The Official Skoorb Spoof thread! Shmabbles.com is OFFLINE! No group has claimed responsiblilty! Time for a mirror?

[StageLeft]

So do we take the blue pill, or the red? I wonder what reaction was expected of me and if I'm following it. Hmm...

 

[TNTrulez]

Track 'em down.

 

[NikPreviousAcct]

Okay, as exciting as this as become, I'm going to bed. I'm having trouble staying awake.

'night

 

[Mill]

What a freaking weirdo stalker. I would just call up Gary from Dixiesys and have him remove the page if the guy is going to be so shady.

 

[Mill]

Originally posted by: TallGeese
Just got an e-mail from the mystery man/woman. Here's the e-mail:

From: Webmaster [webmaster@shmabbles.com]
To: heh...me

Subject: Mr. Yobeeswax...

Message Body:
It has come to my attention that certain people are getting closer and closer to my true identity. They cannot and will not find this information. If you do not mind, I would like to use you for a quick commentary in the thread that I have been so closely following.

Kindly remind Mr. "ffmcobalt" that he will be breaching his contract if he uses his company time and resources for personal gain and will be reported to the proper authorities at my earliest convenience if this information is reached.

However, if you do not wish to post such information, that is up to you.

Sincerely,
Webmaster

The mystery deepens.

BTW: It's not me!
BTW2: "Mr. Yobeeswax" refers to the name I put in my profile here on AT. Got tired of the damn thing prompting for the name every time :|

Pretty funny that a stalker is threatening to report nik to the authorities. Pot meet kettle.

 

[Tallgeese]

Originally posted by: Millennium
Pretty funny that a stalker is threatening to report nik to the authorities. Pot meet kettle.

Well...I definitely don't think it's worth nik losing his j-o-b over (especially in a sluggish economy).

I guess we'll just have to wait and see if or when "Webmaster" chooses to reveal himself/herself.

 

[NikPreviousAcct]

Okay, I'm not in bed yet; the "webmaster" is apparently sending email via outlook, or outlook express or something. Maybe the DixieSys servers tag on the IP of the sender into the header. Anyway, we have what we think is the webmaster's username and should have definite ID by morning.

nik

 

[Mill]

Originally posted by: TallGeese

Originally posted by: Millennium
Pretty funny that a stalker is threatening to report nik to the authorities. Pot meet kettle.

Well...I definitely don't think it's worth nik losing his j-o-b over (especially in a sluggish economy).

I guess we'll just have to wait and see if when "Webmaster" choose to reveal himself/herself.

Oh no... I wouldn't advocate someone risking their job just to find out who did this. A job is way more important than some attention starved loony.

 

[Entity]

This thread is great. I've got a pretty good idea of who it is, but like everyone else that's figured it, I'm gonna shutup.

Rob

 

[loup garou]

Alright...I may be loaded, but I'm putting in my guesses now and I'm not editing/

The smart money is on Ameesh or Gobadgrs. d

 

[Tallgeese]

Another email:

From: Webmaster [webmaster@shmabbles.com]
To: me

Subject: Mr. Yobeeswax...

Message Body:
You may also, if you so choose, inform Mr. Brooks that no reaction observation was intended on my part. None of this Mystery rubbish was intended at all. I just wished to remain anonymous while providing some sort of comic relief.

Webmaster

I'm starting to feel like that little white mouse at the end of one of those old Tom & Jerry cartoons based on "The 3 Musketeers"

"En garde...en garde...en GARDE! PHOOEY!"

 

[nord1899]

Originally posted by: TallGeese
Another email:

From: Webmaster [webmaster@shmabbles.com]
To: me

Subject: Mr. Yobeeswax...

Message Body:
You may also, if you so choose, inform Mr. Brooks that no reaction observation was intended on my part. None of this Mystery rubbish was intended at all. I just wished to remain anonymous while providing some sort of comic relief.

Webmaster

I'm starting to feel like that little white mouse at the end of that old Tom & Jerry cartoon based on "The 3 Musketeers"

"En garde...en garde...en GARDE! PHOOEY!"

Hehe, I kind of know what you mean here.

