Author Topic: Re: FurAffinity: Six Years of Insecurity  (Read 1293 times)

verix

  • *
  • Posts: 40
  • E-points: +8/-0
  • preachin' Marx, chuggin' Starbucks
    • View Profile
Re: FurAffinity: Six Years of Insecurity
« on: January 21, 2011, 02:02:21 am »
edit: Some preface.

Originally, above, there was a big-ass thing where I tried to defame Dragoneer with a bunch of shit and I can't take it being up anymore. I don't believe in it anymore. I know y'all hate the dude to death but goddamn I can't have the shit I said above on my conscience. I can take back those words, at least... but the words below I really can't, because I'd be a hypocrite if I tried to take the things I said back from down below. The things below contain a lot of petty predictions and phrases like "social chess" that I really don't accept anymore, and to be honest I'd prefer you didn't read them. I've been having an extreme personal struggle leaving *all* of this up, but honestly, the above post that got all this rolling seems to have done a lot of harm, and the longer it's up the more confusion it creates as to what my position is-- not only apparently with others, but even in my head. I honestly can't take it anymore.

I don't particularly care about the potential ridicule that may come from asking to have the initial thing taken down-- I just can't personally have that on my heart anymore. I'm just not that kind of person anymore-- I'm a big softie that just got blindingly angry, and I honestly feel really bad for having said a lot of the shit I said.

A lot of people don't understand why I'm putting so much effort into what I'm doing. The long and short is that I owe my current career path to FurAffinity-- as weird as it sounds-- and regardless of who's running it or whether or not we agree with how it should be run I owe it to the site to see it fixed. So that's what I'm working on right now.

The long and short of all the stuff you see below: I do believe I was proven wrong. I think there's something else going on here that's not really rooted in a lot of the assumptions that have built up over the years. Call me an optimist, but I'm going to try my damndest to bring down the walls that have built up around both cynicism and the administration.

So, without further ado: watch what happens when I go apeshit.


here is yet another totally awesome sha1sum describing my cynicism and NFL Pro-Bowl predictions: ca3d951504c7ec9a7141b6a473cd87efe411a2eb

I'm going to play social chess. I want you to beat me. I want you to prove me wrong about you. I want you to prove me so wrong that you embarrass me. I want you to prove me so wrong that I feel a sharp sense of defeat in my pride. I want you to come out on top as someone who is obviously not a manipulator, a liar, a weasel or any thing of the sort. if you actually act appropriately, if you actually act with honesty and thought, you will be able to accomplish this. only YOUR ACTIONS dictate how this occurs.
« Last Edit: February 02, 2011, 11:19:14 am by verix »

verix

  • *
  • Posts: 40
  • E-points: +8/-0
  • preachin' Marx, chuggin' Starbucks
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #1 on: January 21, 2011, 05:18:49 pm »
this post no longer relevant-- it was trying to bring contextuality to the angry post above, which ain't here no more.
« Last Edit: February 02, 2011, 11:59:53 am by verix »

verix

  • *
  • Posts: 40
  • E-points: +8/-0
  • preachin' Marx, chuggin' Starbucks
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #2 on: January 22, 2011, 01:45:39 pm »
here's a great journal describing a rather sad situation in which this administration completely wipes out someone's gallery with completely flimsy evidence: http://www.furaffinity.net/journal/2037445/

and here's another sha1sum: 730431c8a21f15ccc9eba00c0b1364796633629a

the release date for the first one I posted in this thread is still pending. when something actually happens related to this whole situation, it'll be posted.

verix

  • *
  • Posts: 40
  • E-points: +8/-0
  • preachin' Marx, chuggin' Starbucks
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #3 on: January 24, 2011, 03:57:26 am »
Something happened!

Damaratus metaphorically bitch-slapped the anger out of me and I got some coherence. I wound up figuring out the core of the situation-- I think. It doesn't excuse a significant chunk of the stuff that's happened-- that's something that needs to be addressed over time. But the approach is wrong because my premise as to Dragoneer's character is slightly-- but critically-- wrong.

