Garvin

[beeznuts]

LOL Reeve I'll send you an E-Mail that might help ya out.

BTW Garvin I rated you down hoping you'd go red. LOL

But anyways I was telling everyone that Ele was biased during that whole Neolink thing and you decided to stand up for your butt buddy (which you seemed to make obvious he was in your OP) well... WHAT NOW BITCH? Suddenly you want to cry wolf like Neolink. LMFAO

I thought Neolink was a moron Garvin? How is it that suddenly Ele is biased/makes shit up to ban you? OH FUCK GARVIN GOT PAWNED.

Anyways Garvin just Like Neolink I'll stick up for you because I believe you it's just nice to see that you got FUCKED like Neolink and now you making the same claims as him. I wasn't a friend of Neo's but it's fucking obvious when Ele's being biased just like the whole "RE:" thing that whoever pointed out.

Also yes the mods have access to everyone's account or else how did Ele post rate's that me and Kinkkerbelle received. LOL

P.S.
Sending you some info Reeve on behalf of Garvin even though he hates me. If you don't believe me look at all the rate down's he's sent me. LOL


P.P.S
Since when does Garvin use ()'s like "(you people) isn't much better at all." I don't think I've ever seen Garvin use "()'s".

Okay, Reeve, in the end, you have to post this evidence, whatever it was. I think I've spoken to Blancho maybe a total of once outside of QCDN ingame, so it'd have to be something from QCDN. Not only that, but since the server logs are pretty much the only thing that can sort this all out, if they even can, I can't imagine it being worthwhile.

I'm curious just how you feel I "GOT PAWNED" since I believe something completely different about an entirely different situation. Eleibfrid wasn't being biased regarding Neolink as some have already said before me. I don't see how this really applies.

At any rate, I don't hate you, I just think most of what you say is stupid. ...granted, there's little difference, but we've been through this before, so there's no need to here and now.


As far as I'm concerned, as of now things are fine. As long as they stay this way, I think I can say I'm okay with it. Since, like I said, the admins hold all the cards on this one, I never really expected to be able to get very far with this, so I didn't immediately post all this. If it works out, great. If not, eh.

 

[beeznuts]

We'll have to be a little more attentive no doubt. I thought it seemed a little too forward for Garvin but in all honesty I was mildly pleased to see one of the greater mod-haters out of the picture, and I'd suspect I'm not the only mod/admin that felt this way.

No offense Garvin, but you know as well as I that you're pretty much the top of that list.

Heh, no doubt. I think "mod-hater" is a bit of a misnomer though. I don't particularly hate you guys, I think some of what you do is misguided at times, but still.

I find it strange that Eleibfrid got a message out of the blue saying "delete my account", and instead of checking up on it, or mentioning anything of the sort to anyone, shrugged and did it. Wanting me out of the picture or not, that's a bit overzealous, especially when Eleibfrid knows me a whole lot better than that, and knows I'd more likely go out with post in the vein of that recent one Meeze created.

I mentioned this on the mod forum too: I haven't yet found an area of the admincp where we can change a user's password. I would suspect we have rights to do this but the option is certainly not easily found. We can change damn near everything else, right down to the date of acct creation/last visit/whatever, but I don't see a pw change option under profile settings.

Nah, my password was never actually changed, that was just my initial confusion as to what was going on.

Your system is fairly clean Garvin? I've heard of viruses/malware that decode Firefox's saved passwords and broadcast them to specific channels. It seems far-fetched that it could make a circle this large, but there are ways people can get acct info without ever touching your computer.

On that note, I should probably be more careful of the pr0n I download.

edit: by the way Garvin, I can't change your userID. We know what your old ID is now but there's no option to change your new acct to use your old ID. I don't think we can restore your postcount, nor accurately your rep.

As unlikely as I find this, I get a full virus scan in every morning before I get up, and I'll do a spyware and rootkit scan now. Don't expect much more than a few cookies. I really don't see this as a possibility. Anyway, thank you for attempting to restore things, but that stuff wasn't that big of a deal.

 

[Arctyrael]

Don't expect much more than a few cookies.

I dunno what level of code QCDN allows user's to inject into their messages, but a cookie stealer could be possible. I dunno how vulnerable or easy it would be here, as it would have to be content loaded while QCDN is the parent window. (This type of activity in a forum environment would be nearly impossible to detect due to all the outside links for sigs and pics in posts.)

 

[Arctyrael]

edit: by the way Garvin, I can't change your userID. We know what your old ID is now but there's no option to change your new acct to use your old ID. I don't think we can restore your postcount, nor accurately your rep.

A few SQL queries and that should do the trick. If vBulletin uses a fully relational DB - it should all be contained in 1 or 2 tables. (Question is... who has DB access? Reeve?)

 

[Daveman]

edit: by the way Garvin, I can't change your userID. We know what your old ID is now but there's no option to change your new acct to use your old ID. I don't think we can restore your postcount, nor accurately your rep.

If you have anyone with knowledge of sql, assuming the old ID row is intact, it would be a trivial task to "undelete" the old account and let him use it.

If it's deleted, then it's gone, but if you guys regularly back it up, you can pluck it out from a backup, and just update the new id with the old info.

 

[Daveman]

I dunno what level of code QCDN allows user's to inject into their messages, but a cookie stealer could be possible. I dunno how vulnerable or easy it would be here, as it would have to be content loaded while QCDN is the parent window. (This type of activity in a forum environment would be nearly impossible to detect due to all the outside links for sigs and pics in posts.)

Not at all possible (hopefully) VB is a professinally coded forum that costs money to buy. If they allow any sort of code injection to a forum, that'd be "<script type="text/javascript"> document.write("Really Dumb")</script>" since even a complete amateur as myself knows how to block against code injection on user submitted data.

htmlspecialentities(); ftw.

