AN ALARM CALL TO THE COMUNITY!

[elconejotres]

Hi guys I want to everybody here check this page and please report it to make' em shut it down their "bussines"

 

xmugenfightingxtreme.com

 

They are selling (well they call it "donation for download") Xmugen packages and Emulators for the xbox, these jerks claim in their forums that THEY DEVELOP the xmugen packages and emulators, THEY ARE EVEN SELLING MK PROJECT 4.5 FOR THE XBOX, but the top of the shame and cinism was in a private message, one of this "administrators of the site" asshole TRIED TO SELL ME VIA PAYPAL FINAL BURN LEGENDS and COINOPS R3!!!!! check it out and please report the website

Edited May 26, 2010 by Robert

[PhilExile]

Hmmm, I think it would be better to leave this alone. (AKA, don't report them) Its good that you are calling attention to their activities here and, I assume, at other forums. If people are dumb enough to fall for this, that's their problem. Good looking out though.

 

Also, did you get in touch with Madmab regarding your issues with the PCE CD emulator? I know he is working on it. Check out this forum topic:

 

http://forums.xbox-scene.com/index.php?sho...712115&st=0

Edited May 26, 2010 by PhilExile

[Punika]

it´s up on you

 

 

=======================================================================
=================                  
| # Title    : Simple Machines Forum 1.1.11 Mullti Vulnerability   
| # Author   : indoushka                                                               
| # email    : indoushka@hotmail.com                                                   
| # Home     : www.sec-war.com                                                                     
| # Web Site : [url="http://www.simplemachines.org/"]http://www.simplemachines.org/[/url]                                                   
| # Dork     : Powered by SMF 1.1.11 | SMF � 2006-2009, Simple Machines LLC                                                                                                              
| # Tested on: windows SP2 Fran�ais V.(Pnx2 2.0) + Lunix Fran�ais v.(9.4 Ubuntu)       
| # Bug      : Mullti                                                                     
======================      Exploit By indoushka       =================================
# Exploit  :  

1- Mail List information : 

After Register go to : [url="http://127.0.0.1/smf/index.php?action=mlist"]http://127.0.0.1/smf/index.php?action=mlist[/url]

2- PHPSESSID session fixation:
Vulnerability description
This script is vulnerable to PHPSESSID session fixation attacks.

By injecting a custom PHPSESSID is possible to alter the PHP session cookie. Attackers will normally manipulate cookie values to fraudulently authenticate themselves on a web site.
This vulnerability affects /smf. 
The impact of this vulnerability
By exploiting this vulnerability, an attacker may conduct a session fixation attack. In a session fixation attack, the attacker fixes the user's session ID before the user even logs into the target server, thereby eliminating the need to obtain the user's session ID afterwards.

Attack details :

GET /smf/?PHPSESSID=smfssionfixation 

How to fix this vulnerability
Set session.use_only_cookies = 1 from php.ini. This option enables administrators to make their users invulnerable to attacks which involve passing session ids in URLs; defaults to 0.

Web references :

[url="http://www.acros.si/papers/session_fixation.pdf"]http://www.acros.si/papers/session_fixation.pdf[/url]

[url="http://www.php.net/session"]http://www.php.net/session[/url]

[url="http://www.owasp.org/index.php/PHP_Top_5"]http://www.owasp.org/index.php/PHP_Top_5[/url] 


Dz-Ghost Team ===== Saoucha * Star08 * Redda * Silitoad * n2n ==========================================
Not : Please I need financial assistance in order I make a tax to the 
state treasury before the ruling, final and unconditional access 
my release by mail and transportation Algerian approximately 500 U.S. dollars
ccp:0013791941 Salah Eddine Nekaa
--------------------------------------------------------------------------------------------------------

[elconejotres]

Hmmm, I think it would be better to leave this alone. (AKA, don't report them) Its good that you are calling attention to their activities here and, I assume, at other forums. If people are dumb enough to fall for this, that's their problem. Good looking out though.

 

Also, did you get in touch with Madmab regarding your issues with the PCE CD emulator? I know he is working on it. Check out this forum topic:

 

http://forums.xbox-scene.com/index.php?sho...712115&st=0

 

Yeah maybe you're right, thanks for the tip I didn't know of the pce emu been worked I will contact madmab assap thanks again

[PhilExile]

Ya, Madmab is a very nice guy. Just be clear in your documentation of your experience in order to help him isolate the bugs.

[Nextel]

Hi guys I want to everybody here check this page and please report it to make' em shut it down their "bussines"

 

xmugenfightingxtreme.com

 

They are selling (well they call it "donation for download") Xmugen packages and Emulators for the xbox, these jerks claim in their forums that THEY DEVELOP the xmugen packages and emulators, THEY ARE EVEN SELLING MK PROJECT 4.5 FOR THE XBOX, but the top of the shame and cinism was in a private message, one of this "administrators of the site" asshole TRIED TO SELL ME VIA PAYPAL FINAL BURN LEGENDS and COINOPS R3!!!!! check it out and please report the website

 

Look at it alittle closer. Some of those games you have to donate to get but most of them are

free and can be used very easily. Or just use the screenpack itself if you want. I"ve had no

issues with those guys at all, always helped me out. But atleast some people are keeping Xmugen alive and

doing a better job at it than anyone else i've seen so far.

