Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

To whoever hacked into my Database

619 views
Skip to first unread message

Νίκος Γκρ33κ

unread,
Nov 6, 2013, 3:25:04 PM11/6/13
to
Okey let the hacker try again to mess with my database!!!

He is done it twice, lets see if he will make it again!

I'am waiting!

Joel Goldstick

unread,
Nov 6, 2013, 3:34:34 PM11/6/13
to Νίκος Γκρ33κ, pytho...@python.org
> --
> https://mail.python.org/mailman/listinfo/python-list


Nothing like a good challenge. I personally would rather watch a bad
infomercial, but for all of you bloodthirsty shut ins with nothing to
do... here's your moment!


--
Joel Goldstick
http://joelgoldstick.com

Alister

unread,
Nov 6, 2013, 3:40:03 PM11/6/13
to
I don't think any cracker (hacker is something different) would need to.
you are doing a more than adequate job of screwing things up yourself.

you say you have taken the advise of this group on one subject
follow the rest of it.

DON'T do your development work on your main system.

keep your development computer disconnected from the internet.

do not move the development code to the production server until it has
been thoroughly tested.

and above all else read the links you have been given & learn the basics
of database handling before you even start.

(sorry every one I tried not to reply to Nicos but finally lost it)

--
"I don't know, " said the voice on the PA, "apathetic
bloody planet, I've no sympathy at all. "

Steve Simmons

unread,
Nov 6, 2013, 5:02:04 PM11/6/13
to pytho...@python.org

On 06/11/2013 16:40, Alister wrote:
> On Wed, 06 Nov 2013 17:25:04 +0200, Νίκος Γκρ33κ wrote:
>
>> Okey let the hacker try again to mess with my database!!!
>>
>> He is done it twice, lets see if he will make it again!
>>
>> I'am waiting!
>
> (sorry every one I tried not to reply to Nicos but finally lost it)
>
:-) Sometimes it just has to be done.

Oh, and BTW you missed out "don't expose too much of your production
code to a group of techs that you have irritated, insulted and abused."

SteveS

Mark Lawrence

unread,
Nov 6, 2013, 5:30:42 PM11/6/13
to pytho...@python.org
Terribly sorry old chap. We had our first team meeting this morning.
They were very enthusiastic, really wanted to get on with your job. I
told them not to touch anything, but you know what youngsters and their
little fingers are like.

Oh, and while I'm at it, it wasn't me.

--
Python is the second best programming language in the world.
But the best has yet to be invented. Christian Tismer

Mark Lawrence

Νίκος Γκρ33κ

unread,
Nov 6, 2013, 9:26:26 PM11/6/13
to
No luck yet mighty one? :)

mm0fmf

unread,
Nov 6, 2013, 9:51:19 PM11/6/13
to
Nikos, just in case you don't understand what you are doing... you're
issuing a challenge that you are happy for people to try to hack your
website. You're doing it in a public newsgroup too.

The regular readers of this group may try, they may be playful with your
files and not do anything that is hard to undo. But someone may decide
to really screw things for you and you've got no comeback. You issued a
challenge to the whole world. Don't complain if someone goes full tilt.

I hope you have some backups, I think you may find you need them.

p.s. It wont be me... I have better things to do.





Mark Lawrence

unread,
Nov 6, 2013, 10:11:20 PM11/6/13
to pytho...@python.org
On 06/11/2013 21:26, Νίκος Γκρ33κ wrote:
So you're proud of the fact that you've only been hacked twice (that you
know of)? You think you've prevented this happening again. Pride comes
before a fall! Unfortunately for you I suspect that you've so irritated
someone here by your behaviour that your latest comment is like waving a
red flag at a bull. I sincerely hope that this time she destroys your
site, as it seems likely that this is the only way in which you will
learn. Cruel to be kind.

Grant Edwards

unread,
Nov 6, 2013, 10:22:48 PM11/6/13
to
On 2013-11-06, Mark Lawrence <bream...@yahoo.co.uk> wrote:
> On 06/11/2013 21:26, ?????????? ??????33?? wrote:
>> ???????? 6/11/2013 5:25 ????, ??/?? ?????????? ??????33?? ????????????:
>>> Okey let the hacker try again to mess with my database!!!
>>>
>>> He is done it twice, lets see if he will make it again!
>>>
>>> I'am waiting!
>>
>> No luck yet mighty one? :)
>
> So you're proud of the fact that you've only been hacked twice (that you
> know of)? You think you've prevented this happening again. Pride comes
> before a fall! Unfortunately for you I suspect that you've so irritated
> someone here by your behaviour that your latest comment is like waving a
> red flag at a bull. I sincerely hope that this time she destroys your
> site, as it seems likely that this is the only way in which you will
> learn.

Waving red flags at female bulls is rarely dangerous. ;)

--
Grant Edwards grant.b.edwards Yow! Bo Derek ruined
at my life!
gmail.com

Johannes Findeisen

unread,
Nov 6, 2013, 10:28:39 PM11/6/13
to pytho...@python.org
I am very new to this list but what I can say is, that I never since
1999 have seen a person going on like you do. People here a very
friendly and are helping everybody from a beginner to a pro. Mostly
pros are answering the questions here and that's a huge benefit for a
community. What you are doing is absurd! You don't seem to follow the
answers and are asking same questions over and over without paying
attention to thoose people here helping you out for free. Now since you
know that nobody will invest time helping out on your problems you
start trolling. That is not fair and asking people to hack your site
in a public forum is just wrong; It is a big fail!

Please stop writing to this list if you not follow what people are
answering to you here. I need to say, I am not a good software
developer but your code is totally stupid. You can do it that way but
when people are giving you hints on how to learn how to do you should
follow that. I think there is no programming language available that
will help you fix your problems the right way. The right way is not
the programming language but the developer who writing the code has to
do it right. Read code from other projects around the web to learn,
read the beginners guide and start with some tutorials.

If I would sell hosting packages like you do I could not sleep well at
night if I know I have such lame skills in understanding of security,
programming and computer systems.

Be careful what you do!

Sleep well,
Johannes

Tim Chase

unread,
Nov 6, 2013, 10:34:43 PM11/6/13
to pytho...@python.org
On 2013-11-06 22:22, Grant Edwards wrote:
> Waving red flags at female bulls is rarely dangerous. ;)

though I still wouldn't recommend it if you're COWardly :-)

Well, maybe the issue is MOOt.