 

[CmdrFly]

I don't have access to the DBs. If I do, I have no idea how to crunch them. I'm familiar with simple queries that span linked tables across DBs but I cannot execute SQL code with confidence.

That said I do believe Reeve is doing some DB digging already. He'd be the man in the know on that whole front.

 

[Uzor]

We'll have to be a little more attentive no doubt. I thought it seemed a little too forward for Garvin but in all honesty I was mildly pleased to see one of the greater mod-haters out of the picture, and I'd suspect I'm not the only mod/admin that felt this way.

No offense Garvin, but you know as well as I that you're pretty much the top of that list.


I never noticed this either until I became admin, mods might have the ability as well though.


That's not much of a hint. If I'm sending a PM to someone but want to wait a couple days for more thoughts to collect, I send it to myself then forward it to the person later. It's not uncommon to forget to delete the "RE:".


I mentioned this on the mod forum too: I haven't yet found an area of the admincp where we can change a user's password. I would suspect we have rights to do this but the option is certainly not easily found. We can change damn near everything else, right down to the date of acct creation/last visit/whatever, but I don't see a pw change option under profile settings.

Eleib is one of the more outspoken mods, if he had that much of a problem with Garvin he'd likely voice it either publicly or privately.

Your system is fairly clean Garvin? I've heard of viruses/malware that decode Firefox's saved passwords and broadcast them to specific channels. It seems far-fetched that it could make a circle this large, but there are ways people can get acct info without ever touching your computer.

On that note, I should probably be more careful of the pr0n I download.

edit: by the way Garvin, I can't change your userID. We know what your old ID is now but there's no option to change your new acct to use your old ID. I don't think we can restore your postcount, nor accurately your rep.

I don't know how the admin panel in QCDN look, but every other forum I've played with have had the ability to change anything about a user. Including name, email and password.

 

[Antor]

Yeah, when I dealt with phpBB boards I could change people's usernames, passwords, and e-mail addresses through the admin panel. Changing the password would be an easy way to gain access to another person's account.

 

[Arctyrael]

Not at all possible (hopefully) VB is a professinally coded forum that costs money to buy. If they allow any sort of code injection to a forum, that'd be "<script type="text/javascript"> document.write("Really Dumb")</script>" since even a complete amateur as myself knows how to block against code injection on user submitted data.

htmlspecialentities(); ftw.

Without directly coming out to say it, (since code is made to be broken), that is why hesitation - over the possibility of cookie stealing - plagued my post. Unique ideas can unearth flaws and vulnerabilities however, and even vBulletin can be victim to unique attempts. However, this does not directly apply here, so I'll leave it at that to save some face instead of replying via PM =P.

 

[CmdrFly]

I'm sure the option to change passwords is there... I haven't had a need to use it yet so I haven't found it, and it isn't visible in the frame where we change everything else about a user's profile.

 

[pakomen]

I haven't yet found an area of the admincp where we can change a user's password. I would suspect we have rights to do this but the option is certainly not easily found. We can change damn near everything else, right down to the date of acct creation/last visit/whatever, but I don't see a pw change option under profile settings.

Not trying to nitpick, but wtf? It's right under "User Name", the second field in the user profile portion of admincp... Or is this a new feature with 3.6.8 (what I'm using)?

 

[Xalioniaf]

Not trying to nitpick, but wtf? It's right under "User Name", the second field in the user profile portion of admincp... Or is this a new feature with 3.6.8 (what I'm using)?

Never really touched vBulletin before, but is it possible for a head admin to restrict other admin's access to certain parts of the ACP?

 

[Reeve]

I reviewed the situation and after talking with Eleibfrid, he decided it would be for the best if he stepped down from his position for the time being rather than continue to drag things out to the detriment of the community.

I will update Garvins post count shortly. Unfortunately my efforts to restore his account were unsuccessful.

And that brings this matter to a close.... I will be closing the thread tomorrow.

 

[CmdrFly]

Not trying to nitpick, but wtf? It's right under "User Name", the second field in the user profile portion of admincp... Or is this a new feature with 3.6.8 (what I'm using)?

...

 

[pakomen]

Pakomen pulls out the big guns lmao.

 

[Winklewil]

And that brings this matter to a close.... I will be closing the thread tomorrow.

Mmkay.

I reviewed the situation and after talking with Eleibfrid, he decided it would be for the best if he stepped down from his position for the time being rather than continue to drag things out to the detriment of the community.

Mmka....

Wait, what?

 

[Tyrath]

edit: by the way Garvin, I can't change your userID. We know what your old ID is now but there's no option to change your new acct to use your old ID. I don't think we can restore your postcount, nor accurately your rep.

Thats a load of bull.

There should be a post count changing option for everyone.

As for reps, I dunno about that, but how do admins change their own reps then??

 

[Grem]

Who's Garvin1 and Garvin Old?

 

[CmdrFly]

Thats a load of bull.

There should be a post count changing option for everyone.

There is. You go ahead and count all the posts from user account "Garvin", all the ones you can't search for easily, then give me the count and I'll change his PC back to normal.

I'm not fishing through thousands of threads to count his posts. I can change it to any number at all right now, I could put him at 1000000000000 posts.

Reeve's running some DB queries that hopefully will give us a count of his old posts. If that works, we'll have a number to put in his profile.

As for reps, I dunno about that, but how do admins change their own reps then??

I don't think we can restore your postcount, nor accurately your rep.

As above. I can change his rep to any old thing. But to get it back to what it was before? No records accessible to me. Reeve maybe.

Who's Garvin1 and Garvin Old?

Suspecting they're test accounts while Reeve runs checks on old/new userIDs to find postcount.