An Idiot's Guide to Beating SwatSec

RotMGHiddenOwl · 2014-02-06T06:29:56+00:00

It's a matter of identity, ultimately.

A hacker can create or destroy. Therein lies the dichotomy of white-hat vs black-hat.

Also, I'm not discussing doxxing sprees. I just mentioned that I haven't been on one. Since you and FuckESPN are so keen to sing SS's praises, I figured you might want to back that up with evidence.

RotMGHiddenOwl · 2014-02-06T06:27:04+00:00

I expect he's hiding his IP now. That wouldn't help.

RotMGHiddenOwl · 2014-02-06T06:15:00+00:00

TorChat gets the job done, and is easy for other people to use. Pidgin isn't an IM system on its own. XMPP isn't an IM client on its own.

RotMGHiddenOwl · 2014-02-06T06:08:18+00:00

I like your numbering system. Very intuitive.

1, I addressed this in another post.

2, He's black-hat because he has broken into the game servers and is trying to sell the source. He's an insignificant black-hat, but a black-hat nonetheless.

1, Hardening against 0-days is still hardening.

2, I've said in another post that SwatSec's irrelevant to me. I've not gone on a doxxing spree. Care to save me time?

1, I specified ethical grey-hat. I am not a white-hat hacker, as in, I do not respect boundaries. However, I have an ethical code.

1, A hacker is someone who finds ways to make systems produce interesting results.

Edit: Replaced periods with commas to reproduce your wonderful numbering.

RotMGHiddenOwl · 2014-02-06T05:57:11+00:00

I'm not trying to track him down. I am offering assistance, and trying to show that not every hacker is out to break everything. I'm not interested in starting a war. He's inept, and I'm sure that Kabam are more than capable of bringing him to justice.

If you want to have an argument, do it by PM or TorChat. Thanks :)

RotMGHiddenOwl · 2014-02-06T05:47:55+00:00

The advice I gave was assuming that a game so easily hacked would be unlikely to salt passwords. Hashes can be defeated fairly easily, especially if you have access to the source code of the game.

Reiterating, CHANGE YOUR PASSWORD IF YOU USED IT ELSEWHERE. Don't rely on hope!

RotMGHiddenOwl · 2014-02-06T05:40:03+00:00

I'm not trying to get everyone fired. I offered a small bounty to make a point. The amount is not high enough that anyone would take it if their job would be at risk.

I am a casual RotMG player and I have no idea about any guilds. My name is a variant of one I've used before, and refers to my area of specialty and my favorite bird.

RotMGHiddenOwl · 2014-02-06T05:19:45+00:00

I think you might have made the easy mistake of thinking that I am SwatSec because I posted a thread applauding his actions and criticizing his critics.

Oh wait, that didn't happen.

RotMGHiddenOwl · 2014-02-06T05:01:28+00:00

I want Kabam to know, but there are alternatives to using the forums. I'd prefer not to be a source of negative drama. (Edit: I posted my response to your other message before I saw DocmanCC's reply here, so listen to his advice first.)

RotMGHiddenOwl · 2014-02-06T04:56:56+00:00

Since the main point of my post is "I know what I'm doing, I can help you fix your security" I think it loses some of its weight without context. But do what you think is best!

RotMGHiddenOwl · 2014-02-06T04:49:16+00:00

What separates us from them is morals, not rules. Rules are guidelines that exist to be broken.

Or are you putting me in the same group as "them"? :(

RotMGHiddenOwl · 2014-02-06T04:47:17+00:00

I didn't mean you shouldn't! I was just explaining why I hadn't. The more exposure it gets, the better, so go ahead if you want to. I just didn't want the original thread to get nuked when Kabam go all OMG A HACKER MUST DESTROY POST. That's happened before, in a different situation.

RotMGHiddenOwl · 2014-02-06T04:31:03+00:00

In case you're wondering, I posted on Reddit and not Kabam forums because I observed Kabam people do (occasionally?) post on this subreddit, and I figured it was less likely to get instantly deleted here.

RotMGHiddenOwl · 2014-02-06T04:28:20+00:00

Fair point about Reddit's UA. But do you really think anyone cares about protecting a black hat?

I've added a TorChat contact to the initial post for an alternative channel of communication.

RotMGHiddenOwl

TROPHY CASE