Seti@Home Hacker

[Dazmite]

Hi Everyone,
I just happened to check my setiq and saw that someone named helpme with user id 1215392 had somehow managed to change my clients user info to his info. You might want to check yours for the same. I have no clue how long this has been. Guess I have to keep a closer look.
Paul

 

[Unforgiven]

please take a screenshot of your log and lets take a look at this. i wanna know what to be looking for.

 

[Coquito]

I don't know exactly what is going on, but on Woodie's queue, user:helpme has 2 of the same clients that woodie has: GUNNER & NAV. Woodie hasn't had results for three seperate queues in the last 2+weeks & has been down in total production.

 

[Dazmite]

I didn't take a screenshot, I deleted the client, and changed the user info to my own. So far I have only found this on one pc, I will have to check the ones at work tommorrow.
Paul

 

[Coquito]

bad cut & paste attempt

 

[Dazmite]

Heres a paste of my log. It seems like he's still strong. I even changed password.
7:10pm: Server Http: 127.0.0.1 delclient.htm
7:10pm: Server Http: 127.0.0.1 torch.htm
7:10pm: Server Http: 127.0.0.1 torch.htm
7:10pm: Server Torch helpme
7:10pm: Server Http: 127.0.0.1 torch.htm?user=1215392
7:10pm: Server Http: 127.0.0.1 torch.htm?user=1215392
7:10pm: Server Http: 127.0.0.1 torch.htm
7:09pm: Server Http: 127.0.0.1 tools.htm
7:09pm: Server Http: 127.0.0.1 users.htm
7:09pm: Server Http: 127.0.0.1 default.htm?Msg=You are logged in as 'Administrator'
7:09pm: Server Http: 127.0.0.1 login.htm
7:09pm: Server Http: 127.0.0.1 userinfo.htm?user=1215392
7:09pm: Server Http: 127.0.0.1 clientinfo.htm?id=dazmite.1215392.3.8.i386-winnt-cmdline
7:09pm: Server Http: 127.0.0.1 clientinfo.htm?id=dazmite.1889636.3.8.i386-winnt-cmdline
7:08pm: Server Http: 127.0.0.1 clientinfo.htm?id=dazmite.3459677.3.8.i386-winnt-cmdline
7:08pm: Server Http: 127.0.0.1 clients.htm
5:31pm: SetiQueue needs updated? (Current: 3.03.2.2b, SetiQ Server: 3.03.2.2a)
5:31pm: Revision 3.03.2.2b started
5:30pm: Windows closing SetiQueue
2:02pm: Q000B Work Unit 21se03aa.6186.3489.417342.111 added to the queue
2:02pm: Q000B Work unit 10no03aa.10853.21408.528386.80 given to DAZMITE
2:02pm: s@h_wrk Sending result 11se03ab.27029.26577.267324.10
2:02pm: Q000B Result 11se03ab.27029.26577.267324.10 completed by DAZMITE [6h20m]
7:41am: Q000B Work Unit 28no03aa.7910.21378.436076.245 added to the queue
7:41am: Q000B Work unit 11se03ab.27029.26577.267324.10 given to DAZMITE
7:41am: s@h_wrk Sending result 11se03ab.27029.26738.204836.16
7:41am: Q000B Result 11se03ab.27029.26738.204836.16 completed by DAZMITE [6h19m]
1:22am: Q000B Work Unit 29no03aa.12061.21730.398558.197 added to the queue
1:22am: Q000B Work unit 11se03ab.27029.26738.204836.16 given to DAZMITE
1:22am: s@h_wrk Sending result 11se03ab.27029.26481.934640.144
1:22am: Q000B Result 11se03ab.27029.26481.934640.144 completed by DAZMITE [6h21m]

 

[Dazmite]

The 1215392 is helpme, I don't know who the 3459677 is as of yet

 

[amdxborg]

Hey guys...helpme is a member of the The TA Booster Club, you can read more about this in this thread...

