So I'm going to keep this short, generally vague and to the point.

The PDM users were deleted through the user manager by a PDM member who already had access to the user manager. Here is what we found:
- On Monday morning, a IP that resolved to a proxy logged into the suspect member's account several times.
- During this period, a new user was created by the suspect member's account with the name "plowie".
- Several minutes after the "plowie" user was created, the suspect user's account logged into the PDM Boxcar site using the typical, normal IP that is logged daily.
- Directly after that, the same IP (non-proxy) logged into the "plowie" account.
- A request from the suspect member's IP was what triggered the deletion of all the users.

The member claimed that he didn't accidently do it or anything like that and said he was sound asleep at the time it happened. I can't really speak to that, but I can say that the request to delete all of PDM's users originated from a machine on his network, so there's no hole in Boxcar or anything like that.

I'd like to think that this member didn't do it (or at least didn't do it maliciously...) but for that explanation to hold water, the member's computer was either a) hacked, or b) used by someone else in his home. Either way, it's not important at this stage.

Regardless of how it happened, I restored an older list of users and permissions so the damage is relatively minimal minus having to rebuild the accounts that were created in the last few months. The biggest thing to take away is that Boxcar is fine (minus having the ability to delete all members... but this was a shortcoming in GT too, which I replicated successfully!). If anyone else has any relevant info they'd like to share, please PM me on the forums and I'll try to get back to you when I can. :)

PS. Thanks to qz for his assistance grabbing the logs and looking through them with me :)

bummer. i can't explicity blame it on TC using that info.

One of two options someone was framing Plow or Plow did it. Plow isn't really the most popular guy so I'd venture a guess.

Of course can Plow be dumb enough to use a name like that? I think maybe if he wanted attention/credit for it which is possible given his personality.

Lot of unanswered questions but great material to ponder here!

"The biggest thing to take away is that Boxcar is fine (minus having the ability to delete all members... but this was a shortcoming in GT too, which I replicated successfully!)."

hilarious, by the way.

ain't that funny. somebody delegates authority to people they trust, then things get poofed.

So will Drow not quit now that it was an inside job? Who does this Plow guy live with?

Ya, happened in the XI chat room haha

am i the only who reads that as a joke.. ?

lol, so a pdm senator created an account to delete the users but forgot to put his proxy back on. thats what i got outta this thread anyway...

plow, aka dLpLow, was a former PDM'er who currently plays in SoF. We're happy he's found a new home in SoF because our forums are a lot more clean now. And I'm sure you're going "awwww why don't you want him posting porno? the P in PDM stands for PRUDES!" but it's totally not what you would expect.

I do not believe that he was involved if not or the fact that I saw on Facebook that the teacher for his computer class assigned them the task of writing a single paragraph on 4 famous people related to computer science. They obviously haven't got to the part where you get to hack the mainframe.

But seriously, I have no reason to believe plow is involved and no clue why that plowie account was created.

I have an irc log from kj saying he did it.


BattleKj: I kj,
Battlekj: did it

If

"the suspect user's account logged into the PDM Boxcar site using the typical, normal IP that is logged daily."

Then

" Directly after that, the same IP (non-proxy) logged into the "plowie" account."

Then

"A request from the suspect member's IP was what triggered the deletion of all the users."


That would indicate that LM's computer did it? Does LM even have any real life contacts that play, that could have been in his house using his computer? Just curious.

exactly what i thought

SoF has porn?????

*fills app

KOH Plows porn is homemade...

and not the good home made you're probably thinking...

if plow is to be a suspect, then how did he get access to make himself a senator type account?

Boltar, plow isn't a suspect based on what pang said. It's just ironic that someone used plowie.

Again kind of disappointed he wasn't mentioned by name. And again mine was brought up but was cleared of any wrong doing. Which I thank you pang.

Plow, would LM have any reason to use your name like that? It is kind of weird. Does he not like you or did you two get along?

