I fail to see how posting the information that TSR told me *and then questioning it* is "trusting" it.  Just becuase I don't instantly go "TSR fail! Death to Thomas!" doesn't mean that I believe everything they say.

Uh huh. So how come I am still questioning the facts then?  How come I am still posting asking questions about what has gone on and still wondering about the reasonings?

If I had surely "fallen for his lame excuse" I would have locked the threads and shut up. 

Just becuase I am saying that I don't think there is enough evidence that I have seen to prove it was Thomas personally doesn't mean I don't want to know who and why and how this was done. 

Nouk,

The only IPs that I know of are in Sinthes screenshot - and they dont link to Thomas based on information in the MTS2 logs. The 70 address is obviously the proxy, but the other two do not match anything we have on record here as being Thomas. The two IP addresses on the Hamilton IP are wildly different from the 2 on the Sinthe screenshot.

Which IPs are supposedly Atwas then?  I'll look them up and see who else they match.

There are way too many holes in the story right now to pin this down.  Suffice to say I don't think that this is all as they say.

I'm still 2 pages back but I thought I'd answer some stuff.

Nouk is making assumptions based on what I said, specifically that TSR had a security *breach* 3 months ago.  This is incorrect.  In actuality, any vulnerabilities existed before then and 3 months was when they allegedly fixed it. 

In other words, it sets up a scenario that they had problems with the security of the accounts and that anything prior to 3 months ago could have been compromised.  But for me it still leaves questions about why whoever did this waited till now - months later - to do this attack on MTS2.  Not many people know how much information we log, and didn't before yesterday, so I really don't think that whoever did this really thought it would go public.  I suspect it was more simply a way to make buggybooz look bad and to try and discredit her, rather than any specific attack against MTS2 as a whole.  So then it all goes back to timings - who knew about the stolen content, and who would have the motivation and technical knowledge to pull this off?

Yes Nouk, but it's the same address used on both accounts.  Pescado can give you more info about the actual server hardware and stuff, but it appears to be some kind of weird proxy setup.

Which account? Thomas's?  The only 2 recorded IPs are both in Sweden.  Both of which are in one of the screenshots.  I have no recorded login data prior to Jan 2009 for that account other than the intial registration, so I couldn't say anything about last year but the data you see in the screenshot is everything recorded on the account.  It hasn't been used much.

Paden, Ahh Atwa.  Okay, thanks.  Well, unless I know who that is on MTS2 I obviously cannot to any comparisons.

As I said in my post, I'm not entirely convinced either way.

IF TSR had no such security problem, then this still points to them/

IF TSR had a security problem, this still points to them having serious issues with the security of thier data.

And the timings are way off.  Why choose *now* to do this attack if you've had the logins for *months*? It doesn't make any sense.  The timings are way off, and are very suspicious.

So, while I'm not convinced it was a TSR high-level sanctioned thing, I'm still wanting to know who and why.  It could have been a lower down or it could have been somebody else entirely.

Paden, who is this "Anutty"? 

Nouk, with regards to why buggy had only one download on her account wasn't becuase of access to the featured forum, per se, but more that it *wasn't her upload*.  It was an upload to a group she belongs to.  Group uploads show on the profile of each person that is in that group.

Also, the IP address on Thomas' account *only* used for this thing.  The 2 previous times back in January are totally different IPs (and countries, even).  Yesterday is the only time that that IP appears

With regards to keyloggers, etc, from talking to buggy, that wasn't the issue.  Suffice to say that having the same password on both sites was the reason - which indicates that TSRs passwords are either stored unencrypted *or* the admins have a way of viewing user passwords, which is a HUGE breach of security.

This is not a wedding ceremony and somebody posting as I did is not a fart.  I'm simply pointing out whats probably going to happen. As for venting, well - 170+ pages of venting, right here, and more on GoS and more on Insim and more on Sim-Oasis and S2C and the BBS and countless other places.  I'd say that's quite a lot of venting, wouldn't you?

Just becuase I don't go "BURN CRUSH KILL DESTROY" doesn't mean I'm not happy - I just think that more effort could go into actually making the InsimClone and informing people who need to be informed rather than venting (again) on a site that really, we should all still be staying away from.

But hey, you all go have your fun - I'm going to actually do something *useful* for the community instead of posting image macros all over and start learning how to hack SMF to pieces.

I think what will happen is the following:

- Walt will see the news post, ban Pescado and delete it as well as the macro thread
- He will probably then get somebody else to look and see how the server was compromised (this may take some time)
- He will continue on with his plans for the site even with all this happening

But at the end of the day, I don't think much will have changed.  Creators will have left, the site will still be there, and people will still be posting.  I don't think this so-called "Revolution" will really achieve anything other than pissing off the regular people who maybe don't read anywhere else.

Whatever else has happened, Insim itself is still a community, and burning the innocent villagers really doesn't sit well with me.  Why not just let the site die in peace?

Yeah, I know, I'm sorry - I went back and edited becuase I probably sounded too snippy.  I'm fine with the decisions made - and heck, people seem all for the whole "Delphy modding SMF" idea, which happens to be another thing I'm really good at, so thats perfectly ok with me.

I'm just saying that there really isn't much more *I* can offer or do.  I have offered Pescado various kinds of help on server related tasks but otherwise, it's all his show.   Thank you, though, to those who did support me - I didn't mean to sound whiny, I'm just tired.

I'll use my expertise instead to work on modifying SMF to provide the same sort of download filtering and browsing that MTS2 has, since a lot of people seem to want that.  It's probably a better use of my skills since Pescado is doing all the server stuff.  I can always advise him later on if he asks about that sort of thing.

It's been communicated to me that people really don't want me involved in this going forward, so as far as I'm concerned this is all Pescado from now on, and thats fine. 

I'll help as and when people want shiny new things for download sorting and filtering.

I'm just coming up to speed, but Walt sent me this in PM yesterday:


I said sure but only for the domain and the files - not the server or anything else.  I have yet to see if I have an actual response yet. 

Also in other news, I was the one who said I'd offer to buy Insim/ISA originally.  Pescado isn't the first to offer that.