David: Chat Room threat

Matrix Games Forums

Forums Register Login Photo Gallery Member List Search Calendars FAQ

My Profile Inbox Address Book My Subscription My Forums Log Out

David: Chat Room threat

View related threads: (in this forum | in all forums)

Logged in as: Guest

Users viewing this topic: none

Printable Version

All Forums >> [Current Games From Matrix.] >> [World War II] >> Steel Panthers World At War & Mega Campaigns >> David: Chat Room threat

Page: [1]

Message

<< Older Topic Newer Topic >>

David: Chat Room threat - 7/24/2001 7:12:00 PM

Warrior

Posts: 1808
Joined: 11/2/2000
From: West Palm Beach, FL USA
Status: offline

David: Please, please, please limit access to the Chat Room to people who are registered with Matrix. We are getting too many outsiders who just surf in. Some are obviously hacker kids looking for a secure place to trade info with their delinquent friends. We don't need this sort of visitor, and it can pose a threat to Matrix itself. If one of these vandals decide to launch a Denial of Service attack against Matrix, it could put the servers off-line for an indefinite period. I strongly suggest checking Steve Gibson's (of Gibson Research) report on how this is accomplished: http://grc.com/dos/intro.htm. This is no joke! Not for Matrix, and not for me as a user. I will not use the Chat Room unless I feel it is secure, and that's a shame, because it really is great to have that available. [ July 24, 2001: Message edited by: Warrior ]

_____________________________

Retreat is NOT an option.

Post #: 1

- 7/24/2001 8:30:00 PM

Waylander

Posts: 62
Joined: 9/3/2000
From: Pattaya, Chonburi, Thailand
Status: offline

I tend to agree, if a security guru like steve gibson can get into so much trouble because a kid decided he had insulted his friends then who knows. The XP security topic was also a bit alarming. regards Freddie

_____________________________

"You ask, what is our aim? I can answer in one word. It is victory. Victory at all costs. Victory in spite of all terrors. Victory, however long and hard the road may be, for without victory there is no survival."

(in reply to Warrior)

Post #: 2

- 7/25/2001 1:03:00 AM

Warrior

Posts: 1808
Joined: 11/2/2000
From: West Palm Beach, FL USA
Status: offline

Hoping this won't fall off the page.

_____________________________

Retreat is NOT an option.

(in reply to Warrior)

Post #: 3

- 7/25/2001 1:07:00 AM

Wild Bill

Posts: 6821
Joined: 4/7/2000
From: Smyrna, Ga, 30080
Status: offline

Me too, Warrior. We'll keep it up there. ...WB

_____________________________

In Arduis Fidelis
Wild Bill Wilder
Independent Game Consultant

(in reply to Warrior)

Post #: 4

- 7/25/2001 1:17:00 AM

Paul Vebber

Posts: 11430
Joined: 3/29/2000
From: Portsmouth RI
Status: offline

Unfortunately the nature of teh internet and IRC chat makes it impossible to allow access to everybody, and keep undesiables out. All we can do is kick them out as the opportunity forces us to. If you have a password, how do we get it out to those who want access, without making it publically avaialable? IT defeats the whole pupose to make it "too secure". We ahave safeguards against denial of sevice attacks, though folks are constantly testing us as a recent virus attack attempt this past weekend can attest. We work hard to maintain a public, hospitable site and services, unfortunately that means those lacking social graces and understanding of civilty can abuse it. As in the real world, we just have to live with it.

_____________________________

http://www.matrixgames.com/images/sig-logo-02.gif

(in reply to Warrior)

Post #: 5

- 7/25/2001 1:55:00 AM

sven

Posts: 10293
Joined: 3/28/2000
From: brickyard
Status: offline

quote:

Originally posted by Paul Vebber: Unfortunately the nature of teh internet and IRC chat makes it impossible to allow access to everybody, and keep undesiables out. All we can do is kick them out as the opportunity forces us to. If you have a password, how do we get it out to those who want access, without making it publically avaialable? IT defeats the whole pupose to make it "too secure". We ahave safeguards against denial of sevice attacks, though folks are constantly testing us as a recent virus attack attempt this past weekend can attest. We work hard to maintain a public, hospitable site and services, unfortunately that means those lacking social graces and understanding of civilty can abuse it. As in the real world, we just have to live with it.

