Comments on Nuke Pro: Virus Laden Troll Links at ENENEWS, Trojan Nuke Troll

If you write it up into one cohesive word doc idea...

2016-03-02T18:26:17.131-08:00

If you write it up into one cohesive word doc ideally or pasted into email, I will post up

PS: don't email me. ;| 8/8

2016-03-02T14:51:42.104-08:00

PS: don't email me. ;|
8/8

Femfaust still ill? Curiously, I haven't foun...

2016-03-02T14:50:53.260-08:00

Femfaust still ill?

Curiously, I haven't found any known troll names when searching....so far.
No "Good Plutonium", no "Atoms4peace1", "MFX 1209", "FactChecker", "Metalbeard", "Turd Ferguson" AKA "Netzsche" AKA "socref", "Loose Puke", etc.

At least with the short list i have checked, all have managed to have avoided posting any repLIES on that site! :/

Told diemos on Mz's Cbox that this issue prolly affects both camps, but he never responded. :/

I know, it's not exactly concrete evidence, but it does seem to perhaps add to some interesting circumstantial circumnavigational circumspection, neh? Dizzying...am not bemused.

Anyway, i hope you actually get all these posts. I should be proactive and actually number them, dammit! (Amd/Ati = dAAmit!) I think this is something like 7/7 today.

Have we got enough verifiable material for an arti...

2016-03-02T14:33:01.634-08:00

Have we got enough verifiable material for an article?

It gets worser and worser the more i dig. A searc...

2016-03-02T14:31:58.222-08:00

It gets worser and worser the more i dig.

A search utilizing https://startpage.com/ with the terms site:enformable.com "captd" @hotmail.com revealed that email addresses may be searchable.

Look at all the pages exposing his email address, for instance!!!

One could intuit the possibility that a search with terms of simply @hotmail.com would produce results, and it does!

What is most illuminating are the post dates.
Notice they go back to at least early 2012?

Internet Archive didn't show any email addresses anywhere near that far back, unless one started on a latter snapshot.
It would appear that those addresses might have been retained by Enformable, and somehow resurrected later, in early 2014 at the latest. It is still possible this was an accident. Could it be like how Fukushima was an "accident"? Remembering FemFaust, i don't want to jump to conclusions.

Note that Mr. Hixson was an ENEnewser before the June, 2011 registration blitz by Admin.
An early user name was something like "CompassNorthDevelopmentGroup", but of course most early comments (before comment-120000) have not been retained.

Curiouser & curiouser. Somebody PLEASE warn people! :(

Somebody (else) PLEASE TELL ENFORMABLE TO STOP!!!!...

2016-03-02T13:57:21.402-08:00

Somebody (else) PLEASE TELL ENFORMABLE TO STOP!!!! I tried, and only minimal changes occurred, for whatever reason.
Shouldn't he know better?

Speaking of the so-called Swedish-stasi, the real stasi were outed long ago. "East German Police Officers Who Aided the Stasi" http://cryptome.info/bdvp-stasi.htm http://cryptome.org/stasi-list.htm

Catch those little foxes whom spoil the vines!!!

Mahalo, sir. :|

Quote from Mochizuki's Cbox: "22 Jan 16, ...

2016-03-02T13:56:20.500-08:00

Quote from Mochizuki's Cbox: "22 Jan 16, 12:11 PM morph: dud, first i didn't get the problem you described about wordpress pages. but after looking at the source code of the page" [Firefox - Highlight area, then Right-Click & select "View Selection Source"] ", i got it.. bad piece of software.. on the other side, i don't use any "important"/private mail addresses when commenting on pages" [sage advice, imho]

What could one do with merely an email address? IDK. https://kevtownsend.wordpress.com/2014/02/09/disqus-breach-irs-theft-fraudulently-obtained-credit-reports-and-political-coercion-in-sweden/ Yikes!!!

"Goggle" "IRS data breach", or something similar and you might have more appreciation for perhaps why some commenters do not last.

Quote: "My name is Lucas Whitefield Hixson, a...

