to use it any more than I can imagine people wanting to set the yahoo portal page to be their default web browser "home page".
Its all vapid entertainment "news" now.
That said... it was exactly what I hated about it, the exclusivity, that helped it really catch on. Personally I would like to see a completely p2p social networking "site". Something like the gnutella of social networking.
he could go to jail for 20 years.... for selling a fucking remote controlled air plane. Oh wait, its a remote controlled air plane with long range and a nice built in camera? Ooooh what a dastardly man! How horrible of him! Oh my god! How dare he sell....a fucking remote controlled air plane.
Little good comes from causing mass panics. Student populations have been entirely disarmed by schools generally adopting the same "Oh my god we have to do something about any danger we can IMAGINE" attitude that government suffers from. There is nothing any of them can do.
What they really need to do is realize how many students and schools there are, and compare that to the number of "active shooter" incidents and realize that... this is an utter waste of time and money to even worry about. They are more likely to have a serious fire, and they already have problems with much lesser crimes like theft, and students drinking themselves into the hospital.
Once they do have such an incident, the chance of a second one that they need it again for.... well... it could be a long time. I hope they are not paying yearly for this "service". Most telling, is that they were saving this message ahead of time. In the unlikely event that it happens, why not type the message in at the time?
If they need such a system, I see it being WAY more useful for announcing snow days, or facilities shutdowns, since they are more likely to actually happen.
Though, how will they do it? Web proxies? Will they block DNS resolving? What stops a person from pointing to external DNS?
Trivial to get around. Now maybe they will spider the xxx domains and ban them by IP? That would be awesome... then all someone needs to do is register an XXX domain and point records at IPs.... whoops can you say denial of service?
Makes me want to register an XXX domain and point records at every IP in ipv4 space. See if they drop off the internet entirely.
Hopefully, this is good for the tor network. Aside from that, it just makes me laugh. As if they will accomplish anything.
So whats next.... if a thief sells some watches, and then uses the money to buy a soda, you think its fair that the stores bank gets made to pay fines for accepting deposits from someone who made his money selling to thieves? Or maybe the store should be fined?
Or maybe, companies are supposed to audit eachother? Now is this infringement under US law... or local law? What if the two are incompatible?
I think this is ridiculous but.... maybe good. I hope it leads to more use of free software worldwide.
Sounds like the sort of thing you want top spread far and wide then. When stupid regulations that have no hope of ever achieving their intended effect are enforced, they deserve to be shown for how ineffectual and ridiculous they are. It is peoples duty to spread such documents as far and wide as possible whenever they come about.
I have, as a semi-captive audience, been subjected to many hours of ghost hunters. I usually do my best to bury my attention in something else but, its not always possible. A few things of note:
1. They do seem to try reasonably hard to find normal explanations for things. Reflections from car headlights, nesting animals, that sort of thing. I have even seen them fiddle with doors to determine how easily they swing or how much force is needed to dislodge them. They often concluded that what they have found doesn't show paranormal activity.
2. Often their "clients" are people with historic buildings or houses who want their activity "verified" for various reasons, not limited to, tourism value.
The other thing of note is, some people, like my roomate who is enthralled with it, are believers. She has said, many times, that she would like to put a kit together with EMF meters etc and go doing her own "investigations". It is hard for me, in the face of this, to claim that ALL such investigators are scammers out for a buck.
I think my biggest complaint about them, aside from the foolishness of the whole deal, is that they always play music over the so called "EVP" sessions. I have yet to hear anything but static or random noise, but, I do have to say 90% of the time, music obscures the sounds that they are listening to. Not that I expect to hear anything really. Though, people hearing voices in static shouldn't even be considered unusual. Intepresting the occasional random sound as a voice is pretty damned common.
One would hope. Of course, I didn't call 911, I got a ride from someone who was there.
However, if the situation isn't that cut and dry, then what?
My friend fell, his arm is clearly broken but, I am worried that his neck might be too. Is this system going to notice a lack of stress and assume I must be bluffing about his neck to get faster service?
That was my first thought. Not even just people who have "been in these situations" but, anyone who keeps their head calm in a situation.
A couple of years back I had a case of walking pneumonia (clearly, I didn't know, hence 'walking'). One night, after poker, while hanging out with some friends, I coughed and covered my face with my hands. As I pulled my hands away from my face, I saw them absolutely covered in blood.
Everyone around me freaked. I just calmly got up, and started getting ready to go to the hospital. As I am doing this, everyone around me seemed to take my calmness as me not considering the situation as serious. So of course, they felt the need to bother me and repeatedly tell me how serious this was, and even as I am putting shoes on and grabbing my jacket, are still advising me that I should definitely go to the hospital.
