![]() |
|
|
|
#1 (permalink) |
|
Tin Cup Champ 2004
Join Date: Jul 2007
Location: Brisbane, Australia
Posts: 1,682
ICC Handle: Just2Good
FICS Handle: Advantage
|
There may have been some uncertainty yesterday which led to Bill Gletsos, Kevin Bonham, and a few other accounts being temporarily banned. This occurred after I had gone home for the night, so I wasn't around to clarify things when an certain unusual circumstance occurred. The affected accounts are now unbanned, and only lost about 12 hours of posting time.
I commend everyone who took a proactive approach to defending the security of the forum. Better safe than sorry is a good motto. Best AO
__________________
. ... for it is always the person not in the predicament who knows what ought to have been done in it, and would unquestionably have done it too . . . ~ Charles Dickens novel ~ |
|
|
|
|
#2 (permalink) |
|
Posts: n/a
|
Originally Posted by Arrogant-One
Look, thanks a lot for unbanning us but the security hazard appears to be firegoat7's unpredictable behaviour, and "better safe than sorry" would involve dismissing him before he causes your site any further embarrassment; no one should give a moment's credence to his demonstrably fake excuses.
What happened was that PhilD707 was online with last activity 11:21pm (this was showing as such for quite a while afterwards), then suddenly the new account "TheOrifice" appeared, registering at 11:23. I just chanced to come back online sometime between 11:23 and 11:27. "TheOrifice" had another activity (publicly visible through the front page) of reading the PM from Iconoclast (is it still the one that mentions God even though Iconoclast's an atheist?) and then headed straight to the Deceptive Shell Games thread to make his inane little pseudo-imitation offering. Now it happens that "orifice" is Phil's pet nickname for me, which has utterly failed to be picked up thus far by any other poster on either forum, despite Phil using it 11 times here and four times (and in his location field) on Chesschat since last August. As insults go, it's utterly harmless, especially since Phil's use of it says far more about him than it does about me, but given that he is concerningly obsessed with it and no-one else has picked it up, and that it signed up two minutes after his main account fell idle, clearly it's a PhilD hydra. Naturally I called him on this (with just three shouts in the shoutbox) and with firegoat7 the only mod showing as online, the spurious bans started within the next 20 minutes (or so). Certainly a surprise to me; I had certainly not broken any Ozchess rules, as there aren't any (beyond the signup standard which very clearly isn't enforced), and my comments were mild compared to those abounding all over this site! Bill came online to ask why and was immediately banned, and the only other account banned that wasn't mine was one that some of the staff here have falsely assumed to be me. Other accounts were online unhindered through this time. Further compounding the problem, if the whole load of rubbish about security problems had had any merit then a one-day ban would have been sufficient while the problem was sorted out (or at least any need for further bannings was explained). But later on in the evening (firegoat7 still the only mod showing as online) some of the bans were increased to three days with the same rubbish reasons given - which in the case of a security issue would have been completely unnecessary. This kind of spurious hotheaded ban under false pretences is a classic example of a "sad bastard" attitude that PhilD707 falsely accuses chesschat staff of, and also completely falsifies Iconoclast's claim that those from elsewhere who post here will be treated civilly. firegoat7's bias was clear enough a few months ago when he wrote: "My opinion. Ban all the Chesschat moderators." While he did, to his credit, tentatively conclude that I had "done nothing wrong." by having hydras here (given the lack of a rule against it) it seems that the same standard does not extend to the shoutbox, probably because of scars inflicted in the "shoutbox trolling" debates which he seemed so curiously aggravated by. Last edited by The Arbiter : 07-02-2008 at 09:55 PM |
|
|
#3 (permalink) |
|
Figurehead absolute.
Join Date: Jul 2007
Location: In the Margin
Posts: 1,062
|
Originally Posted by The Arbiter
This is the core weakness in your lambasting post.