2016-03-02T13:55:43.717-08:00

Quote: "My name is Lucas Whitefield Hixson, and I am an Information Architect based out of Chicago Illinois." ... "After my education, I joined the United States Army, where I learned how to apply the core Army values to my work ethics." ... "I am very much a product of my environment ..." http://web.archive.org/web/20110417135356/http://www.lucaswhitefieldhixson.com/about-me

WHOIS info: Quote: "Registrant Name: Lucas Hixson, Registrant Organization: Compass North Development Group, Registrant Street: 1121 W Columbia Ave Ste 3, Registrant City: Chicago, Registrant State/Province: Illinois" http://whois.stsoftware.biz/enformable-com.htm

Further: http://www.databreaches.net/swedes-uncover-disqus-user-security-breach/ - https://kevtownsend.wordpress.com/2013/12/13/what-lessons-should-we-learn-from-the-disqus-security-breach/ comment by antipathy: "Researchgruppen refers to itself as "the Swedish Stasi" and judging by their behaviour their aim appears to be absolute control of the social\political narrative." Does that sound typical of any OTHER group? Hmmm.

Disqus is NOT the only platform that appears involved. Dated 2009-12-08 !!! - http://www.developer.it/post/gravatars-why-publishing-your-email-s-hash-is-not-a-good-idea

Enformable exposes commenter's email addresses...

2016-03-02T13:55:00.629-08:00

Enformable exposes commenter's email addresses. WARNED OVER 90 DAYS AGO! :( - previously posted details -> http://enformable.com/2015/12/inside-the-chernobyl-unit-4-control-room/#comment-28741
I did send him a tip via his seemingly insecure tip line on November 27, 2015 - to no avail.

Since it was "moderated" and apparently ignored, here it is: http://pastebin.com/uz9Uymeb

It would seem that i was incorrect about those email addresses not showing up on Internet Archive - The Wayback Machine! :O For Example: (from Jan 29, 2014) http://web.archive.org/web/20140129091014/http://enformable.com/about-us/ CaptD's email address is there. Load the page, right click on a commenter's avatar image, then select "View Image Info" (Firefox). Look at "Associated Text" & voila!

Say, wasn't Jan 2014 around the time when Jp.gov state secretes act passed like bad gas? :/

I did the "view" trick and was able to d...

2016-01-22T08:16:34.841-08:00

I did the "view" trick and was able to divulge multiple personal emails at Enformable.

Beyond annoying.

As with femfaust's site, the first comment of ...

2016-01-21T23:33:12.208-08:00

As with femfaust's site, the first comment of what should have been two (immediately above) appear to have disappeared.

This should link to a pastebin article, which may be moderated later by the respective webmaster. I don't want to be a douchebag to him, no matter what hate mail might have occurred, or what was done to my email. BURNED ME. Not happy, yet wish no mischief. Am hoping am found to be a good netizen.

http://enformable.com/2015/12/inside-the-chernobyl-unit-4-control-room/#comment-28741

Imagine my shock after reading Rob's latest ar...

2016-01-09T14:42:23.675-08:00

Imagine my shock after reading Rob's latest article, posted a couple of days later. I didn't speak for Rob, yet i very much regret even mentioning his blog. It was very stupid of me. I don't doubt that Rob hates me now. Had hoped he would receive a "Merry Christmas" greeting from him, the issue would be fixed, and i would never mention it to anyone else. This was the first time i've directly seen anything like this first-hand. What was garnered from my efforts? It would seem like hate-mail to Bobby, whom is very ill!

It has been well over 30 days since first reporting this via tip submission. It appears no fix is in the works, and am intimidated to visit that site any further, let alone communicate with that site's owner.

Wondering how long that site has been leaking people's email addresses, seemingly in violation of that site Privacy Policy. I have no answer - whois info might indicate possibly early 2014, maybe earlier.

Am reminded that everybody is entitled to a bad day. Perhaps he had one. Looking at the industry he deals with, that might explain things, somewhat. "Hi Rob, how are you doing?" How hard would that have been to do??

Maybe if a few commenters were made aware of this, and verified their own information exposure (and only their own - if that is still legal to do ??), they might comment to him & a fix be implimented.

I really like the articles there, and his reporting seems excellent. WTF?

Quote: "I've seen Kaspersky slap his sta...

2015-08-15T07:22:01.436-07:00

Quote: "I've seen Kaspersky slap his staff with a walrus penis – and even I doubt the false-positive claims
Even his rivals fear this is a smear"
... "Kaspersky Lab is strong among antivirus firms for investigating state-sponsored malware, particularly software nasties coming from the Five Eyes nations of the US, UK, Canada, Australia, and New Zealand. It led the way blowing the gaff on Stuxnet, the US-Israeli Iranian nuke-lab cyber-weapon, and its Duqu cousin. None of this will have pleased Uncle Sam's intelligence agencies."
http://www.theregister.co.uk/2015/08/15/kaspersky_comment/

On a side note, it seems replicable that when one is offered the choice of images via Captcha, if an image is partly obscured whether by scroll-bar or lack of room at the top, a clickjacking warning is proffered. If the image you click on is not obscured, no warning is issued. That includes the "Verify" button.

