Questions for shmoesmith.

**Blurred** · 02-20-2007, 12:43 AM

Originally Posted by David Witherspoon

After all, anyone willing to post up here should know how trivial it is to map an IP ... anyone willing to call for all sorts of revelations and freedom of speech and public disclosure should be quite happy to do so forthrightly under their own name.

Right?

You're our hero. When you match the ip addies, we'll give you a brownie button.

**Jer** · 02-20-2007, 12:43 AM

Originally Posted by phUnk

[i]
ssh root@c-67-172-227-181.hsd1.ut.comcast.netOK, I give up!

If I give you a hint, you wanna help me with the .htaccess? I had it working a while back.

MP, what's your bet on half-life? Dead by dawn?

**Crass3000** · 02-20-2007, 12:43 AM

Originally Posted by phUnk

What would he do with a MAC address, even if he could get it (which, judging from his broken php shenanigans, he can't) ?

I was thinking he could tie the MAC of the original poster to the MAC of the person here under thier normal name -- since they would be the same at least on the same computer or NIC.

**Powow** · 02-20-2007, 12:47 AM

Originally Posted by Crass3000

I was thinking he could tie the MAC of the original poster to the MAC of the person here under thier normal name -- since they would be the same at least on the same computer or NIC.

Even if he could get the MAC address he'd have no way to tie it to a particular user, same as an IP.

**MeatPuppet** · 02-20-2007, 12:48 AM

Originally Posted by Powow

He couldn't even learn that, his logging file only lists IPs, not usernames or anything else to identify the IP so he'd just have a big list of numbers and nothing else.

Yeah, but if he gets the IP and then the real poster post's under his real name...he's got him. If that's the case I kind of feel bad for helping to screw it up but, cest la vie.

**Blurred** · 02-20-2007, 12:53 AM

Originally Posted by MeatPuppet

Yeah, but if he gets the IP and then the real poster post's under his real name...he's got him. If that's the case I kind of feel bad for helping to screw it up but, cest la vie.

Well, if the initial poster gave it any thought at all, they either used a proxy server, or reconnected to the net to reset their ip addy to hide from the admin here before logging back in under their usual username. If not, oh well.

**Powow** · 02-20-2007, 12:54 AM

Originally Posted by MeatPuppet

Yeah, but if he gets the IP and then the real poster post's under his real name...he's got him. If that's the case I kind of feel bad for helping to screw it up but, cest la vie.

How? His logger doesn't log posts, it logs views. There's no way to map one to the other. If there is a way to get this to work I'll gladly delete all my posts giving it away (probably too late anyways). But I just don't see how its possible. There is not enough information without doing things much sketchier and browsers would probably bitch and warn about the page doing funny things possibly compromising security.

**phUnk** · 02-20-2007, 12:54 AM

Originally Posted by David Witherspoon

Just looking at the IP pattern might be of some interest ... should I dump it here?

Hard-hitting news here, David. You've got two utah comcast addresses (you and me, we're buds!), a socal RoadRunner address, and a Cali Charter cable address.

When does the super-sleuthing begin? Should I fetch my monocle?

cpe-76-170-190-66.socal.res.rr.com.
66-215-49-206.dhcp.snlo.ca.charter.com.
c-24-10-251-77.hsd1.ut.comcast.net

And now your logfile is beginning to look a little wonky. The internet is hard.

**Camel Toad** · 02-20-2007, 12:54 AM

damn you're all a bunch of computer geeks.

this thread is junk. dump it.

**MeatPuppet** · 02-20-2007, 12:55 AM

Originally Posted by David Witherspoon

MP, what's your bet on half-life? Dead by dawn?

Tricky now that the cat's out of the bag. I bet we never see another post by "concerned maggots"...unless he decides to grow some balls and post under his real name.

**powstash** · 02-20-2007, 12:56 AM

tech talk bitches

**Jer** · 02-20-2007, 01:00 AM

Ruff life.

For the gutless cowards, anyway. The sort that wanna go public with somebody else's life - but only if they can do it anonymously.

Screw the timed user polling, the curl-at-intervals was working well enough.

Shady? But implicit threats to divulge private information in public, that's above the board.

Funny thing about having the integrity to stand behind your words - you're not scared someone's gonna ID you.

As for the terrible loss that the deletion of this thread might occasion - save a copy for later enjoyment if you must.

**phUnk** · 02-20-2007, 01:03 AM

while (true); do fuckwithdavidslogging(); done;

How's that logfile looking David?

Powow: If he sees a logline for a given IP address at 11:10, and there's a a post from phUnk at that same time (adjusted manually for time differences between his server and the TGR server) then he can deduce that phUnk's IP address is whatever his server logged.

Now, if he sees a logline some time later for that same IP address but for "concerned maggot," then he can deduce they are the same person.

But, there are all sorts of problems with that mechanism. He only gets one-minute resolution from the forums server, images get cached by browsers, etc, etc.

powstash: i'll tech talk your ass buddy!@

**Powow** · 02-20-2007, 01:10 AM

Originally Posted by phUnk

Powow: If he sees a logline for a given IP address at 11:10, and there's a a post from phUnk at that same time (adjusted manually for time differences between his server and the TGR server) then he can deduce that phUnk's IP address is whatever his server logged.

Now, if he sees a logline some time later for that same IP address but for "concerned maggot," then he can deduce they are the same person.

His doodad logs an IP and time that page 2 was accessed (or any other page, if that image is on that page). You can view page 2 at a much different time than when you post, especially if he was actually reading all the replies...

**yogachik** · 02-20-2007, 01:11 AM

Seems to me that CM asks some important questions, I'm with AC. But something about this has always felt a little off, to me. But that doesn't discount the tragedy, or the pain to those in DW's life - it's all really awful.