-tkc


Chris Angelico

unread,
Nov 6, 2013, 10:54:32 PM11/6/13
to pytho...@python.org
On Thu, Nov 7, 2013 at 9:34 AM, Tim Chase <pytho...@tim.thechases.com> wrote:
> On 2013-11-06 22:22, Grant Edwards wrote:
>> Waving red flags at female bulls is rarely dangerous. ;)
>
> though I still wouldn't recommend it if you're COWardly :-)
>
> Well, maybe the issue is MOOt.

Ugh, if only these puns were like CALF-way funny...

*dives for cover*

ChrisA

Mark Lawrence

unread,
Nov 6, 2013, 11:52:58 PM11/6/13
to pytho...@python.org
On 06/11/2013 22:54, Chris Angelico wrote:
> On Thu, Nov 7, 2013 at 9:34 AM, Tim Chase <pytho...@tim.thechases.com> wrote:
>> On 2013-11-06 22:22, Grant Edwards wrote:
>>> Waving red flags at female bulls is rarely dangerous. ;)
>>
>> though I still wouldn't recommend it if you're COWardly :-)
>>
>> Well, maybe the issue is MOOt.
>
> Ugh, if only these puns were like CALF-way funny...
>
> *dives for cover*
>
> ChrisA
>

I hereby profoundly apologise to the entire list for having set Mr.
Edwards, Mr. Chase and Mr. Angelico down this path.

Chris Angelico

unread,
Nov 6, 2013, 11:57:02 PM11/6/13
to pytho...@python.org
On Thu, Nov 7, 2013 at 10:52 AM, Mark Lawrence <bream...@yahoo.co.uk> wrote:
> On 06/11/2013 22:54, Chris Angelico wrote:
>>
>> On Thu, Nov 7, 2013 at 9:34 AM, Tim Chase <pytho...@tim.thechases.com>
>> wrote:
>>>
>>> On 2013-11-06 22:22, Grant Edwards wrote:
>>>>
>>>> Waving red flags at female bulls is rarely dangerous. ;)
>>>
>>>
>>> though I still wouldn't recommend it if you're COWardly :-)
>>>
>>> Well, maybe the issue is MOOt.
>>
>>
>> Ugh, if only these puns were like CALF-way funny...
>>
>> *dives for cover*
>>
>> ChrisA
>>
>
> I hereby profoundly apologise to the entire list for having set Mr. Edwards,
> Mr. Chase and Mr. Angelico down this path.

Yeah, I was a bit iffy about continuing that line. Inside my head, a
voice asked, "Dare he?" And alas for the list, the response was:
"DAIRY not?"

ChrisA

Mark Lawrence

unread,
Nov 7, 2013, 12:11:27 AM11/7/13
to pytho...@python.org
On 06/11/2013 23:57, Chris Angelico wrote:
> On Thu, Nov 7, 2013 at 10:52 AM, Mark Lawrence <bream...@yahoo.co.uk> wrote:
>> On 06/11/2013 22:54, Chris Angelico wrote:
>>>
>>> On Thu, Nov 7, 2013 at 9:34 AM, Tim Chase <pytho...@tim.thechases.com>
>>> wrote:
>>>>
>>>> On 2013-11-06 22:22, Grant Edwards wrote:
>>>>>
>>>>> Waving red flags at female bulls is rarely dangerous. ;)
>>>>
>>>>
>>>> though I still wouldn't recommend it if you're COWardly :-)
>>>>
>>>> Well, maybe the issue is MOOt.
>>>
>>>
>>> Ugh, if only these puns were like CALF-way funny...
>>>
>>> *dives for cover*
>>>
>>> ChrisA
>>>
>>
>> I hereby profoundly apologise to the entire list for having set Mr. Edwards,
>> Mr. Chase and Mr. Angelico down this path.
>
> Yeah, I was a bit iffy about continuing that line. Inside my head, a
> voice asked, "Dare he?" And alas for the list, the response was:
> "DAIRY not?"
>
> ChrisA
>

That was so bad I somehow managed to recall this "What we have here is a
clear case of Mann's inhumanity to Mann" - John Arlott commenting on
South African bowler "Tufty" Mann causing England batsman George Mann
problems.

Gene Heskett

unread,
Nov 6, 2013, 11:19:59 PM11/6/13
to pytho...@python.org
On Wednesday 06 November 2013 18:19:17 Chris Angelico did opine:

> On Thu, Nov 7, 2013 at 9:34 AM, Tim Chase <pytho...@tim.thechases.com>
wrote:
> > On 2013-11-06 22:22, Grant Edwards wrote:
> >> Waving red flags at female bulls is rarely dangerous. ;)
> >
> > though I still wouldn't recommend it if you're COWardly :-)
> >
> > Well, maybe the issue is MOOt.
>
> Ugh, if only these puns were like CALF-way funny...
>
Or even MOOving.

> *dives for cover*

Leave room for me. Please.

> ChrisA


Cheers, Gene
--
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)

QOTD:
"He eats like a bird... five times his own weight each day."
A pen in the hand of this president is far more
dangerous than 200 million guns in the hands of
law-abiding citizens.

Ethan Furman

unread,
Nov 7, 2013, 12:22:58 AM11/7/13
to pytho...@python.org
On 11/06/2013 03:57 PM, Chris Angelico wrote:
> On Thu, Nov 7, 2013 at 10:52 AM, Mark Lawrence wrote:
>> On 06/11/2013 22:54, Chris Angelico wrote:
>>> On Thu, Nov 7, 2013 at 9:34 AM, Tim Chase wrote:
>>>> On 2013-11-06 22:22, Grant Edwards wrote:
>>>>>
>>>>> Waving red flags at female bulls is rarely dangerous. ;)
>>>>
>>>> though I still wouldn't recommend it if you're COWardly :-)
>>>>
>>>> Well, maybe the issue is MOOt.
>>>
>>> Ugh, if only these puns were like CALF-way funny...
>>>
>>> *dives for cover*
>>
>> I hereby profoundly apologise to the entire list for having set Mr. Edwards,
>> Mr. Chase and Mr. Angelico down this path.
>
> Yeah, I was a bit iffy about continuing that line. Inside my head, a
> voice asked, "Dare he?" And alas for the list, the response was:
> "DAIRY not?"

AH hahahahahahahaha.....

Not only the OP (which I missed, 'cause he's a troll) was absolutely hilarious, but this part of the thread has made my
day. I guess trolls can (rarely) have good side effects. :)

--
~Ethan~

nikos sucks

unread,
Nov 7, 2013, 2:08:40 AM11/7/13
to pytho...@python.org
Nikos said:
> Okey let the hacker try again to mess with my database!!!
> He is done it twice, lets see if he will make it again!
> I'am waiting!