In all honesty, I'd prefer you not read these documents for two reasons: 1) they present an unsavory presentation of Dragoneer that is based not only on conjecture but on a bad premise to begin with, and 2) they present an embarassingly paranoid presentation of myself by virtue of some of the implications I slip in. However, I refuse to prevent these from being published just because I'm shy about their contents now that I've changed my mind-- that would be absolutely worthy of mockery.

ca3d951504c7ec9a7141b6a473cd87efe411a2eb http://pastebin.com/3uW8pZvy
730431c8a21f15ccc9eba00c0b1364796633629a http://pastebin.com/H4ybf1rt (yes, I do in fact think it's possible with the right application-- call me an optimist, or head-in-the-clouds kind of guy, but I really think this community has great potential to be awesome with the right direction :)

I suspect you may get bad sums on the above copy/pasting from Pastebin. In that event, I'll host them somewhere for right-click-download so their sums can be verified.

Here's the final thing, written before I finished the journal I posted on my FA page: http://pastebin.com/3qmUy1e2

If you are going to read all of these, though, please read them in the order they're posted.

Dima

  • *
  • Posts: 38
  • E-points: +6/-2
  • Inadequate
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #4 on: January 24, 2011, 03:25:54 pm »
So how were you shown that what you perceived was a misperception? From reading what you provided here it just seems that you got diplomacy'd into thinking the warpath you are on was not Right Effort, though I don't see how putting the ball in Dragoneer's hand would be really bad in the end if he simply proved you wrong or owned up to things and started acting right. Of course, I only say this because you are mysteriously quiet about said misinterpretation. Correct me if I just misread where you laid out exactly what damaratus said to prove that you were wrong about him and not just that you were wrong about the way you were going about it.

Your actions might have been misguided but that does not excuse others'. That said, I hope something comes of your new actions.

verix

  • *
  • Posts: 40
  • E-points: +8/-0
  • preachin' Marx, chuggin' Starbucks
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #5 on: January 24, 2011, 04:59:20 pm »
So how were you shown that what you perceived was a misperception? From reading what you provided here it just seems that you got diplomacy'd into thinking the warpath you are on was not Right Effort, though I don't see how putting the ball in Dragoneer's hand would be really bad in the end if he simply proved you wrong or owned up to things and started acting right. Of course, I only say this because you are mysteriously quiet about said misinterpretation. Correct me if I just misread where you laid out exactly what damaratus said to prove that you were wrong about him and not just that you were wrong about the way you were going about it.

Your actions might have been misguided but that does not excuse others'. That said, I hope something comes of your new actions.

No one actively showed me why my perception was incorrect-- I just thought a little bit deeper about the situation and came to a bit more accurate of a conclusion. For example: what makes someone a sociopath? It's the intent behind the actions. A sociopath willingly manipulates others in order to derive personal pleasure from their pain. This is the platform I was originally attacking on (e.g., "do you think you're that brilliant at social manipulation?" implied just this). This isn't what Dragoneer's doing. Dragoneer doesn't actively feed off of saying "we're fixing it"-- he has a reason for saying these things, and it doesn't have to do with actively wanting to put the veneer over peoples' eyes, even though it may be interpreted as such. "We're fixing it" without any substantial backing to it is more akin to an escape than it is to a ploy on others, and it has a very specific reason. Hence, my initial perception of sociopathy is incorrect, rendering all of those predictions rather petty and excessively aggressive. I agree that it's not excusable, but it's also not excusable to be as brash I have due to the true nature behind the actions. If he was, in fact, a sociopath, I wouldn't have done what I did the other day.

