Details on being narqed   for The Crazed Asylum (TCA)   by Corner Deli FTP

<chor> well, what i was trying to say, was that i'm not going to be around much... yes i want you to take them down, but i'm really not going to be around to back you up on it <`fusion`> sure <`fusion`> i dont need u <`fusion`> BUT <`fusion`> can u tell me some proofs <`fusion`> or explain me how did u found out it was them <`fusion`> so i will have something to back me up with ;) <chor> ok <chor> lemme forward you a mail i'm mailing Teir <chor> do you have an email i can use? <`fusion`> sure <`fusion`> email it to: <`fusion`> [email protected] <`fusion`> can u also explain me exactly how u found out it was TRS siteops who narced on TCD <chor> yes, that's what i told Teir in the letter... check your email <chor> if, after you read this, you have more questions, i'll try to explain <`fusion`> sure <`fusion`> and tell me <`fusion`> the fact that u wont be on alot from now on means that TCD wont be back up as well? <chor> not in the near future... i confirmed that the mail was actually sent... so i'm sure they're going to be looking in to me. I have to find a new location for the box first, and maybe let some time blow by <`fusion`> okie <`fusion`> so i guess that TCD wont be back up in the next couple of weeks, if at all, correct? <chor> yeah, it's going to have to be a bit longer than that... i guess premiere's going to need a new USHQ <`fusion`> yup, but IF TCD ever comes back it'll get it's position back or atleast a respected HQ position. <chor> hehe, thanks, I do appreciate it. as long as you don't consider TRS for a position :) <`fusion`> ahhaah <`fusion`> no fucking way :)) <chor> awesome <`fusion`> yup Session Close: Sun Feb 08 04:45:13 1998 ** Here is the e-mail which was sent by Chroizo, TCD siteop, to Teir, TRS main siteop: ------------------------------------------------------------------------------- Date:Sat, 7 Feb 1998 18:37:23 (PST) From:Chorizo <[email protected]> BookSubject: Re: TCD Status To:TeiR <[email protected]> Teir, All the logs I have point to eternal. Not in a round about way, but a clear, decisive manner. The author of the email mentioned specific ports on the machine that ONLY the TRS IP address had accessed in weeks! eternal had asked maloo to have his TRS ident added to his TCD account the same day the email was sent. The logs show that he was online during a window of 10 minutes when the screen capture could have been taken. Only 2 other people logged on during that time, neither of which have shells on the TRS machine. Eternal's story has changed quite a few times before he told me that he did "security" work on my site. When he first asked me about the narcing, he mentioned nothing of "security work". When I asked him if he accessed any ports, he said he connected to 20, and 21, just as a check. Then i told him he connected to the finger one too, and he said he "forgot about that". Then i told him that i had logs he portscanned the whole machine, and he said again, "Security work". Teir, I'm not stupid here. I'm not going to insult you and implicate you in this as well, but there is nodoubt that eternal did this. Besides, someone that has barely ever spoken to me before suddenly chats me and voices his concern about TCD, how nothing bad would happen to me "as