Seriously man, you gotta stop. Are you trying to be a host provider? You know absolutely nothing about what you are doing. There are security holes everywhere in your site. Take someones advise for once. Your whole project is a disaster because you haven't taken the time to read and learn about the tools you are using. You're expecting python-list to code your site for you (one messed up error-fix at a time), and it's ridiculous. 

Read a book, or look at other peoples code and learn from it. Your first reaction to a bug should not be to send 3 emails to python-list asking the same thing over and over.

Here, I'm gonna get you started:

Tim Chase

unread,
Nov 7, 2013, 3:07:33 AM11/7/13
to pytho...@python.org
On 2013-11-07 10:57, Chris Angelico wrote:
> >>>> Waving red flags at female bulls is rarely dangerous. ;)
> >>>
> >>> though I still wouldn't recommend it if you're COWardly :-)
> >>>
> >>> Well, maybe the issue is MOOt.
> >>
> >> Ugh, if only these puns were like CALF-way funny...
> >
> > I hereby profoundly apologise to the entire list for having set
> > Mr. Edwards, Mr. Chase and Mr. Angelico down this path.
>
> Yeah, I was a bit iffy about continuing that line. Inside my head, a
> voice asked, "Dare he?" And alas for the list, the response was:
> "DAIRY not?"

Well, I would if I cud...

-tkc



Chris Angelico

unread,
Nov 7, 2013, 1:00:29 AM11/7/13
to pytho...@python.org
On Thu, Nov 7, 2013 at 11:22 AM, Ethan Furman <et...@stoneleaf.us> wrote:
> Not only the OP (which I missed, 'cause he's a troll) was absolutely
> hilarious, but this part of the thread has made my day. I guess trolls can
> (rarely) have good side effects. :)

I could continue with the puns, but it'd just be MILKing it now...

*leaves room for Gene*

ChrisA
Message has been deleted

Ferrous Cranus

unread,
Nov 7, 2013, 9:01:38 AM11/7/13
to
Τη Πέμπτη, 7 Νοεμβρίου 2013 12:11:20 π.μ. UTC+2, ο χρήστης Mark Lawrence έγραψε:
> On 06/11/2013 21:26, Νίκος Γκρ33κ wrote:
>
> > Στις 6/11/2013 5:25 μμ, ο/η Νίκος Γκρ33κ έγραψε:
>
> >> Okey let the hacker try again to mess with my database!!!
>
> >>
>
> >> He is done it twice, lets see if he will make it again!
>
> >>
>
> >> I'am waiting!
>
> >
>
> > No luck yet mighty one? :)
>
>
>
> So you're proud of the fact that you've only been hacked twice (that you
>
> know of)? You think you've prevented this happening again. Pride comes
>
> before a fall! Unfortunately for you I suspect that you've so irritated
>
> someone here by your behaviour that your latest comment is like waving a
>
> red flag at a bull. I sincerely hope that this time she destroys your
>
> site, as it seems likely that this is the only way in which you will
>
> learn. Cruel to be kind.

So she is a SHE! How do you know that the person hacked into my DB is a female?

As for the state of my databases:

1. Hacker wasnt able to mess with my first database so to add bogus webpages into it as it can be seen from here: http://superhost.gr/?show=stats

2. Unfortunately though he did manage to add arbitrary information to my other database that i store my clients, the tasks i made for them and the payment.

Well done i have to say! but i think i know how she(if indeed a female) did it.

I think i can prevent this for happening again as i did with (1)

Ferrous Cranus

unread,
Nov 7, 2013, 9:13:59 AM11/7/13
to
Here is the proof of the hacking into my clients database:

http://i.imgur.com/5ErmFlI.png
http://i.imgur.com/3u7At55.png

But i just changes something in my script's code and "she" will not be successful on doing that again, i like to believe :)

Steve Simmons

unread,
Nov 7, 2013, 9:15:02 AM11/7/13
to pytho...@python.org
Really? REALLY? ???
Please tell me you aren't storing details of customers and payments on your Web server.
I thought we had heard the worst of you but you just keep it coming.

SteveS

Sent from a Galaxy far far away

Ferrous Cranus

unread,
Nov 7, 2013, 9:31:17 AM11/7/13
to
Τη Πέμπτη, 7 Νοεμβρίου 2013 11:15:02 π.μ. UTC+2, ο χρήστης Steve Simmons έγραψε:

> Please tell me you aren't storing details of customers and payments on your Web > server.


Oh but i do!
I need this information to be accessible ONLY FOR ME via my website 'http://superhost.gr' i just need to secure it more tight.

Jussi Piitulainen

unread,
Nov 7, 2013, 9:35:31 AM11/7/13
to
Greek appears to have gendered personal pronouns even in plural. Is it
so that a group of people is marked as masculine if it is not known
(or stereotypical) that none of them is male? Or can the neutral
pronouns be used of people? Just wondering.

<http://www.foundalis.com/lan/perspron.htm>

English has developed a number of ways to refer to people of unknown
sex. One of these is the use of "she" as here. It doesn't indicate any
specific knowledge about the person in question. It indicates that the
speaker (writer) chose to acknowledge the existence and relevance of
women.

Alister

unread,
Nov 7, 2013, 10:06:01 AM11/7/13
to
Nicos, You do realise that at some point YOU are going to end up in gaol
unless you remove this site from the internet & get some professional
help in implementing it correctly.


--
Don't let go of what you've got hold of, until you have hold of something
else.
-- First Rule of Wing Walking

Tim Chase

unread,
Nov 7, 2013, 12:09:33 PM11/7/13
to pytho...@python.org
On 2013-11-06 23:06, Dennis Lee Bieber wrote:
> >>>> Waving red flags at female bulls is rarely dangerous. ;)
> >>>
> >>> though I still wouldn't recommend it if you're COWardly :-)
> >>>
> >>> Well, maybe the issue is MOOt.
> >>
> >> Ugh, if only these puns were like CALF-way funny...
> >
> >I hereby profoundly apologise to the entire list for having set
> >Mr. Edwards, Mr. Chase and Mr. Angelico down this path.
>
> Ve'al forgive you...

I have a real beef with your puns.

-tkc

PS: our 4yo's favorite joke these days:
Q: Why does Fozzie Bear find Spanish cows so funny?
A: vaca, vaca, vaca!



bob gailer

unread,
Nov 7, 2013, 12:19:03 PM11/7/13
to pytho...@python.org
This is getting udderly ridiculous. Let's leave veal enough a loin.

BTW what did the termite say when he entered the tavern?

--
Bob Gailer
919-636-4239
Chapel Hill NC

Neil Cerutti

unread,
Nov 7, 2013, 1:43:31 PM11/7/13
to
Phew! I can't stomach stomach stomach this digression.