I'm quiet about the misperception because it's rather personal in nature, and thus not really worthy of any sort of public ridicule. It's also an emotion that I personally have felt in the past that led -me- to look like I was willfully manipulating people in the past. I'm really regretful of it-- doubly regretful of attacking someone I used to be when it wasn't truly warranted-- so I'd like to take this opportunity of being such an immense aggressor toward this misunderstanding to help amend the issue. So, instead of telling everyone just what that is, I'm going to try and help amend it with him in private and try to point it out in a constructive fashion. Non-constructive methods haven't worked because it's very easy to put up defenses-- "turning up the volume" on them, so to speak, causes those defenses to spring upward. I understand that mysterious, inexplicable vagueness will very much lead to questions such as "why are you not pointing it out?", so if this doesn't clear things up (or at least imply enough that I have, in fact, come to another conclusion instead of being cowardly about my predictions), feel free to ask another question.

Damaratus didn't prove me wrong directly-- you won't see that in my FA journal. What you will see, however, is me flying off the handle at him with pure emotion and rage at first, long before I realize that he's not who I'm angry at. When it gets to a point that you're taking out your anger on -innocent- people, you need to rethink what's got you so angry in the first place, which is why my tone did a complete 180 and I opted to actually just -try- to be constructive. So far it's worked-- I think I may be able to fix FA by the end of the month next month (thought it was February already) if I keep up this route. Hopefully I can get the UI schema done by tonight and start working on pseudocode over the week. :)
« Last Edit: January 24, 2011, 08:56:11 pm by verix »

Dima

  • *
  • Posts: 38
  • E-points: +6/-2
  • Inadequate
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #6 on: January 24, 2011, 06:32:16 pm »
That is understandable, there is no need to really ask any specific questions about the misinterpretation, I just thought you might have found some sort of absolute evidence that might have changed everything we knew. As for Damaratus, I see how he quelled your anger from his words and simply being there as a person you kind of directed your anger at mistakenly. However, there is something to be said about irritating an already angry beast, let alone the fact that his misconceptions of your goals not being much of an excuse, as Pi pointed out to someone else in the same journal with "ignorance not being a good excuse in any situation".

But, like I said, I applaud your more pacifist direction. Someone was going to have to be "grown-up" about it, though I am worried they won't care to consider your work in the end. But like, if it's all laid out and done they can't just ignore it can they? Right? Right?

Pi

  • POOR IMPULSE CONTROL
  • Postcount ate Whippany, NJ
  • ****
  • Posts: 614
  • E-points: +40/-10
  • <blink>yes hello</blink>
    • View Profile
    • Clan Spum userpage
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #7 on: January 24, 2011, 06:59:50 pm »
But, like I said, I applaud your more pacifist direction. Someone was going to have to be "grown-up" about it, though I am worried they won't care to consider your work in the end. But like, if it's all laid out and done they can't just ignore it can they? Right? Right?

Meantime, my intention is to prove to them that the quality of my work is not a function of how nice I am to them.

Also, for the record, I disagree that the situation is salvageable. The only thing that I think can be done now is to scrap it the entire thing, dissect and analyze all of the failure (social, fiscal, political and technical), and leave it as a warning for future generations: do not do these things.

Furry is not yet "ready for the enterprise", as it were.
"we did farts.  now we do sperm.  we are cutting edge." — Theo DeRaadt

nrr

  • Sean Piche Fan Club
  • Cabalistic Fuckhead
  • *
  • Posts: 79
  • E-points: +7/-3
  • OMG SO CUTE ^__^
    • View Profile
    • lynxies :3
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #8 on: January 26, 2011, 08:11:54 am »
Furry is not yet "ready for the enterprise", as it were.

There are a lot of things that a hacker named nrr will put over the Enterprise.  A contract gig doing reverse engineering work?  Always.  A datacenter full of high-performance compute nodes ready to do my bidding?  Absolutely.  Tickets to see Project Pitchfork live?  Without question.