From what you have posted, here and elsewhere, you do not apparently know the security risk perceived for which action was taken. Thus, whether the action was necessary/appropriate/justified/ and whether the duration of the ban was appropriate, would appear to just be a guess on your part. A volunteer sees a risk, makes a decision to mitigate, and there are repercussions. It seems like a reasonable course of conservative action to me. 20-20 hindsight is only available after the event. MOZ ps What we are not allowed to see is a post in the chesschat coffee lounge that labels the observation of the OzChess decision-maker as a security fabrication. The OzChess decision-maker saw a risk and took a conservative action. That risk has not been described anywhere in public to my knowledge at this point? How then can the allegation of security fabrication be logical, or even fair-minded?
__________________
I support the right to vote for moderators. Last edited by MOZ : 07-02-2008 at 10:36 PM Reason: added PS after reading CL. |
|
|
|
|
#4 (permalink) |
|
Tin Cup Champ 2004
Join Date: Jul 2007
Location: Brisbane, Australia
Posts: 1,682
ICC Handle: Just2Good
FICS Handle: Advantage
|
You are welcome.
Originally Posted by The Arbiter
Firstly, he hasn't caused one ounce of embarrassment to this site, and he took the very "better safe than sorry" approach you are now advocating.
Originally Posted by The Arbiter
You are being ridiculous. If he had wanted to ban the lot of you he had his chance as the Great Chief of Tribal Council. Instead he took a fair and even handed approach to you, demonstrating that he is fair and even handed in his dealings generally.
Originally Posted by The Arbiter
??? What does Phil logging on have to do with anything? What does Matt being an atheist have to do with anything?
Originally Posted by The Arbiter
Accusing Phil of having a hydra is a bit rich considering you have admitted to having multiple hydras on OzChess yourself! Now I am not going to do an ip search to see if your claim is true or not because I suspect you are just being paranoid.
That's exactly what you were told by Firegoat7.
Originally Posted by The Arbiter
As you were told already, there were some security issues we needed to sort out and banning various accounts was only a precautionary measure. The accounts were only banned for about 12 hours in all. Considering CC has been hacked once before
(if Dion was correct about that, he was a regular on CC before I was) I am not about to start taking lessons in forum security management from you lot.
Originally Posted by The Arbiter
As it turned out only 12 hours was needed.
Originally Posted by The Arbiter
Are you that desperate to try and smear OzChess with the same bully boy attitudes your beloved CC is famous for. The fact is the banning was precautionary and done for security reasons. There is nothing more to it than that. You are making it sound like those 12 hours you were banned were the most precious 12 of your whole entire life.
Originally Posted by The Arbiter
Everyone from what I can see has treated you respectfully and courteously.
Originally Posted by MOZ
Agreed! Hopefully you can talk some sense into him Moz. He is clearly trying to get me to go above my preferred 2 ppd rate.
__________________
. ... for it is always the person not in the predicament who knows what ought to have been done in it, and would unquestionably have done it too . . . ~ Charles Dickens novel ~ |
|
|
|
|
#5 (permalink) |
|
Posts: n/a
|
Originally Posted by MOZ
Your "guess" stuff can be very safely filed under "extremely wishful thinking".
You have not taken any account of my point about the later lengthening of the ban, which shows that the "security risk" guff is unconvincing rubbish to cover up a bogus ban, and that what we really had was a trigger-finger mod doing something stupid, making up a silly excuse, then later deciding he hadn't really made the ban long enough. Had there been a real "security risk" it could have been handled by taking the accounts in question offline for one day only, and then providing more detailed disclosure instead of a one-line fob-off to the affected parties immediately on their reinstatement. You have also not explained the extraordinary coincidence that the only accounts banned because of the so-called security risk were those under investigation (one falsely) in the hydra fiasco, plus Bill using the shoutbox to ask why the bannings were put in place. I would have thought this was way beyond even your penchant for defending the utterly lost cause but my experience is that it is probably boundless. I note your sympathy-fishing comment re "volunteers", as I noted its absence from many instances where firegoat7 made abusive attacks on me here there and everywhere (that unlike this one were generally completely unsound), and I dismiss it as a sympathy you have failed to consistently espouse. |
|
|
#6 (permalink) |
|
Figurehead absolute.