--
Neil Cerutti

Νίκος Αλεξόπουλος

unread,
Nov 7, 2013, 1:46:11 PM11/7/13
to
Στις 7/11/2013 12:06 μμ, ο/η Alister έγραψε:
> On Thu, 07 Nov 2013 01:31:17 -0800, Ferrous Cranus wrote:
>
>> Τη Πέμπτη, 7 Νοεμβρίου 2013 11:15:02 π.μ. UTC+2, ο χρήστης Steve Simmons
>> έγραψε:
>>
>>> Please tell me you aren't storing details of customers and payments on
>>> your Web > server.
>>
>>
>> Oh but i do!
>> I need this information to be accessible ONLY FOR ME via my website
>> 'http://superhost.gr' i just need to secure it more tight.
>
> Nicos, You do realise that at some point YOU are going to end up in gaol
> unless you remove this site from the internet & get some professional
> help in implementing it correctly.
>
>
How much will it cost to take to convert my current 'counters.py' script
to a 'webpy' framework style?

Please make a really good price.
We are talking about a small script.

--
What is now proved was at first only imagined! & WebHost
<http://superhost.gr>

Νίκος Αλεξόπουλος

unread,
Nov 7, 2013, 1:47:33 PM11/7/13
to
--
I think i have made it.

The hacker, didn't manage to mess again with either of my counters or
clients databases. :-)

Too bad! I though 'she' was better than that!

Chris Angelico

unread,
Nov 7, 2013, 1:59:18 PM11/7/13
to pytho...@python.org
On Fri, Nov 8, 2013 at 12:46 AM, Νίκος Αλεξόπουλος
<nikos...@gmail.com> wrote:
> How much will it cost to take to convert my current 'counters.py' script to
> a 'webpy' framework style?
>
> Please make a really good price.
> We are talking about a small script.

My rates start at $100/hr and come with the requirement that you
actually listen to what I'm saying. Actually, you'll probably find
that you can skip the $100/hr if you just listen to the advice you've
been given for free on this list, but you asked for a "really good
price", and for this kind of work, I think the price I quoted is
exactly that.

ChrisA

Νίκος Αλεξόπουλος

unread,
Nov 7, 2013, 2:16:49 PM11/7/13
to
--
100 bucks per hour? Oh My, i cant afford this at all.
All i can give is 20 euros for the conversions of the script to
framework style.

Its not like you are going to create the script from scratch, you will
just need to modify it in some fashion to make it frameworked because i
don't have the slightest clue how to implement this.

Chris Angelico

unread,
Nov 7, 2013, 2:33:16 PM11/7/13
to pytho...@python.org
On Fri, Nov 8, 2013 at 1:16 AM, Νίκος Αλεξόπουλος <nikos...@gmail.com> wrote:
> 100 bucks per hour? Oh My, i cant afford this at all.
> All i can give is 20 euros for the conversions of the script to framework
> style.
>
> Its not like you are going to create the script from scratch, you will just
> need to modify it in some fashion to make it frameworked because i don't
> have the slightest clue how to implement this.

(Please don't start your text with a double-hyphen - that's a common
convention for the start of your signature, and many people and UAs
will ignore text after it.)

20 Euro won't buy you much in the way of programmer time. Most job ads
I've seen are offering at least $50/hr for salaried work, and contract
work will start a lot higher than that. (I don't know how rates are in
Europe, but they'll be roughly in the same ball-park.) Your figure
would buy you maybe half an hour of someone's time... if you're lucky.
Most likely it's not even on anyone's radar. Perhaps now you'll have
some appreciation of how much you get *for nothing* here on this list.

The main point of my post, though, was that if you pay someone to do
your work for you, you WILL have to accept the way s/he does things.
If you get a guy to design you a database for your hit counter and he
does it with two tables, only a crass fool would then say "I don't
care how well you've done that, I'm going to do it MY WAY instead",
because if you really knew better than the person you hired, you would
have done it yourself. (Incidentally, this is exactly why I am no
longer with my former employer. He didn't respect my designs, so now
he's free to do his own.) You need to be willing to accept advice once
you ask for it; otherwise, just do things yourself - and cope with the
legal requirements, which I don't think you've yet even considered,
despite spending all this time on tracking your users and retaining
personal/private information.

ChrisA

Neil Cerutti

unread,
Nov 7, 2013, 2:58:11 PM11/7/13
to
On 2013-11-07, Chris Angelico <ros...@gmail.com> wrote:
> On Fri, Nov 8, 2013 at 1:16 AM, ????? ??????????? <nikos...@gmail.com> wrote:
>> 100 bucks per hour? Oh My, i cant afford this at all.
>> All i can give is 20 euros for the conversions of the script to framework
>> style.
>>
>> Its not like you are going to create the script from scratch, you will just
>> need to modify it in some fashion to make it frameworked because i don't
>> have the slightest clue how to implement this.
>
> (Please don't start your text with a double-hyphen - that's a common
> convention for the start of your signature, and many people and UAs
> will ignore text after it.)

It's '-- ', with a space after, to be precise.

But I like it the way he's doing it! His messages are greatly
improved from where I'm sitting..

--
Neil Cerutti

Chris “Kwpolska” Warrick

unread,
Nov 7, 2013, 3:13:43 PM11/7/13
to Neil Cerutti, pytho...@python.org
On Thu, Nov 7, 2013 at 3:58 PM, Neil Cerutti <ne...@norwich.edu> wrote:
> On 2013-11-07, Chris Angelico <ros...@gmail.com> wrote:
>> (Please don't start your text with a double-hyphen - that's a common
>> convention for the start of your signature, and many people and UAs
>> will ignore text after it.)
>
> It's '-- ', with a space after, to be precise.

To be even more precise, it’s those three characters on a line all by itself.

> But I like it the way he's doing it! His messages are greatly
> improved from where I'm sitting..

Gmail automatically hides all longer quotes (Google Groups does the
same, so they don’t get to see their double-spaced nonsense) AS WELL
AS signatures. Well, world couldn’t be more wonderful than Nikos
posting nothing.

