Renderosity Forums / Poser - OFFICIAL
Welcome to the Poser - OFFICIAL Forum
Forum Coordinators: RedPhantom
Poser - OFFICIAL F.A.Q (Last Updated: 2024 Dec 23 7:38 pm)
Subject: RuntimeDNA site hacked
()h 73h |-|4xx0rZ R()X! R0f| 4nd 1 d0 83|13v3 53477|371m 4|r34dy kn3w ;)
FREEBIES! | My Gallery | My Store | My FB | Tumblr |
You just can't put the words "Poserites" and "happy" in the same sentence - didn't you know that? LaurieA
Using Poser since 2002. Currently at Version 11.1 - Win 10.
Not funny. I have to say that I always thought that RDNA handeled them self well and was one of the most professional poser sites around, this was so out of character and very un-professional. Businesses should never joke about being hacked, they do leave weird pages just like that and I bet a lot of people did panic and left before they even realized that it was a joke.
Also, I have come across a couple of hacked pages before that were for real. Cleaning caches, running anti-viruses, spy cleaning, checking fire walls, etc. takes a lot of time (since a lot of these pages contain coded in trojans or nasty bugs). I wonder how much time they stole from unsuspecting customers and visitors.
Attached Link: http://acd.ucar.edu/~fredrick/win2k/active_scripting
This was a very misguided "joke". Especially given the recent trend of hackers resorting to rootkits to conceal their malevolent software from anti-virus checkers and spyware cleaners and disabling firewalls, no one can afford to visit any hacked site (unless you have your Security setting for regular internet sites set to "High". But, even with that setting, if you have RuntimeDNA added to your Trusted sites, with a typically lower security setting, as I do, your system could have been badly compromised if this were a real hack).RuntimeDNA merchants may want to ask some pointed questions to the RuntimeDNA sysadmin. Sounds like he's a kid fresh out of college who thinks he's still in a fraternity that is playing a trick on new pledges. Clearly, this is not a sysadmin who takes security issues seriously.
I recommend that everyone using Internet Explorer read the above URL to see how to best setup your browser for security. Definitely do use your "Trusted sites" feature of Internet Explorer, while disabling active scripting for all other sites. (And don't open those email attachments unless you're absolutely sure you know who is sending you something, and you've confirmed with that person that the email attachment was deliberately sent. Well, if you don't trust that the person knows how to protect his computer, don't open it anyway).
I believe that I'll remove RuntimeDNA from my trusted sites list until such time as the sysadmin can reassure me he has learned a bit more about security. Right now, I have very little faith in him.
Message edited on: 04/01/2006 16:12
Oh for heaven's sake -- IT'S A FREAKING JOKE, PEOPLE. Sheessh.
docandraider.com -- the collected cartoons of Doc and Raider
OMG, some of you folks really need to just relax or a moment. I'm as adamant against hackers as anyone, including jail time, disembowelment and castration but check out the date and scroll to the bottom of the page, all is made clear. "Un-professional" please...before getting too high and mighty about merchants Tereesa you may want to look at past Renderosity actions... anyone remember "Renda?" Some of you folks are just taking yourselves way too seriously.
Sean - I think it has already been determined as a joke. Thanks for your insightful input. Jay - If your a business, handling your customers personal data and financial information, you should not joke about being hacked (really, any webmaster shouldn't joke about something like that). Period. I am not trying to be a party pooper. I like a good joke just as much as you do, however, I have been running websites for many years and I know what the visitors are like, hell, 99.5% of them don't even read the readme files, won't look for FAQ or help buttons, etc. I really am not sure how to explain it, it is just my opinion and yeah, I don't want to be all high and mighty or even come across as such, I am not perfect either and have made many bad judgements and will make many more I am sure. I just want web masters to think before they act. I love RDNA, I shop there all the time. I just feel the joke was in bad taste and bad for their business as well. I am not bashing them, just their joke and judgement on this ONE issue. You also had to scroll way down to see that is was a joke, and you could tell it was if you took time to read it but hell, as soon as somebody sees Hacked, they run! I do! but I already knew that it was a joke so I wasn't worried but I bet there were quite a few visitors that didn't know it was a joke and closed the page as soon as it appeared. Also, they do international business, correct? Isn't April Fool's Day only in America? or do they do that everywhere?
I thought it was funny - and I knew it was a joke when I posted. There are other funny things on the site as well. There are clues about how it is written as a tip off. . . I thought it was creative and funny. Just my thoughts. Other opinions posted here are thoughtful and valid perspectives, as well. Thanks to all who replied.
