Template talk:Hacker

From Valve Developer Community
Revision as of 07:04, 11 August 2018 by Solokiller (talk | contribs)
Jump to: navigation, search

This is actually retarded. JoshuaAshton (talk) 02:13, 11 August 2018 (UTC)

Do we really need this? We already have User:Pinsplash/How_to_deal_with_hackers, also not to mention the hacker can remove their "marking" so there is no point for making this. Coolcraftteam (talk) 02:21, 11 August 2018 (UTC)
Ahaha, immediately after (see image on the right)
JoshuaAshton (talk) 02:24, 11 August 2018 (UTC)
I mean Pinsplash, if you want to come out and defend this Template, certainly do. But banning me from your crappy VDC Discord when everyone else also disagrees with you won't solve anything :^) JoshuaAshton (talk) 02:28, 11 August 2018 (UTC)
I'd also like to add that editing a user's page goes against wiki ettiquette - and should be avoided. SharpOB (talk) 02:53, 11 August 2018 (UTC)

I am done attempting to reason with you. I fully believe you have no faith in actually improving this website and that you're only trying to get on my nerves. Keep this up, and soon you will be wasting an administrator's time. Pinsplash (talk) 02:37, 11 August 2018 (UTC)

I'm sure of that Pinsplash, it's not like you consistently make awful changes that people disagree with on this site. JoshuaAshton (talk) 02:38, 11 August 2018 (UTC)
So wait Pinsplash, you don't have any faith that he can improve this website because he doesn't agree with your wrong point? Coolcraftteam (talk) 05:43, 11 August 2018 (UTC)
Oh he has potential to actually contribute around here alright. Pinsplash (talk) 05:40, 11 August 2018 (UTC)
User_talk:Pinsplash/How_to_deal_with_hackers See what I wrote here:
A large portion is bad advice, caution should always be heavily exercised. Just because someone is from HackerOne, it doesn't mean you should let them get away with bloody murder. Many people claim to be ethical hackers but are actually doing much worse things in the background. If you see any actual exploits, regardless of whether the person says they're an ethical hacker or whatever, just report it. This is why the Template:Hacker page is so rediculous.
JoshuaAshton (talk) 02:44, 11 August 2018 (UTC)
I'm going to be blunt here, this is stupid. If there is a hacker on the site, you report it to Valve, it's that simple. Placing tags on a suspected "hacker's" profile is ridiculous. Slartibarty (talk) 02:45, 11 August 2018 (UTC)
I'm inclined to agree. Pinsplash should not be creating a template to call "HACKER!" on people - because they do not have the authority to do that, or to be trusted to do that. This kind of thing should be left to Valve, and Pinsplash should stop this wiki god complex. You are not god of the wiki, and you don't have the authority to scream "HACKER!" on people.SharpOB (talk) 02:49, 11 August 2018 (UTC)
It's not really a matter of authority more as... well, knowing what a hack attempt of any kind looks like (so far, the ones I've seen were all pretty obvious). A non-blocked user can edit their user/user talk page in the case that the template is ever used abusively which so far it never has. I don't know why you seem to think that I would (or that I think I should) be trusted blindly, or that I even have a way to hide Special:Contributions data for a specific user to enforce people to trust me blindly. If you actually think that this is still going to be an issue, wait till you see Template:Spammer. The same principals all apply to that template as well. Template:Spammer actually has in the past been used abusively, but the solution to that was always to remove the template from pages it is not supposed to be on. Also, nobody called User:Ts2do out on having a "wiki god complex" when he made it or worried that he was abusing authority. Pinsplash (talk) 06:26, 11 August 2018 (UTC)
Also I must say,
I've assured the Administrator that nothing will go wrong
JoshuaAshton (talk) 02:47, 11 August 2018 (UTC)
Flame and insult all you wish, if you have objections to something, you can speak in a civil manner like the rest of us. I'm disregarding this and all future attacks you direct at me. Let me tell you, you are banned from many online communities for a good reason. Pinsplash (talk) 02:49, 11 August 2018 (UTC)
That's funny - you're also banned from online communities for good reasons.SharpOB (talk) 02:52, 11 August 2018 (UTC)
The discussions that I've seen so far from Josh that happened here are civil. Coolcraftteam (talk) 02:52, 11 August 2018 (UTC)
I'm not flaming you. To flame would mean I was insulting you without warrant. I'm not flaming you, merely stating facts and actions of your own. JoshuaAshton (talk) 02:54, 11 August 2018 (UTC)
I do have to agree with Josh on this, it doesn't really make much sense. Report the user. A "hacker" sign A) doesn't have any authority behind it, B) can be trivially removed, and C) isn't going to stop anyone. --TeamSpen210 (talk) 03:08, 11 August 2018 (UTC)
I agree with Josh. This is sort of a dumb template. If something's amiss, contact an admin. Tagging suspected hackers on their talk page won't do anything useful. All these "provisions" since the hacking "incident" are kind of strange. --Stract (talk) 03:33, 11 August 2018 (UTC)
I'm not using this as a substitute for emailing Valve. Never intended it to be one. I'm not sure what led you to believe that. Pinsplash (talk) 07:02, 11 August 2018 (UTC)