--
Chris “Kwpolska” Warrick <http://kwpolska.tk>
PGP: 5EAAEA16
stop html mail | always bottom-post | only UTF-8 makes sense

Mark Lawrence

unread,
Nov 7, 2013, 4:27:59 PM11/7/13
to pytho...@python.org
On 07/11/2013 12:09, Tim Chase wrote:
> On 2013-11-06 23:06, Dennis Lee Bieber wrote:
>>>>>> Waving red flags at female bulls is rarely dangerous. ;)
>>>>>
>>>>> though I still wouldn't recommend it if you're COWardly :-)
>>>>>
>>>>> Well, maybe the issue is MOOt.
>>>>
>>>> Ugh, if only these puns were like CALF-way funny...
>>>
>>> I hereby profoundly apologise to the entire list for having set
>>> Mr. Edwards, Mr. Chase and Mr. Angelico down this path.
>>
>> Ve'al forgive you...
>
> I have a real beef with your puns.
>
> -tkc
>
> PS: our 4yo's favorite joke these days:
> Q: Why does Fozzie Bear find Spanish cows so funny?
> A: vaca, vaca, vaca!
>

A guy was looking up at a bird in a tree. The bird told him to bugger
off. It was suffering from Irritable Owl Syndrome. (From a birthday
card received Tuesday from my sis)

Mark Lawrence

unread,
Nov 7, 2013, 4:34:34 PM11/7/13
to pytho...@python.org
On 07/11/2013 13:47, Νίκος Αλεξόπουλος wrote:
> Στις 7/11/2013 11:31 πμ, ο/η Ferrous Cranus έγραψε:
>> Τη Πέμπτη, 7 Νοεμβρίου 2013 11:15:02 π.μ. UTC+2, ο χρήστης Steve
>> Simmons έγραψε:
>>
>>> Please tell me you aren't storing details of customers and payments
>>> on your Web > server.
>>
>>
>> Oh but i do!
>> I need this information to be accessible ONLY FOR ME via my website
>> 'http://superhost.gr' i just need to secure it more tight.
>>
>
> I think i have made it.
>
> The hacker, didn't manage to mess again with either of my counters or clients databases.
>
> Too bad! I though 'she' was better than that!

She's just biding her time so as to cause you maximum pain!!!

Joel Goldstick

unread,
Nov 7, 2013, 4:45:18 PM11/7/13
to Mark Lawrence, pytho...@python.org
On Thu, Nov 7, 2013 at 11:34 AM, Mark Lawrence <bream...@yahoo.co.uk> wrote:
> On 07/11/2013 13:47, Νίκος Αλεξόπουλος wrote:
>>
>> Στις 7/11/2013 11:31 πμ, ο/η Ferrous Cranus έγραψε:
>>>
>>> Τη Πέμπτη, 7 Νοεμβρίου 2013 11:15:02 π.μ. UTC+2, ο χρήστης Steve
>>> Simmons έγραψε:
>>>
>>>> Please tell me you aren't storing details of customers and payments
>>>> on your Web > server.
>>>
>>>
>>>
>>> Oh but i do!
>>> I need this information to be accessible ONLY FOR ME via my website
>>> 'http://superhost.gr' i just need to secure it more tight.

Its not only for you, its for 'her' too. Maybe next time she will
change your passwords so you can't get in.
>>>
>>
>> I think i have made it.
>>
>> The hacker, didn't manage to mess again with either of my counters or
>> clients databases.
>>
>> Too bad! I though 'she' was better than that!
>
>
> She's just biding her time so as to cause you maximum pain!!!
>
>
> --
> Python is the second best programming language in the world.
> But the best has yet to be invented. Christian Tismer
>
> Mark Lawrence
>
> --
> https://mail.python.org/mailman/listinfo/python-list



--
Joel Goldstick
http://joelgoldstick.com

Νίκος Αλεξόπουλος

unread,
Nov 7, 2013, 5:42:27 PM11/7/13
to
Στις 7/11/2013 6:34 μμ, ο/η Mark Lawrence έγραψε:
> On 07/11/2013 13:47, Νίκος Αλεξόπουλος wrote:
>> Στις 7/11/2013 11:31 πμ, ο/η Ferrous Cranus έγραψε:
>>> Τη Πέμπτη, 7 Νοεμβρίου 2013 11:15:02 π.μ. UTC+2, ο χρήστης Steve
>>> Simmons έγραψε:
>>>
>>>> Please tell me you aren't storing details of customers and payments
>>>> on your Web > server.
>>>
>>>
>>> Oh but i do!
>>> I need this information to be accessible ONLY FOR ME via my website
>>> 'http://superhost.gr' i just need to secure it more tight.
>>>
>>
>> I think i have made it.
>>
>> The hacker, didn't manage to mess again with either of my counters or
>> clients databases.
>>
>> Too bad! I though 'she' was better than that!
>
> She's just biding her time so as to cause you maximum pain!!!
>


Bring it on baby!

I like this challenge because it makes me improve on overall python
script security(most of it being securing user input data before
actually perform database queries).

I also understand than in my attempt to get help with my code i provided
"too much of it" which was successfully utilized by the hacker to attack
my website!

You didn't answer me though!
Is the hacker really a female?
And if she is, is she pretty? :)

Νίκος Αλεξόπουλος

unread,
Nov 7, 2013, 5:45:13 PM11/7/13
to
Στις 7/11/2013 6:45 μμ, ο/η Joel Goldstick έγραψε:
> On Thu, Nov 7, 2013 at 11:34 AM, Mark Lawrence <bream...@yahoo.co.uk> wrote:
>> On 07/11/2013 13:47, Νίκος Αλεξόπουλος wrote:
>>>
>>> Στις 7/11/2013 11:31 πμ, ο/η Ferrous Cranus έγραψε:
>>>>
>>>> Τη Πέμπτη, 7 Νοεμβρίου 2013 11:15:02 π.μ. UTC+2, ο χρήστης Steve
>>>> Simmons έγραψε:
>>>>
>>>>> Please tell me you aren't storing details of customers and payments
>>>>> on your Web > server.
>>>>
>>>>
>>>>
>>>> Oh but i do!
>>>> I need this information to be accessible ONLY FOR ME via my website
>>>> 'http://superhost.gr' i just need to secure it more tight.
>
> Its not only for you, its for 'her' too. Maybe next time she will
> change your passwords so you can't get in.d

Even if "she" changes the root password(assuming she's somehow in
control of my VPS), i can easily alter it in some other string of my
liking very easily.