I spoke with David during our little 'visit' from the 'gentleman' in question. Matrix Games IMPORTANT data was never threatened. The best thing to do was what we did which was ignore him and establish that we were the ones in control of the situation. Regards, Frank

_____________________________

(in reply to Warrior)

Post #: 6

- 7/25/2001 2:00:00 AM

Wild Bill

Posts: 6821
Joined: 4/7/2000
From: Smyrna, Ga, 30080
Status: offline

On a personal note, in the last week I've been getting strange e-mail from unknown people, totally unknown who ask me to "look" at their files. They offer no explanation whatsoever as to who they are or even offer their real names. Their files are not explained. I have replied to them asking for more information. They never respond to my reply. My recommendation is that if any of you receive such correspondence, simply delete it. Some folks evidently do not like us or what we are trying to do. But that will not deter us from our goals. We will continue to strive to bring you quality gaming, open discussion and a listening ear to what you want. We will not be stopped no derailed from our goals.

_____________________________

In Arduis Fidelis
Wild Bill Wilder
Independent Game Consultant

(in reply to Warrior)

Post #: 7

- 7/25/2001 2:52:00 AM

Fabs

Posts: 444
Joined: 6/5/2000
From: London, U.K.
Status: offline

Wild Bill, that happens all the time. Some of these guys are just spammers, others are more sinister in that they are trying to spread viruses. I don't know what makes these idiots tick, but i have a very simple rule: if I don't know the sender or if I am not expecting an e-mail, I can them. Touch wood, so far I've managed to avoid trouble.

_____________________________

Fabs

(in reply to Warrior)

Post #: 8

- 7/25/2001 3:30:00 AM

mpenfold

Posts: 7
Joined: 7/13/2001
From: UK
Status: offline

quote:

Originally posted by Wild Bill: On a personal note, in the last week I've been getting strange e-mail from unknown people, totally unknown who ask me to "look" at their files. They offer no explanation whatsoever as to who they are or even offer their real names. Their files are not explained. I have replied to them asking for more information. They never respond to my reply. My recommendation is that if any of you receive such correspondence, simply delete it. Some folks evidently do not like us or what we are trying to do. But that will not deter us from our goals. We will continue to strive to bring you quality gaming, open discussion and a listening ear to what you want. We will not be stopped no derailed from our goals.

Bill, Another option is to send an e-mail to abise@, so if for example they were pigshit@thierisp.com, send a copy of the e-mail to abise@theirisp.com. Will not stop them, but it may just slow them up a little.

_____________________________

(in reply to Warrior)

Post #: 9

- 7/25/2001 3:52:00 AM

gbotto600

Posts: 82
Joined: 5/25/2001
From: New Jersey, USA
Status: offline

yea, i was watching TechTV (a channel all about computers and the internet) and they spoke with Gibson about what happened to his site, i think people should only be able to access in with their forum name and forum password, that would keep those random spammers and hacker losers out

_____________________________

Email/MSN: gbotto600@hotmail.com
AIM: BersaglieriBotto
__________________
"Among the Americans who served on Iwo Jima, uncommon valor was a common virtue."
--- Admiral Nimitz, 1945

"This will b

(in reply to Warrior)

Post #: 10

- 7/25/2001 4:06:00 AM

ectizen

Posts: 139
Joined: 2/24/2001
From: melbourne, australia
Status: offline

quote:

Originally posted by Wild Bill: On a personal note, in the last week I've been getting strange e-mail from unknown people, totally unknown who ask me to "look" at their files.

This is a new email worm/trojan/virus/thingy that's been doing the rounds lately. When these things are activated (by opening the attachments), they tend to spread to other users in their host's address book. It's unlikely that this is a directed attack against you or Matrix. Interestingly, the amount of this kind of email you get can be used to gauge your popularity. If you're something of an internet personailty and are in a lot of people's address books, you'd receive a lot of this. If, like me, you're a relative nobody, you'd get very little of this. I personally have never received one of these, although we got one at work on monday. In short, you're getting these things because you're popular.