Almost regret finding the information leak in the original guestbook now.

 

[bizmark]

Originally posted by: nord1899

Originally posted by: ffmcobalt

Originally posted by: nord1899
Hehe, I found out some new info as to who would be the likely culprit. Not sure if I should post it though.

Anyone who has done some sniffing around on the site has probably figured out the information leak in the guestbook.

So should I post what I found?

yes... YES.

nik

Funny that nik would ask for it since he has the most access to this information.

I won't say how I got this info, as it is easy to find. But the supposed "Webmaster" in the guestbook is an ATTBI customer. Given that the webmaster posted a while before everyone else I'll assume that its accurate. It doesn't look like the "Webmaster" posted again though, but a few other ATTBI people did.

Little bit of info I'll give out that might help nik trace it down, a tracert ends at a router with "st6wa" in it.

HELLO!!!! SEATTLE, WASHINGTON!!!!!!

my Ameritech DSL IP resolves to [blahblah].chcgil.ameritech.net

guess what, I'm in Chicago, IL.

 

[nord1899]

Originally posted by: bizmark

Originally posted by: nord1899

Originally posted by: ffmcobalt

Originally posted by: nord1899
Hehe, I found out some new info as to who would be the likely culprit. Not sure if I should post it though.

Anyone who has done some sniffing around on the site has probably figured out the information leak in the guestbook.

So should I post what I found?

yes... YES.

nik

Funny that nik would ask for it since he has the most access to this information.

I won't say how I got this info, as it is easy to find. But the supposed "Webmaster" in the guestbook is an ATTBI customer. Given that the webmaster posted a while before everyone else I'll assume that its accurate. It doesn't look like the "Webmaster" posted again though, but a few other ATTBI people did.

Little bit of info I'll give out that might help nik trace it down, a tracert ends at a router with "st6wa" in it.

HELLO!!!! SEATTLE, WASHINGTON!!!!!!

my Ameritech DSL IP resolves to [blahblah].chcgil.ameritech.net

guess what, I'm in Chicago, IL.

Yes yes, I guess Seattle, Washington. But I would like Nik to confirm it. Sheesh.

Not as if other parts of the tracert pointed to Chicago, IL as well.

 

[Entity]

Originally posted by: bizmark

Originally posted by: nord1899

Originally posted by: ffmcobalt

Originally posted by: nord1899
Hehe, I found out some new info as to who would be the likely culprit. Not sure if I should post it though.

Anyone who has done some sniffing around on the site has probably figured out the information leak in the guestbook.

So should I post what I found?

yes... YES.

nik

Funny that nik would ask for it since he has the most access to this information.

I won't say how I got this info, as it is easy to find. But the supposed "Webmaster" in the guestbook is an ATTBI customer. Given that the webmaster posted a while before everyone else I'll assume that its accurate. It doesn't look like the "Webmaster" posted again though, but a few other ATTBI people did.

Little bit of info I'll give out that might help nik trace it down, a tracert ends at a router with "st6wa" in it.

HELLO!!!! SEATTLE, WASHINGTON!!!!!!

my Ameritech DSL IP resolves to [blahblah].chcgil.ameritech.net

guess what, I'm in Chicago, IL.

Hmm. I'm in Seattle.

Then again, I don't have that much spare time, and all I really know about Skoorb is that he used to be Brooks.

Rob

 

[Lithium381]

major stalker.....must be skoorbs mom.......to have all that info, this is great!

 

[bizmark]

Originally posted by: nord1899
Not as if other parts of the tracert pointed to Chicago, IL as well.

Yeah, I said that just to provide another example of an ISP identifying a city by this sort of DNS stuff.

 

[Tallgeese]

I thought the use of the word "rubbish" in the last e-mail was interesting. Isn't that a primarily British phrasing?

 

[nord1899]

Originally posted by: Entity

Originally posted by: bizmark

Originally posted by: nord1899

Originally posted by: ffmcobalt

Originally posted by: nord1899
Hehe, I found out some new info as to who would be the likely culprit. Not sure if I should post it though.

Anyone who has done some sniffing around on the site has probably figured out the information leak in the guestbook.