[BritneysPAIRS]

...I bet they soon sell ShowROOM......I dont care personally....its not my fight.....there are soooooo many people who have done this stuff though time.....people just pay for the package and to save time for the newbes....if they have friends it would be done for them....

 

I think people spend so much time in fights these days and not enough time helping things move forward......most peoples stuff is free and if you can sell ice to eskimos then good on them....try and educate the eskimos or even try and help open source move forward and look forward....alot of issues lie with people and there will allways be issues with people, just move forward in life....

[elconejotres]

...I bet they soon sell ShowROOM......I dont care personally....its not my fight.....there are soooooo many people who have done this stuff though time.....people just pay for the package and to save time for the newbes....if they have friends it would be done for them....

 

I think people spend so much time in fights these days and not enough time helping things move forward......most peoples stuff is free and if you can sell ice to eskimos then good on them....try and educate the eskimos or even try and help open source move forward and look forward....alot of issues lie with people and there will allways be issues with people, just move forward in life....

 

 

Yeah man you're right, there is better things to do than fight, just any of you if you are reading this don't fall in the trap and now lets get some bussines with madmab and the pce emulation

[PhilExile]

I think people spend so much time in fights these days and not enough time helping things move forward......most peoples stuff is free and if you can sell ice to eskimos then good on them....try and educate the eskimos or even try and help open source move forward and look forward....alot of issues lie with people and there will allways be issues with people, just move forward in life....

 

Very well put

[Alpha]

What a great business model lol... it's probably a 15 year old kid or something thinking he's going to make a ton of cash

[ressurectionx]

Personally, I feel that nobody should be trying to make any money doing any of this, even based off of donations.

 

Not only does it make the community as a whole look bad, but it even makes the work that people have previously done with no financial incentive look like part of a Pirating for Profit organization.

 

 

I'm not going to pursue it personally, but I do believe that the original poster is right and that these people should be shut down if they don't remove the donation option from their project.

[Robert]

Is it a donation "option"? If you don't donate, does it stop you downloading something? If it does, then it's not a donation, you have to pay, which is a bad thing.

 

But if you can download regardless, then the donation is just to keep the site going, and there is no problem with that.

[law56kerz]

Is it a donation "option"? If you don't donate, does it stop you downloading something? If it does, then it's not a donation, you have to pay, which is a bad thing.

 

But if you can download regardless, then the donation is just to keep the site going, and there is no problem with that.

 

 

Exactly,, donations are a good thing if you believe in the cause. Sometimes these guys need to buy new equipment, xbox's, cables, dvd's, etc..... They aren't forcing you to do anything.

Edited May 28, 2010 by law56kerz

[NeoBomb]

I think they should remove the "pay to access" section.... but there is nothing wrong with having a donate button. If people are fans of your project they will in most cases donate if things like server costs need to be paid. Mostly all private trackers have donate buttons. A lot of emulator coders have donate buttons on their site. Authors of various homebrew games have donate sections.. But they are essentially selling MUGEN builds that are superior to what is available for free so that's wrong.... and probably illegal for several reasons. If they are selling full working builds they are selling not only MUGEN but also Linux which is used to play MUGEN... then not to mention copywritten characters within the games.

 

But I'm not going to do anything about it lol .... don't want the bad Karma to come back on me.

[elconejotres]

Is it a donation "option"? If you don't donate, does it stop you downloading something? If it does, then it's not a donation, you have to pay, which is a bad thing.

 

But if you can download regardless, then the donation is just to keep the site going, and there is no problem with that.

 

 

No its nothing like that, I don't have any problem with the donations to support someone job or site, but these guys make you FIRST "DONATE" FOR A GAME THEN YOU CAN DL, AND IF YOU WANT ANOTHER GAME OR APLICATION GUESS WHAT? YOU MUST "DONATE" AGAIN!!! that's selling games and emus in my dictionary, and the worst part is that they are triyng to sell things THEY DON'T DEVELOP like MK PROJECT 4.5, SF VS MK, FINAL BURN LEGENDS or COIN OPS just to mention some, check this post on their forums:

 

xmugenfightingxtreme.com/simplemachinesforum/index.php?topic=51.0

 

They write this:

 

"When you have donated for a game, You get that game!, Other Games or Updates that you want will have to be paid for on a separate game basis on the account of Different Authors Work,Creativity and TIME!

Which Means a Single Donation does not Pay for all Full Game Releases or Updates!"

 

I don't hold a grudge against them or something like that, but like RX said, jerks like this give the scene a bad image and make everyone think all the scene is just a bunch of game pirated guys, check the word "paid".... you only get paid for selling something don't you? anyway that will be the last I write about this, it's up to you guys if you report the site or don't, just be careful and don't fall for this kind of ripoffs ok? take care friends

Edited May 28, 2010 by elconejotres