Sean - I think it has already been determined as a joke. Thanks for your insightful input
Some people around here evidently have problems with it being one, ma'am.
And to them, I say, get a freaking life.
Message edited on: 04/01/2006 20:46
docandraider.com -- the collected cartoons of Doc and Raider
Oh for heavens sake.... "remove RDNA from my trusted sites" WHY?! This was a FRIKKIN JOKE! There wasn't ANYTHING malevolent on that site! What the [beep] does that have to do with how mature the Sysadmin is?! IF the site had placed anything on your computer it shouldn't, as a joke, THEN this reaction was warranted. But as it is, this was just a page of TEXT! Just like the one you're compromising your computer's security by reading RIGHT NOW! And replies like "nana nana boo boo" says it all really...
FREEBIES! | My Gallery | My Store | My FB | Tumblr |
You just can't put the words "Poserites" and "happy" in the same sentence - didn't you know that? LaurieA
Using Poser since 2002. Currently at Version 11.1 - Win 10.
Oh good grief rolls eyes. For starters the original post clearly stated that the site had been "hacked", so those that are bleating about the near-hysteria caused by being directed to RDNA really need to ask themselves WHY they visited the site if they were going to wet their panties about it. For those that casually surfed to the site ( as opposed to via this thread )to be confronted by the page and then promptly didn't scroll down because "omg omg OMG!! Hackers! Eeek! Run AWAYYY!" only to spend their precious time running virus scans and praying to their deity of choice... these sort of knee-jerk reactions are going to happen anyway shrugs Flaming the RDNA sysadmin is ridiculous. To brand the RDNA team as unprofessional just goes to prove how little you know about the team, the work they do over there, or their approach to business. I hold them in highest regard having seen first hand the effort they make to provide the best service they can. And no, I'm not on their payroll ;o) But hey, let's not let the facts get in the way of a good Flame-And-Pitchfork combo. It was a joke. I thought it was funny, as opposed to that "Freebie providers are spammers" post a couple of pages back. Relax, have a cup of tea and take a few breaths. Life's too short to be constantly down the pet shop buying hay for your high horse ;o)
My guess: The RDNA admin thought of the "joke" in terms of its implications for RDNA, but not in terms of what would happen to people who came to the site. That's immature. No big deal, but it was unprofessional and likely to put a dimple in business, with the folks who were inconvenienced by being "taken in." I'm just glad the day is over. In world where people think exit wounds are funny, April Fools' is getting dangerous. M
Let's just agree to disagree. For newcomers that come in here: RDNA is a wonderful, clever and very creative company. They have always been very professional and have managed to stay away from drama fests. I was shocked over this joke because I felt it was out of their character. Feel free to shop there, you won't be disappointed .... ;-) ernyoka1: I said nana, nana, boo, boo, because posts such as "get a freak 'n life" and typing in all caps (yelling) because somebody has a different sense of humor is quite childish and felt it deserved a childish reply in return, that way the poster might be able to understand it better. I don't even know why I posted to this thread because I rarely ever post anything. I guess I was just shocked and had to say something. I can't believe the reaction I received for having a different opinion, sense of humor or whatever. I wasn't saying any of you were bad for thinking it was funny and if I made you feel that way, I am sorry.
passes out some happy pills It's all over and done. Can't we all just move on to something else instead of fighting and bickering? :( passes around homemade blackforest cake
"It is good to see ourselves as
others see us. Try as we may, we are never
able to know ourselves fully as we
are, especially the evil side of us.
This we can do only if we are not
angry with our critics but will take in good
heart whatever they might have to
say." - Ghandi
Attached Link: http://i4.photobucket.com/albums/y128/level_head/blackforsestcake3.jpg
Black forest cake is chocolate cake layered with cherry pie filling and the whole thing is iced with whipped cream. Shaved chocolate and cherries top it :)It's absolutely YUMMY!!!
Here is a picture.
Message edited on: 04/02/2006 10:55
"It is good to see ourselves as
others see us. Try as we may, we are never
able to know ourselves fully as we
are, especially the evil side of us.
This we can do only if we are not
angry with our critics but will take in good
heart whatever they might have to
say." - Ghandi
You know.... I have been a moderator at RDNA for over 2 years. How do you think I responded when I went to login in yesterday...??? No I did not freak out, I simply read the entire page, which, "if you read it" gave you all the clues you needed to know that it was a joke. Personally...my hat's off to them for thinking up such a "GREAT" and witty April Fools Joke. YES people it is and was a joke. For those of you who got all freaked out...maybe you need some anal bug spray to fix your problems. The people at RNDA are by far the best group of individuals to ever grace a 3D community, and I would not want to be anywhere else..."PERIOD"!!!
gets out the stronger happy pills and a pea shooter Ok everyone... say "AHHHHHH"!