And now back to The Hardy Boys in The Mystery of The Code

**MeatPuppet** · 02-20-2007, 01:11 AM

Originally Posted by BlurredElevens

Well, if the initial poster gave it any thought at all...

Right, but sometimes people deserve credit...sometimes they don't. Dumb criminals populate the jails, smart criminals are never caught. We don't know what/who we are dealing with.

Edit: not calling anyone a criminal, just saying that CM could be a molecular biologist but an idiot when it comes to the internet. We just don't know.

**phUnk** · 02-20-2007, 01:20 AM

Originally Posted by Powow

His doodad logs an IP and time that page 2 was accessed (or any other page, if that image is on that page). You can view page 2 at a much different time than when you post, especially if he was actually reading all the replies...

Right, there would be a ton of logged IPs for people viewing the page with the embedded image, which would add a lot of noise to his data. It *sort of* makes sense when you remember how the forums bounce you back to the thread page that your new post shows up on immediately after you post.

But that breaks once again if his image is on page 2 and this thread is currently on page 3 (at least according to my user settings, etc.)

Also, his log file seems to have been vandalized by some scallywag running a loop that appended the following text to it:

Add this to the file
Add this to the file
Add this to the file
Add this to the file
Add this to the file
Add this to the file
Add this to the file
Add this to the file
Add this to the file
Add this to the file
Add this to the file
Add this to the file
Add this to the file
(etc)

PS. He's switched back to my original suggestion: posting a real .gif image and letting apache log the IPs to access_log like it was already probably doing.

Hardy Boys Back In Action!

**scarz111** · 02-20-2007, 01:26 AM

The people who post in this forum are amazing. I really wish I posted here enough to get to know some of you. The UNBELIEVABLE generosity of the folks here towards a guy who lost his wife has me hooked me. "Concerned Maggot" represents a sect of our society that is SUPER FUCKED UP. SHUT YOUR FUCKING MOUTH. No one wants to listen to a whining little fuckwing. Whomever decided it was and is right to donate their cash to a rather worthy fucking cause needs not to here from some douchebag that is bent because he could spend his donation on his new forking Benz. CONCERNED MAGGOT, take your assheaded backwards questions to the fucking bunnyslope, NO ONE WANTS TO SKI WITH YOU.

**Jer** · 02-20-2007, 01:35 AM

Originally Posted by phUnk

while (true); do fuckwithdavidslogging(); done;

How's that logfile looking David?

Fack, you mean it was working? ... you were kind (either that or you're working on a TI calculator), there's not even 1000 lines in it. The access_log looks fine, I think I'll frame your thumbprint.

Hey, how 'bout if I edit the .gif names at regular intervals to force reloading & reaccess? And of course I need to scatter more of these about ... maybe with a regularly-changing avatar and sig, that'd be a little more subtle (ya think I wanted to be subtle?*) ... still, there's gotta be an easier way ... Google "script kiddie" ... back to work.

*P.S. rideit, if you just want a blank post, type ten hard spaces (CTRL+SHIFT+SPACE.)

Originally Posted by MeatPuppet

Tricky now that the cat's out of the bag. I bet we never see another post by "concerned maggots"...unless he decides to grow some balls and post under his real name.

Cat wasn't meant to stay in the bag - it was a roundabout way of saying "Step up or Shut up."

Now can we get this thread bumped to Tech Talk?

**Jer** · 02-20-2007, 01:41 AM

Not in this thread. Start a better one.

**MeatPuppet** · 02-20-2007, 01:44 AM

Originally Posted by David Witherspoon

Cat wasn't meant to stay in the bag - it was a roundabout way of saying "Step up or Shut up."

Nice. Nuf said.

**shmoesmith** · 02-20-2007, 01:46 AM

I understand why there might be questions. There have been some nasty rumors going around backcountry.com where she worked. I don't know all of the rumors, but I can tell you that each one that I have heard so far is not true. I suspect that 'concerned maggots' is someone that either works for backcountry.com or is friends with someone who works there(based on the questions he asked)

I don't take offense at someone asking these questions. It hurts to say everything that went on and that I have found out, and that is why I haven't posted it all.

Some of the maggots here know the full story. They have kept their mouths shut to keep from hurting my wife's reputation in any way. I am not going to post everything that has happened, and the details of why she may have done it on the public forums. I want people to remember her for the good things.

If you really want to know the details, you can send me a PM. I have been completely honest with everyone on here, and will be honest with anyone that wants to know everything. Altachic, Yogachick, I know you both have thought something was not quite right, please send me a PM...especially you Altachic..maybe you can stop some of the rumors at bc.com I know the names of everyone involved, and wont disclose them in public.

**Toby** · 02-20-2007, 02:01 AM

Uh, dude, we're talking about IP logging here - don't interrupt

.

**Toby** · 02-20-2007, 02:04 AM

BTW, from what I've seen you can hold a pretty clear conscience. You shouldn't have to worry about being accused of fraud - I think the maggots are pretty clear on that.

**summit** · 02-20-2007, 02:59 AM

Hey Alias, if you are interested in honesty, why are you not posting under your real name?

IF you want to be taken seriously and believed, your words must be backed by honor, openess, truth, and proof.

If there really is something that needs to be said, for the sake of everyone, make sure it is backed up and truly relevant for everyone (see everyone's feelings on relevency thus far), not just yourself. Pointless inferences and speculative rumors breed unneeded strife.

I have no dog in this one except for the honor of this community. That's all I have room to say here except: Wow! $10K is a lot of moolah and the calls for censorship only make this thread more Epic(ski)