Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Feeling Abducted by CharityHost_org

1232426282931

Comments

  • maxxxxxmaxxxxx Member
    edited April 2025

    @systemfreaks said:
    Its not VIOLATION of privacy because the bucket is PUBLIC to the web so therefore accessible from anyone

    That's not necessary true. You can have a public bucket accessible to the web and disable directory listing. Inside that public bucket is a file named "snoop-dog-jumps-jessica-rabbit-Tr5fsG3uMLuSAgCaG6Zyv9gqVcC35CLE.mkv".

    "Tr5fsG3uMLuSAgCaG6Zyv9gqVcC35CLE" is a random string generated with random.org password generator. The link is not shared with anyone. How you do know it's there without snooping and violating privacy?

  • systemfreakssystemfreaks Member, Patron Provider
    edited April 2025

    @maxxxxx said:

    @systemfreaks said:
    Its not VIOLATION of privacy because the bucket is PUBLIC to the web so therefore accessible from anyone

    That's not necessary true. You can have a public bucket accessible to the web and disable directory listing. Inside that public bucket is a file named "snoop-dog-jumps-jessica-rabbit-Tr5fsG3uMLuSAgCaG6Zyv9gqVcC35CLE.mkv".

    "Tr5fsG3uMLuSAgCaG6Zyv9gqVcC35CLE" is a random string generated with random.org password generator. The link is not shared with anyone. How you do know it's there without snooping and violating privacy?

    In that case only if the file gets reported, but that wasn't the case

    Thanked by 1Saragoldfarb
  • SaragoldfarbSaragoldfarb Member, Megathread Squad

    @MS said:
    If LET had a movie streaming section, I believe more people would be visiting the drama threads over streaming actual drama movies.

    In case you get bored, there's always @beanman109 's OF.

  • I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

  • @imcool said:
    I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

    Key take away here

    Thanked by 1Saragoldfarb
  • @imcool said:
    I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

    i intend to be honest till my last statement here.

  • @bdspice said:

    @imcool said:
    I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

    i intend to be honest till my last statement here.

    Since I came to LET, I thought of you as one irritating dude but as I see it now, I just misinterpreted your posts earlier.

    I stand corrected. As a fellow forum member, my respect for you have increased due to this honesty. I myself would hesitate to put everything in public if I put in similar scenarios.

  • AstroAstro Member

    @bdspice said:

    @imcool said:
    I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

    i intend to be honest till my last statement here.

    So where can I see these videos? You know. For science.

    Thanked by 2bdspice Saragoldfarb
  • @Astro said:

    @bdspice said:

    @imcool said:
    I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

    i intend to be honest till my last statement here.

    So where can I see these videos? You know. For science.

    I asked chatgpt. It didn't give me an answer.

    I wouldn't call it true ai hence.

  • @itachikonoha said:

    @Astro said:

    @bdspice said:

    @imcool said:
    I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

    i intend to be honest till my last statement here.

    So where can I see these videos? You know. For science.

    I asked chatgpt. It didn't give me an answer.

    I wouldn't call it true ai hence.

    when you google it, you have to remove the '+' signs in the file name. I was so curious that I finally figured that out today.

  • @maxxxxx said:

    @systemfreaks said:
    Its not VIOLATION of privacy because the bucket is PUBLIC to the web so therefore accessible from anyone

    That's not necessary true. You can have a public bucket accessible to the web and disable directory listing. Inside that public bucket is a file named "snoop-dog-jumps-jessica-rabbit-Tr5fsG3uMLuSAgCaG6Zyv9gqVcC35CLE.mkv".

    "Tr5fsG3uMLuSAgCaG6Zyv9gqVcC35CLE" is a random string generated with random.org password generator. The link is not shared with anyone. How you do know it's there without snooping and violating privacy?

    "Lucky guess"

  • @concept said:

    @CloudHopper said:
    This story finally convinced me to setup a GrayLog server with Beat collectors and to generally increase the logging on my servers using AuditD. It won't prevent anyone from accessing them, but it'll make sure I know about, (and can prove), whatever occurs.

    Do you need to pay for Greylog? Is there any free and open source alternatives that do this?

    I'm using the "open-core" version of GrayLog, which is open source: https://github.com/Graylog2/docker-compose

    It's pretty resource intensive because it runs an Elastic Search instance, but I've got it working on a 2C/6G VPS and it's running smoothly.

