i know there are many irate people over this

That may explain why the other guy who posted his hun results only has like 2XX clicks to his sponsor. All be it a software sponsor.

really, you senile halfwhit?
Here's your last post in that thread:
I'm having trouble seeing where you said "I don't see anything wrong period"
and I'll bet the Hun didn't either.

You see, when you chirp off about your betters, expect your other betters no notice and ignore your sound advice.


shit, excuse my bad attitude
:1orglaugh

Thats the easy part , deploying it , is a tad harder..

If you do it honestly you miss a huge gap of people who think they are safe and wont use the program.

If you use exploits in windows, your sort of playing the same game..

Your my better ? hahahahha thats the funniest thing i have heard all day..

Thats just fine for me neither situation cost me anything and cost the supposed "BETTERS" with shitty security alot of $$$

Your right i missed a comma , i meant to say i didn't see anything wrong, PERIOD


As in read the last line of your quote.. "I'm not accusing you of anything other than running a fine operation "

What part of that dont you understand ??

If someone said google was stealing my shit , i would look into it..

Maybe you missed the part in that thread that HE DIDNT UNDERSTAND HE WAS BEING HACKED FROM THE INSIDE. I OFFERED HELP , THE NEXT DAY HE WAS SOAKED FOR A MILLION HITS

If you have work to do then quit fucking crying like an infant over an old thread that has nothing to do with this one..

sure chokey, you being ignored by your betters for chirping once too many times has nothing to do with this thread. :1orglaugh

nothing would change, do you think firefox is better? No, but all the hackers, etc dont give a fuck about it, because nobody use it. If 95% of all people would go with firefox, all the hi-jacks, virues, etc would be made for firefox and IE would be clean and safe

Your fantasy is interesting.

Reality is much different..

I have only spoken with the hun on a few occasions , he responded to me within 24 hours on both occasions..

Nobody ignored me, they ignored my advice..

Im just calling them on it..

Many people ignore my advice , it usually costs them money in the long run..

you are not totally right about this one
teh fact that firefox is open source make the creation of a patch a question of hours, fact that IE isnt make us depandant of Microsoft patch
:2 cents:


security by obscurity don't work

Damn...that guy that was posting his stats on here and had only 200 clicks to his sponsor knows why now. The money lost in sales + the bandwidth lost comes out to a pretty hefty amount.

This is very true, if a lot more people listen to you when you first bring it up. Things with them would be different. This is a true statement for sure. :2 cents:

You are right about that in a way..

I was thinking the same thing, his gallery wasn't that bad.. pretty average really.

But it could have been a combination of things.. like server problems on his end..

Even though you try to help them by pointing out major security holes in their sites, they ignore you or attack you for it.

Remember when I warned Jay with his site?

You won't believe it but he still has a major security hole.

Am I gonna bother notifying him? Hell no:

I don't look for them on purpose, I notice them in the logs generated by my web crawlers that I code (for fun and my Computer Science course)

Did he have time to thank him? Does he work 24/7? No I don't think so... Should he thank all people who did send him a mail about this issue a personal letter? In the thread Smokey is referring to he says "Thanks for the report!". Do not read that he is calling Smokey a stupid surfer, and do not think he would ever say that to anyone...

Did he solve the problem? Yes
Will advertising solve any unhappy faces from advertisers? Think so

So what is Smokey's grieve? The Hun did not thank him personaly? Is Smokey mad because surfers were screwed, or do you think The Hun has more reason to be mad? Smokey: "once you realise i was right perhaps a listing might be nice". Like Smokey is the first and only guy who noticed the problem, get real...

It's shows bigger means more under attack and not just by hackers ;)

And Smockey, here is his e-mail address: [email protected]. Works better then trying to nail him on a public board.

i posted about the hun probelms several days ago

I don't ignore people. In fact, I'm in the process of building this great smokey the bear statue that will get a prominent place in my yard, right next to the other 400 statues I'm building for the other people reporting.

Oh, I cancelled an order for a little over 5000 statues of people that reported and suggested stuff that we ALL checked and investigated that turned out to be nothing...

Everybody that reported in got an answer for me, a good explanation that - if you looked closer - contained some more investigating questions. I did for instance ask you for your HOSTS-file. I got thousands of reports from people saying I redirected, but they had their HOSTS-file fucked up. All these thousands of people made a suggestion that wasn't correct. People that reported in with their HOSTS-file, or any other matter concerning the virus, gets the most updated info. That may be a standard reply, where the intelligence or competence of NOBODY is questioned at all, but would you write hundreds of replies by hand when you're busy fixing a problem? You DEMAND a big huge thank you thank you other than the one you already received 'cause you were one of the thousand people that reported the problem? Ok.. Smokey... thanks guy... Duh...