I have to wonder, if I call 911 with one of these systems, and start calmly describing the situation, are they going to now see how not-stressed I am and ignore me? Will someone die because I didn't totally freak out calling for help?
This seems like a good idea, but, I do have to wonder if it wont be relied on too heavily.
Actually the first part is readily solved by the use of "subject alternative names".
This is a problem price wise, since crooks like verisign insist that you need some special package to request such certs, and then each name is the full price of a full cert per year. so no break at all on cost (though, you could not use verisign)
I would love to see CACert in the default CA databases widely, that would help a lot.
There is value here though. It shows a fundamental problem with the whole anti-piracy argument.
Generally speaking, a person who copies and uses software is NOT someone who would have bought it at the price it was offered. So any claims that the losses by piracy are anything but a small percentage of all copies is simply untrue.
I don't "pirate" anything really. Once in a while, maybe someone gives me some MP3s, but, even most of my mp3 collection was all stuff I had on CD and burned (at 192 k, with the file naming convention that I like...). I have also had a professional job for years. Most people in my shoes, don't hardly ever pirate anything. If they do, it usually isn't some music on CD or a boatload of movies. We can afford those things. Maybe sometimes some piece of "enterprise" software that we run at home. Stuff that would cost 10s of thousands of dollars itself.... then again... any expertise we gain ends up being used at the companies we work at, who have contracts and pay many times that for ongoing services.... sound familiar? (course, as the resident linux guy, I tend not to need to do that, its much more common in the windows world where people think IIS or MSSQL is something worth running at home)
Shit, I bought 2 copies of windows 7 at a retail store for my wife and I recently. You have any idea how many random people suggested it was too expensive and I should download it?
But look around at people who don't make as much, who don't know enough to run linux on their desktop and seek out free software, they pirate. If they didn't, their computer would basically be reduced to whacking off to porn and looking up bus schedules. They were never going to buy photoshop, or half the movies they watch... because it would be a choice between that or food, or paying me back the $80 he owes me.... which I generally leave him alone about because I want him to eat... but if he was shelling out $800 for a software license instead I wouldn't be so quiet.
Honestly, people downloading available software to use, I have a hard time having a problem with. Its one thing if you can afford it, but, if you couldn't anyway, then its not like anyone is losing something because you did it.
I dunno, I took an AK out on a rifle range not too long ago. I probably have less experience than your average Libyan with shooting (they conscript all males for some length of service). In fact, that particular outing I probably did as much shooting as the rest of my entire life, unless you want to count BB guns or counter strike:)
Anyway.... inaccurate as hell? Maybe if you are a sniper. They are quite accurate enough to hit a man sized target at reasonable distance. Actually, I think I did slightly better with the AK and iron sights than I did with the AR-15 with holographic dot. It just, fit me better.
Seriously, if I was going to sit in a nest and try making one shot kills, probably not the weapon I would want, nor the one a pro would want. However, for a grunt on the ground? I would take an AK without hesitation.
> The reason he couldn't come forward sooner was likely a 2 or 5 year NDA agreement.
except, the moment that SCO entered court to sue others making claims that he knew were false, he had a very easy legal out there. An NDA cannot prevent a person from exposing misconduct. If it could, then the Maffia would have long ago changed their Omerta oath into a formal NDA contract, and would bring suits against rats in civil court.
Except that, having one of the largest economies, and half the worlds military, means being pretty invested in this game.
Ever heard Bill Hick's old rant about how "life is a ride"?
The World is like a ride in an amusement park, and when you choose to go on it you think it's real, because that's how powerful our minds are. And the ride goes up and down and round and round, and it has thrills and chills and is very brightly colored, and it's very loud. And it's fun, for a while.
Some people have been on the ride for a long time, and they've begun to question, 'Is this real, or is this just a ride?', and other people have remembered, and they've come back to us and they say 'Hey, don't worry. Don't be afraid, ever, because this is just a ride.' and we KILL THOSE PEOPLE.
"Shut him up! We have alot invested in this ride! SHUT HIM UP! Look at my furrows of worry. Look at my big bank account, and my family. This has to be real."
What came first, the powerful drug lord, or the drug laws?
Before the drug laws, the biggest "threat" from drugs was some snake oil salesman selling you an addictive "cure all" based on ridiculous claims.
Now we have huge professional companies who specialize in that legally.... and whole classes of illegal drugs with their violent drug lords, who behead kids. Take away their drugs and prostitution and what have you got? A few violent thugs who would be a minor nuissance going around shaking down stores for protection money, and other more risky, less profitable crime.
