Rip-production declares war on gfy - GoFuckYourself.com

martinsc · 03-11-2006, 01:35 AM

http://www.rip-productions.org/forum/t107082-.html
(copy and paste in new window...)

who does the site belong to?

chechnya · 03-11-2006, 01:37 AM

You have to signup for the forums. Can you copy+paste? Why dont people like gfy?

chadglni · 03-11-2006, 01:41 AM

You'll have to copy / paste dude. They disabled registration.

KrisKross · 03-11-2006, 01:49 AM

Basically, they hacked Paige18.com, ripped all the content and uploaded it (2 gigs worth) to SendSpace as a "fuck you" to GFY.

Who runs Paige18.com? They need to send a C&D and a DCMA notice to this site's host as well as SendSpace.

dbavaria · 03-11-2006, 01:52 AM

did they "hack" the site, or simply obtain a password (legit or not) and rip the content?

KrisKross · 03-11-2006, 01:56 AM

Quote:

Originally Posted by dbavaria

did they "hack" the site, or simply obtain a password (legit or not) and rip the content?

The image they posted insinuates they hacked Strong Box and obtained at least part of the password list, then ripped the whole site.

http://img42.imagevenue.com/img.php?...ge=44985_0.jpg
http://img102.imagevenue.com/img.php...ge=44990_1.jpg
http://img125.imagevenue.com/img.php...ge=44995_2.jpg
http://img127.imagevenue.com/img.php...ge=44996_3.jpg
http://img137.imagevenue.com/img.php...ge=44998_4.jpg
http://img142.imagevenue.com/img.php...ge=45008_5.jpg
http://img145.imagevenue.com/img.php...ge=45013_6.jpg
http://img24.imagevenue.com/img.php?...ge=45018_7.jpg

Those are the images they posted.

03-11-2006, 02:00 AM

Ooof, that's ownage

chadglni · 03-11-2006, 02:01 AM

Ouch doesn't seem fitting.

03-11-2006, 02:05 AM

wow.. this sux

KrisKross · 03-11-2006, 02:05 AM

Quote:

Originally Posted by bdjuf

Ooof, that's ownage

While it sucks, I don't think it's real ownage. The losers who'll be downloading the files are all broke ass idiots who wouldn't sign up for a paysite to begin with. So whoever runs Paige18.com really only lost 2 GB of bandwith. If they had taken down the site and caused a loss of revenue, that'd be a different story.

Still, all in all, it's pretty lame. The attitude of these guys is pretty shitty.

"seet thats why people dont pay for porn that girl is fugly thx bro for that shit ill dl just so i can post it at all sites i c"

Based on the grammar and syntax, I'd say the kid isn't anywhere near old enough to own a credit card yet, so it's not like he was thinking about signing up for Paige18.com anytime soon.

Trax · 03-11-2006, 02:18 AM

just a stupid question
how easy is it to get access to the complete password list
it seems tooooo easy
am i the only one who finds this a little scary or is this a strongbox bug?

Damian_Maxcash · 03-11-2006, 02:23 AM

not this wanker again

I thought he was dead......

Who is hosting him this time?

Damian_Maxcash · 03-11-2006, 02:28 AM

Quote:

Originally Posted by damian2001

not this wanker again

I thought he was dead......

Who is hosting him this time?

It seems he has moved to internap.

[email protected]

www.internap.com

03-11-2006, 02:29 AM

From sendspace.com terms:

5.3 Copyright or Trademark Infringement
sendspace Services may be used only for lawful purposes. Transmission, distribution or storage of any material in violation of any applicable law or regulation, including export control laws, is prohibited. This includes, without limitation, material protected by patent, copyright, trademark, service mark, trade secret or other intellectual property rights. If you use another party's material, you must obtain prior authorization. By using the Services, you represent and warrant that you are the author and copyright owner and/or proper licensee with respect to any hosted content and you further represent and warrant that no content violates the trademark or rights of any third party. sendspace reserves the right to suspend or terminate a User's transmission(s) that, in sendspace's discretion, violates these policies or violates any law or regulation.

JD · 03-11-2006, 02:41 AM

oh shit. time to call the feds

Max Cannon · 03-11-2006, 03:19 AM

Quote:

Originally Posted by SPeRMiNaToR

oh shit. time to call the feds

I agree.

martinsc · 03-11-2006, 04:12 AM

Quote:

Originally Posted by Trax

just a stupid question
how easy is it to get access to the complete password list
it seems tooooo easy
am i the only one who finds this a little scary or is this a strongbox bug?

i wonder about that too...

