My disqualification from the ACWC
#4
Someone told me about this post, i thought i had to react.

First your access was supposed to be removed because you had no reason to contribute anymore. Also, giving access to the code implies to give access to confidential data so i had decided to remove your password.

The problem is you stole and published (even if they were commented they were still public) informations about the database which were stored in a hidden file for good reasons. It was a real security issue and also i don't like the fact you have knowledge of my databases passwords and users. You have modified the source when you wouldn't have been able to and you have caused a serious problem.
I don't care about how you'd like to name that - hacking or not - actually it's serious and i had to changed all passwords of my database.
I reinforced the security of my server and removed the user name and password you used to modify the code.

I -do- know why you did that, from the beginning, but it is absolutely NOT an excuse.

I decided to disqualify you from ACWC because i just had to do something, and it was the most appropriate sanction imo. I also have blacklisted you from http://acwc.us.to/ because i think you should stay away from the web site for security reasons. You have knowledge of the source code and, despite your help, i don't trust you anymore.

I've been really disappointed by this problem, a few days after i handed over the reins and shared my VPS. I have even thought about stopping to share it actually. But it would have been a bad idea. I preferred to penalize only you.

PS : the modifications daylixx asked were not needed, there was just no link to the resource he wanted to access.
PS 2 : i can tell there is no problem with the code, everything has been made to make it easy to use. This is just about laziness.
Thanks given by:


Messages In This Thread
My disqualification from the ACWC - by castiel - 28 Jul 11, 04:07PM
RE: My disqualification from the ACWC - by Luc@s - 28 Jul 11, 06:10PM