Certainly they are bad guys but... they are worst for the power they are given, for the huge market that was left for them to rule.
By that point they had SQL Injected, gotten the username/password hashes, used rainbow tables to get the passwords for CEO and that other dude, got the root password and old one from their email..... then used those emails to contact support and used the info in them to effectively pose as the person in question.
At that point, they dropped in a firewall rule to let them in, and reset the user account password. Not exactly an invitation:)
Slashdot Mirror
Actually they can, and do every day. Every time you follow a law, its a choice, every time you break one... knowingly,.... its a choice. You can cram your republic up your ass, I never signed the constitution. I never pledged any allegiance to it in my entire adult life. I was born here, and intend to stay, no matter what the thugs in power decide they have the power to do... more power to them, they are not MY leaders.
I care more about people being thrown in jail to endure years of incarceration than some worthless soldiers toy.
And I don't mean to imply the toy is worthless, I care more about such a person than a platoons entire lives, because they are volunteers who sign up for dangerous operations, this guy is having years of his life ruined by government stupidity.
Fuck soldiers, I don't even see what the need for them is. They don't do anything that we couldn't do with militias. Or well they DO a lot of things we couldn't do with militias, but thats why I like militias better.
Actually yes, that is exactly my policy and what I encourage of everyone else.
If the law is stupid, it is a free persons duty to ignore the law and break it wherever he sees fit.
I actually don't recognize the right of anyone to make or enforce stupid laws on other people. Period.
Yup. Though, I tend to include the USAs rather broken form of "Democracy" on the "nondemocracy" list.... alot of people don't get.... I ONLY criticize the US (generally). Its not that I think Cuba is great... or that China is wonderful (but truth be told, they seem to be way more open and making a lot more progress towards openness than I ever would have predicted 10 years ago, never mind 20.... not giving them a pass, just, some credit for improvement).
I always get "Where would you rather live". Nowhere, I think this place is the best there is, but that doesn't mean I think its sufficiently good. There is no such thing, always strive for better.
That said, I answer your question as no. Its not "acceptable".... but how "Acceptable" is it that the US jails people for growing plants that it doesn't like? Its put people in jail for decades for nothing more than that. How is that acceptable? I see it as just as bad...but the difference.... we also have the highest per capita incarceration rates.
We have LOTS of what I would term "unacceptable imprisonment" right here.
Depends on your definition of "broken". Tor tries to do more than obscure what you are sending. Anyone who has an exit node can sniff your traffic unencrypted... anyone with enough middle nodes is likely to own a whole circuit of yours eventually.
Even without enough to get your whole circuit, packet timing on the end server could be enough, if they have your entry node, to tie the whole connection back, even without the middle hops.
I am sure there are even more clever attacks....none of which involve actually breaking crypto. SSL is enough to keep communications private, tor attempts to defeat traffic analysis too, which is a much harder problem.
How exactly does tor attempt to block file sharing? Aside from recommending against certain things like bittorrent (which is pretty pathological on the tor network for various reasons, the designs just do not play nice with eachother), I am unaware of any such attempt.
In fact, I believe there are a few file sharing sites in .onion space. I don't use them, but I am pretty sure I have seen them.
I happen to mostly agree but...
I also ran a tor exit node from my home for a while. Not recommended for a few reasons, but I did. The worst that ever came from it? I found that I couldn't use my IP to post on craigslist anymore. Never heard a peep from my ISP (was comcast at the time), nothing.
I think you may be on to something.
I initially resisted facebook. As recently as 4 years ago, I had accounts on both, but used myspace to the exclusion of facebook. I NEVER liked the whole "exclusive niche" that facebook initially tried to be. I never wanted a facebook account, and only ended up gradually moving over as facebook became more useful for talking to people that I knew.
I know that "4 years ago" was about the point where it started to change because one of the last things I did on myspace was meet the girl who would become my wife.
I just logged into myspace this past weekend, as I do about every 6 months to a year. It was... wholly different. Nothing like I remember, I could barely find any of the old social networking stuff.... as a social networking site, it has castrated itself. I can't imagine anyone wanting to use it any more than I can imagine people wanting to set the yahoo portal page to be their default web browser "home page".
Its all vapid entertainment "news" now.
That said... it was exactly what I hated about it, the exclusivity, that helped it really catch on. Personally I would like to see a completely p2p social networking "site". Something like the gnutella of social networking.