SGS · 03-11-2006, 04:18 AM

Strongbox bug?

dbavaria · 03-11-2006, 04:21 AM

wow, while I understand that this really dosen't cause much damage to the site since most of these people wouldnt even be buying subscriptions, but wow thats a kick in the face, can you say pwnd!

martinsc · 03-11-2006, 04:32 AM

Quote:

Originally Posted by dbavaria

wow, while I understand that this really dosen't cause much damage to the site since most of these people wouldnt even be buying subscriptions, but wow thats a kick in the face, can you say pwnd!

that doesn't matter, it's still stealing...

BMDC · 03-11-2006, 04:42 AM

Quote:

Originally Posted by KrisKross

While it sucks, I don't think it's real ownage. The losers who'll be downloading the files are all broke ass idiots who wouldn't sign up for a paysite to begin with. So whoever runs Paige18.com really only lost 2 GB of bandwith. If they had taken down the site and caused a loss of revenue, that'd be a different story.

Quote:

"seet thats why people dont pay for porn that girl is fugly thx bro for that shit ill dl just so i can post it at all sites i c"

You might want to try reading your own posts - if these losers do indeed start posting it all over the place, sooner or later it will fall into the hands of potential customers of that site

dbavaria · 03-11-2006, 04:46 AM

No need to restate the obvious, we know copyright violations are bad, now can we get back to how this guy got owned?

I wonder if the site owner knows this happend yet lol...

Nookster · 03-11-2006, 05:11 AM

I'de bet that his copy of vBulletin isn't registered as well.

martinsc · 03-11-2006, 05:31 AM

Quote:

Originally Posted by Nookster

I'de bet that his copy of vBulletin isn't registered as well.

lol, i guess that's obvious...

Manowar · 03-11-2006, 05:37 AM

everyone report him to internap

martinsc · 03-11-2006, 07:56 AM

Quote:

Originally Posted by Manowar

everyone report him to internap

sent them a mail...

dubsix · 03-11-2006, 08:43 AM

I don't know where you guys are getting "internap"

I still show them as located at leaseweb.

Nembrionic · 03-11-2006, 08:57 AM

DynaSpain..where AAAAARREE you? We need you ;)

jacked · 03-11-2006, 09:03 AM

i'm sure one of you guys will tear down his site lets see how long it takes

xclusive · 03-11-2006, 09:06 AM

what scumbags, Whoever has stongbox installed need to check thier shit.

MattO · 03-11-2006, 09:10 AM

Quote:

Originally Posted by WireSix-Ryan

I don't know where you guys are getting "internap"

I still show them as located at leaseweb.

The IP is 64.74.223.66 which goes to
Internap Network Services PNAP-SEA-BLOCK4 (NET-64-74-0-0-1)
64.74.0.0 - 64.74.255.255

They also have the domain http://www.ripnetwork.net/
which is registered to
Zolgrad, Vasil
Glasnost 9
Dnjepropretrovsk, Jekateringrad 21718
Russian Federation
98484757653 Fax --

MattO · 03-11-2006, 09:11 AM

Anyone with a high-traffic site want to img src them?

http://www.rip-productions.org/forum...la/riplog2.jpg

edit: nm they've got linkhotten protection now

dubsix · 03-11-2006, 09:14 AM

root@alpha [/var/named]# dig www.rip-productions.org

; <<>> DiG 9.2.4 <<>> www.rip-productions.org
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13831
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;www.rip-productions.org. IN A

;; ANSWER SECTION:
www.rip-productions.org. 14400 IN CNAME rip-productions.org.
rip-productions.org. 14400 IN A 83.149.72.107

;; AUTHORITY SECTION:
rip-productions.org. 86400 IN NS ns1.femalesoldiers.net.
rip-productions.org. 86400 IN NS ns2.femalesoldiers.net.

;; ADDITIONAL SECTION:
ns1.femalesoldiers.net. 54594 IN A 83.149.72.102
ns2.femalesoldiers.net. 54594 IN A 83.149.72.103

root@alpha [/var/named]# dig -x 83.149.72.107

; <<>> DiG 9.2.4 <<>> -x 83.149.72.107
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38111
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3

;; QUESTION SECTION:
;107.72.149.83.in-addr.arpa. IN PTR

;; ANSWER SECTION:
107.72.149.83.in-addr.arpa. 86400 IN PTR rip-productions.org.

;; AUTHORITY SECTION:
72.149.83.in-addr.arpa. 83413 IN NS ns1.leaseweb.nl.
72.149.83.in-addr.arpa. 83413 IN NS ns4.leaseweb.net.
72.149.83.in-addr.arpa. 83413 IN NS ns5.leaseweb.nl.

