Thank you for the lesson in "Passwords" but I can tell you that you wouldn't find it so easy if you want to crack my paypal account or reserved areas on my site there I have a "little bit stronger" password.
Anyway, as you say, we're here to learn so learn this: Privacy laws. I could sue you for taking over my account and watch my personal data. That's considered a crime against privacy and tbs has logs and this thread starts with your confession so if I were you I would just apologize and be quiet since you don't know who you're messing around with.

It is already worse enough that we need a password for our nickname...just like we need a lock on our door at home...what else can I say..yes what davs did was not nice...on the other hand he also could have shut his mouth about this...and yes...when he had taken over my account I also wouldn't have give him credits for 'telling he tried some stuffs'. I think this will lead to an endless discussion...who to blame? The user for choosing a too weak password? The guy who tries several accounts to show we choose wrong passwords? The admins for whatever what reason? I think we play a challenge solving game here. So leave other peoples account alone

sfabriz :

Funny idea of sueing people, the only little kink in the cable i see is actually proving it was "Him" the person behind davs, for all you know the
davs user had a weak password . And I wonder what the actual court value would be of the tbs logs. Not to mention which country you would sue him in.

However i'm intrested in how it would turn out. so by all means try

all:

Anyway, i might have been a bit harsh in my previous post. I do believe it is a users responsibility to have strong enough passwords.
However i don't believe we should worship anybody who "abuses" it.

Basicly like you said it's a weak password because you didn't care mutch to remember a harder password for this site.

if cost_of_password_broken * chance_password_broken < ACCEPTABLE then



it's a common fact that if you try the entire userlist with passwords like
[nickname]
[reversed nickname]
bright-shadows
shadows
tbs
sheep
tbs[nickname]
sheep[nickname]
password
qwerty
azerty
1234


you probably will get in several accounts
figuring this out doesn't make anybody special..

Same as with every other login based site.

@davs
why are you using a picture of Gotovina as your avatar here on bright-shadows ?

In the mist of all this, i just feel like creating a php application that would change my password everyday to a random series of numbers/letters/ special characters and i just keep a cookie opend so i dont have to "login" ... id never loose my account from potential hackers. However, i couldn't log on my account from any computer...

@rhican:

when you drive a car in Italy and you get photographed by police cameras because you go too fast, if they neither can stop you nor recognize you driving your car from the picture, they send the ticket to the car owner, also even if it wasn't him in the car.
In this case, you would probably be surprise to know that there are intelligence services (we call it here postal police) that if needed can tell you almost everything about who was connected, when, where and so on. They just have to search in their databases. Remember that almost everything you do is registered somewhere. Your sms for example remain in a database for 5 years before they get deleted.
Obviuosly, anyway, I'm not going to sue anybody as I don't care at all about this guy who broke into my account, but anyway I don't accept him to behave like this. First he tries to get into people's account and then becomes our teacher? Ehm... hello? Did we ask for a lesson? Whenever I need a password where security, privacy or money is involved I have numbers+letters+symbols passwords that are no shorter than 14 chars, so I think I don't need this geek's advices.
Unfortunately, for sometimes I'm lazy never really cared about using a strong password here. As Dennis29 well said, I'm here to play challenges, not to exploit other user's accounts. My mistake was to think we're all here for the same purpose, which is not. But anyway this doesn't give davs the rights to brake my account.
Am I allowed to steal from someone's house if they forget the door unlocked? I don't think so.
By the way, I think I have already wasted too much of my time on this thread so,

cheers!

@sfabriz it is kinda funny in your metaphore with the cars that many of those cases get dismissed somewhere in the process
that's why we have this new term "border criminals".
Anyway there is still a difference between a one person in one country with one car. It will be another to sue somebody in
In another country, whereas the site is hosted somewhere else. Keeping in mind that no actual dammage was caused .. i think it would be a struggle upstream to get him infront of a jury
Also don't overestimate the losgs, for all you know he used TOR, try to prove it then .

However i still support your main point. He shouldn't have gone all childish about it. Just that your Shitty-American-Movie-style I'll sue your arse made me giggle

First of all, you don't know if any damage was caused. For all you know, he could be mailing people with my hidden mail account which he could have seen while he was logged as me or maybe he has seen some personal informations in my "not any more" private messages.
Second of all, to violate someone's privacy IS a crime, even if you don't cause any damage after the violation.
Third of all, I said "I could sue you" to provide an example of a possible reaction, just to let him know that it is better than he doesn't do the smart ass with everybody around because maybe one day he'll find a Croatian like him maybe much more evil than me. I wasn't threatening him, I was just warning him that he is acting stupid.
Fourth of all, if it wasn't for me nobody would know this because it was me to advice Erik that I saw myself logged after clearing my cookies and felt like it was strange so I asked him to check the logs and FROM the logs he come to davs, so please don't tell me he's using tor. If it was smart, not only he would have covered his traces but also he wouldn't have opened a thread telling "oh yeah I took over some accounts...".
Fifth of all, I already said I have wasted enough time on this thread.
And finally, the most important question: Why hasn't he been banned yet? If this was my site I would have banned him in no time but probably taking over other people's account here is something you shouldn't do but yet you're allowed to and I don't understand this.
As a result, since I'm sick of discussions, I'll say good bye to everybody and ban myself with a simple click.

Bye bye
sfabriz

I'm sad we lost top50 user
but i agree with sfabriz Privace policy...
anybody can hack accounts( i mean those people with some brain knowledge)
but in this case it should've beed asked admin's before doing that...
we have phrase: " Poslije jebanja nema kajanja " in english words " after f.... there's no regret" sorry for such sentence but i had to
use it cos it's bestest to define this situation...
if you want to hack site goto hackthissite and hack that1.... i don't wanna be victim for this kinda things...
i have spent my time into solving 92 challs so far,and now comes someone( in this example not davs,it could be anyone) and hack it
and WOW... i solved so much challs, get the frigin taxi, will you?
then i got info that my account was tried to be taken...
i don't like this.everyone has it's right for it's own privacy and i think everybody should and must obbey this

Grivier

I start this thread beacuse theblacksheep want that. Am i right theblacksheep?
I apologize all of you!

This is for all: did u ever try to improve your knowledge (breaking the law) on some site that you learn on TBS (sql, exploit...), i mean just for fun to see what you know or what you learn????? I think you are tried! and after all sfabriz talking about Privacy law, hey...open your eyes my friends!! He talking about his hidden e-mail account, try this, open google and type sfabriz you will got his e-mail for second, his name, his telephone number...but....
I did wrong thing and i apologize to all of you!
HUMAN THING IS SIN AND CELESTIAL THING FORGIVE
SORRY TO ALL!

_________
davs