... but furries? Oh, no.  A hacker named nrr don't do shit for the furries.  Let me reiterate: Don't. Do. Shit. For the furries.
im glad the "I saw a furry IRL" thread is so good at bringing goons together

YOUR PARTICIPLES AREN'T THE ONLY THINGS DANGLING

Pi

  • POOR IMPULSE CONTROL
  • Postcount ate Whippany, NJ
  • ****
  • Posts: 614
  • E-points: +40/-10
  • <blink>yes hello</blink>
    • View Profile
    • Clan Spum userpage
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #9 on: January 26, 2011, 08:24:46 pm »
In the interest of full disclosure:
Yak posted this giant thing on verix's journal. It's a big long rant that we have already found a handful of misrepresentations and lies in, and includes the howlingly hilarious line "you specifically have zero reasons to complain about not being heard [... you] blew your chance by spitting in my face". Yeah, because we did that by banning you from IRC, whereas you're completely blameless! (asswipe).

Anyway, without further ado, the contents:

Preface.
Usually I would've replied to this, and any other of your concerns - as well as shed some light on how things are done and keep being done the way they are right now - and why - in your IRC channel.
As I always tried to do. It was the reason why I hung out there to begin with. I gave you a chance to speak to somebody - who could have made all these plans and suggestions of yours happen - directly.
But unfortunately it just happened that none of you listened o what I've said when when I was doing it. And if you listened you either chose to misinterpret what I've said, make fun of it in the tired old "lol FA sucks" way or just plain not believe it.
And you ended up banning me from it for giving you answers to your questions on the plan that was already formulated, confirmed and put in motion by the administration team.
That's fine. But from now on you specifically have zero reasons to complain about not being heard or payed attention to. You blew your chance by spitting in my face.



Hi.
A great deal of your post, and thus I assume your conclusions come from assumptions that are incorrect.
I am going to explain why, and it would be up to you to decide whether you'd want to believe them or not, and whether to adopt your point of view accordingly.

Quote from: verix
attempting to talk to this administration for years on end with no one actually listening to our advice and instead opting to go with the hardware upgrade

There was never a point where we did either.
In the beginning all the hardware upgrades that took place were completely necessary, because as the site grew so did the demand for processing power and reliable storage space that the available hardware a that point did not provide.
Increased load also exposed the instability and caused the premature fatigue of the hardware that was in operation at that time - as it wasn't designed for that sort of stress. I'm talking about nvidia chip-set based cheapo server motherboards, consumer grade hard drives and reverse engineered faulty nic drivers that cause so much grief in their time.
FA really needed stable, reliable hardware and we seeked it. That hardware was obtained after the "16k donation drive" event. At that point our hardware needs reached the point of saturation.


"on top of having software flaws, the website unfortunately also has network and infrastructure flaws"
As already explained before, the network infrastructure currently in operation evolved from a two server network.
It was only recently that we've obtained Cisco routers and switches, as well as additional servers currently in preparation of running additional services - that warrant that infrastructure being changed.
The changes are already scheduled and will take place in the next couple of months.

Quote from: verix
Novice administrators very frequently make the mistake of applying the wrong fix for what they perceive is the problem (e.g., running code in RAM to save disk I/O, as this website unfortunately does)


Cute. You don't really know anything about this other then what I've told you, yet you see fit to make a wild assumption based on that little and have the nerve to call it my flaw.

FA's code was running off an md device long before I replaced FA's eval() based template code with my own. Infact, having the entire code in a ramdisk was the reason why the new template code was written that way.
It makes use of that fact to trade off additional (nearly free) I/O for less CPU load that would have otherwise taken place to do variable substitution in templates.
On top of that having templates being php files makes them compile-able by opcode cachers like xcache or eaccelerator, which further reduces time, memory and cpu cycle requirements for template parsing. Just like Smarty... except without Smarty.