long as i didn't come back up", and then, without my bringing it up, tells me that "he didn't do it". I think if you take a step back and look at the situation, you'll find it impossible to think otherwise. And what's worse is the reasoning behind it all. Again, i won't say whether you did or didn't have a part in this, but it's the lowest thing I can possibly conceive. It's the action of a 10 year old that doesn't understand the ramifications of what they're doing. It's beyond my comprehension why someone would take this course of action, especially considering my attitude towards everyone in the scene. I have always tried my best to accomodate everyone. In the end, this situation has made me sick, but not sick enough to let eternal get away with this. You wouldn't if it happened to you. Chorizo ------------------------------------------------------------------------------- Here's the second e-mail which Eternal, TRS siteop, sent to CORNELL admin ------------------------------------------------------------------------------- Date:Sat, 7 Feb 1998 19:59:15 (PST) From: Chorizo <[email protected]> To: [email protected] Status: U Return-Path: <[email protected]> Received: from cornell.edu (cornell.edu [132.236.56.6]) by postoffice2.mail.cornell.edu (8.8.5/8.8.5) with ESMTP id WAA29092 for <[email protected]>; Wed, 4 Feb 1998 22:48:37 -0500 (EST) Received: (from daemon@localhost) by cornell.edu (8.8.5/8.8.5) id WAA19982 for [email protected]; Wed, 4 Feb 1998 22:48:35 -0500 (EST) Received: from send1b.yahoomail.com (send1b.yahoomail.com [205.180.60.23]) by cornell.edu (8.8.5/8.8.5) with SMTP id WAA19892 for <[email protected]>; Wed, 4 Feb 1998 22:48:31 -0500 (EST) Message-ID: <[email protected]> Received: from [128.84.214.150] by send1b; Wed, 04 Feb 1998 19:48:14 PST Date: Wed, 4 Feb 1998 19:48:14 -0800 (PST) X-PH: [email protected] (Cornell Modified) From: Ezra Cornell <[email protected]> Subject: Warez again To: [email protected] (Barbara Skoblick), [email protected], [email protected], [email protected] Cc: [email protected] (Barbara L. Krause), [email protected] (XXX) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="-2138437117-1758287264-886650494=:27051" The attached file is a screen capture of an ftp site at 128.253.179.49 at port 2121 running the premier rftpd as it's server. One do not fake these things and I hope that you take care of this problem. He's using cornell resources to pirate huge amounts of softwares. The softwares in his hard drives are worth tens of thousands of dollars. XXXXXXXX at XXX is an idiot. He runs a warez server but left finger, talk, and another ftpd at port 21 open. That's just carelessness and he deserves to get caught. 230- 230- welcome to.... 230- ______ ______ 230- the __/ /_______________________/ / 230- /__ ______ ____________ / 230- corner / / / / / / / 230- / / / / / / / 230- deli \___________\___________\___________\ 230- 230- --(- Thunder WHQ | Premiere USHQ | GCrack RHQ -)-- 230- 230- .+,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,+. 