"It is good to see ourselves as
others see us. Try as we may, we are never
able to know ourselves fully as we
are, especially the evil side of us.
This we can do only if we are not
angry with our critics but will take in good
heart whatever they might have to
say." - Ghandi
Attached Link: http://www.codeproject.com/com/com_in_c1.asp
As a programmer who is quite familiar with what can be done via ActiveX (I've just started a new tutorial at Code Project about COM/ActiveX you can read at the above URL), it always amuses me when endusers take a cavalier attitude toward hacking. If you surf to a web site that even remotely seems like it has been hacked, or was constructed by a hacker, and you've got your internet security setting on medium (or have the site in your Trusted list, and worse, have given that site your credit card number at any time), and you think you have something to laugh about, then you're truly clueless. You don't even know what's out there, let alone realize that it has you in its sights. If I were an evil guy, what I'd do right now is put up a web page with my own malicious ActiveX component, and put a message here saying that I have a Poser freebie for download. Then when you all visited that page, my component would download its payload, use the WinInet API to search through your browser cache and cookies, and your email, looking for anything related to Poser sites that I personally know require a password and/or take credit card numbers, and email me back the info. I strongly suspect that a hacker could easily compromise the systems of a majority of people posting to this thread. It doesn't sound like many people posting here (aside from Tereesa) even know the first thing about hacking, let alone know how easy it is to do when you've got a target audience that is so cavalier about security. Seems like ripe pickings here. Hmmmmm... Naw, I'm not that evil. But given how well-received RuntimeDNA's joke was, I almost wish I was evil because hacking the computers of some of you would probably be easy and lucrative.
Valid point j_g....however you stated... As a programmer who is quite familiar with what can be done via ActiveX (I've just started a new tutorial at Code Project about COM/ActiveX you can read at the above URL), it always amuses me when endusers take a cavalier attitude toward hacking. http://www.codeproject.com/com/com_in_c1.asp How do we know that the above link you provided is not exactly the type of thing you just described...? So we the uneducated click on your link, and "WHAM" your little program goes to work.... NO THANKS.... Hope you have an awesome sunday....:-)
www.codeproject.com is a very, very well-known and reputable site among developers. So a quick search in Google's newsgroups would turn up plenty of evidence that this is a legitimate and serious site. (And it's never a bad thing to check out a web site before you surf to it, if you have any doubt at all).
But if you have your IE security settings as described in that URL I posted in my first message here, then it wouldn't matter since the highest security setting disables activeX scripting. So definitely do read that previous article and utilize IE's Trusted Sites feature.
Unfortunately, if you have a site in your Trusted list, and that site is hacked, then you're completely vulnerable. I could easily deliver a malicious payload in the time that you took to read RuntimeDNA's joke. Easily. It's especially bad if that site uses passwords, and you have credit card info stored there. That's why RuntimeDNA's joke was very ill-advised. I don't know the people who run/moderate that site, and I'm not commenting upon their performance the other 364 days of the year. But this particular day showed the site in a very unfavorable way. I don't know if any of the people who posted above are representatives of the site, but if they are, instead of defending the "humor" of the "joke" and depicting people who appreciate the serious nature of online crime as overreacting (and other much less flattering depictions above), I would have advised them simply to say "We're sorry if we caused any concern to our merchants and customers. We didn't really consider all the ramifications of our April Fool's joke, and after due consideration, understand why it would cause concern.". That would at least show a much less cavalier attitude toward security.
Frankly, if the sysadmin of a serious business had done this stunt, he would have been admonished by the site's owner at least, and perhaps fired if the institution handled personal/financial information of numerous people. (The likelihood of firing would increase dramatically if the "apology" for the joke remotely resembled the total lack of contrition and seriousness like what I've read above). I've seen this sort of stuff happen.
Message edited on: 04/02/2006 13:31
Message edited on: 04/02/2006 13:35
Privacy Notice
This site uses cookies to deliver the best experience. Our own cookies make user accounts and other features possible. Third-party cookies are used to display relevant ads and to analyze how Renderosity is used. By using our site, you acknowledge that you have read and understood our Terms of Service, including our Cookie Policy and our Privacy Policy.
http://www.runtimedna.com/ Wierd! What a shame. I went to the site and it is gone - replaced with a list of demands from the hackers. Check it out for yourself. I've never seen anything like it.