    The other option I know of is LogStash, which is pretty similar but it also requires Elastic so it's also quite resource intensive: https://github.com/elastic/logstash

    Thanked by 2mandala JohnnySac
  • maxxxxxmaxxxxx Member
    edited April 2025

    @systemfreaks said:

    @maxxxxx said:

    @systemfreaks said:
    Its not VIOLATION of privacy because the bucket is PUBLIC to the web so therefore accessible from anyone

    That's not necessary true. You can have a public bucket accessible to the web and disable directory listing. Inside that public bucket is a file named "snoop-dog-jumps-jessica-rabbit-Tr5fsG3uMLuSAgCaG6Zyv9gqVcC35CLE.mkv".

    "Tr5fsG3uMLuSAgCaG6Zyv9gqVcC35CLE" is a random string generated with random.org password generator. The link is not shared with anyone. How you do know it's there without snooping and violating privacy?

    In that case only if the file gets reported, but that wasn't the case

    Don't know about what happened in your case. The scenario I described, it's highly unlikely that someone is going to report himself, but more likely the host will snoop around and then make a "report".

    @hostnoob said:

    @maxxxxx said:

    @systemfreaks said:
    Its not VIOLATION of privacy because the bucket is PUBLIC to the web so therefore accessible from anyone

    That's not necessary true. You can have a public bucket accessible to the web and disable directory listing. Inside that public bucket is a file named "snoop-dog-jumps-jessica-rabbit-Tr5fsG3uMLuSAgCaG6Zyv9gqVcC35CLE.mkv".

    "Tr5fsG3uMLuSAgCaG6Zyv9gqVcC35CLE" is a random string generated with random.org password generator. The link is not shared with anyone. How you do know it's there without snooping and violating privacy?

    "Lucky guess"

    If I remember correctly, google drive uses a similar method when you make a public link. It's more likely for an asteroid to hit your server than someone making a lucky guess.

    There are few points to make here:

    Something stored in a public folder/bucket, does not mean it's even available over the web. Even if it is, it doesn't mean that it's available to anyone else but the file owner. Scanning those files is data processing and it needs a valid legal basis.

    Additionally, changing root passwords and snooping around your cusomers' files to find "porn" or whatever is a form of insanity. What's left to see is how will providers who do that deal with their insanity when encrypted virtualization matures and becomes the default.

  • xHostsxHosts Member, Patron Provider

    @Astro said:

    @bdspice said:

    @imcool said:
    I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

    i intend to be honest till my last statement here.

    So where can I see these videos? You know. For science.

    Science or education proposes ?

    Asking the big question, does this type of material cause inflation around the world ?

  • mwmw Member
    edited April 2025

    @xHosts said:

    @Astro said:

    @bdspice said:

    @imcool said:
    I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

    i intend to be honest till my last statement here.

    So where can I see these videos? You know. For science.

    Science or education proposes ?

    Asking the big question, does this type of material cause inflation around the world ?

    no but it does cause an inflation in my pants

  • xHostsxHosts Member, Patron Provider

    @mw said:

    @xHosts said:

    @Astro said:

    @bdspice said:

    @imcool said:
    I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

    i intend to be honest till my last statement here.

    So where can I see these videos? You know. For science.

    Science or education proposes ?

    Asking the big question, does this type of material cause inflation around the world ?

    no but it does cause an inflation in my pants

    I am sure it has been known to cause injury (sore wrist)

  • so, OP, did you got your porn stuff back (for free) from @CharityHost_org or not yet?

    Thanked by 1bdspice
  • edited April 2025

    @JasonM said: so, OP, did you got your porn stuff back (for free) from @CharityHost_org or not yet?

    The fee was waived and was unsuspended so that OP would download and remove it and not host porn on CharityHost.org in public_html. The trigger, honestly, was the full disk space on the account. Once we saw that, we noticed it was public whether their domain was serving it directly or not, it's hosts file capable to host publicly.

    The reason we do not permit porn publicly hosted, is due to the nature of our long running customers ethics on the matter, being ministries, churches, ngos, etc. Just to be clear, we understand that legal porn hosting, is legal, that's not the problem. $25 fee for aup violation is waived when it is non-fault AUP violation by the customer. We implemented this to dissuade abuse and TOS/AUP violations by new customers. We do not and will not login to customers accounts without permission, but this was public and we hold our AUP seriously for the above reasons.

    Thanked by 1Saragoldfarb
  • mwmw Member
    edited April 2025

    @CharityHost_org said:

    @JasonM said: so, OP, did you got your porn stuff back (for free) from @CharityHost_org or not yet?

    The trigger, honestly, was the full disk space on the account. Once we saw that, we noticed it was public whether their domain was serving it directly or not, it's hosts file capable to host publicly.

    So it was not a random keyword screening?

    @CharityHost_org said:
    Answer and final decision.

    How was it discovered: We do random screening for keywords in all public folders and if a result is returned we then investigate further.

    You also admitted to logging into client servers

    @CharityHost_org said:

    @djunior said: I'm sorry, did you log into the client's server?