 

[Coquito]

Daz is saying that he's somehow posing as him & stealing results(if I am correct, he's also taking from Woodie).

 

[Dazmite]

I deleted him, which I never set him as a client in the first place. I torched the user, when seti updated he was there again. I for one have never heard of helpme. If he is a part of TA boost, I should have had to set him as a receiver of WU's. This I never did. I feel that he has somehow hacked in. I am the only one at my PC so any changes had to be made by me.
Paul

 

[Dazmite]

Exactlt as coqnuito says: he's showing as my name but with his user ID.

 

[Dazmite]

as you can see here:
7:16pm: Server Http: 127.0.0.1 delclient.htm?id=dazmite.1215392.3.8.i386-winnt-cmdline
User name and ID# are not correct
my ID is 1889636 not 1215393

 

[Coquito]

Daz, is my screen shot similar to what is happening with you? If so, someone should notify Woodie, as I don't know when he'll be back to check a pm.

 

[amdxborg]

Remember that in The TA booster club, all the members change their names to the person they're crunching for's name. So, their's a lot of members who's name is helpme at the moment. I suggest you post in the TA Booster Club thread, someone their will be able to clear this up.

 

[Dazmite]

amdxborg, I agree with what you are saying. This may not be his fault at all. So I hope no offense is taken by the honest person. I do know that I for one have never changed user info other than to yswonder.Paul

 

[HayHauler]

I am currently crunching for helpme via TABOO. I don't know
what happened to your name and ID, but I have 8 machines
crunching in the name of "helpme". Just trying to help
others to the 10k mark.

Hay
Cheers
:beer:

 

[networkman]

Here too - I've got 3 rigs working for our TABOO project.

 

[Dazmite]

I would have gladly switched as I have before. But I feel that someone doing this for me is wrong. As of this moment all my seti pcs will be shut down. If I was asked it would be fine, but for someone to get inside and change it for me is just wrong. In my book anyways.
Paul

 

[n0cmonkey]

Run a virus scan, and consider blocking outside requests to the queue until you get this straightened out...

 

[Orange Kid]

Dazmite;setiQ has in the past been know to corrupt itself, crossing up user info from time to time.

your problem is most likely within your Q and not a 'hacking attempt' by anyone.

if you have had any crashes on that machine as of late, this is most likely the cause

the easiest cure would be to reinstall your Q.

 

[helpme]

So what's the cause of this? How can somebody who is queuing using setiQ on their local machine get units marked as mine?

Or are we talking about somebody else's queue server that has other people doing units for me, and had been corrupted showing my name in places it should not be?

I saw this in the TA booster thread and went ??? Did I do something wrong?

 

[networkman]

I'm sure you're fine helpme - nothing to worry about.

And you're less than 1,400 away from the 10k goal too.

 

[helpme]

Thanks to the members of Taboo

 

[Woodie]

My goodness, things are hot!

To clarify, My queue (see sig link) is NOT having this kind of issue. I'm part of Taboo, and I've moved three of my clients to producing for helpme. No hacking involved, just reassigning clients. (Look at the RPD for Jalapeno and then helpme, I haven't lost any production.)

If you look at the Users stats on my queue, you'll see that Chrisinelpaso had a queue...but I moved all the clients (and then the WUs) over to the helpme queue after he reached 10,000.

I would venture to guess that Orange Kid is probably right, it's a failure in SetiQueue. I've had recurrent failures in the Flash stats page.

 

[Dazmite]

Sorry Everyone, Seems that I screwed up here. I forgot that I changed 1 PC over to Helpme, then forgot all about it. I guess thats why no other PC was affected. My Q goes straight to Seti. So I felt it had to be done inside my Q. When I looked at old PMs I see I was asked to change to Helpme, I must have done this Late at night and forgot all about it.
Link to TaBoo's Thread
Sorry Guys/Gals,
Paul