Bug at minimum. Have no idea of potential pitfalls, so i will leave this topic.

Am presuming i'm able to replicate this behavi...

2015-08-14T23:50:05.794-07:00

Am presuming i'm able to replicate this behaviour by ensuring the scroll bar partly covers the "Verify" button. If so, it seems like a bug at minimum. Perhaps also a vulnerability???

... and in the news ... http://newsdaily.com/2015/08/exclusive-russian-antivirus-firm-faked-malware-to-harm-rivals-ex-employees/

Quote: "You've probably heard of state-sponsored malware like Flame and Stuxnet. These researchers found a third one that they called "Babar", and they attributed it to France."
http://www.hackerfactor.com/blog/index.php?/archives/687-Defcon-23-Recap.html

http://thehackernews.com/2015/03/casper-surveillance-malware-france.html

Ah bon ...

Huh. Out of all replies today, only one reCapcha ...

2015-07-31T01:47:12.395-07:00

Huh. Out of all replies today, only one reCapcha netted a warning.
Must have accidentally it OK, instead of x-ing out of it.
Will try again another day.

Careful with that LMDE2, if you decide to give it a go.
Some configuration need be done through the GUI before it gets to "see" the 'net. Plugins are cool. Would love to make my own images, and make them immutable. Then again, it's probably not this physical machine that might be problematic so much as the medium itself.

Trust is broken on the 'net. Why do i have to trust JA.gov (etc, etc, etc) on https sites (not going there), for instance?

nVidia ships drivers for XP with either expred or soon to be expired certificates that validate their authenticity. Those are loosely similar to https certificates, by-the-by. Probably wise in a way, for them that is, in that if their Cert private key ever got hijacked (or manipulated via a mathematical hash "collision" - two files with same hash value - very loosely similar to "false-positive" in AntiVirus), it would be a very limited window of opportunity. They did change their EULA in the most recent revision (paraphrased) from allowing collection of non-identifying info to permitting both id & non-id info. Funny watching those little bundles of text that few pay any wit to. When shit happens, they likely come across soothesaying like a dove, or as the voice of Christ Himself, asking "Have ye read it not?"

(in Walter Cronkite voice): "And that's the way the cookie crumbles".

Spoke too soon. Gotta get a copy of the report one of these times.
https://www.google.com/recaptcha/api2/frame?c=03AHJ_VusWJ0vl3aF8nkbufKlLQRgXnNmm35E-gof6fsSXVDvHfsavE_aXx1QQ7O_TTJj-SgmjEqPADkdgLh4j_xO7KnFcUEOcDgsQurTpnPmq37eaSo8dzZlwgYBaKxZQl9VJXcjeem76khTdYd2JumKCPsaftOnNgB_szZs_NXvkT--YoBMVcHjkrCA4x_-KypsIyFMq6atX&hl=en&k=6LdyZ_4SAAAAAKirYQFAvI_BEKsYyTQLdCegE8Ah&v=r20150728113637&bcr=[]&bg=!T0lHsHR2XC8OstFBtN3AX7j8ni0HAAAAalcAAAAhLwDPcs-dXp3EzoGps_jwCPchDAICs0ME05PGljMcYvMFjiPYz6I90sk1BnHerC7vfr4AI-rq_tUm1dL1cCbp56YUsSEtguS3bnsYZCKh7wnUNZ-8_W1VDSMzuy8FLiQ72kXLugofJ9Wl3RTMSVrzcvCI_D4uN_5mejtcivS6nr5u5GincK7qvhzdtPQeYGvBsTSPMa3EUpHhhfjXzaTczC6tMTHZnLzygMEaHN283zAxPA8e5VIPh_Gckro1bQ7GNkHTCNN28hPjH5dV9o_JT8Ft&chr=[27%2C78%2C0]&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_GB.Z2WoehcEKZk.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Ft%3Dzcms%2Frs%3DAGLTcCPlwO494D8JSCKC46qIMXWvyG7TpQ#id=I1_1438305992640&parent=https%3A%2F%2Fwww.blogger.com&pfname=&rpctoken=42616393

Google (via 3rd-party) searching didn't net me any info, so far. (of course, of course)

Did garner another warning. Got a report number, but that doesn't seem to go anywhere. A search did find this though: http://techreport.com/news/28570/noscript-vulnerability-allows-malicious-scripts-to-run-unchecked
Good thing i kill the whitelist! That ain't it, unless it's googleapis (prolly doubtful). It's likely a simple logical explaination behind it.
Anyway, another day, another sand dollar (i hope).