Getting back at why FA's code is running off a ramdisk.
The plan to spend the money from the "16k donation" initiative was to buy two servers: application and data. We already had a (now retired with a hardware malfunction) database server at that point.
Due to the fuckup on the hardware supplier's part the application server was delayed and in order to get the site back up and running as fast as possible we've decided to run the code on the data server. It was more then capable.
Still, since the application has a ton of small files that go into the layout - and they are very frequently requested - it has been decided by myself that putting them and the code on a 64MB ramdisk would be a worthwhile optimization.
The real I/O otherwise spent on seeking, reading and serving all those small files would then go to serving the actual user data instead. Just as it was planned.
Observing gstat, vmstat and iostat before and after the change confirmed that this action had a measurable positive effect.



Quote from: verix
This results in a building necessity toward upgrading the hardware due to a series of incorrectly applied fixes

After the 16k donation drive FA never really needed hardware upgrades to run it's primary service. We already had the quota of hardware to run the site for at least two years, assuming the hard drive space would last that long.
No money was seeked, requested or otherwise put aside for any hardware upgrades.


Quote from: verix
(e.g., buying more RAM for the server because the code is so bloated it doesn't quite fit in RAM

I am aware that it's an on-going trend to call FA's code bloated, horrible and broken. In reality the only thing FA's code is bad in right now is in it's architecture. That I will not argue.
The code itself it's very light on both the memory and the CPU, fast, streamlined, optimized and minimalistic.
FA runs off a 64 child pool of php-fastcgi processes (memory_limit=32MB) with the static request serving by nginx, which all take up maybe 1.5GB of RAM at full load with all 64 workers busy serving the heaviest of pages.
Not even close to something being bloated or slow, compared to... just about any other blog/website software that's not custom coded and many those that are.

It's got a terrible database layout that doesn't even adhere to 1NF at places (slowdowns, data duplication, problematic backups and restores, terribly inefficient queries on the browse page due to all filters being varchars).
It implements a HTTP GET based site navigation and data management.
It implements a downright broken way of storing user data files in a flat directory tree, running into 32k directory-in-a-directory filesystem limit making me use terrible symlink hacks and actively preventing such a filesystem from being periodically backed up.
Uses a "hay, lets chuck all the files in the user directory" and "hey, let's not enforce deleting some of those files after the actual submission deletion, or resizing, or just about any operation requiring temporary files" approaches, making backups unnecessarily larger and take significantly longer due to all that junk data also being backed up.
I can name many more things it does wrong. I know them all. But the one common thing among them is the fact that a proper "fix" requires long, extensive architectural/database/filestem changes and is not something you do in an evening or two, or get volunteer help on since it requires root level access and massive data manipulation.

Ferrox was supposed to do it all right. Even if simply duplicating FA's current functionality at the first release, but done right. Eevee had the chance to do all the things you speak of. An yet we're still here right now.

Quote from: verix
The issue at hand is that the administration has frequently decided to upgrade their hardware instead of attempt to fix the underlying issues, thus resulting in the waste of money

The reason why we upgraded our servers since the 16k times was not because we needed it, but because we could.
We've been donated some hardware, we put it to use. No money spent. 0$. We regret having wasted this much.
You may argue whether the hardware was put to a good use or not, that's fine; but you still have to agree that any kind of use is better then not using it at all.
Data server, for instance, could use the extra RAM for an even larger filesystem cache since it's old and tired RAID10 array of WD RE3 drives has long reached it's limit in IOPS. Secondary CDN node is already scheduled for.
Database server... I don't really need to mention that it could always use as much RAM as you throw at it, esp. considering that InnoDB, given sufficient amount of RAM, starts mirroring database contents in it, resulting in great speed even with not quite so optimized queries.
Cisco router and switch were instrumental in preventing the recent DDoS from having a lasting effect, and will play a much more significant role being key elements on the border between the internet and our internal network.

We have that hardware for free.
Yes, it's more then we currently need.
Yes, it's a bragging rights overkill.
Yes it can run five copies of FA provided sufficient bandwidth given.
And it's a good thing, because that means we have reserves the limits of which we are not likely going to reach in the next year or two.


