13-07-2005 23:46									#1
	A possible security hole... Enter the AD-FREE zone

Do we hav a security hole here? Or I'm just making a fool of myself? Or both?
I just posted this:

quote: Originally posted by Aro Let me ask something... I've posted my e-mail adress here, in order to receive the saves. The problem is: I created this alias just for this purpose, and nothing more. How could this e-mail adress appears in the Brasilian team Civ site? I mean, those adresses are public? How could this Krasan guy know about that? This IS our private forum, right? The thread at CivBrasil

And this:

quote: Originally posted by Aro quote: AHHHAAAA! Então vc é o dono do email aro( :AT: )aroeira( : DOT: )com( : DOT: )br??? (sim, nossa rede de inteligencia trabalha rápido ) Atualize-o no APO Será um prazer encontrar com outro brasileiro nos chats oficiais Translation: Ahaaaa... So you're the owner of the email adress aro( :AT: )aroeira( : DOT: )com( : DOT: ) br??? (Yep, our intelligence is FAST); Update it in APO! Will be a pleasure to meet another brazilian guy, blah, blah. I'm still confused...

	13-07-2005 23:53									#2
	Inflate your Upload Space

Have you posted that somewhere for a PBEM or something?

If we really had a security hole someone was exploiting, I doubt they'd show it like that.

	14-07-2005 00:07									#3
	Support Apolyton, buy GURPS/ Alpha Centauri

quote: Originally posted by Kloreep Have you posted that somewhere for a PBEM or something? If we really had a security hole someone was exploiting, I doubt they'd show it like that.

Agreed, of course. I thought the same. Would be a stupid thing.
But still the fact that no one knows about this adress. Isn't possible.
Unless... Is it possible to get these adresses in a legal way?
Btw, I never played pbem

	14-07-2005 07:38									#4
	Suffering from ads?

Maybe someone at that site happened to attempt to sign up for an account with that name. Of course, I don't know if Aro is a common name or not...

	14-07-2005 07:44									#5
	Suffering from ads?

I'm very curious where they got that email addy from, assuming it has only ever been published here and on WB's remail list.

Very curious indeed.

	14-07-2005 07:55									#6
	Lose 30 kilos (of popups)

It's not a common name. Actually, It's part of my name.

All the situation is a bit strange, too.... I posted something about being a member of Poly, and because of that I would not be part of their team. Some replies making jokes about the spy, etc and suddenly that post.
Weird.

	14-07-2005 07:59									#7
	Support Apolyton buy from Amazon

And, as I said before, this alias (aro at aroeira dot com dot) br was created only to receive our saves.

You can see in my profile, my registered e-mail is completely different.

	14-07-2005 11:50									#8
	Lose 30 kilos (of popups)

probably the turn player has required a tickt when the email is opened and this server sends back such tickets. The spammers are using this technique to detemine if the victim is a real email address and if it is checked.

	14-07-2005 16:56									#9
	Help yourself to an AD-FREE life

quote: Originally posted by ormuzd probably the turn player has required a tickt when the email is opened and this server sends back such tickets. The spammers are using this technique to detemine if the victim is a real email address and if it is checked.

Hmmm... That could be the reason...

	14-07-2005 23:01									#10
	Support Apolyton, buy Civilization 2

quote: Originally posted by Aro Some replies making jokes about the spy, etc and suddenly that post.

Good to know that the team who has broken the rules more times than any other team in history are having fun, joking around about a spy.

	15-07-2005 01:05									#12
	Avatar Enlargement: We've got the solution

quote: Originally posted by RegentMan Good to know that the team who has broken the rules more times than any other team in history are having fun, joking around about a spy.

What??

	15-07-2005 02:29									#13
	Support Apolyton, buy Civilization III: Complete

Anyway, this issue seems not to worry too many people. Maybe I'm just paranoid.

Or not?

	15-07-2005 02:33									#14
	Avatar Enlargement: We've got the solution

I'm thinking about it, and I would like the admins to have a look at it. If it is that there is a spy within our midst, then...well, I'd leave the Demogame for a start...

	15-07-2005 02:44									#15
	Full PM-box? Change here!

I wouldn't think to much of it. Probably just a return feed like ormuzd suggested.

	15-07-2005 02:46									#16
	Support Apolyton, buy GURPS/ Alpha Centauri

quote: Originally posted by Krill I'm thinking about it, and I would like the admins to have a look at it. If it is that there is a spy within our midst, then...well, I'd leave the Demogame for a start...

Lets see what's going on. IMHO, all that is very suspicious.

	15-07-2005 02:50									#17
	Got spare money?

quote: Originally posted by GodKing I wouldn't think to much of it. Probably just a return feed like ormuzd suggested.

I always listen what GodKing has to say. He's right, as usual... I give up.
Plaaaaay ball!

	15-07-2005 03:01									#18
	Help yourself to an AD-FREE life

LOL

	15-07-2005 03:03									#19
	Avatar Enlargement: We've got the solution

Note the "IF", people.

	15-07-2005 07:15									#20
	Inflate your Upload Space

Duly noted Krill.

IF we did find a spy he would have had to use that information he could find here in a way that would heavily influence what his teams actions were in order for him to show himself. I think an admin that has access to multiple team sites would be able to root him out if he exists.

	15-07-2005 07:17									#21
	Support Apolyton buy from Amazon

Aro: Could you straight up ask the fellow how he got your email address?

	15-07-2005 09:05									#22
	Support Apolyton, buy Galactic Civilizations

Yes, I think I can. Do you think it's the wise thing to do?

	15-07-2005 09:52									#23
	Support Apolyton

At this point, yes.

	15-07-2005 10:06									#24
	Full PM-box? Change here!

Ok, Nye and BF... I've just posted a question, " how did you get this e-mail adress? "
The thread is here

Lets wait for an answer...

	15-07-2005 12:46									#25
	Remove this text

Thanks Aro. Let's hope he can come up with a plausable explanation other than there being a spy in our midst.

	15-07-2005 22:47									#26
	Support Apolyton, buy Civilization 2

quote: Originally posted by BigFree Thanks Aro. Let's hope he can come up with a plausable explanation other than there being a spy in our midst.

quote: Originally posted by Pggar at CivBrazil quote: Originally posted by Aro at CivBrazil Ué, Krasan... Como é que você obteve esse endereço de e-mail? :? Nosso serviço de inteligência é o melhor.

That's the answer so far. Translating:
"our intelligence service is better", answer received from this Pggar guy.

They don't want to tell me.

	15-07-2005 22:50									#27
	Support Apolyton, buy Civilization 2

Explain to him that unless there is an explanation given that an admin may have to look into a possible security breach on their part.

	15-07-2005 22:58									#28
	Inflate your Upload Space

Ok, I was thinking about this.

	15-07-2005 23:03									#29
	Support Apolyton, pre-order Civilization IV

Maybe a PM to him directly at that site would be better.

	15-07-2005 23:06									#30
	Full PM-box? Change here!

I'm doing this right now.

Edited:

Done.

Last edited by Aro on 15-07-2005 at 23:19