I'm a magnet for that warning now, somehow. Maybe Goebbel doesn't like my content???
The image difference is very subtle, other than the added horizontal scrollbar. The "V" in the word "Verify" moves a couple of pixels to the left, very distinctly. Strange. Maybe just a Google bug? Qualsys labs might make more sense of the strength (or lack thereof) of those https sites listed. Putting it on the shelf for now.

I explicitly do not use "disco" Disqus. ...

2015-07-30T08:05:22.225-07:00

I explicitly do not use "disco" Disqus. Am Disqusted with Disqus after commentary disappeared on tomasz86's Windows2000 blog. http://windows2000.tk/updates/ Noting that he has since changed his site layout as i no longer see Disqus at the bottom.

Am using LiveDVD (regular distro, simply booted from DVD drive) LinuxMint Debian Edition 2 with FireFox & No$cript plugin.
Have noted this behaviour on all other versions tested over the last six months. Didn't think to comment on it until reading Bo's post some time back.

If there is anything i can do to assist in replication of my results please make note here.

Am using iNet less and less as time goes on, as i trust it even less and less.

Funny, no problem proving am not a bot on this reply. ???

Or maybe its actually a Disqus problem

2015-07-28T10:53:57.023-07:00

Or maybe its actually a Disqus problem

I will look into the captcha problem. Very ann...

2015-07-28T10:53:31.010-07:00

I will look into the captcha problem. Very annoying Google/Blogger

Had remembered a post by Bo concerning some troubl...

2015-07-28T06:08:05.434-07:00

Had remembered a post by Bo concerning some trouble trying to comment on this site.
Have noticed for some time that every time i try to post on your site, stock, i get a "clickjacking or UI redressing attempt" warning via No$cript when the "I am not a robot" image selection process is displayed.

Arnie Gunderson was a guest on the Coast to Coast show Sunday night. It was hosted by the self-ascribed "not anti-nuclear" weekend host, George Knapp.

Mahalo, sir.

As a friendly reminder, perhaps it would be wise t...

2015-04-29T07:50:17.336-07:00

As a friendly reminder, perhaps it would be wise to avoid MetaWeird/Turd"KingOfBowls"/Socref/JaANUS' links.

Have found issue(s) with some of it's few supporting links. Confirmation is a todo. Do i have that correct that PT has a real person to "thank", if and when the next viral "gift" is deposited on ene?

PS: all lanl links here --> https://sitecheck.sucuri.net/results/www.lanl.gov
see: Website Details - List of Links Found

I didn't know they had their own email system. Not looking to "hack", only for public info.
Thanks for the inspiration Ja Anus.

Adding "two and two" & i find an unb...

2015-04-24T12:31:26.577-07:00

Adding "two and two" & i find an unbalanced "equation".

Apparently Kaspersky & by default Russia (etc, etc etc) have part of the toxic toolkit now!

Nice job! Not liking what i see in Numbers concerning Edom & Moab.

[OT] Won't it be nice? :P (see above, to w...

2015-04-24T12:03:52.090-07:00

[OT] Won't it be nice? :P

(see above, to which you referenced)

Say ... did you forget Al Bundy's favorite brand of toilet?
Quote: ... "a FERGUSON. The King of bowls!"
https://www.youtube.com/watch?v=IL2YRDzpTL4

Somebody, hand the fascist "King" his plunging fascia!

I bet he looks something like the former Calgary Stampede wrestler Makhan Singh did.
http://slam.canoe.com/WrestlingImagesS/singh_makhan2.jpg
(pic from: http://slam.canoe.com/SlamWrestlingBios/shaw_mike.html )
Yup; "Back Asswords".