Replying to specific points of your list:
4. The code has zero strain on the hardware. There are no code or logic related I/O strain, RAM depletion or wasted money on bandwidth.
What FA consumes now, and is running short of - are raw operational requirements. Drive capacity, RAID array IOPS and bandwidth. And of course, money to obtain it all.
There is nothing you can change that eliminate the need to serve a million of small files. Only slightly reduce that number.
Nothing you can change to make those files smaller considering that we are about to allow for higher resolution uploads (and half the code is being rewritten to make a proper use of storage space and bandwidth for it)
Nothing to change wrt: bandwidth consumption considering that image/media data takes up 98% of all the transfers.

5. Aside from Trogdor and Novastorm, no other hardware worth significant amount of money was bought by FA with it's funds. We simply don't have the money, as everything goes directly into paying monthly bills.
Most of the hardware have right now has been donated by various parties. Selling it would be a dick move.


Quote from: verix
However, it's a start. And once we get the details and the ability to start fixing the site as it is now, we can follow this guideline to actively fix the website as it currently stands today.

I want to make this perfectly clear. You will never get it, at least in the way you want.

You make wild and mostly incorrect assumptions and accusations based on false, incomplete or deliberately manipulated information. The information that you know is not true that you've chosen to believe in.
You ban a coder of this site from the ability to have an active discussion with your group, who was willing to and could have shed light on some of the details you are not aware of and was curious in. As others in the channel have done before you.
You then demand the administration of this site to hand you over the keys to the entire system based only on your honest to god promise that you will do no harm backed by zero evidence, reason to or even a plan on what you're planning to do with them. And you also expect said administration to walk over it's current technical staff.
You view the opinion of the administration with zero regard and show no signs of wanting to listen to reason, explanations or will to compromise.
You make your offer to help in the worse manner then you would have thrown 5$ in the mud in front of a dirty, homeless person in the street. Just who the hell do you think you are? Take your handouts and shove them up your ass you pretentious elitist bastard. Admittedly, the choice of words above is not what I would have chosen under normal circumstances, but reading over yours, and other people's posts on the topic has me somewhat miffed. My apologies..

Thus so far you have shown very poor objectivity and either the lack of desire - or the ability - to work with people who you do not agree with on a team. You disregard the opinion of current staff, dismiss the current plan as stupid and broken even though you know nothing of it, and expect to have been given full control over everything to have things done your "right" way. The only explanation of your way is this journal, which is built upon speculation at best.

In order to be acting in such a way and still expect to be given what you want you'd have to have some pretty significant redeeming qualities, and know them before making such an offer. What of them do you have that we can not obtain somewhere else with less a negative side to them then it is with you? People who may admittedly be less qualified then you, but can at least work in a team.
« Last Edit: January 26, 2011, 11:18:32 pm by Pi »
"we did farts.  now we do sperm.  we are cutting edge." — Theo DeRaadt

Conan

  • Sean Piche Wannabe Club
  • Postcount ate Whippany, NJ
  • ****
  • Posts: 603
  • E-points: +33/-9
  • ¯\(°_o)/¯
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #10 on: January 26, 2011, 10:17:04 pm »
Things that really stick out to me:

This one most of all:
Quote
FA really needed stable, reliable hardware and we seeked it. That hardware was obtained after the "16k donation drive" event. At that point our hardware needs reached the point of saturation.

This seems to reinforce what was in the chat logs that were recently leaked; that the "hardware failure" that brought them offline for a month was orchestrated in an attempt to bring in money to buy new equipment. It's a fail-proof plan, really, since they could have at the very least raised the $500 "needed" for the new NIC. Additionally, Dragoneer calling it "Augustgate" (a play on the Watergate scandal, of course) wasn't helping to begin with...

Quote
As already explained before, the network infrastructure currently in operation evolved from a two server network.
It was only recently that we've obtained Cisco routers and switches, as well as additional servers currently in preparation of running additional services - that warrant that infrastructure being changed.
The changes are already scheduled and will take place in the next couple of months.