Join Date: Jul 2007
Location: In the Margin
Posts: 1,062
|
Originally Posted by The Arbiter
The difference between your position and my position is that I have detail on the perceived security risk, whereas you are guessing by looking at events that occurred around the same time.
You simply lack the information that would enable you to see your first guess has been wide of the mark.
But, it does not validate your first guess. He saw a risk, and he took considered-mitigation-action.
With 20-20 hindsight it was, as AO has published. But, at the time of decision-making it was the decision-makers best judgment.
Eventually this will be addressed. However, it would be useful for you to first recognise that risks (other than what you guess) are possible. Until you can see that point you will be locked into feeling that you were the target victim rather than just a possible perpetrator.
And now it is causing you to make an incorrect call on why I am defending the fact that some action had to be taken on the perceived risk. You would be better advised to make calls based on facts rather than guesses. You don't have the relevant fact at the moment.
This incident is not flame-war. There was a security risk. Action was called for. After the real nature of the risk became known then it was clearly no risk at all. The actions were then reversed. MOZ
__________________
I support the right to vote for moderators. |
|
|
|
|
#7 (permalink) |
|
Posts: n/a
|
Originally Posted by Arrogant-One
Aaaah, but then he would have had to do so for a reason that was obviously inconsistent and grudge-driven. This way he gets to do it for a made-up reason that seems to have duped one of his fellow mods (I greatly doubt that you believe a word of it), though it is quite unlikely anyone else bar PhilD on a bad day will fall for it.
He's not very good at this hydra game, anyway. Just tonight he posted a post as The Orifice, then the post disappeared and was reposted (with cosmetic alterations) by his PhilD707 account!
*propaganda about security risks snipped - who do you think you're fooling?*
Despite that, you overstate the preciousness a little! Now, of course, I am rubbing your nose in it by dismembering the lame apologism that you and MOZ are going through the feeble motions of providing. I don't especially care if it inflates your postcount anymore, since if it does, I shall take most of the credit, and point to the difference from your three months in a row of less than 10 posts per day!
Do try removing the blindfold. |
|
|
#8 (permalink) |
|
Posts: n/a
|
MOZ's last post contains some useful hints, assuming they can be taken at face value:
You argue that firegoat assumed that I might be attempting to hack, or that someone might be using my accounts to hack - although the only evidence for this view is that I posted three shouts in the shoutbox, for the first time but all quite in character in context. He therefore bans me and (he thinks) all my hydras, banning a poster who is not my hydra in the process. Then when Bill posts in the shoutbox he assumes Bill is hacking (or being hacked to perform a hack, or something else even more ridiculous) and bans Bill as well - again on no convincing evidence. Firstly, even if it was just an extreme case of paranoia (leading to the merely subconsciously convenient banning of someone he hates and explicitly called for the banning of anyway) then that doesn't bode well in terms of his ability to mod me competently in the future and he should agree not to do so. Secondly even if that had have been the case he should also have fessed up to his error promptly, apologised and undertaken to be more careful in the future. Instead he has worsened his behaviour by wrongly doubting my repeatedly given word concerning which accounts are mine. Thirdly the extension of some bans is still not explained, and fourthly if he really believed we were hacking why would he ban using pseudo-friendly messages like "security problems just relax a bit" of the sort you'd send to a party you knew to be innocent? Your story about him perceiving a genuine threat does not convince me. I suspect he banned in a knee-jerk reaction to seeing me appear in the shoutbox and the rationalisation comes later, perhaps he even comes to "believe" it. But it doesn't matter because either way he should apologise and make it good or else resign.
This is therefore another of your misunderstandings.
|
|
|
#9 (permalink) |
|
Figurehead absolute.
Join Date: Jul 2007
Location: In the Margin
Posts: 1,062
|
Originally Posted by The Arbiter
Good.