So... let me get this straight...
he could go to jail for 20 years.... for selling a fucking remote controlled air plane. Oh wait, its a remote controlled air plane with long range and a nice built in camera? Ooooh what a dastardly man! How horrible of him! Oh my god! How dare he sell....a fucking remote controlled air plane.
Better solution: Ditch the whole system
Little good comes from causing mass panics. Student populations have been entirely disarmed by schools generally adopting the same "Oh my god we have to do something about any danger we can IMAGINE" attitude that government suffers from. There is nothing any of them can do.
What they really need to do is realize how many students and schools there are, and compare that to the number of "active shooter" incidents and realize that... this is an utter waste of time and money to even worry about. They are more likely to have a serious fire, and they already have problems with much lesser crimes like theft, and students drinking themselves into the hospital.
Once they do have such an incident, the chance of a second one that they need it again for.... well... it could be a long time. I hope they are not paying yearly for this "service". Most telling, is that they were saving this message ahead of time. In the unlikely event that it happens, why not type the message in at the time?
If they need such a system, I see it being WAY more useful for announcing snow days, or facilities shutdowns, since they are more likely to actually happen.
Though, how will they do it? Web proxies? Will they block DNS resolving? What stops a person from pointing to external DNS?
Trivial to get around. Now maybe they will spider the xxx domains and ban them by IP? That would be awesome... then all someone needs to do is register an XXX domain and point records at IPs.... whoops can you say denial of service?
Makes me want to register an XXX domain and point records at every IP in ipv4 space. See if they drop off the internet entirely.
Hopefully, this is good for the tor network. Aside from that, it just makes me laugh. As if they will accomplish anything.
So whats next.... if a thief sells some watches, and then uses the money to buy a soda, you think its fair that the stores bank gets made to pay fines for accepting deposits from someone who made his money selling to thieves? Or maybe the store should be fined?
Or maybe, companies are supposed to audit eachother? Now is this infringement under US law... or local law? What if the two are incompatible?
I think this is ridiculous but.... maybe good. I hope it leads to more use of free software worldwide.
Sounds like the sort of thing you want top spread far and wide then. When stupid regulations that have no hope of ever achieving their intended effect are enforced, they deserve to be shown for how ineffectual and ridiculous they are. It is peoples duty to spread such documents as far and wide as possible whenever they come about.
Next thing you know we will be expected to believe in "spooky action at a distance" or that god throws dice. Preposterous!
I have, as a semi-captive audience, been subjected to many hours of ghost hunters. I usually do my best to bury my attention in something else but, its not always possible. A few things of note:
1. They do seem to try reasonably hard to find normal explanations for things. Reflections from car headlights, nesting animals, that sort of thing. I have even seen them fiddle with doors to determine how easily they swing or how much force is needed to dislodge them. They often concluded that what they have found doesn't show paranormal activity.
2. Often their "clients" are people with historic buildings or houses who want their activity "verified" for various reasons, not limited to, tourism value.
The other thing of note is, some people, like my roomate who is enthralled with it, are believers. She has said, many times, that she would like to put a kit together with EMF meters etc and go doing her own "investigations". It is hard for me, in the face of this, to claim that ALL such investigators are scammers out for a buck.
I think my biggest complaint about them, aside from the foolishness of the whole deal, is that they always play music over the so called "EVP" sessions. I have yet to hear anything but static or random noise, but, I do have to say 90% of the time, music obscures the sounds that they are listening to. Not that I expect to hear anything really. Though, people hearing voices in static shouldn't even be considered unusual. Intepresting the occasional random sound as a voice is pretty damned common.
One would hope. Of course, I didn't call 911, I got a ride from someone who was there.
However, if the situation isn't that cut and dry, then what?
My friend fell, his arm is clearly broken but, I am worried that his neck might be too. Is this system going to notice a lack of stress and assume I must be bluffing about his neck to get faster service?
That was my first thought. Not even just people who have "been in these situations" but, anyone who keeps their head calm in a situation.
A couple of years back I had a case of walking pneumonia (clearly, I didn't know, hence 'walking'). One night, after poker, while hanging out with some friends, I coughed and covered my face with my hands. As I pulled my hands away from my face, I saw them absolutely covered in blood.
Everyone around me freaked. I just calmly got up, and started getting ready to go to the hospital. As I am doing this, everyone around me seemed to take my calmness as me not considering the situation as serious. So of course, they felt the need to bother me and repeatedly tell me how serious this was, and even as I am putting shoes on and grabbing my jacket, are still advising me that I should definitely go to the hospital.