"Only recently" is December 2009. By that time, FA was running at least five servers, not including the TF2 server and Sirkain's. Since then they've upgraded from a 24-port switch to a 48-port switch. Only recently on March 31st, 2010 were they fucking around in the config making it say "Uplink to Pants". This entire paragraph is a gigantic lie with "we're working on it" frosting on top.

Quote
No money was seeked, requested or otherwise put aside for any hardware upgrades.
No money was officially requested, but Dragoneer has a habit of tweeting things like "Gonna need to add more RAM to [server] soon... That stuff is expensive!!!".

Quote
Data server, for instance, could use the extra RAM for an even larger filesystem cache since it's old and tired RAID10 array of WD RE3 drives has long reached it's limit in IOPS. Secondary CDN node is already scheduled for.

Again with the "Uh oh, a part is about to fail, better buy a new server!" I have to ask, with what money do you plan on buying the second node with?

Quote
Most of the hardware have right now has been donated by various parties. Selling it would be a dick move.
You people can't really be this damn stupid, can you? $50 say these donators don't give a flying fuck what you do with their donations as long as FA is benefiting from them. I know, personally, if I donated four servers to you, and then proceeded to sit on three of them and use the fourth as a dedicated box for making graphs instead of selling them and using the profits to pay for the site, I'd be pretty pissed off and you probably wouldn't see another dime worth of anything from me ever again.

Quote
Thus so far you have shown very poor objectivity and either the lack of desire - or the ability - to work with people who you do not agree with on a team.
Quote
In order to be acting in such a way and still expect to be given what you want you'd have to have some pretty significant redeeming qualities, and know them before making such an offer. What of them do you have that we can not obtain somewhere else with less a negative side to them then it is with you? People who may admittedly be less qualified then you, but can at least work in a team.

LOOK WHO'S TALKING, DIPSHIT. You have constantly denied any offer of help. You have not given anyone the chance to work in a team. Come back when you have. Then you can talk about people not working in a team. Also, I get the idea that you think "working in a team" means "Doing what Yak thinks is right" because this side of the table seems to pretty much think alike. In fact, there's some teamwork going on in all this! You're the only one not participating...

Pi

  • POOR IMPULSE CONTROL
  • Postcount ate Whippany, NJ
  • ****
  • Posts: 614
  • E-points: +40/-10
  • <blink>yes hello</blink>
    • View Profile
    • Clan Spum userpage
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #11 on: January 26, 2011, 10:29:57 pm »
no conan what are you doing making people look bad by replying to their words

youre twisting the meaning like the greek sophists!!!
"we did farts.  now we do sperm.  we are cutting edge." — Theo DeRaadt

Eaglebird

  • Posts: 27
  • E-points: +3/-0
  • That dumb bird thing
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #12 on: January 29, 2011, 12:37:47 am »
I just got an email from Sourceforge that they encountered some password sniffing, and pre-emptively invalidated everyone's password, regardless of whether they were leaked/intercepted/compromised or not.


It immediately reminded me of FA's insecurity, and how, if they had some semblance of security (IDS? Probes? etc), they might've seen some warning signs, or even if they just forced users to change passwords every so often, that whole faleaks scandal wouldn't have happened. We can all agree that what's done is done, but it's fairly disappointing that, while we say "fix it", they return to "what's done is done" ("we've learned from our mistakes").
witty messages and annoying .gifs go here

ProvincialTwit

  • Abuse Dept.
  • Postcount ate Whippany, NJ
  • ****
  • Posts: 774
  • E-points: +72/-33
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #13 on: January 29, 2011, 01:14:43 am »
For as lame as Sourceforge is, I'm sure they have some manner of intrusion detection systems in place.  I honestly don't think the FA staff would've even known they were compromised if the information gained from the attack wasn't published.