230- | | 230- | Siteop: Chorizo | 230- | | 230- | Executive Staff: [+] Majik [+] Maloo [+] KRS-One [+] | 230- | Nukers: [+] Hades [+] Plush [+] Email: chorizo@***.Ml.org | 230- | | 230- ++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++ 230- | | 230- | --(- TCD Hall of Fame -)-- | 230- | | 230- | ___ Alltime Users _______ _____________ | 230- | / \ _______ \ /_______________ ______ / ____ __ 230- +---+------------+-----------+-------+-------+---------------------------+ 230- | 1 | Zer0_T | Vengeance | 730.9 92.9 | PREMiERE DOMiNATiON | 230- | 2 | krs-one | Vengeance | 696.5 94.2 | [+] VENGEANCE [+] | 230- | 3 | garoto | Devotion | 349.0 50.3 | DEVOTiON | 230- | 4 | morbital | Thunder | 272.2 39.7 | [MI] Thunder [MI] | 230- | 5 | shinobi | Shock | 239.7 124.4 | No Tagline Set | 230- +------------------------------------------------------------------------+ 230- Alltime Groups Upload Alltime Groups Download 230- +---+------------+-------+-------+ +---+------------+-------+-------+ 230- | # | Group | Megs | Files | | # | Group | Megs | 230- +---+------------+-------+-------+------+---+------------+-------+-------+ 230- | 1 | Thunder | 1585.3 1056 | u d | 1 | Thunder | 2520.8 2288 | 230- | 2 | Vengeance | 1464.2 1003 | l l | 2 | Mentality | 2141.4 1460 | 230- | 3 | RSS | 545.8 348 | o o | 3 | RTS | 1451.8 230- | 4 | RTS | 361.3 205 | a a | 4 | RSS | 963.6 860 | 230- | 5 | Devotion | 358.8 238 | d d | 5 | CWT | 748.1 455 | 230- ++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++,+_▌_+,++ 230- | | 230- | --(- Site News -)-- 250- 250- ________ __________ 250- \ / __________ ___________________ / ______/_ 250- / / _\____ \/ ______/___ ___\ \______ \ Last 5 250- / /___\ \ \______ \/ \ / / / Uploads 250- / / \ \ \ / / \maloo / / / 250- \___________/___________/_________/_______\-----\__________/-------------. 250- | # Age Size Directory | 250- +---+---------+---------+------------------------------------------------+ 250- | 1 | 8m 37s | 1/3.3M | /incoming/utils/Transoft_Mail_Control_4.0.Regi | 250- | 2 | 8m 58s | 1/1.2M | /incoming/utils/Compression.Plus.v5.0.32-Bit.F | 250- | 3 | 18m 54s | 1/1.1M | /incoming/utils/Compression.Plus.v5.0.16-Bit.F | 250- | 4 | 25m 17s | 1/0.7M | /incoming/utils/HTML.To.Text.v1.0.16.And.32.bi | 250- | 5 | 34m 58s | 1/2.7M | /incoming/utils/ImagePrint.v.2.1.2a.for.Win95N | 250- +------------------------------------------------------------------------+ 250- 250- 250- drwxrwxr-x 113 501 500 6144 Jan 29 07:49 0128 drwxrwxr-x 96 501 500 5120 Jan 30 17:40 0129 drwxrwxr-x 78 501 500 4096 Feb 2 02:48 0130 drwxrwxr-x 100 501 500 5120 Feb 2 02:51 0131 drwxrwxr-x 110 501 500 5120 Feb 2 17:32 0201 drwxrwxr-x 69 501 500 3072 Feb 4 03:54 0202 drwxrwxrwx 73 chorizo rFtpd 4096 Feb 4 07:19 0203 drwxrwxrwx 2 mr_dum Thunder 1024 Feb 4 13:18 1st.Contact_v1.07.00-DSi drwxrwxrwx 2 cybtropi Thunder 1024 Feb 4 22:56 20-20_Advanced_Designers_ Kit_2.0-ASM drwxrwxrwx 2 t800 Thunder 1024 Feb 4 23:31 3Space.Publisher.Deluxe.v 1.0.WIN95NT-ENTiTY drwxrwxrwx 2 zarkof Thunder 1024 Feb 4 08:01 4-Net.v1.1.32-bit_Cracked _RTA drwxrwxrwx 2 sitez Millenni 1024 Feb 4 14:46 Above_Beyond_98.08.PRO-HV 98 drwxrwxrwx 2 hemp Mentalit 1024 Feb 4 15:50 AceExpert.FTP.b1.0.Incl. drwxrwxrwx 2 garoto Devotion 1024 Feb 5 01:24 Advanced.Disk.Catalog.v1. 