;; ADDITIONAL SECTION:
ns1.leaseweb.nl. 971 IN A 62.212.64.121
ns4.leaseweb.net. 42593 IN A 62.212.78.199
ns5.leaseweb.nl. 971 IN A 83.149.64.123

I don't have cached information either, even a dnsstuff lookup straight onto their nameservers still puts them at leaseweb:

http://www.dnsstuff.com/tools/lookup...ons.org&type=A

stickyfingerz · 03-11-2006, 09:17 AM

Jono isnt online Ill nudge him when I see him. atm for some reason their site is fuxored and wont load.

dubsix · 03-11-2006, 09:19 AM

everyone should fusker them

jacked · 03-11-2006, 09:19 AM

Quote:

Originally Posted by stickyfingerzdotnet

Jono isnt online Ill nudge him when I see him. atm for some reason their site is fuxored and wont load.

that was quick

stickyfingerz · 03-11-2006, 09:20 AM

Quote:

Originally Posted by WireSix-Ryan

everyone should fusker them

Only takes one.

stickyfingerz · 03-11-2006, 09:20 AM

Quote:

Originally Posted by jacked

that was quick

hmm ya someone is fuxoring them

ServerGenius · 03-11-2006, 09:21 AM

hello :-) I'll check out if it's hosted in The Netherlands if it is....then I'll go
for a second round of fun

stickyfingerz · 03-11-2006, 09:22 AM

Quote:

Originally Posted by DynaSpain

hello :-) I'll check out if it's hosted in The Netherlands if it is....then I'll go
for a second round of fun

Looks like its still the same host to me. Still resolves to same ip as before.

Well their site should come back up again soon.

stickyfingerz · 03-11-2006, 09:24 AM

Oops ya back up now.

ServerGenius · 03-11-2006, 09:26 AM

Quote:

Originally Posted by stickyfingerzdotnet

Looks like its still the same host to me. Still resolves to same ip as before.

Well their site should come back up again soon.

Cool, well guess who will be stopping by for coffee and chat with Leaseweb
on monday

DirtyRider · 03-11-2006, 09:31 AM

Hmm, yup they are at it again.

chadglni · 03-11-2006, 09:43 AM

Well DynaSpain, I have no content for them to steal but thanks for your effort on behalf of everyone.

Lettiz · 03-11-2006, 11:05 AM

Here's a screencap I've found of that specific post while it was still in the links section: hxxp://83.149.72.33/image9432hj42.php

Seems KrissKross was correct :/"

MattO · 03-11-2006, 11:43 AM

Quote:

Originally Posted by Lettiz

Here's a screencap I've found of that specific post while it was still in the links section: hxxp://83.149.72.33/image9432hj42.php

Seems KrissKross was correct :/"

Interesting that your nick is Lettiz and within a couple IP's on the server from RIP is a open directory called lettiz

http://83.149.72.113/lettiz/

RIP-PRODUCTIONS is http://83.149.72.107
RIPNETWORK is http://83.149.72.106

fris · 03-11-2006, 01:08 PM

Quote:

Originally Posted by WireSix-Ryan

everyone should fusker them

fusker their viewattachment.php it will bring the server to a hault or make the mysql loads go crazy ;)

fris · 03-11-2006, 01:11 PM

http://www.leaseweb.com/ they wont like the content hosted on their servers, just emailed abuse@ wont take long before they pull the plug

Jace · 03-11-2006, 01:16 PM

how did they get the passwd file?

fris · 03-11-2006, 01:19 PM

Quote:

Originally Posted by Jace

how did they get the passwd file?

i doubt they have it, unless they used some wacky sql injection on strongbox, which ray wasnt aware of.

03-11-2006, 01:35 AM	#1
martinsc Too lazy to set a custom title Industry Role: Join Date: Jun 2005 Location: 127.0.0.1 Posts: 27,047	Rip-production declares war on gfy http://www.rip-productions.org/forum/t107082-.html (copy and paste in new window...) who does the site belong to? __________________ Make Money

03-11-2006, 01:41 AM	#3
chadglni Confirmed User Join Date: Dec 2002 Location: PEI, Canada Posts: 6,924	You'll have to copy / paste dude. They disabled registration. __________________ Sign up here - Dating Site affiliate program

03-11-2006, 01:49 AM	#4
KrisKross Confirmed User Join Date: Jan 2006 Location: Canada Posts: 5,024	Basically, they hacked Paige18.com, ripped all the content and uploaded it (2 gigs worth) to SendSpace as a "fuck you" to GFY. Who runs Paige18.com? They need to send a C&D and a DCMA notice to this site's host as well as SendSpace. __________________

03-11-2006, 02:01 AM	#8
chadglni Confirmed User Join Date: Dec 2002 Location: PEI, Canada Posts: 6,924	Ouch doesn't seem fitting. __________________ Sign up here - Dating Site affiliate program

03-11-2006, 04:18 AM	#18
SGS Confirmed User Industry Role: Join Date: Dec 2002 Location: Mallorca - Nottingham Posts: 5,176	Strongbox bug? __________________ See sig...

