Friendster Palsu

4 12 2006 Beberapa hari belakangan ini profile di Friendster saya tidak bisa dibuka. Apabila mengakses profile saya di FS, maka akan muncul halaman login seakan terjadi error pada FS dan meminta anda login kembali. Berikut tampilannya :

Apabila diperhatikan, alamat situs itu bukan http://www.friendster.com, melainkan http://www.friendster.co.nr! Mungkin bagi kebanyakan pengguna akan serta merta memasukkan email dan passwordnya. Tapi setelah saya liat2.. ternyata itu adalah situs Friendster Palsu! Halaman itu bertujuan untuk mengambil email dan password kita dan mengirimkannya ke tempat lain menggunakan script PHP dari alamat “http://209.190.16.82/bh.php” (bisa dilihat pada source code HTML-nya).

Setelah saya teliti.. ternyata hal ini bisa terjadi akibat testimonial yang menggunakan flash atau sejenisnya (saya lupa.. soalnya udah diapus) yang bisa me-redirect halaman profile kita ke alamat lain. Misalnya yang tadinya ingin membuka alamat http://www.friendster.com/chaidirabadi akan di-redirect menjadi http://www.friendster.co.nr.

Setelah saya cek menggunakan ARIN WHOIS, IP 209.190.16.82 (IP dari script yg digunakan) menghasilkan informasi berikut :

Search results for: 209.190.16.82

OrgName:    Columbus Network Access Point, Inc.
OrgID:      CNAP
Address:    50 W, Broad St, Suite 627
City:       Columbus
StateProv:  OH
PostalCode: 43215
Country:    US

Sedangkan friendster.com memiliki IP 209.11.168.242 dengan informasi berikut :

Search results for: 209.11.168.242

OrgName:    Globix Corporation
OrgID:      GLBX
Address:    139 Centre Street
City:       New York
StateProv:  NY
PostalCode: 10013
Country:    US

Jadi sangat jelas bahwa script PHP itu BUKAN script dari Friendster.

Untuk itu.. saya menghimbau kepada temen2 yang sudah pernah memasukkan email dan password melalui halaman Friendster Palsu untuk SEGERA mengganti password. Sedangkan bagi yang belum pernah.. berhati-hatilah. Dan jangan lupa.. bagi yang mengkases Friendster melalui tempat umum (warnet atau lab), ada baiknya untuk menghapus cookies pada browser terlebih dahulu.

The Hacker Manifesto

The Hacker Manifesto

The following is being reprinted in order for those of of you out there that are open minded enough to posibly learn something about the philosophies shared by the majority of the hacking community.

“The Conscience of a Hacker” was first published in Phrack – Volume One, Issue 7, Phile 3 of 10 in 1986, by the “computer criminal” known as The Mentor, after he was arrested. I hope that you, whoever, wherever, and whatever you are, read and understand what The Mentor was trying to say when he wrote these words.

The Conscience of a Hacker

by

+++The Mentor+++

Written on January 8, 1986

Another one got caught today, it’s all over the papers.
“Teenager Arrested in Computer Crime Scandal”, “Hacker Arrested after
Bank Tampering”…

Damn kids. They’re all alike.

But did you, in your three-piece psychology and 1950′s
technobrain, ever take a look behind the eyes of the hacker? Did you
ever wonder what made him tick, what forces shaped him, what may have
molded him?

I am a hacker, enter my world…

Mine is a world that begins with school… I’m smarter than most of
the other kids, this crap they teach us bores me…

Damn underachiever. They’re all alike.

I’m in junior high or high school. I’ve listened to teachers
explain for the fifteenth time how to reduce a fraction. I understand
it. “No, Ms. Smith, I didn’t show my work. I did it in my head…”

Damn kid. Probably copied it. They’re all alike.

I made a discovery today. I found a computer. Wait a second,
this is cool. It does what I want it to. If it makes a mistake, it’s
because I screwed it up. Not because it doesn’t like me…

Or feels threatened by me…

Or thinks I’m a smart ass…

Or doesn’t like teaching and shouldn’t be here…

Damn kid. All he does is play games. They’re all alike.

And then it happened… a door opened to a world… rushing
through the phone line like heroin through an addict’s veins, an
electronic pulse is sent out, a refuge from the day-to-day
incompetencies is sought… a board is found.

“This is it… this is where I belong…”

I know everyone here… even if I’ve never met them, never talked
to them, may never hear from them again… I know you all…

Damn kid. Tying up the phone line again. They’re all alike…

You bet your ass we’re all alike… we’ve been spoon-fed baby
food at school when we hungered for steak… the bits of meat that you
did let slip through were pre-chewed and tasteless. We’ve been
dominated by sadists, or ignored by the apathetic. The few that had
something to teach found us will- ing pupils, but those few are like
drops of water in the desert.

This is our world now… the world of the electron and the
switch, the beauty of the baud. We make use of a service already
existing without paying for what could be dirt-cheap if it wasn’t run by
profiteering gluttons, and you call us criminals. We explore… and you
call us criminals. We seek after knowledge… and you call us
criminals. We exist without skin color, without nationality, without
religious bias… and you call us criminals. You build atomic bombs, you
wage wars, you murder, cheat, and lie to us and try to make us believe
it’s for our own good, yet we’re the criminals.

Yes, I am a criminal. My crime is that of curiosity. My crime
is that of judging people by what they say and think, not what they look
like. My crime is that of outsmarting you, something that you will never
forgive me for.

I am a hacker, and this is my manifesto. You may stop this
individual, but you can’t stop us all… after all, we’re all alike.

+++The Mentor+++

All who act as harbingers of a new age recognise and acknowledge The Mentor – his words will always echo in our hearts and minds.

We work in the dark

We do what we can

We give what we have

Our doubt is our passion,

and our passion is our task

The rest is the madness of art.

- Henry James

Jika Account Friendster Anda di Hack, Apa Yang Harus Dilakukan ?

Jika Account Friendster Anda di Hack, Apa Yang Harus Dilakukan ?

Friendster
Bagaimana cara mendapatkan kembali account Friendster anda yang di Hack orang lain?
Pertama tama, anda bisa melaporkan hal ini kepada pihak friendster,

dengan mengirimkan email kepada help at friendster dot com

email tersebut berisikan pengaduan mengenai account anda yang di hack,
berikan mereka informasi yang selengkap lengkapnya, termasuk kronologisnya jika ada

sertakan info mengenai

User ID anda (email login)
Account ID (nomor)
Password sebelumnya
Bukti Identitas anda (KTP / SIM / PASSPORT)
Nama Depan Anda
Nama Belakang Anda
Email baru yang akan digunakan sebagai user login anda (jangan pernah mensubmit email yang pernah digunakan untuk register di friendster)

gunakan email yang baru untuk mengirimkan email kepada friendster

Pihak friendster akan memverivikasi email anda, pengaduan anda, dan jika diterima oleh mereka, account anda di Friendster akan di suspend, lalu anda akan diberikan petunjuk selanjutnya (tergantung permintaan mereka)

setelah itu, password dan user baru friendster, bisa dipergunakan kembali.