Comments on: There are things that better be left unspoken…

By: KertaZ

KertaZ — Tue, 16 Jun 2009 16:42:11 +0000

Nah.. Comment’s is good for us to be more mature.. =)

Btw nothing is perfect right? We need the right moment to be mature and look back about what have we done.. It’s a lesson to us..

I don’t have anything im my mind right now.. But some of your post are really worth of reading.. ^^

By: ayoi

ayoi — Tue, 16 Jun 2009 06:23:22 +0000

No.. I don’t blame anyone on this. Perhaps it’s due to naivety (hopefully). I know the intention is honorable and good. In fact like I’ve mentioned many many times in my previous postings, I will lend all the support that I can give in order to raise the security awareness.

I also have no doubt on his talent and skills. If he doesn’t has that, I dun think he will do those things rite?

But then again, I think these two postings of mine will sums up how do I feel on this matter

http://blog.hazrulnz.net/1425/its-a-noble-cause-but-still-you-need-the-consent.html

http://blog.hazrulnz.net/1447/talk-about-full-disclosure.html

But then dun make these hinder your passion, interest in security. By all means please enhance your knowledge, skills, expertise albeit within legal means so that we can exchange/share these valuable experiences together in order to enhance the ICT security state and awareness in our country

Thanks for the comments by you guys, I really appreciate it

By: KertaZ

KertaZ — Tue, 16 Jun 2009 05:43:32 +0000

@ayoi
Hmm.. U got point there sir.. Yeah.. It’s kinda like a crime there..

But we cant blame anyone in this situation.. “This guy” as mention still notified the admin of the vunerable site by sending email about the vuln and the text he left for marking..

Trust me mate.. “this guy” done a very2 good job..
Let’s look at the bright side..

My example :

This is like a pentester.. For pentester, admin will need to pay some amount for the pentester to check their site vulnerability..

Since “this guy” check for site vuln for free and sometimes patch the vuln, let’s say that the mark is he’s payment..

Sorry for my bad english..

By: ayoi

ayoi — Mon, 15 Jun 2009 10:09:05 +0000

Ahh.. I think defacement is not the appropriate term. But then just imagine this situation:

You just happened to see a house that uses a lock that can be picked easily. To prove that the lock is vulnerable to lock picking technique, you picked the lock, entered the house and left a note for the owner noting on the vulnerability exist of his lock.

So in your opinion, can the owner press charges on your action or not? Is your action legal or not?

Similar condition? No?

By: suhz

suhz — Mon, 15 Jun 2009 10:00:29 +0000

that guy you mention is kind enough for not defacing the websites, he just left a trail notes to warn the administrator that the websites is vulnerable to hack attempt. its just a notes, not defacement as mention by security.org.my. we need this kind of guy guy, he will help much in securing Malaysian websites

By: ayoi

ayoi — Mon, 15 Jun 2009 02:47:09 +0000

Thanks for the comment guys. Like I’ve mentioned before (many times), it is important to do things in right way. Yeah that guy has the talent (I’ve read the blog) and it would be a waste of talent if he fall into the “dark side” (haha just joking). What worry me is that if he fall into the bad side of the law..

By: KertaZ

KertaZ — Sun, 14 Jun 2009 17:59:26 +0000

Hye there..
May i leave a comment here?
I just wanna say that i know “this guy” well..
Btw we chat everyday.. And one thing iu didnt know..
He’s 16 and a good guy.. Yeah.. He’s a defacer.. But that’s old time’s..

Our forum already make a new rule too all user in the forum to behave self.. If we found any website that got bug and may lead to defacement (hack) we will inform the site administrator through the email..

Btw there are more defacer in our forum.. But we still behave ourself.. Defacement is just a gay man job and just wanna show off.. Btw.. “This Guy” in your post is a nice kid.. And i know something good will come handy maybe a couple more hour.. We need a guy like him..

By: d3ck4

d3ck4 — Sun, 14 Jun 2009 08:27:43 +0000

he he he we influnce others he he he
he he he we came from darks1de he he he
he he he el8~ ppl worst nightmare he he he
he he he antisec movement strike malaysia he he he
he he he ayoi u next! he he he

hahaha joke la ayoi~! we cool now bro? no more exposure da.. hmm, i think i know him back from underground scene. i will talk personally to that guy (i mean boy, he 16 ok!) he so talented btw

By: spoonfork

spoonfork — Mon, 08 Jun 2009 13:32:47 +0000

others come to mind: LSD vs Argus System, Oracle with its “unbreakable debacle”, Dinesh Nair and AsiaConnect…