Mark Lawrence

unread,
Nov 7, 2013, 6:11:06 PM11/7/13
to pytho...@python.org
On 07/11/2013 17:42, Νίκος Αλεξόπουλος wrote:
> Στις 7/11/2013 6:34 μμ, ο/η Mark Lawrence έγραψε:
>> On 07/11/2013 13:47, Νίκος Αλεξόπουλος wrote:
>>> Στις 7/11/2013 11:31 πμ, ο/η Ferrous Cranus έγραψε:
>>>> Τη Πέμπτη, 7 Νοεμβρίου 2013 11:15:02 π.μ. UTC+2, ο χρήστης Steve
>>>> Simmons έγραψε:
>>>>
>>>>> Please tell me you aren't storing details of customers and payments
>>>>> on your Web > server.
>>>>
>>>>
>>>> Oh but i do!
>>>> I need this information to be accessible ONLY FOR ME via my website
>>>> 'http://superhost.gr' i just need to secure it more tight.
>>>>
>>>
>>> I think i have made it.
>>>
>>> The hacker, didn't manage to mess again with either of my counters or
>>> clients databases.
>>>
>>> Too bad! I though 'she' was better than that!
>>
>> She's just biding her time so as to cause you maximum pain!!!
>>
>
>
> Bring it on baby!
>
> I like this challenge because it makes me improve on overall python
> script security(most of it being securing user input data before
> actually perform database queries).

Yeah right. You can't build a house until you've got the foundations
right, so how can you improve on something when you know absolutely
nothing about it in the first place?

>
> I also understand than in my attempt to get help with my code i provided
> "too much of it" which was successfully utilized by the hacker to attack
> my website!
>
> You didn't answer me though!
> Is the hacker really a female?
> And if she is, is she pretty? :)

That's for me to know and for you to find out. Actually I'll assume
that you'll never find out as I'd guess that your detective skills are
on a par with your computing skills, i.e. nonexistent.

MRAB

unread,
Nov 7, 2013, 6:28:24 PM11/7/13
to pytho...@python.org
On 07/11/2013 18:11, Mark Lawrence wrote:
> On 07/11/2013 17:42, Νίκος Αλεξόπουλος wrote:
>> Στις 7/11/2013 6:34 μμ, ο/η Mark Lawrence έγραψε:
>>> On 07/11/2013 13:47, Νίκος Αλεξόπουλος wrote:
>>>> Στις 7/11/2013 11:31 πμ, ο/η Ferrous Cranus έγραψε:
>>>>> Τη Πέμπτη, 7 Νοεμβρίου 2013 11:15:02 π.μ. UTC+2, ο χρήστης Steve
>>>>> Simmons έγραψε:
>>>>>
>>>>>> Please tell me you aren't storing details of customers and payments
>>>>>> on your Web > server.
>>>>>
>>>>>
>>>>> Oh but i do!
>>>>> I need this information to be accessible ONLY FOR ME via my website
>>>>> 'http://superhost.gr' i just need to secure it more tight.
>>>>>
>>>>
>>>> I think i have made it.
>>>>
>>>> The hacker, didn't manage to mess again with either of my counters or
>>>> clients databases.
>>>>
>>>> Too bad! I though 'she' was better than that!
>>>
>>> She's just biding her time so as to cause you maximum pain!!!
>>>
>>
>>
>> Bring it on baby!
>>
>> I like this challenge because it makes me improve on overall python
>> script security(most of it being securing user input data before
>> actually perform database queries).
>
> Yeah right. You can't build a house until you've got the foundations
> right, so how can you improve on something when you know absolutely
> nothing about it in the first place?
>
[snip]
A better analogy would be that of inviting people to break into your
house so that you can better learn how to prevent people from breaking
into your house. The wise course would've been to fit and use locks,
and not to hand the keys to strangers...

Denis McMahon

unread,
Nov 7, 2013, 9:20:01 PM11/7/13
to
On Wed, 06 Nov 2013 10:34:34 -0500, Joel Goldstick wrote:

>> Okey let the hacker try again to mess with my database!!!

> Nothing like a good challenge.

I think the hacker is a figment of Nick's imagination, or rather a
consequence of his broken python code corrupting his data.

--
Denis McMahon, denismf...@gmail.com

Denis McMahon

unread,
Nov 7, 2013, 9:29:23 PM11/7/13
to
On Thu, 07 Nov 2013 01:01:38 -0800, Ferrous Cranus wrote:

> Τη Πέμπτη, 7 Νοεμβρίου 2013 12:11:20 π.μ. UTC+2, ο χρήστης Mark Lawrence
> έγραψε:

>> ... hope that this time she destroys ...

> So she is a SHE! How do you know that the person hacked into my DB is a
> female?

How do you know he isn't?

The fact that person n refers to the alleged hacker (which I suspect is
just an artifact of your bodged and broken python and sql code) as having
gender x does not mean that person n knows who the hacker is.

If using a gender specific pronoun to refer to the hacker implies
knowledge of the hacker's true identity, then as the first person to use
a gender specific pronoun in this thread, in the original post, with the
comment "He is done it twice, lets see if he will make it again!", you
clearly know who the hacker is.

If you were actually hacked, I'd guess it was most likely sql injection
using a hand crafted get or post request that exploited some
vulnerability that you have carelessly posted in an internet forum and
then ignored advice to make secure.

--
Denis McMahon, denismf...@gmail.com

Ian Kelly

unread,
Nov 7, 2013, 9:39:13 PM11/7/13
to Python
On Thu, Nov 7, 2013 at 2:20 PM, Denis McMahon <denismf...@gmail.com> wrote:
> I think the hacker is a figment of Nick's imagination, or rather a
> consequence of his broken python code corrupting his data.

Unless the Python installation on Nikos' system has become self-aware
and is actively objecting to his code, I think that messages like
"Read a manual" and "Learn to code" inserted into a database (as seen
in the images that Nikos linked earlier) would normally suggest a
hacker.

Joel Goldstick

unread,
Nov 7, 2013, 9:45:31 PM11/7/13
to Ian Kelly, Python
On Thu, Nov 7, 2013 at 4:39 PM, Ian Kelly <ian.g...@gmail.com> wrote:
> On Thu, Nov 7, 2013 at 2:20 PM, Denis McMahon <denismf...@gmail.com> wrote:
>> I think the hacker is a figment of Nick's imagination, or rather a
>> consequence of his broken python code corrupting his data.
>
> Unless the Python installation on Nikos' system has become self-aware
> and is actively objecting to his code, I think that messages like
> "Read a manual" and "Learn to code" inserted into a database (as seen
> in the images that Nikos linked earlier) would normally suggest a
> hacker.
> --
> https://mail.python.org/mailman/listinfo/python-list

but... a very polite hacker

Νίκος Αλεξόπουλος

unread,
Nov 7, 2013, 10:18:54 PM11/7/13
to
Not so polite, since in one arbitrary record into my clients db he
placed the entry "Stupid Coder, Stupid Site".

But i'm happy that s/he cannot mess again with my databases.

I feel a bit proud because as it seems i have manages to secure it more
tight. All i need to do was to validate user input data, so the hacker
won't be able again to pass bogus values to specific variables that my
script was using.

Prove me otherwise mighty one if i'm mistaken!