You people need to understand that this wiki is meant to be a source of information for developers working with Valve's games. If you spot a hacker, you contact Valve and let them handle it. Spend your time improving the wiki, like making it easier to find related information. Add missing or incomplete information. Nobody cares for these fights, it's an overreaction to something that has happened a handful of times in the 13+ years this wiki has been around. The arguments that spring up as a result certainly aren't fun to read or take part in. The only real problems i've seen on this wiki are:

  • Spambots (seem to be largely taken care of now)
  • MediaWiki exploits (contact a Valve employee to update the software)
  • Intentional spreading of misinformation/removal of factual information (revert if you spot these)
  • Edit wars and arguments (case in point)

No matter how good you are at modding, no matter how much experience you have in dealing with wiki management, you're all still amateurs working on this as a hobby. Try not to take it too seriously, because you'll only end up frustrating yourselves and those who have to deal with you, and no good can come from that. Solokiller (talk) 14:04, 11 August 2018 (UTC)

"Hacking" is a strong word, a criminal offense, and certainly not a joke

This nonsensical, juvenile conversation about quote/unquote "hacking" needs to stop. Right now. I don't think many of you truly understand the sheer gravity exerted behind that word, when you use it. When you accuse someone of hacking, you're accusing them of committing a crime. Hacking is a serious crime, and that means a criminal record and jail time. Want a knock at your front door in the middle of the night? That's what I thought.

Hackers are criminals. Like murderers, thieves, mobsters, etc., they don't want to get caught. Why in the hell would they randomly pop on to an easily accessible website (on the surface web too, for that matter), put a target on their heads, and broadcast their crimes to the rest of the world? They wouldn't. And you guys need to grow up. A real hacker wouldn't "hack" an open-source MediaWiki site of all things. Real hackers care about money, not some random site on the internet, especially not a wiki centered around videogame development. It would be a complete waste of time on their part. And anyone claiming to be a "hacker" is a bored kid with too much time on his hands, and someone who knows very little about computers in general.

There are no "hackers" here because actual hackers don't waste their time on trivial matters, such as this site. In short, real hackers want your bank account information, not your VDC account information.

Don't argue about that which you do not know the true meaning of. – DJFluXion 03:24, 11 August 2018 (UTC)