20.b1.For.Win95NT-CONCEPT drwxrwxrwx 2 nash RSS 1024 Feb 5 00:58 Agiss.WinGrade.v3.0.Win95 NT.Regged-CORE drwxrwxrwx 2 doubage CWT 1024 Feb 4 07:48 Atrex.6.0.b5.16Bit-FwW drwxrwxrwx 2 doubage CWT 1024 Feb 4 09:18 Atrex.6.0.b5.32Bit-FwW drwxrwxrwx 2 garoto Devotion 1024 Feb 5 00:21 Bio.Rhythm.v1.06-DSi drwxrwxrwx 2 garoto Devotion 1024 Feb 5 01:53 BlowFish_Advanced97_v1_04 _Registered-UCF 95.NT-GLoW drwxrwxrwx 2 snoop RSS 1024 Feb 5 01:43 Btrieve.v6.15.445.For.Net Ware.Server.Edition-GLoW drwxrwxrwx 2 neophyte Ambition 1024 Feb 4 23:12 CD-DA_Extractor_v0.91_cRA CKED-UCF drwxrwxrwx 2 snoop RSS 1024 Feb 4 04:35 CamCap.Image.Online.Grabb er.v1.14-DEMiSE drwxrwxrwx 2 nash RSS 1024 Feb 4 01:21 CheckPOP.v1.02.for.Win95N T.Cracked-TRPS drwxrwxrwx 2 zarkof Thunder 1024 Feb 4 00:33 ColorDesk.Utilities.v2.03 .011-SHOCK drwxrwxrwx 2 psyber Empire 1024 Feb 5 03:05 Compression.Plus.v5.0.16- Bit.For.VB-GPF drwxrwxrwx 2 frznwate RISC 1024 Feb 5 03:14 Compression.Plus.v5.0.32- Bit.For.VB-GPF drwxrwxrwx 2 doubage CWT 1024 Feb 4 06:20 ConferenceRoom.Profession al.v1.2.2-FwW drwxrwxrwx 2 thecue Thunder 1024 Feb 5 01:55 Conversion.Tables.v4.0.Fo r.Win95NT-CONCEPT r.Edition.v6.03.Win95NT.Registered-CORE drwxrwxrwx 2 dtrooper Thunder 1024 Feb 4 18:45 Daily.Upload.Reporter.v2. 1.For.PCBoard.v15.3-FOOD drwxrwxrwx 2 crypts Millenni 1024 Feb 4 18:57 Dance.Machine.Sample.Addo n.Win95NT-DW drwxrwxrwx 2 altera Atomic-X 1024 Feb 4 06:31 Digital.Business.Card.v7. 5.Win95-IND drwxrwxrwx 2 psyber Empire 1024 Feb 4 02:25 Document.Handler.v3.4-GLo W drwxrwxrwx 2 syrup RISC 1024 Feb 4 07:22 Dynamic_IP_Utils_v4.20_NT -PTM drwxrwxrwx 2 psyber Empire 1024 Feb 4 06:20 EMUlive.pvx.broadcast.rec iever.3.01-DSI drwxrwxrwx 2 psyber Empire 1024 Feb 4 06:21 EMUlive.pvx.broadcast.rec iver.3.01 drwxrwxrwx 2 Fallen Premiere 1024 Feb 4 00:42 EXTRA.Bundle.for.TCP.IP.v 6.3-PREMiERE drwxrwxrwx 2 tragik Thunder 1024 Feb 4 04:27 FILE.SHREDDER.V1.5.WIN95N T-SWAT drwxrwxrwx 2 mr_dum Thunder 1024 Feb 4 13:22 FM-Stereo_V2.25b_reg.-ML drwxrwxrwx 2 psyber Empire 1024 Feb 4 20:49 FTP.EXPRESS.v.2.001-GCRAC K drwxrwxrwx 2 dthangel fATE 1024 Feb 4 20:48 FTP.EXPRESS.v2.001-GCRACK dr-xr-xr-x 2 garoto Devotion 1024 Feb 5 00:38 Gear.v4.2-NLT--NUKED drwxrwxrwx 2 nash RSS 1024 Feb 5 02:31 Globetime.v1.21.Win95NT.I ncl.Keymaker-CORE drwxrwxrwx 2 psyber Empire 1024 Feb 4 21:07 Grabber.32Bit.2.0.08.Win9 5NT.Regged-CORE drwxrwxrwx 2 nash RSS 1024 Feb 5 01:00 Grabber.v2.0.08.Win95NT.K eymaker.Only-CORE drwxrwxrwx 2 slider Premiere 1024 Feb 5 01:24 Guardian.Manager.v2.2-PRE MiERE drwxrwxrwx 2 zarkof Thunder 1024 Feb 5 02:57 HTML.To.Text.v1.0.16.And. 32.bit-CONCEPT drwxrwxrwx 2 cybtropi Thunder 1024 Feb 4 03:36 Hot.Java.Browser.v1.1.Win 95NT-RwS drwxrwxrwx 2 CaK CWT 1024 Feb 4 04:00 ICE.TCP.PRO.v4.4.16.bit-D SI ------------------------------------------------------------------------------- Here are logs of Eternal connecting and 'scanning' TCD: Feb 4 21:51:59 gorchfock in.ftpd[32695]: connect from 128.253.185.63 Feb 4 21:52:53 gorchfock in.ftpd[32718]: connect from 128.253.185.63 Feb 4 21:53:08 gorchfock in.ftpd[32725]: connect from 128.253.185.63 Feb 4 22:07:14 gorchfock in.fingerd[314]: connect from 128.253.185.63 Feb 4 22:07:38 gorchfock in.fingerd[323]: connect from 206.133.79.42 ------------------------------------------------------------------------------- End of story, to sum it all up: TRS did have a hard competition against TCD which almost and would have cost TRS losing the #1 US site position, so Eternal took the easy way out and the most disgussting one, and narced on TCD. I myself wont let Eternal and all his associates get away with it as well.