Yes plenty of reasons an grudges

So all of the days of whining and threats of leaving the game and it turns out to be someone inside PDM the whole time.

This whole thing sounds really fishy. As an Observer it is part of my job to come up with conspiracy theories, so I will go on a limb and say that certain people in PDM were trying to frame someone and it ended up blowing up in their face.

So do you think he did it just to frame you to try and stir up some kind of fluff between you and the game?

And drow feels like a fool rrrrrrrrrrrrrright about now.

Too funny!

TBQH, most of us just don't know what to do at this point. We were not trying to frame anyone; even inside of Paradigm we weren't pointing fingers at anyone.

Why do people hack for Porn?

It was me..... I ate the last cookie

Why do people join SOF?

to have fun and blow stuff up

LMFAO@home made plow porn, ill pass haha

KOH are you not a believer in the Plow? The plow will show you more than you're willing to see!

LOL thanks req :P

so yea to fill every one else in me and LM have beef since we were members then when he was leader then when he FAKED having authorization to do pacts for monks. then entrapping me by saying he planned to get back at boltar and wanted to know if im in and fluff...... then feeding that info to boltar and getting LORDs killed last set.

no hostility towards him at all....i hate a guy who for one tells me how to run my life. 2 lies blatently to my face and 3 someone who doesnt like my damn porn.......

im glad to everyone who helped in this investigation and who helped clear my name.

just kinda pissed and mad at TAN (who prolly didnt mean nothing by it) but still put my name out there in saying my name was involved and not LM fluffed up and would like and apology form him or at least from Mr Camel....lol

realy would like to see LM show some type of remorse or something. say u didnt do it say u got hacked from your home...say my kids did it something....just dont be ide and not say nothing.

LM your a drug counsler or so u told me. u know the AA/NA commandments. make amends for your actions. take control of your life....step it up ...dont just let other be fall guys......

anyway thats all i have to say about the whol situation with him.

btw here link to logs ive had with LM over from may until aug when he sold me out to TSO
<3 u boltar

http://www.mediafire.com/?9k46fwi93zovk3o

Good post Pang;

But yea, either that members machine was used without authorisation (possible...?), or compromised (unlikely...), then i'd chalk it up to a member doing something completely bonkers for no reason...

Raheel once deleted every post he had permission to delete in RED on GT when he was given some form of leader perms, Retal Admin or something like that....

And Secret Squirrel made everybody except him a "Member" once, that was amusing...

Somebody else (warner maybe?) deleted like everything on the site once too....


Anyway, it happens when you give a large enough group of people high level perms... fortunately we do periodic backups these days heh....

LOL@Req, i'll take your word :p

***WARNING!!! DO NOT CLICK ON ANY LINK PROVIDED BY dLpLow, ITS PORN!!!***

I have to ask why the members name was not brought up when similar issues were brought to name in the past

u wish crest

crest-- its like 4kb that'd be the worlds smallest porn... but of course small, porn, plow just all go together huh!

dude its not that small! still bigger then boltar...least he admits it :P
but he does get better looking girls though.......

Hahahaha, this thread is finally getting merit :p

oh no...not the plow porn. That was just.....

heh I still have no words for it ..... O.o

i actually live near boltar so if i was gonna frame anyone prolly be him still made for his first tag killing of lord then subsiquently findig out he lives 20 mins from me.. BTW atlantic city new jersey :P

oh how ironic that LM was the one who did it. will PDM members still quit knowing it was their own member who did it?

lol!
stay strong dLpLow!

But I can't quit! I did that several years ago!

everything is always about pLow

yes, I am still quitting. the fact that it was most likely a PDM member makes no difference. In a way, I am stll not 100% convinced that it was LM, him making a fake plow account to cover up seems a little too obvious. That said, the evidence we have so far is all fairly conclusive, apart from a second IP that popped up on the plowie account.

very interesting

Plow, see! You were involved. I wasn't lying. Hehehe