Νίκος Αλεξόπουλος

unread,
Nov 7, 2013, 10:31:35 PM11/7/13
to
Στις 7/11/2013 11:29 μμ, ο/η Denis McMahon έγραψε:
> On Thu, 07 Nov 2013 01:01:38 -0800, Ferrous Cranus wrote:
>
>> Τη Πέμπτη, 7 Νοεμβρίου 2013 12:11:20 π.μ. UTC+2, ο χρήστης Mark Lawrence
>> έγραψε:
>
>>> ... hope that this time she destroys ...
>
>> So she is a SHE! How do you know that the person hacked into my DB is a
>> female?


> If you were actually hacked, I'd guess it was most likely sql injection
> using a hand crafted get or post request that exploited some
> vulnerability that you have carelessly posted in an internet forum and
> then ignored advice to make secure.

Its true that i need to be more careful when posting sensitive snippets.
Many times i have posted actual mysql passwords in clear text as seen at
the pymysql connector and other sensitive information.

Now, i don't think s/he can be successful again.
I like to think that i have tighten script's security by validating user
input before i utilize this information, especially in insertion time
into the db.

http://superhost.gr/?show=log&page=index.html

The link above shows how many people visit my website and at the top
entry with the unknown hostname, referer field told me that someone
passed my website's url into http://netcraft.com to search the server
for vulnera




Tim Delaney

unread,
Nov 7, 2013, 10:45:02 PM11/7/13
to Νίκος Αλεξόπουλος, Python-List
On 8 November 2013 09:18, Νίκος Αλεξόπουλος <nikos...@gmail.com> wrote:
I feel a bit proud because as it seems i have manages to secure it more tight. All i need to do was to validate user input data, so the hacker won't be able again to pass bogus values to specific variables that my script was using.

So we now have confirmation that Nikos' site is subject to SQL injection attacks on anything that he is not specifically validating. And I'm absolutely sure that he has identified every location where input needs to be validated, and that it is impossible to get past the level of validation that he's doing, so the site is completely secure! Just like the last time he claimed that (and the time before, and the time before that ...).

Nikos, please please please do yourself and your customers a favour and quit your so-called "business". All you are doing is opening your customers up to potentially disastrous situations and yourself to lawsuits. It's not a question of *if*, but *when* one of your customers is compromised to the extent that they decide to take it out of you.

Also, you're an embarrassment to our profession.

Tim Delaney

Tim Delaney

unread,
Nov 7, 2013, 10:46:52 PM11/7/13
to Νίκος Αλεξόπουλος, Python-List
On 8 November 2013 09:45, Tim Delaney <timothy....@gmail.com> wrote:
On 8 November 2013 09:18, Νίκος Αλεξόπουλος <nikos...@gmail.com> wrote:
I feel a bit proud because as it seems i have manages to secure it more tight. All i need to do was to validate user input data, so the hacker won't be able again to pass bogus values to specific variables that my script was using.

So we now have confirmation that Nikos' site is subject to SQL injection attacks on anything that he is not specifically validating. And I'm absolutely sure that he has identified every location where input needs to be validated, and that it is impossible to get past the level of validation that he's doing, so the site is completely secure! Just like the last time he claimed that (and the time before, and the time before that ...).

Not to mention the idiocy of exposing your web server logs to the outside world ... (no - I didn't go there - I want no chance of getting malware from his site).

Tim Delaney 

Νίκος Αλεξόπουλος

unread,
Nov 7, 2013, 10:56:28 PM11/7/13
to
Στις 8/11/2013 12:46 πμ, ο/η Tim Delaney έγραψε:
> On 8 November 2013 09:45, Tim Delaney <timothy....@gmail.com
> <mailto:timothy....@gmail.com>> wrote:
>
> On 8 November 2013 09:18, Νίκος Αλεξόπουλος <nikos...@gmail.com
> <mailto:nikos...@gmail.com>> wrote:
>
> I feel a bit proud because as it seems i have manages to secure
> it more tight. All i need to do was to validate user input data,
> so the hacker won't be able again to pass bogus values to
> specific variables that my script was using.
>
>
> So we now have confirmation that Nikos' site is subject to SQL
> injection attacks on anything that he is not specifically
> validating. And I'm absolutely sure that he has identified every
> location where input needs to be validated, and that it is
> impossible to get past the level of validation that he's doing, so
> the site is completely secure! Just like the last time he claimed
> that (and the time before, and the time before that ...).
>
>
> Not to mention the idiocy of exposing your web server logs to the
> outside world ... (no - I didn't go there - I want no chance of getting
> malware from his site).
>
> Tim Delaney


It was necessary post post web server's logs by doing
tail -f '/usr/local/apache/logs/error_log'

so to display the error message i got.

Also i never claimed i was a professional coder, i am an amateur at a
beginner level and i do it out of hobby.

I could have designed my website in a CMS( wordpress, joomla) but i like
programming and wanted to design and learn to code at the same time.

Since i'm an idiot as you call me try to hack it yourself since you are
so smart.

And i don;t think it was an sql injection by the way.
It was just a manipulation of the 'page' variable my script is using.
Hacker was able to pass bogus info to that variable.

I believe he passed values to var 'page' via URL like

http://superhost.gr/?page='

Chris Angelico

unread,
Nov 7, 2013, 11:04:35 PM11/7/13
to pytho...@python.org
On Fri, Nov 8, 2013 at 9:56 AM, Νίκος Αλεξόπουλος <nikos...@gmail.com> wrote:
> Also i never claimed i was a professional coder, i am an amateur at a
> beginner level and i do it out of hobby.

You've stated a number of times that your problems are critical
because you're losing customers. In English, "professional" means you
make money - that is, that you either get a salary for it or you have
paying customers. That's what we're objecting to, because we think
that you shouldn't - in fact, you *are* an amateur (doing it because
you love it) and you *should be* a non-professional (doing it for no
money); even though technically those words aren't opposites, they're
often treated that way.

ChrisA

Νίκος Αλεξόπουλος

unread,
Nov 7, 2013, 11:10:14 PM11/7/13
to
But my customers, which are all friends are getting what they are paying
for.
And that is a webpage design and a working website along with cPanel.
Its at my own domain that i'am experimenting not on server system wide
changes.

I will improve on linux and python scripting over time, day by day....

Grant Edwards

unread,
Nov 7, 2013, 11:18:17 PM11/7/13
to
On 2013-11-07, ?????????? ?????????????????????? <nikos...@gmail.com> wrote:
> ???????? 8/11/2013 1:04 ????, ??/?? Chris Angelico ????????????:
>> On Fri, Nov 8, 2013 at 9:56 AM, ?????????? ?????????????????????? <nikos...@gmail.com> wrote:

>>> Also i never claimed i was a professional coder,

> But my customers,

If you have customers, then you're pretending to a professional.

