Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Pastebin abused

michielovertoom.com

Post reply on HN
Print view View original

41–50 of 53 posts

Re: Pastebin abused

#41

Post by adambyrtek »

Kadin wrote: post #32
mtogo wrote: post #15

I thought everyone knew this. Pastebin hasn't been used seriously for pasting code snippets for years, everyone's moved to one of the ( much ) better pastebins. Here's just a few i can think of off the top of my head: http://paste.pocoo.org/ http://gist.github.com/ http://dpaste.org/ http://fpaste.org/ http://codepad.org/ and http://rafb.net/paste/ before it was shut down

I wouldn't be so quick to dismiss Pastebin's legitimate uses. I see it get used all the time for sharing debug output and system logs (generally between systems where there isn't any other easy method of communication). The other ones may be prettier but Pastebin has mindshare.

What do you mean by "mindshare"? It's not like there is any real community on those sites. For me most of them are completely interchangeable. The only exception is Gist, which has the advantage of version control.

Re: Pastebin abused

#42

Post by mike-cardwell »

pavel_lishin wrote: post #26

Some of them sound downright sad: http://pastebin.com/v70Z85aC Another I just saw was a keylog of someone changing their password after their Facebook account was flagged for suspicious activity. Obviously, they've got bigger problems. Question: should I contact this person and tell them what happened? (Thinking about it, it would be trivial to write a script that monitors for this kind of stuff, and e-mails the vict…

Could use an anonymous remailer.

Re: Pastebin abused

#43

Post by adambyrtek »

I'm surprised they don't use asymmetric encryption to hide their tracks. It seems obvious to encrypt the contents using a public key before sending it to pastebin, so that only the attacker (or attackers) can decrypt it.

Re: Pastebin abused

#44

Post by ZoFreX »

jessedhillon wrote: post #31
mattdeboard wrote: post #23

Earlier quoted context omitted.

Interesting, do you know of any blog posts or articles that discusses these rooms, or more on how to do this? And I may be showing my out-of-touchness with black-hat culture, but I assume by "owned" computer, you mean one that's a botnet node?

I'd say a good way to get started would be to install Windows XP on a machine, start downloading and installing pirated warez, then watch `netstat` or install Wireshark.

I would suggest two modifications to your plan: Using a VM (easier and fairly safe, very few viruses can break out of a VM), and getting the viruses some other way (I don't see that many in pirated material). One way that works is to follow the links next time a spambot hits a large IRC channel you're in.

Re: Pastebin abused

#45

Post by JonnieCache »

mattdeboard wrote: post #23
shii wrote: post #6

Welcome to the internet, this is pretty old news. You want to see more interesting stuff? Next time you stumble upon an owned computer, try to follow where the network stack is leading to and you'll sometimes find IRC channels with really interesting mechanics and things in them to control these computers.

Interesting, do you know of any blog posts or articles that discusses these rooms, or more on how to do this? And I may be showing my out-of-touchness with black-hat culture, but I assume by "owned" computer, you mean one that's a botnet node?

Tip: botnet hunting is a perfect example of something you should not learn from a set of instructions on someones blog. To do so would be a criminal sacrifice of an opportunity for joyous discovery and autodidacticism.

It's called botnet hunting for a reason. The thrill of the chase.

I'm really glad that I was 13 before the era where you could just go and get detailed instructions on every possible piece of knowledge, and before there were places like stackexchange where people scramble to answer your every question in seconds. Instead I had to spend hours days and weeks doing this stuff from scratch, and without that, I doubt if I'd be paying the rent with computers right now.

Sorry if this sounds a bit condesending, I'm just trying to help people get the maximum utility from their time skulking around in virtual alleyways chasing criminals. Surely a noble aim? ;)

Re: Pastebin abused

#46

Post by JonnieCache »

adambyrtek wrote: post #43

I'm surprised they don't use asymmetric encryption to hide their tracks. It seems obvious to encrypt the contents using a public key before sending it to pastebin, so that only the attacker (or attackers) can decrypt it.

Two words: plausible deniability.

Re: Pastebin abused

#47

Post by radical-edward »

Luyt wrote: post #39
cubicle67 wrote: post #38

WARNING - don't click on the tinypic link in the comments [Edit: not sure if the pic's fake or not, but it's a photo of the top halves of two corpses]

Thanks for the tip, I removed the link from that comment. It was a gruesome picture indeed, fake or not.

Real and recent. They were Libyan rebels.

Re: Pastebin abused

#48

Post by danshapiro »

radical-edward wrote: post #47
Luyt wrote: post #39

Earlier quoted context omitted.

Thanks for the tip, I removed the link from that comment. It was a gruesome picture indeed, fake or not.

Real and recent. They were Libyan rebels.

If you could send the original link to (my first name) at (photobucket.com) I'll make sure it gets removed.

Re: Pastebin abused

#49

Post by melpomene »

I forked the code in this article and made it parse a Pastebin site hosted on the I2P Darknet (http://i2p2.de). Expected to find alot of more stuff like this in a completly anonymous enviroment like I2P. But no, the anonymous people on I2P seems like a nice bunch.

Here is the code: http://blog.kejsarmakten.se/all/software/2011/05/29/i2p-past...

Re: Pastebin abused

#50

Post by genbattle »

mtogo wrote: post #15

I thought everyone knew this. Pastebin hasn't been used seriously for pasting code snippets for years, everyone's moved to one of the ( much ) better pastebins. Here's just a few i can think of off the top of my head: http://paste.pocoo.org/ http://gist.github.com/ http://dpaste.org/ http://fpaste.org/ http://codepad.org/ and http://rafb.net/paste/ before it was shut down

I think pastebin is still a very good site for code pastes. I haven't seen a site which offers more features and functionality. Sure if you just want a quick public anonymous post of some plain text, any will do. In my case pastebin.com is the only one i've found that had syntax highlighting for some of the more obscure languages I use (such as Go).
Post reply on HN