I have to wonder, if I call 911 with one of these systems, and start calmly describing the situation, are they going to now see how not-stressed I am and ignore me? Will someone die because I didn't totally freak out calling for help?
This seems like a good idea, but, I do have to wonder if it wont be relied on too heavily.
Actually the first part is readily solved by the use of "subject alternative names".
This is a problem price wise, since crooks like verisign insist that you need some special package to request such certs, and then each name is the full price of a full cert per year. so no break at all on cost (though, you could not use verisign)
I would love to see CACert in the default CA databases widely, that would help a lot.
There is value here though. It shows a fundamental problem with the whole anti-piracy argument.
Generally speaking, a person who copies and uses software is NOT someone who would have bought it at the price it was offered. So any claims that the losses by piracy are anything but a small percentage of all copies is simply untrue.
I don't "pirate" anything really. Once in a while, maybe someone gives me some MP3s, but, even most of my mp3 collection was all stuff I had on CD and burned (at 192 k, with the file naming convention that I like...). I have also had a professional job for years. Most people in my shoes, don't hardly ever pirate anything. If they do, it usually isn't some music on CD or a boatload of movies. We can afford those things. Maybe sometimes some piece of "enterprise" software that we run at home. Stuff that would cost 10s of thousands of dollars itself.... then again... any expertise we gain ends up being used at the companies we work at, who have contracts and pay many times that for ongoing services.... sound familiar? (course, as the resident linux guy, I tend not to need to do that, its much more common in the windows world where people think IIS or MSSQL is something worth running at home)
Shit, I bought 2 copies of windows 7 at a retail store for my wife and I recently. You have any idea how many random people suggested it was too expensive and I should download it?
But look around at people who don't make as much, who don't know enough to run linux on their desktop and seek out free software, they pirate. If they didn't, their computer would basically be reduced to whacking off to porn and looking up bus schedules. They were never going to buy photoshop, or half the movies they watch... because it would be a choice between that or food, or paying me back the $80 he owes me.... which I generally leave him alone about because I want him to eat... but if he was shelling out $800 for a software license instead I wouldn't be so quiet.
Honestly, people downloading available software to use, I have a hard time having a problem with. Its one thing if you can afford it, but, if you couldn't anyway, then its not like anyone is losing something because you did it.
I was just watching some episodes of Rome on DVD....
"The battle fields are full of the bodies of middling swordsmen, better to be no swordsman at all than a middling one.".
I dunno, I took an AK out on a rifle range not too long ago. I probably have less experience than your average Libyan with shooting (they conscript all males for some length of service). In fact, that particular outing I probably did as much shooting as the rest of my entire life, unless you want to count BB guns or counter strike :)
Anyway.... inaccurate as hell? Maybe if you are a sniper. They are quite accurate enough to hit a man sized target at reasonable distance. Actually, I think I did slightly better with the AK and iron sights than I did with the AR-15 with holographic dot. It just, fit me better.
Seriously, if I was going to sit in a nest and try making one shot kills, probably not the weapon I would want, nor the one a pro would want. However, for a grunt on the ground? I would take an AK without hesitation.
> The reason he couldn't come forward sooner was likely a 2 or 5 year NDA agreement.
except, the moment that SCO entered court to sue others making claims that he knew were false, he had a very easy legal out there. An NDA cannot prevent a person from exposing misconduct. If it could, then the Maffia would have long ago changed their Omerta oath into a formal NDA contract, and would bring suits against rats in civil court.
Except that, having one of the largest economies, and half the worlds military, means being pretty invested in this game.
Ever heard Bill Hick's old rant about how "life is a ride"?
(More of it is here: http://anti-union.blogspot.com/2008/10/bill-hicks-life-is-but-ride.html )
What came first, the powerful drug lord, or the drug laws?
Before the drug laws, the biggest "threat" from drugs was some snake oil salesman selling you an addictive "cure all" based on ridiculous claims.
Now we have huge professional companies who specialize in that legally.... and whole classes of illegal drugs with their violent drug lords, who behead kids. Take away their drugs and prostitution and what have you got? A few violent thugs who would be a minor nuissance going around shaking down stores for protection money, and other more risky, less profitable crime.
Certainly they are bad guys but... they are worst for the power they are given, for the huge market that was left for them to rule.
ROTFL almost but yah pretty much.
By that point they had SQL Injected, gotten the username/password hashes, used rainbow tables to get the passwords for CEO and that other dude, got the root password and old one from their email..... then used those emails to contact support and used the info in them to effectively pose as the person in question.
At that point, they dropped in a firewall rule to let them in, and reset the user account password. Not exactly an invitation :)