03-11-2006, 01:37 AM	#2
chechnya Registered User Join Date: Jan 2006 Posts: 94	You have to signup for the forums. Can you copy+paste? Why dont people like gfy?

03-11-2006, 01:52 AM	#5
dbavaria Confirmed User Join Date: Nov 2005 Location: San Diego Posts: 404	did they "hack" the site, or simply obtain a password (legit or not) and rip the content?

03-11-2006, 02:00 AM	#7
buddyjuf Guest Posts: n/a	Ooof, that's ownage

03-11-2006, 02:05 AM	#9
Gasper Guest Posts: n/a	wow.. this sux

03-11-2006, 02:18 AM	#11
Trax [----------------------] Join Date: Aug 2001 Posts: 14,486	just a stupid question how easy is it to get access to the complete password list it seems tooooo easy am i the only one who finds this a little scary or is this a strongbox bug?

03-11-2006, 02:23 AM	#12
Damian_Maxcash So Fucking Banned Join Date: Oct 2002 Location: MaxCash.com Posts: 12,745	not this wanker again I thought he was dead...... Who is hosting him this time?

03-11-2006, 02:29 AM	#14
Gasper Guest Posts: n/a	From sendspace.com terms: 5.3 Copyright or Trademark Infringement sendspace Services may be used only for lawful purposes. Transmission, distribution or storage of any material in violation of any applicable law or regulation, including export control laws, is prohibited. This includes, without limitation, material protected by patent, copyright, trademark, service mark, trade secret or other intellectual property rights. If you use another party's material, you must obtain prior authorization. By using the Services, you represent and warrant that you are the author and copyright owner and/or proper licensee with respect to any hosted content and you further represent and warrant that no content violates the trademark or rights of any third party. sendspace reserves the right to suspend or terminate a User's transmission(s) that, in sendspace's discretion, violates these policies or violates any law or regulation.

03-11-2006, 02:41 AM	#15
JD Too lazy to set a custom title Industry Role: Join Date: Sep 2003 Posts: 22,651	oh shit. time to call the feds

03-11-2006, 04:21 AM	#19
dbavaria Confirmed User Join Date: Nov 2005 Location: San Diego Posts: 404	wow, while I understand that this really dosen't cause much damage to the site since most of these people wouldnt even be buying subscriptions, but wow thats a kick in the face, can you say pwnd!

03-11-2006, 04:46 AM	#22
dbavaria Confirmed User Join Date: Nov 2005 Location: San Diego Posts: 404	No need to restate the obvious, we know copyright violations are bad, now can we get back to how this guy got owned? I wonder if the site owner knows this happend yet lol...

03-11-2006, 05:11 AM	#23
Nookster Confirmed IT Professional Industry Role: Join Date: Nov 2005 Location: Hollywood, CA Posts: 3,744	I'de bet that his copy of vBulletin isn't registered as well. __________________ The Best Affiliate Software, Ever.

03-11-2006, 05:37 AM	#25
Manowar jellyfish Join Date: Dec 2003 Posts: 71,528	everyone report him to internap

03-11-2006, 08:43 AM	#27
dubsix Confirmed User Industry Role: Join Date: Dec 2004 Posts: 363	I don't know where you guys are getting "internap" I still show them as located at leaseweb.

03-11-2006, 08:57 AM	#28
Nembrionic Confirmed User Join Date: Feb 2003 Posts: 2,424	DynaSpain..where AAAAARREE you? We need you ;)

03-11-2006, 09:03 AM	#29
jacked sperm tail Industry Role: Join Date: May 2004 Location: nj Posts: 11,019	i'm sure one of you guys will tear down his site lets see how long it takes __________________ Got Cam Models? icq: 361-607-616

03-11-2006, 09:06 AM	#30
xclusive Too lazy to set a custom title Join Date: Apr 2004 Location: Buffalo, NY Posts: 35,218	what scumbags, Whoever has stongbox installed need to check thier shit. __________________ I support MediumPimpin.com / Shemp's Outlawtgp.com /