_____________________________

ectizen's SP:WaW Tools - Map Thing (1.0a), Scenario W

(in reply to Warrior)

Post #: 11

- 7/25/2001 4:14:00 AM

sinner

Posts: 174
Joined: 5/7/2001
From: North Carolina
Status: offline

Wild Bill: This is serious. No kidding, no fun things here. What you are getting is a virus! Never open those files, and, if you use Outlook Express as a mail reader, you are probably infected too. This is the virus SirCam. If hides itself in several places, like renaming needed DLL files from your System folder, inside your TrashBin, it sends (and deletes!!!) any kind of file that you can have inside your "My Documents" folder... Please, check for the newest anti-virus releases, specifically ones that can fight "SirCam virus". It cames, at least, in English and/or Spanish. I recomend that first you get an update for your anti-virus, then send a polite mail message to the people that "send you" the files (it was the virus) and tell them that they are infected with SirCam and, if possible, avoid using Outlook Express. Try other e-mail systems: Eudora, Netscape Messenger... Try, for example http://www.mcaffee.com/ and check for they Alert: http://www.mcafee.com/anti-virus/viruses/sircam/default.asp?cid=2360 Of course, this virus was all inoffensive against my "KoenigTiger" called Linux. But I have gotten so far around a dozen of those e-mails.

_____________________________

Sinner from the Prairy<br />"Thalassa! Thalassa!"

(in reply to Warrior)

Post #: 12

- 7/25/2001 5:40:00 AM

11Bravo

Posts: 2082
Joined: 4/5/2001
Status: offline

quote:

Originally posted by Matt Penfold: Bill, Another option is to send an e-mail to abise@, so if for example they were pigshit@thierisp.com, send a copy of the e-mail to abise@theirisp.com. Will not stop them, but it may just slow them up a little.

Do you mean abuse@theirisp.com? :)

_____________________________

Squatting in the bush and marking it on a map.

(in reply to Warrior)

Post #: 13

- 7/25/2001 6:06:00 AM

Wild Bill

Posts: 6821
Joined: 4/7/2000
From: Smyrna, Ga, 30080
Status: offline

I'm still clean. No, this is not paranoia. E-Mails are coming with names of people I work with closely as being the sender. Someone has to know this stuff to personalize it like that. I have McAfee installed and updated. So far, so good...Wild Bill

_____________________________

In Arduis Fidelis
Wild Bill Wilder
Independent Game Consultant

(in reply to Warrior)

Post #: 14

- 7/25/2001 6:11:00 AM

gbotto600

Posts: 82
Joined: 5/25/2001
From: New Jersey, USA
Status: offline

this same thing happened with me, i got emails like it from my best friend and some other close online pals, but i then checked my message board at www.squad600.hk.st and someone posted a message about the virus and i didn't open them luckily :)

_____________________________

(in reply to Warrior)

Post #: 15

- 7/25/2001 6:55:00 AM

Banjo

Posts: 717
Joined: 3/10/2001
From: Southwest Missouri
Status: offline

So far, the only person I have attached files in an email to is Wild Bill. They were a few maps that I was working on, and hope to make a scenario into. One of these days!!! I will only send attached files upon prior consent to the recipient. There will be no attached files from me before then. I say this in lieu of the recent occurrences. A friend had some relatives affected the last few days. So if you don't hear from me first that I will be sending an attached file, I didn't send you one. Email is Minstrilbob@aol.com Bill, I'll get that finished yet!!

_____________________________

(in reply to Warrior)

Post #: 16

- 7/25/2001 7:08:00 AM

madflava13

Posts: 1530
Joined: 2/7/2001
From: Alexandria, VA
Status: offline

My father works for a newspaper in the midwest that has been hit in the last few days by viruses spread through emails such as the ones Wild Bill described. What happens is the virus infects your system, replicates itself and sends itself to everyone in your "Contacts" and "address book" files. After it does that, it erases or seriously damages your Hard Drive. The newspaper was forced to shut down its servers for some time until the files could all be cleaned. This virus is effective precisely because it comes from people you know. They have no knowledge of the messages being sent, by the way. The most common subject or message is "Take a look at this file" or something to that effect. Be careful when you get messges like this, everyone...

_____________________________

"The Paraguayan Air Force's request for spraying subsidies was not as Paraguayan as it were..."