So should I post what I found?

yes... YES.

nik

Funny that nik would ask for it since he has the most access to this information.

I won't say how I got this info, as it is easy to find. But the supposed "Webmaster" in the guestbook is an ATTBI customer. Given that the webmaster posted a while before everyone else I'll assume that its accurate. It doesn't look like the "Webmaster" posted again though, but a few other ATTBI people did.

Little bit of info I'll give out that might help nik trace it down, a tracert ends at a router with "st6wa" in it.

HELLO!!!! SEATTLE, WASHINGTON!!!!!!

my Ameritech DSL IP resolves to [blahblah].chcgil.ameritech.net

guess what, I'm in Chicago, IL.

Hmm. I'm in Seattle.

Then again, I don't have that much spare time, and all I really know about Skoorb is that he used to be Brooks.

Rob

Well theres also the bit that I think the IP I found might be stale and a cold trail. It is from Nov 10th and could have been recycled. But generally, I think the IP's tend to stay within a certain area all controlled by the same DHCP server, so who knows.

 

[nord1899]

Originally posted by: bizmark

Originally posted by: nord1899
Not as if other parts of the tracert pointed to Chicago, IL as well.

Yeah, I said that just to provide another example of an ISP identifying a city by this sort of DNS stuff.

I know, I see it all the time when I do tracerts. Used to do those for a living in an old job of making sure networks were up. They went down, do a tracert to find where it stopped. Call that group to open a trouble ticket.

 

[Entity]

Originally posted by: TallGeese
I thought the use of the word "rubbish" in the last e-mail was interesting. Isn't that a primarily British phrasing?

Or it's just a red herring.

Rob

 

[Tallgeese]

Originally posted by: Entity

Originally posted by: TallGeese
I thought the use of the word "rubbish" in the last e-mail was interesting. Isn't that a primarily British phrasing?

Or it's just a red herring.

And don't ALL good mysteries have lots of those?

I hope the Webmaster, when revealed, will say:
"And I'd have gotten away with it too...if it wasn't for those nosey geeks!"

 

[Entity]

Originally posted by: TallGeese

Originally posted by: Entity

Originally posted by: TallGeese
I thought the use of the word "rubbish" in the last e-mail was interesting. Isn't that a primarily British phrasing?

Or it's just a red herring.

And don't ALL good mysteries have lots of those?

I hope the Webmaster, when revealed, will say:
"And I'd have gotten away with it too...if it wasn't for those nosey geeks!"

And their stupid pet dog... :|

Rob

 

[bizmark]

Originally posted by: nord1899

Originally posted by: bizmark

Originally posted by: nord1899
Not as if other parts of the tracert pointed to Chicago, IL as well.

Yeah, I said that just to provide another example of an ISP identifying a city by this sort of DNS stuff.

I know, I see it all the time when I do tracerts. Used to do those for a living in an old job of making sure networks were up. They went down, do a tracert to find where it stopped. Call that group to open a trouble ticket.

yes, but not *everybody* around here does traceroutes or reverse-DNS lookups (or stalks their friends by seeing where they're logged in from ) all the time....

 

[nord1899]

Originally posted by: bizmark

Originally posted by: nord1899

Originally posted by: bizmark

Originally posted by: nord1899
Not as if other parts of the tracert pointed to Chicago, IL as well.

Yeah, I said that just to provide another example of an ISP identifying a city by this sort of DNS stuff.

I know, I see it all the time when I do tracerts. Used to do those for a living in an old job of making sure networks were up. They went down, do a tracert to find where it stopped. Call that group to open a trouble ticket.

yes, but not *everybody* around here does traceroutes or reverse-DNS lookups (or stalks their friends by seeing where they're logged in from ) all the time....

Well I got started on this when somebody mentioned Frontpage. Only way they could have figured that was to look at the HTML source. So I did that for each page (not like there are a lot). The original guestbook came up with the IP's as HTML comments. So I did a nslookup and tracert. And found the info that started all this nonsense.

Sigh, I really need to get out of support (I write software patches) and stop doing all this debug/troubleshooting type stuff.