« first day (104 days earlier)      last day (4836 days later) » 

11:00 PM
@jweyrich Ironic that in the end, we'll help him write the code that will steal our money.
Hopefully he'll get hired by the government after they arrest him as a CIA hacker, then subsequently get kidnapped and interrogated by China.
Because all money ends up in China anyway...
I had an interesting idea, to somehow write a story about a series of unfortunate events that causes criminals to subsequent screw each other over by accident.
Kinda like, one person steals a car that had a bomb that was supposed to assassinate someone.... something like that.... but just keep the chain going for quite a while.
 
@Xaade let me list it for you. 1) VNC question - monitor and control victim computer; 2) screenshots - take it when the user clicks the virtual keyboard buttons on the banking website; 3) what program is doing - checking similar trojans to get new ideas or understand it; 4) services - oh cool, now he has admin permissions; 5) startup without registry - hide itself from mid-advanced users
 
@jweyrich wouldn't the first be subject to account dismissal. I thought we weren't supposed to answer questions like that.
2 is a little questionable.
3 is obviously wrong
 
5) firefox version - compatibility problems when retrieving informations or writing a plugin to grab form data? I wonder; 6) send newsletter - let's infect more people; 7) auto-update - geez, this tool is becoming important.
 
4 is no flag by itself
5 is evil.
 
still on 7, be faster then AV updates then you pwned them all.
 
11:06 PM
Hmm
but seriously....
that first question
 
8) detect application in focus - wow, now I have the window title to write in my keystrokes log.
 
his account should be banned.
what's his handle?
 
@Xaade here.
 
Looking at what he has so far, it doesn't even seem like the same person.
 
@Xaade what do you mean?
 
11:11 PM
He has some very technical questions, some vague (we need a book to answer that) questions, and some that make him seem like an old grandma that never touched a cellphone.
 
@Xaade hmm. watching closer (more questions), seems like his account mix legal & questionable things. Well, I won't assure anything without proofs. It's not my job either.
 
That's my point
The "legal" things seem totally clueless..... like what's the difference between const and not...
Then he starts asking how to send out emails to a lot of people, and has some form of an idea how it could work.
Then he goes back to asking some other basic question
Then he asks how to monitor pcs remotely and update software without user knowledge.
The only consistency is the Django stuff.
 
@Xaade one of the two: a) two persons share the same account b) he's trying to mask the real goals by asking random questions in-between. The last pages (old questions) are very consistent though.
 
I'm leaning towards account sharing
between 3 or 4 people.
One interested in how search engines and website filter content, recognize/categorize content.... etc.
One that knows nothing about programming.
One that's interested in having an application that runs on another PC, updates on its own, and starts without user knowledge, and has no registry keys.
And there's some consistency in questions about software that monitors people's desktops.
 
there's a web developer too.
 
11:25 PM
But wouldn't remote viewing be hard to accomplish without anyone's knowledge
That's just it..... I'd buy web developer, django, and the search engines that recognize/filter content.
I'd buy that they have a side hobby in setting up lan parties
 
@Xaade it's difficult, but not impossible. Unless he wants to hide from specialists/really-advanced users.
 
I can't buy that someone with all that technical knowledge can't research what the difference between a const and non-const values is.
 
@Xaade neither do I.
 
@jweyrich Wouldn't anyone be able to check their upload stream and think, holy shit I'm sending out live video.
Unless I'm playing a game, or downloading P2P, I would notice video uploading live.
 
@Xaade does you mom/dad/brother/sister know how to do it? Your uncle? This shall give you a baseline.
 
11:27 PM
Without any technical skills
Yeah, but I don't buy that he has a preknown list of emails that he'll email this trojan. Aren't there less incriminating ways to pass a trojan out.
I'll be damned, all these trojans came from one domain?
 
The vast majority will figure out internet is slow if their physical link is up to 2-4 MB, but won't be able to tell the cause. They're more likely to blame the ISP.
 
At which point they call the ISP, who notices they're sending out homemade videos....
I'm not saying it can't be done, I'm just saying that he's painting a red flag all over his face, if he's doing this. Equivalent to your average street thug trying to hack a swiss bank.
 
@Xaade would they? it's a hard thing to believe here in Brazil. Most ISP will just keep you on phone for half a hour (being optimistic) to tell you to restart your modem, and reconnect all the cables. Didn't solve? Restart your computer Didn't solve? Pay their technical service to help you. Here most give up.
 
hmm.
ISPs I know would shut you down if you go 4 days straight uploading like that.
You'd get walled.
specially if the packets were going in a suspicious direction.
You know.... I'd put my money on him trying to hack an MMO account.
When's the last time you've been prompted by Chase to use a virtual keyboard.
I know a lot of those Korean MMOs that have them.
It would be easier to obtain an emailing list.
Easier to mask uploading.... cause people are playing games.
Better reason for screenshots of virtual keyboards.... and with C++ you have direct access to windows API.
Though, it seems he hasn't figured out that you can launch a trojan on the launch of another software...
 
I can tell you most countries won't allow service-cut without a search warrant. Suspicion without proofs is a lost cause. People go to court and get easy money. Here telecoms & ISPs don't do anything without a court order.
 
11:36 PM
Well, I'm out..... later
@jweyrich not a service cut....
 
@Xaade see you
 
a service brown hole.
I've seen it done it to people.
When I was hanging out with this guy who managed a LAN for a college...
He'd slow some people down if they abused P2P downloading.
No service-cut....
 
@Xaade traffic shaping is illegal for paid services, unless stated in contract. Yet, most ISPs do it anyway. But it doesn't help in the hypothetical situation we're discussing.
Well, I just hope the mods are watching closely.
 

« first day (104 days earlier)      last day (4836 days later) »