Ok as long as your building the statue ... :thumbsup

Nobody demanded anything .. I would assume after reporting on your forum of the problem and being blown off ,that after you realised you were wrong and i was right , you would say "thank you"

Thats all i asked .. nobody said anything about great riches or grand statues

man I know that sucks...sorry for that!

The simple fact is , you didnt respond to 500 others personally, but you took the time to respond to my thread personally to tell me i was the problem.. but you couldn't find the same time to say * i was wrong thanks smokey *

I dont happen to notice 500 other reports on your forum , i notice only mine..

I assumed it would be quicker to send it to your forum than to your email that must get alot of other less important emails..

And as it turns out i was right , my email did not get a response , but my thread on your forum was responded to very quickly by staff and yourself.

I responded to you in the same matter Smokey, you quoted it here for crying out loud...

Part from that, you come on the GFY, with thousands of webmasters, with a topic titled "The Hun - FUCK YOU" 'cause you wanted a 'thank you'... strange way of enforcing that.

I checked the thread again just now, there's a "Thanks for the report!" in my reply just there. Anyway, since it seems to be important who's wrong and who's right I have the sad news that we were both wrong... So "Well quite a few webmasters have been hacked by the same worm . The worm uses rotation so it wont show the exploit for everyone. " as you quoted on my site is NOT what happened on The Hun...

What happened is that PHPBBS had a bug. We updated PHPBBS, but never really bothered to update the passwords - which turned out to be the mistake. So, there was not a big hack, virus or worm... our passwords were leaked out. So then it's easy for people to get in though FTP, add an iframe. Usually the bot here is running on several different machines, finding false links and regenerating the Yellow Pages several times a day. In this occasion that didn't happen, and I was out for a day (litterally, had a big hangover), so I found this morning that the bots haven't been running for a while, 'causing the site not to be updated for several hours. The guy that 'infected' the site wasn't a genious... every time the Yellow Pages regenerated the code was removed and he had to put it in again. This fellow could have done much more damage. Lucky for us he didn't, through we are investing quite a bit of money to get this guy prosecuted.

Hmm did you happen to think most of the people with the fucked up hosts files, got fucked up because of a trojan built into YOUR site..

So basically you want people to point out the EXACT LINE OF CODE pulled from your own servers ( which is what i had to do , as up until then you continued to be hacked until shortly after i pointed out exactly where they had hidden it . ) and not get any thanks for it.. gee okay..

I guess 3 days of lost revenue is alot simpler than looking at the html on your page when someone points out you have been hacked.

That is because you happen to have no access to my e-mail...

You'll be surprised how little crap e-mail I get once I installed SpamArrest. I hardly get any unrelated messages anymore, maybe 2 or 3, compared to 1200 or so back in the old days...

Also, a quote from my own board: "you have helped him infect a few million new surfers with spyware that steals other webmasters money"... would you expect any kindness from anyone that you made an accusation like that to??!

if it did steal refcodes thats a lot of infected people :helpme

The rotation i was referring to was the target iframe... because several times the iframe was there but contained nothing..


I got a thanks on that page before you realised you had been hacked that i assumed was a " thanks for nothing"

After you realised it was hacked your review simply replied , its been fixed.

Either way, we were both sort of wrong, anways best of luck ( like you need it )

Didnt mean any harm except informing others of damage

No revenue was lost (http://newstats.sextracker.com/st?sk...&stats.Range=m) and if you actually think I didn't check my code over and over again when reports came... well... let's just state that only a moron would firmly believe I would ignore posts and do nothing.

Oh, and I just checed the board, so the line of code and everything came to me only when the problem had been long solved. An e-mail works quicker in these matters. Especially in the holiday-times

just when spam is starting to go down according to AOL and such, spyware takes its place

None of your revenue , but what of your paid gallery spots ?

And thats a stats shot , your stats wouldn't have been affected at all , just your sponsors...

And future revenue lost because thousand of people are using zombified computers that will now steal your and my ref codes for months to come.

And no the line of code was pulled from your servers minutes before it was posted. And was fixed roughly an hour after it was posted..

I don't thank people for nothing. If someone takes the time to report a problem I thank them senserely.

Now I don't thank people on command. Especially since these people demand that 'thank you' on a board where thousands of fellow webmasters come with a topic entitled "FUNK YOU 'the hun'". That you simply don't do. Something to do with respect. Which is what you would have gotten to me if I read the post on my BBS (part from your last post on there) before I read this post on the BBS...

Bannerclicks haven't changed, I don't see a drop in traffic going to the banners. I don't think many people are infected by this. Surfing with an unprotected machine will get you infected on galleries listed all over the place - unfortunately including The Yellow Pages. We're on things pretty good, but we always have to react to things that go wrong. Which is why I have the gazette (www.thehun.net/gazette), by the amount of reports I got in from people tells me most are running some sort of virus protection.