I had hoped to provide enough information so that you may think twice, and hav some doubt on your first guess.
As if you could not misjudge or misinterpret.
I argue that the decision-maker saw a security risk and took what he thought were mitigating actions. I know who which account he thought was the hacker, but he was unaware who was controlling the account. As was I an hour (or so) earlier.
The appropriateness of what he does after the risk becomes resolved is a topic for a later post (or two). First, we have to get you to the point where you concede your first guess may have been wrong. I know it to be.
Btw I agree, the extensions are not explained atm.
But, the risk was there. I saw it. In fact he asked me a question about it via a PM.
Ply the ball not the man.
But I believe it is reliable because > I saw the risk condition >> I answered a PM question from fg7 on the risk. I am defending his right to take mitigating actions. I am not passing judgment on their suitability; but a quick reversal was done. I am not passing judgment on fg7 future as a MOD; that is between you as a member of this bb and him.
__________________
I support the right to vote for moderators. |
|
|
|
|
#10 (permalink) |
|
Senior Member
Join Date: Nov 2007
Posts: 287
|
MOZ,
If all this claiming of a security risk had the slightest validity then why didnt firegoat7 ban the new user "TheOrifice" when banning Kevin and his hydras. After all it had acted as if it was a hydra of Kevin in the first place. And as my account has nothing to do with Kevin and his hydras here then why was my account banned using the same spurious claim of a security risk. Lastly if firegoat7 truly believed that our accounts were being hacked then why didnt he just logon to chesschat and ask if it really was us making shouts here. |
|
|
|
|
#11 (permalink) |
|
Posts: n/a
|
Further up you referred to me as a "possible perpetrator". This does not seem even remotely consistent with the above.
*various repetition skipped* Last edited by The Arbiter : 07-03-2008 at 03:16 AM Reason: remove some of my own repetition! |
|
|
#12 (permalink) |
|
Figurehead absolute.
Join Date: Jul 2007
Location: In the Margin
Posts: 1,062
|
No. It was not your account that was perceived to be used.
I am presuming either > the decision-maker thought that this would mitigate the risk, or >> he thought these accounts needed to be quarantined. But, personally, I am not at all regarding any likelihood that he saw an opportunity to harass your accounts.
Not when you know the nature of the perceived risk.
Do you want me to speculate? Do you want me to ask him?
You introduced me to the term non sequitur in recent PMs when we were discussing events in chesschat 2 years back. I think you are extrapolating from flame-wars in the past you have had with fg7.
---------------------- OK. Here is an offer. Lest the jeer squad think I am prolonging these responses to your intransigent position. I will authorise frosty to have my personal sign-on to MOZ and he can look at the content of the question from Dave and report back if it is feasible that Dave perceived a security risk. Let us not ask frosty to assess the security risk. (Provided Dave authorises the reading of his PM)
__________________
I support the right to vote for moderators. Last edited by MOZ : 07-03-2008 at 11:02 AM Reason: added proviso |
|
|
|
|
#13 (permalink) |
|
Figurehead absolute.
Join Date: Jul 2007
Location: In the Margin
Posts: 1,062
|
Originally Posted by Bill Gletsos
The risk was assessed due to an observation of account activity.
Now it is fruitless to evaluate if this true or not by looking at subsequent actions. It is far more fruitful to have frosty confirm the question asked by fg7 was in fact asked. Let us wait for that to transpire
It would be better for you to re-ask them when the risk has been confirmed.
__________________
I support the right to vote for moderators. Last edited by MOZ : 07-03-2008 at 12:08 PM Reason: typo |
|
|
|
|
#14 (permalink) |
|
Posts: n/a
|
Then if my accounts were not even perceived to be used in the hacking, why were my accounts banned? This was ridiculous at the start and is only getting more so as you continue to assert facts without explanation, that in the usual fashion when you do release detail (at the rate of one or two unclear hints for dozens of pieces of uninformative water-treading) turn out not to be clearly factual after all.
|