Eaglebird

  • Posts: 27
  • E-points: +3/-0
  • That dumb bird thing
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #14 on: January 29, 2011, 01:23:48 am »
I honestly don't think the FA staff would've even known they were compromised if the information gained from the attack wasn't published.
I understood this but then I had to re-read it, imagining FA not being aware anything happened even after an attack, lmao
witty messages and annoying .gifs go here

Conan

  • Sean Piche Wannabe Club
  • Postcount ate Whippany, NJ
  • ****
  • Posts: 603
  • E-points: +33/-9
  • ¯\(°_o)/¯
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #15 on: January 29, 2011, 02:17:57 am »
I honestly don't think the FA staff would've even known they were compromised if the information gained from the attack wasn't published.
I understood this but then I had to re-read it, imagining FA not being aware anything happened even after an attack, lmao

They have much more important things to worry about, like monitoring their traffic for people who are using too much of their unmetered bandwidth.

rodox_video

  • ***
  • Posts: 486
  • E-points: +32/-8
  • HURF DURF DUH BLUH
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #16 on: January 29, 2011, 12:04:36 pm »
For as lame as Sourceforge is, I'm sure they have some manner of intrusion detection systems in place.  I honestly don't think the FA staff would've even known they were compromised if the information gained from the attack wasn't published.

Or if the attacker didn't do a blatantly obvious dry run a few days before the big compromise.

One of the really big stingers about this whole mess is that if FA wasn't run the way it was, and if Piche wasn't revealed to be an utterly irresponsible douchebag in the leaks, people in the know would have pooled together their information and figured out who the hacker was. All of the available evidence hints that he didn't exactly act in a total vacuum.

But instead, nobody really gives a shit who he was or why he did it, and many are almost glad it happened.
Zeriara is part of a series on Whores.

Eaglebird

  • Posts: 27
  • E-points: +3/-0
  • That dumb bird thing
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #17 on: January 29, 2011, 01:57:30 pm »
They have much more important things to worry about, like monitoring their traffic for people who are using too much of their unmetered bandwidth.

Random slowdowns and blank pages? Gotta be the bandwidth!




But instead, nobody really gives a shit who he was or why he did it, and many are almost glad it happened.


I'm only glad it happened for the sake of some sort of wake-up call, but my excitement has dwindled from the initial attack after seeing so many furries hop on the 'neerwagon and try and pass it off as a learning experience, or just avoid the topic altogether.
http://www.furaffinity.net/journal/2048033/#cid:16749534
http://www.furaffinity.net/journal/2048033/#cid:16749552
http://www.furaffinity.net/journal/2048033/#cid:16752156
http://www.furaffinity.net/journal/2048033/#cid:16753031 perfect example of neer's tendencies, mirrored in his fanboys. (*dodge* *dodge* *dodge* *cute kitten post* *dodge*)
witty messages and annoying .gifs go here

Conan

  • Sean Piche Wannabe Club
  • Postcount ate Whippany, NJ
  • ****
  • Posts: 603
  • E-points: +33/-9
  • ¯\(°_o)/¯
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #18 on: January 29, 2011, 04:50:50 pm »
I'm only glad it happened for the sake of some sort of wake-up call, but my excitement has dwindled from the initial attack after seeing so many furries hop on the 'neerwagon and try and pass it off as a learning experience, or just avoid the topic altogether.

And sadly, the learning experience isn't "People need to take site security seriously", it's "You shouldn't put personal information in your notes" or "you need to delete your notes".

Fiz

  • nice
  • Cabalistic Fuckhead
  • *
  • Posts: 94
  • E-points: +13/-1
  • no stop
    • View Profile
Re: Re: FurAffinity: Six Years of Insecurity
« Reply #19 on: January 29, 2011, 11:00:44 pm »
..."you need to delete your notes".

Which doesn't even matter unless both the person who received AND sent the note delete them, considering how their note deletion flagging works.
pee