I think you're getting a bit too caught up in extremes and I don't know why. A hacker is "a person who uses computers to gain unauthorized access to data." I don't necessarily think this is a necessary template, but you're kind of barking up the wrong tree I think. --Stract (talk) 03:33, 11 August 2018 (UTC)
Good job defining the crime of hacking. I'm intrigued at your ability to use a dictionary. – DJFluXion 03:38, 11 August 2018 (UTC)
I feel I should add that both of you don't have the definition 100% correct. Hacking can also refer to people experimenting with things, such as hack-a-thons or the like. Either way, though, it's a cringe-worthy application of the term. SharpOB (talk) 03:43, 11 August 2018 (UTC)
I agree, we certainly shouldn't be accusing anyone of a criminal offense on the wiki here. Which is one of the reasons why I was saying this template is ridiculous. I disagree with:
Don't argue about that which you do not know the true meaning of.
It's very assumptive, and saying we shouldn't have a conversation on the issue, well look what you're doing now. JoshuaAshton (talk) 03:45, 11 August 2018 (UTC)
I'm only stating the facts. Notice how I said that the "nonsensical, juvenile conversation" needs to stop. There is nothing nonsensical or juvenile about civilly discussing facts. My argument is that if people understood the gravity (what the word truly means) of the word they were using, their use of said word would be a lot more reserved, such as to avoid inappropriate usage. But of course, idiots will say anything without thinking. The fact is "hack" and its derivatives, are overused words today, because they have been distorted from their original meaning. I'm shining light on the real meaning of the word, and people calling me an "extremist" and saying that I'm "barking up the wrong tree" only proves this.
Agree to disagree is a civilized manner. In the end, it's your choice to believe what you want. Deny the facts or accept them. Have the last word, here, after this post, if it'll help you sleep at night. This is my final message.
PS: SharpOB, I'm not talking about programming competitions, so that comment was completely irrelevant. "Hackathon" is a portmanteau of "hack" and "marathon", which, don't be fooled, is synonymous with programming competition. Considering how off-the-wall that comment is to my original message, I can't tell if you're just playing dumb, or are actually dumb. – DJFluXion 04:21, 11 August 2018 (UTC)
If it's been distorted by its original meaning, and that's the meaning we use today - then maybe you should accept that and get over the fact that the word has changed. JoshuaAshton (talk) 09:01, 11 August 2018 (UTC)

Directing this towards uh this entire page: Just going to add, we actually did have a hacking attempt believed to be genuinely malicious back at the start of July. This was immediately followed by a non-malicious hacker who was only testing security flaws (at that time, the wiki software was on an obsolete version from 2014). This hacker actually DID find XSS vulnerabilities and probably some other security flaws in the website. We and many modder/mapper groups all could have avoided a large amount of panic if the user had just communicated with us at first. If you all wish to raise hell every time somebody on this wiki puts the word "script" in something, I can't stop you. By all means, go ahead, scream at Valve ([email protected]), spam every modder group you can. What you will likely end up doing is waste everybody's time including your own by causing a false panic. Really, is it sooooo bad that I just want to even attempt to warn others viewing the wiki that somebody's edits may be dangerous for them to view? Or that somebody's not trying to do crap like install a bitcoin miner onto your computer? You can try and helicopter-watch somebody's edits as they save them and then change them, it really doesn't do either of you any good if actual communication is also an option, but what do I know, I'm the fucking retard here and played no role in the Early July 2018 hacking incident, certainly did not manage that situation, certainly did not give updates on it to multiple discord servers (not to mention TF2Maps.net staff), a subreddit, and Lambda Generation. There's my defense of this template that does not serve any purpose in being deleted, and isn't even marked for deletion, because its only crimes are that it was made by me and was found by Joshua. By the way, this is a developer MediaWiki, not Imgur. Host your Discord server ban log elsewhere. Pinsplash (talk) 05:26, 11 August 2018 (UTC)

Oh, and Sharp: I've decided from the future on I'm going to put those on the talk page instead. Pinsplash (talk) 05:38, 11 August 2018 (UTC)
Well that's fine. I just marked it for deletion. Even if they communicated first, there is still no reason not to report it ourselves because a security vulnerability is still a security vulnerability, and people proclaiming to be ethical hackers cannot be trusted more than anyone else. That ban which you believe is so non-pertinent to discussion only goes to show your poor attitude about your recent awful changes and bad advice. Reporting someone for an exploit doesn't make you any better than the rest of us here either, sure it's cool that you did that, but I'm sure I speak for quite a few people here when I say: Get the hell over your superiority complex. JoshuaAshton (talk) 08:57, 11 August 2018 (UTC)
I decided to read User:Pinsplash/Early_July_2018_hacking_incident, I was right in thinking that it was SVG embedding. It's an svg from a different origin based on what you said and I have my severe doubts about this "malicious mp4 file," that apparently "downloaded and ran a bitcoin miner" as you're actually reporting a Chrome/Browser exploit here too, which I can't find any details about. Sounds like complete BS. Sure it is an exploit that they can run scripts inside an svg, but this whole bitcoin miner stuff sounds like crap. JoshuaAshton (talk) 09:09, 11 August 2018 (UTC)