(in reply to Warrior)

Post #: 17

- 7/25/2001 7:23:00 AM

BruceAZ

Posts: 608
Joined: 10/9/2000
From: California
Status: offline

Bump

_____________________________

(in reply to Warrior)

Post #: 18

- 7/25/2001 7:46:00 AM

Bonzo

Posts: 676
Joined: 9/3/2000
From: Peace River, AB, Canada
Status: offline

I too have been recieving odd files for the last couple of days, these being a text file and an attached file with a name structured XXX.DOC.VBS. My Zonealarm firewall catches them & renames them so I can recognize the Visual Basic script. Never was brave (stupid?) enough to open unsolicited files. I tried emailing the sender, but the e-mail bounced. I've had about 15 of these messages in the last 2 days, all with the same text file but from a couple of different e-mail addresses and different XXX.DOC.VBS file names & sizes. I just delete them without looking now. I have a number of e-mail accounts & a couple of aliases for my main account but every one of these messages came to my nwbattalion.com account.

_____________________________

Robert (Bonzo) Lindsay, Webmaster 28th (North-west) Battalion Headquarters Main http://www.nwbattalion.com E-mail

(in reply to Warrior)

Post #: 19

- 7/25/2001 8:34:00 AM

chanman

Posts: 84
Joined: 1/4/2001
From: Westminster, Colorado, U.S.A.
Status: offline

In this day of many people trying to impress their friends by taking down websites and writing viruses, a little paranoia is a good thing. Check the mail program you use for the option to hide filename extensions. Turn it off. Check for unknown extensions, if you see them, delete the message. Running an executable sent to you via email is risky behavior. As the previous poster pointed out, he received a xxx.doc.vbs file, which is an executable file and probably a virus. A personal firewall did the job for him, and for the rest of you Win9X, WinNT, WinME users out there that is probably a good idea. I would go further and make sure that while you are messing around in cyberspace that any network cables to the rest of your home networks be disconnected. This is called an airwall and is one of the best ways to isolate an infection or assault if you happen to fall victime to one. In the case of Matrix, I strongly urge that your webserver have an airwall between it and the rest of the company jewells. Transfer data from the development machines to the download servers using some removeable media such as a zip disk or cd/rw. Network connectivity is nice, but can burn you if your site gets compromised. These days, sizeable removable media is cheap and readily available. For the rest of us, one final comment. I use an older pc to browse the net when I am at home. I sanitize it regularly and never connect it to my home network until it has been cleaned, and never when I am online. If that machine becomes infected, I scrape the operating system off and start over. I only use Win98 on that machine as I haven't located a DSL driver for linux. Linux is actually a better solution for a browsing machine as it is immune to most of the attacks and email viruses roaming the ether. Note that linux is not really a "consumer" operating system, but based on the level of comments I have seen on the matrix boards, I would say that many of you are "geeky" enough to tackle the learning curve. If any of you try linux and get stuck, send me email and I will attempt to help you. Hope these comments prove useful to someone. Chanman [ July 24, 2001: Message edited by: chanman ]

_____________________________

"As God is my witness, I thought that turkeys could fly"

(in reply to Warrior)

Post #: 20

- 7/25/2001 9:43:00 AM

sinner

Posts: 174
Joined: 5/7/2001
From: North Carolina
Status: offline

As most of you have correctly deduced, it is a nasty virus. The sender has no idea of what is going on on their machine. Yes, the virus has its own mail program, so it does not use Outlook Express or whatsoever. That's why they claim that nothing has been e-mailed from their computer. The virus takes the e-mail addresses from "contacts" files, "addressbooks" and similar files that the mail prorgams store in your PC. That's why you recognize the names. The virus, everytime that the PC gets started, "rolls the dice" and you have 1 chance in 33 that it will fill up your entire empty space in your disk with nonsense, making your computer sure to crash for having Zero empty space. Next, the virus will check to see if the date is October 16. If it is and the Windows operating systems is using a European date format (day/month/year), then it will again generate a random number that has a 1 in 20 chance of triggering the machine to delete all the files on the hard drive. Finally, it will export a random document form the hard drive and append it to the body of the virus when it propagates itself to other users. This could present a privacy breach if the document is confidential. Please, ve very carefull. McAffe qualifies it very dangerous. Check also http://www.zdnet.com/zdnn/stories/news/0,4586,2792260,00.html?chkpt=zdnnp1tp02 for more information on the Virus.

_____________________________

Sinner from the Prairy<br />"Thalassa! Thalassa!"

(in reply to Warrior)

Post #: 21