What was his nickname (graciously dubbed by Neil MacRae)?
Step right up to the bowl and give it your best shot, sir.
You might have "hit the mark" if you said "The Toilet Bowl"! :lol:

Quote: "Originally, it was supposed to be kind of a sewer creature, gargoyle-type that had a silver outfit, boots, and was supposed to have a big mask with horns coming out of it," Shaw explained.

Mayhap "King Fergie's" hair was "Fashioned today by the Calgary Zoo", too! :ROTFLMAO

Owen Hart vs Makhan Singh - https://www.youtube.com/watch?v=KVfUMCs-bfs

"In the mean time, and in between time" ... Ed Whalen
http://slam.canoe.ca/SlamWrestlingBios/whalen.html

Keep playing him like a Stradivarius!!! [/OT]

Stock, …question of whether the Equation Group is ...

2015-02-21T05:01:50.775-08:00

Stock,
…question of whether the Equation Group is the US National Security Agency
…Kaspersky has identified are two modules that can reprogram more than a dozen different hard drive brands, including big names like Maxtor, Seagate, Hitachi, and Toshiba, basically rewriting the hard drive's operating system. This trick puts the "p" in APT (advanced persistent threat), by allowing the malware to go undetected by antivirus and to remain alive even if the drive is reformatted or the operating system gets reinstalled.
…the module that infects the hard drive firmware is "state of the art."
"We're sure there's some Linux malware, too … and probably a lot of other stuff we have not found yet."

http://www.darkreading.com/vulnerabilities---threats/advanced-threats/newly-discovered-master-cyber-espionage-group-trumps-stuxnet/d/d-id/1319104

Not just a partition virus, infected firmware, won’t matter the operating system loaded. To get rid of partition virus’ I used Norton’s old Disk Editor on an old computer to zero out the partition and mbr just like a new HDD. Windows then writes a new, clean partition instead of just adding entries to an infected one. As a shortcut, I use Linux to write a new partition table, forcing windows to write a new one. Windows’ underlying DOS has always been vulnerable, and now Linux is vulnerable, I doubt the NSA would leave out Apple. An HDD with infected firmware would need the firmware rewritten or the drive destroyed. Not detected by scanners, you wouldn’t know the HDD firmware was corrupt and needed replacing.
Horse

OK. Maybe it's not so bald. Quote: "Vi...

2015-02-18T06:04:54.226-08:00

OK. Maybe it's not so bald.

Quote: "Victims generally fall into the following categories:
• Governments and diplomatic institutions
• Telecommunication
• Aerospace
• Energy
• Nuclear research
• Oil and gas
• Military
• Nanotechnology
• Islamic activists and scholars
• Mass media
• Transportation
• Financial institutions
• Companies developing cryptographic technologies
Combining statistics from KSN and our sinkhole, we counted more than
500 victims worldwide. A lot of infections have been observed on servers, often
domain controllers, data warehouses, website hosting and other types of servers.
At the same time, the infections have a self-destruct mechanism, so we can
assume there were probably tens of thousands of infections around the world
throughout the history of the Equation group’s operations.
As an interesting note, some of the “patients zero” of Stuxnet seem to have been
infected by the EQUATION group. It is quite possible that the EQUATION group
malware was used to deliver the STUXNET payload."
https://securelist.com/files/2015/02/Equation_group_questions_and_answers.pdf

I haven't found any coincidence with the above confirmed infection from MBP yet. Your logs, if saved from months ago, might help if i have that correct. Talk to Stock first, if you agree.

I hope you kept those HDD's, obewan!
May the farce no longer be with you, yet The Force instead.

So nice to see itsanukularwhatsit is back to apolo...

2015-02-09T06:50:06.332-08:00

So nice to see itsanukularwhatsit is back to apologize to Anne, razz, Sickputer, Crickets, WeNotTheyFinally, stock, and others in his or her "bizzaro-world" style.

Maybe he/she liked my quotes below concerning the "admit" theme enough to reply (again) in typical bizzaro fashion. :lol

Hey itsanuclearwar, send in your inverse-bizzaro counterpart. That would be coool! Otherwise, please call the SPCA, as there appears to be a rabid dog on the loose!

"Me and your mom have been noticing lately that you've been having a lot of problems,
You've been going off for no reason and we're afraid you're gonna hurt somebody,
We're afraid you're gonna hurt yourself."
... "They say they're gonna fix my brain
Alleviate my suffering and my pain
But by the time they fix my head
Mentally I'll be dead"
http://www.azlyrics.com/lyrics/suicidaltendencies/institutionalized.html