Pastebin abused

#1

Post by lehmannro » Sat, May 28, 2011, 7:51 PM UTC

Pastebin abused
michielovertoom.com

Re: Pastebin abused

#2

Post by jkyro » Sat, May 28, 2011, 8:22 PM UTC

No commenters? I guess they're all checking out whether the porn site passwords are actually valid.

Re: Pastebin abused

#3

Post by skrebbel » Sat, May 28, 2011, 8:29 PM UTC

jkyro wrote: post #2

No commenters? I guess they're all checking out whether the porn site passwords are actually valid.

Unfortunately, they're not.

Re: Pastebin abused

#4

Post by tzs » Sat, May 28, 2011, 8:31 PM UTC

It's kind of rude not to edit out the usernames and passwords from his examples.

Re: Pastebin abused

#5

Post by DanBlake » Sat, May 28, 2011, 8:32 PM UTC

This has been the case for a while. Anything you paste there will be seen by everyone + google. I did a simple pastebin for myself a while back that doesnt have a public directory - http://tinypaste.com - Also has code compilation built in, via codepad

Re: Pastebin abused

#6

Post by shii » Sat, May 28, 2011, 8:34 PM UTC

Welcome to the internet, this is pretty old news. You want to see more interesting stuff? Next time you stumble upon an owned computer, try to follow where the network stack is leading to and you'll sometimes find IRC channels with really interesting mechanics and things in them to control these computers.

Re: Pastebin abused

#7

Post by oasisbob » Sat, May 28, 2011, 8:35 PM UTC

tzs wrote: post #4

It's kind of rude not to edit out the usernames and passwords from his examples.

He states "I have changed some details to protect the innocent."

While I haven't tested any of the examples myself, I'd assume they're subtly munged.

Re: Pastebin abused

#8

Post by BoppreH » Sat, May 28, 2011, 8:44 PM UTC

Seems like a logical step to me, especially for dodgy automated tools. Making your programs paste the illegal info in pastebin makes a lot of sense from a plausible deniability standpoint. "No sir, I didn't plant the bug there, I just found this log on a public website."

Pastebin's owner seems to not mind automated tools using the site ( http://stackoverflow.com/questions/833887/pastebin-api , comment on question ), so the only solution I see is a "report public paste" feature. But that would be near useless against the volume of computer generated content created. And worse yet, the address that pasted it is just another victim, so there's little hope going against it.

Though I really hope I'm wrong, pastebin is a great website.

Re: Pastebin abused

#9

Post by arkitaip » Sat, May 28, 2011, 8:46 PM UTC

Never thought about this. It's scary what even a basic search such as site:pastebin.com password username can return.

Re: Pastebin abused

#10

Post by baby » Sat, May 28, 2011, 8:59 PM UTC

I see things like that on pastebin since ages. I thought it was common knowledge that pastebin hosted that kind of content until today.