An unprotected machine will get infected approximately after being on-line for 90 minutes. By then a portscan will have a virus installed. I don't know if you have a firewall, but mine reports a portscan about every 5 minutes.

Again i didn't demand shit. I simply stated my opinion on not recieving one..

The topic title sounds a bit harsh, but it was intended in a GFY style.

Thats all i asked for was respect. Perhaps i misunderstood your first post in your forum as,.....

Dear sir.

Dont waste my time , we have ultra top notch security so it must be your computer causing the problems , not mine.


Thanks for nothing..

Thank you and fuck you is one thing,
but what about people that had paid listings screwed over that hack, will you let that go?

on the stats on your forum theres his stats. A few hundred thousand people were infected..

Smokey, you mast have enourmous feet to be stepped on your toes this easily...

You're actually saying you're pissed off 'cause I didn't thank you. Where do I disrespect you in any of the replies I send on the board or through e-mail - I mean from BEFORE this "FUCK YOU"-post on the GFY??

You're assuming I disrespect you 'cause you didn't get a reply from me. Simply 'cause I didn't see the original post I could reply to... I just got a call from a friend of mine which made me check the board. If you'll be assuming that everybody that doesn't mail you back any kind of response is disrespecting you you're bound for a very frustrated time...

Like I said earlier, anybody pointing out problems gets my respect and thanks. I think it's great when people take time to write me about what they see and think. It pisses me off though that some people make assumptions on what I think about them before they let me do any talking. I don't know how many boards you check when you're having a couple of days off with wife and kids, but I want to spend as much time with my kids as possible when they're free from school. Today for instance I was supposed to go fishing. I cancelled that when I got the reports in my e-mail - which I quickly checked before I was about to leave. I missed your post on my board. Instead I am confronted with a post like this. A big FUCK YOU on the biggest public webmaster board and the implication I helped a hacker infect people's computers... well... thank you for that!

Ok granted i jumped the gun and assumed your review as speaking for you on the matter and perhaps i should have waited for you to respond to your forum, or just left it at that. Perhaps im just bitter :)

Im truly sorry if i used up any time that could have been spent with the kids as i have my own and feel the same way.

Maybe some people take things more seriously than others.

Basically i guess i just freak out when i see companies that i assume would have someone looking into this sort of stuff 24 hours a day, arent and dont.

Like yes im sure you get lots of surfers giving you false leads, but how many could it be a day?

Like if someone says . Hey im a webmaster not a surfer and on line 153 there is a javascript loading an iframe. That you couldnt have someone check that out every few hours And if they found bad code , you would reset your passwords as you may have been hacked.

Ok, now that we got that out of the way, thanks Smokey, you hit the nail with that info, unfortunately I didn't catch your post on the board before I pinned down the same info...

I get reports about redirects on a daily basis, those are all HOST-file redirects which are usually quite easily fixed with SpyBot for instance, which is why the first couple (maybe 20 or so) people received an e-mail with that suggestion in it. When reports came in by the bigger numbers I started to get a little more suspicious, but still we couldn't find the code in our site ('cause of the robot regenerating everything). This morning I got a phonecall from Review that there were reports on the board (must have been your report he was calling about), I jumped at the computer and saw the e-mails that had come in, got on the phone with my tech-guy in LA (woke him up at 4:30 his time) and fixed the problem, changed all passwords, updated security and called it a day...

Let's continue this through e-mail, I'd love to know who's behind this, and I know quite some people that love to know the same thing...

The Hun broked the internets :(

i remember when u 1st started posting here, and people use to take you for a joke, but you do know you your shit :)

give peace a chance

You would be surprised how many webmasters report leads that absolutely make no sense at all... I have had webmasters curse and swear at me before it turned out the link they tried to submit REALLY went to a 404... :1orglaugh

We checked out the page, I did get your initial report which I replied to, I saw the detailed report after we fixed the problem. Even after I found this post...

But now we're communicating in two forums at once I see. ;-)

What a great thread:

One webmaster finds a hole in another webmasters site and feels miffed that reporting it to him didn't get the attention the reporter wanted, so he starts a thread on a board with a pretty brutal title.

The other webmaster finally acknowledges the report and after a little discussion (that never really got out of hand amazingly), everything is resolved.

That's fucking pretty professional, compared to the rest of messy threads around here. Good for the both of you (regardless if that has any bearing on anything).

Why in God's name would you use such a lousy piece of forum software in the first place?
It's so full of bugs that it makes Windows98 look like the most secure piece of code in the history of mankind.

:party-smi

If you have a better idea... I'm interested ;-)

Hire Smokey to write you one :glugglug

I pointed this shit out yesterday and some of the idiots on here (Battus aka "Franck"), called me a noob.

Now they get to stick it up their ass.