03-11-2006, 09:11 AM	#32
MattO The O is for Oohhh Join Date: Feb 2003 Location: AUSTIN TEJAS Posts: 10,861	Anyone with a high-traffic site want to img src them? http://www.rip-productions.org/forum...la/riplog2.jpg edit: nm they've got linkhotten protection now

03-11-2006, 09:14 AM	#33
dubsix Confirmed User Industry Role: Join Date: Dec 2004 Posts: 363	root@alpha [/var/named]# dig www.rip-productions.org ; <<>> DiG 9.2.4 <<>> www.rip-productions.org ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13831 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION: ;www.rip-productions.org. IN A ;; ANSWER SECTION: www.rip-productions.org. 14400 IN CNAME rip-productions.org. rip-productions.org. 14400 IN A 83.149.72.107 ;; AUTHORITY SECTION: rip-productions.org. 86400 IN NS ns1.femalesoldiers.net. rip-productions.org. 86400 IN NS ns2.femalesoldiers.net. ;; ADDITIONAL SECTION: ns1.femalesoldiers.net. 54594 IN A 83.149.72.102 ns2.femalesoldiers.net. 54594 IN A 83.149.72.103 root@alpha [/var/named]# dig -x 83.149.72.107 ; <<>> DiG 9.2.4 <<>> -x 83.149.72.107 ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38111 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3 ;; QUESTION SECTION: ;107.72.149.83.in-addr.arpa. IN PTR ;; ANSWER SECTION: 107.72.149.83.in-addr.arpa. 86400 IN PTR rip-productions.org. ;; AUTHORITY SECTION: 72.149.83.in-addr.arpa. 83413 IN NS ns1.leaseweb.nl. 72.149.83.in-addr.arpa. 83413 IN NS ns4.leaseweb.net. 72.149.83.in-addr.arpa. 83413 IN NS ns5.leaseweb.nl. ;; ADDITIONAL SECTION: ns1.leaseweb.nl. 971 IN A 62.212.64.121 ns4.leaseweb.net. 42593 IN A 62.212.78.199 ns5.leaseweb.nl. 971 IN A 83.149.64.123 I don't have cached information either, even a dnsstuff lookup straight onto their nameservers still puts them at leaseweb: http://www.dnsstuff.com/tools/lookup...ons.org&type=A

03-11-2006, 09:17 AM	#34
stickyfingerz Doin fine Industry Role: Join Date: Oct 2005 Posts: 24,983	Jono isnt online Ill nudge him when I see him. atm for some reason their site is fuxored and wont load.

03-11-2006, 09:19 AM	#35
dubsix Confirmed User Industry Role: Join Date: Dec 2004 Posts: 363	everyone should fusker them

03-11-2006, 09:21 AM	#39
ServerGenius Confirmed User Join Date: Feb 2002 Location: Amsterdam Posts: 9,377	hello :-) I'll check out if it's hosted in The Netherlands if it is....then I'll go for a second round of fun __________________ \| http://www.sinnerscash.com/ \| ICQ: 370820 \| Skype: SinnersCash \| AdultWhosWho \|

03-11-2006, 09:24 AM	#41
stickyfingerz Doin fine Industry Role: Join Date: Oct 2005 Posts: 24,983	Oops ya back up now.

03-11-2006, 09:31 AM	#43
DirtyRider Confirmed User Join Date: Feb 2003 Posts: 819	Hmm, yup they are at it again. __________________ hello

03-11-2006, 09:43 AM	#44
chadglni Confirmed User Join Date: Dec 2002 Location: PEI, Canada Posts: 6,924	Well DynaSpain, I have no content for them to steal but thanks for your effort on behalf of everyone. __________________ Sign up here - Dating Site affiliate program

03-11-2006, 11:05 AM	#45
Lettiz Registered User Join Date: Mar 2006 Posts: 1	Here's a screencap I've found of that specific post while it was still in the links section: hxxp://83.149.72.33/image9432hj42.php Seems KrissKross was correct :/"

03-11-2006, 01:11 PM	#48
fris Too lazy to set a custom title Industry Role: Join Date: Aug 2002 Posts: 55,372	http://www.leaseweb.com/ they wont like the content hosted on their servers, just emailed abuse@ wont take long before they pull the plug __________________ Since 1999: 69 Adult Industry awards for Best Hosting Company and professional excellence. WP Stuff

03-11-2006, 01:16 PM	#49
Jace FBOP Class Of 2013 Industry Role: Join Date: Jan 2004 Location: bumfuck, ky Posts: 35,562	how did they get the passwd file?