    Yes, reserve the right to do so for these specific reasons, whether customers like it or not. If anything suspicious comes up, we need to investigate.

    You said you reset the password and logged in as root.

    @CharityHost_org said:
    Here we go... Got a new customer from mainland china for VDS

    Already has 80 GB+ traffic in an hour after using it. This client hanged the root password, but I noticed the activity in tcpdump as odd, ran nmap and found port 48101 and 5000 doing a lot of traffic. ** So I decided to look in as root, so had to revert to the original password.**

    You also keep saying "We didn't do it, but if we did it was a mistake" over and over in the private providers thread.

    Nothing you ever say is consistent.

  • admaxadmax Member, Megathread Squad

    Approach the Misty Forest! :)

    Thanked by 2beanman109 satorik
  • @CharityHost_org said:

    @JasonM said: so, OP, did you got your porn stuff back (for free) from @CharityHost_org or not yet?

    The fee was waived and was unsuspended so that OP would download and remove it and not host porn on CharityHost.org in public_html. The trigger, honestly, was the full disk space on the account. Once we saw that, we noticed it was public whether their domain was serving it directly or not, it's hosts file capable to host publicly.

    The reason we do not permit porn publicly hosted, is due to the nature of our long running customers ethics on the matter, being ministries, churches, ngos, etc. Just to be clear, we understand that legal porn hosting, is legal, that's not the problem. $25 fee for aup violation is waived when it is non-fault AUP violation by the customer. We implemented this to dissuade abuse and TOS/AUP violations by new customers. We do not and will not login to customers accounts without permission, but this was public and we hold our AUP seriously for the above reasons.

    Sometime, it's better to be silent than saying anything at all.

    This is such scenario. The more you open up, the more loopholes we can see and the more aggregated people will come here.

  • how is an ftp storage publicly accessible? enlighten me.

  • @cybertech said:
    how is an ftp storage publicly accessible? enlighten me.

    It has an added shared hosting bonus. So anything you put in public html will be publicly accessible.

  • @mw said:

    @xHosts said:

    @Astro said:

    @bdspice said:

    @imcool said:
    I've followed this thread since the very beginning. Every time I thought about how unexpectedly honest the OP was, I couldn't help smiling. My biggest achievement from this drama was that now I've known, literally for the first time in my life, what a desi adult video clip is like...

    i intend to be honest till my last statement here.

    So where can I see these videos? You know. For science.

    Science or education proposes ?

    Asking the big question, does this type of material cause inflation around the world ?

    no but it does cause an inflation in my pants

    For me my inflation is HANDable> @CharityHost_org said:

    @JasonM said: so, OP, did you got your porn stuff back (for free) from @CharityHost_org or not yet?

    The fee was waived and was unsuspended so that OP would download and remove it and not host porn on CharityHost.org in public_html. The trigger, honestly, was the full disk space on the account. Once we saw that, we noticed it was public whether their domain was serving it directly or not, it's hosts file capable to host publicly.

    The reason we do not permit porn publicly hosted, is due to the nature of our long running customers ethics on the matter, being ministries, churches, ngos, etc. Just to be clear, we understand that legal porn hosting, is legal, that's not the problem. $25 fee for aup violation is waived when it is non-fault AUP violation by the customer. We implemented this to dissuade abuse and TOS/AUP violations by new customers. We do not and will not login to customers accounts without permission, but this was public and we hold our AUP seriously for the above reasons.

  • xHostsxHosts Member, Patron Provider

    @cybertech said:
    how is an ftp storage publicly accessible? enlighten me.

    That is something I asked here and in the private thread too.

    I have shared advise on the private thread on moving forward to prevent this issue.

  • zedzed Member

    This just gets more amusing.

  • LeviLevi Member

    Op long time gone, he does not care. Accused party also gone. Pointless discussion.

  • @Levi said:
    Op long time gone, he does not care. Accused party also gone. Pointless discussion.

    https://lowendtalk.com/discussion/comment/4380018/#Comment_4380018

    Thanked by 3JohnnySac skorous admax
  • LeviLevi Member

    @cybertech said:

    @Levi said:
    Op long time gone, he does not care. Accused party also gone. Pointless discussion.

    https://lowendtalk.com/discussion/comment/4380018/#Comment_4380018

    His comment is regurgigated crap for previous answers. There is nothing new.

  • @Levi said:

    @cybertech said:

    @Levi said:
    Op long time gone, he does not care. Accused party also gone. Pointless discussion.

    https://lowendtalk.com/discussion/comment/4380018/#Comment_4380018

    His comment is regurgigated crap for previous answers. There is nothing new.

    yes but he's still very bothered by it for good reasons.

Sign In or Register to comment.