> which are all friends are getting what they are paying for.

If people are paying you, then you're pretending to be a professional.

Nobody said you can't be a professional while at the same time being
completely incompetent. One would hope the market forces don't allow
such a situation to persist, but there are an awful lot of suckers out
there...

--
Grant Edwards grant.b.edwards Yow! If Robert Di Niro
at assassinates Walter Slezak,
gmail.com will Jodie Foster marry
Bonzo??

Νίκος Αλεξόπουλος

unread,
Nov 7, 2013, 11:28:19 PM11/7/13
to
Στις 8/11/2013 1:18 πμ, ο/η Grant Edwards έγραψε:
> On 2013-11-07, ?????????? ?????????????????????? <nikos...@gmail.com> wrote:
>> ???????? 8/11/2013 1:04 ????, ??/?? Chris Angelico ????????????:
>>> On Fri, Nov 8, 2013 at 9:56 AM, ?????????? ?????????????????????? <nikos...@gmail.com> wrote:
>
>>>> Also i never claimed i was a professional coder,
>
>> But my customers,
>
> If you have customers, then you're pretending to a professional.
>
>> which are all friends are getting what they are paying for.
>
> If people are paying you, then you're pretending to be a professional.
>
> Nobody said you can't be a professional while at the same time being
> completely incompetent. One would hope the market forces don't allow
> such a situation to persist, but there are an awful lot of suckers out
> there...
>


If i was completely incompetent i wouldn't had a working website and i
wasn't able to design my customers' webpages.

You know some basic stuff and learn along the way, thats what people do,
we didn't all born competent and ready just like you.

Also i don't have to explain my job or grant permission from Grant to
start a business. I don't care if you think otherwise.

Chris Angelico

unread,
Nov 7, 2013, 11:32:26 PM11/7/13
to pytho...@python.org
On Fri, Nov 8, 2013 at 10:28 AM, Νίκος Αλεξόπουλος
<nikos...@gmail.com> wrote:
> Also i don't have to explain my job or grant permission from Grant to start
> a business. I don't care if you think otherwise.

You don't need Grant to grant permission for you to run a business,
but if you're running a business then you ARE professional. That's
what he's saying.

ChrisA
Message has been deleted

Steve Simmons

unread,
Nov 8, 2013, 1:10:37 AM11/8/13
to Python
Ian Kelly <ian.g...@gmail.com> wrote:
On Thu, Nov 7, 2013 at 2:20 PM, Denis McMahon <denismf...@gmail.com> wrote:
I think the hacker is a figment of Nick's imagination, or rather a
consequence of his broken python code corrupting his data.

Unless the Python installation on Nikos' system has become self-aware
and is actively objecting to his code, I think that messages like
"Read a manual" and "Learn to code" inserted into a database (as seen
in the images that Nikos linked earlier) would normally suggest a
hacker.

I must say that I kinda like the idea of Nick's computer gagging on his code and sending him messages pleading that he educated himself.

Steve S

Sent from a Galaxy far far away

ishish

unread,
Nov 8, 2013, 12:32:35 AM11/8/13
to pytho...@python.org
Well, whoever she/he/it is, I am kind of fond of "them" - fancy a real
Single Malt. I am paying...

alex23

unread,
Nov 8, 2013, 1:32:37 AM11/8/13
to
On 8/11/2013 7:39 AM, Ian Kelly wrote:
> Unless the Python installation on Nikos' system has become self-aware
> and is actively objecting to his code, I think that messages like
> "Read a manual" and "Learn to code" inserted into a database (as seen
> in the images that Nikos linked earlier) would normally suggest a
> hacker.

I just assumed he'd written himself a to-do app and couldn't be bothered
with the hussle of creating a separate table to store its items.

Νίκος Αλεξόπουλος

unread,
Nov 8, 2013, 8:20:54 AM11/8/13
to
Στις 6/11/2013 5:25 μμ, ο/η Νίκος Γκρ33κ έγραψε:
> Okey let the hacker try again to mess with my database!!!
>
> He is done it twice, lets see if he will make it again!
>
> I'am waiting!


I'am pleased to see that various ppl have tried to mess my db by

1. submitted my webiste to netcraft.com for secucirty vuln search

2. tried to pass arbitrary values to 'page' variable by doing
http://superhost.gr?page="some_string_here"

3. tried to access the sources of my scripts by
http://superhost.gr/~nikos/cgi-bin/metrites.py
http://superhost.gr/~nikos/cgi-bin/pelatologio.py
http://superhost.gr/~nikos/cgi-bin/files.py


Fortunately for me they have all failed.
That means that i have *actually* made security of my scripts stronger.

Now whoever called me incompetent should think again before he accused
me of so. :-)

Chris Angelico

unread,
Nov 8, 2013, 8:31:38 AM11/8/13
to pytho...@python.org
On Fri, Nov 8, 2013 at 7:20 PM, Νίκος Αλεξόπουλος <nikos...@gmail.com> wrote:
> Fortunately for me they have all failed.
> That means that i have *actually* made security of my scripts stronger.
>
> Now whoever called me incompetent should think again before he accused me of
> so. :-)

https://en.wikipedia.org/wiki/Hubris

ChrisA

Larry Hudson

unread,
Nov 8, 2013, 8:42:08 AM11/8/13
to
Naturally I know nothing about Greek laws, but I assume their tax laws would be similar to those
of the US. Nikos admits he is making money from this, but I would not be surprised if he
doesn't report it as income. Pure speculation, of course.

-=- Larry -=-

Νίκος Αλεξόπουλος

unread,
Nov 8, 2013, 8:59:28 AM11/8/13
to
I have said this not out of arrogance but to shut some mounts calling me
complete incompetent.

Mark Lawrence

unread,
Nov 8, 2013, 9:06:59 AM11/8/13
to pytho...@python.org
On 07/11/2013 21:45, Joel Goldstick wrote:
> On Thu, Nov 7, 2013 at 4:39 PM, Ian Kelly <ian.g...@gmail.com> wrote:
>> On Thu, Nov 7, 2013 at 2:20 PM, Denis McMahon <denismf...@gmail.com> wrote:
>>> I think the hacker is a figment of Nick's imagination, or rather a
>>> consequence of his broken python code corrupting his data.
>>
>> Unless the Python installation on Nikos' system has become self-aware
>> and is actively objecting to his code, I think that messages like
>> "Read a manual" and "Learn to code" inserted into a database (as seen
>> in the images that Nikos linked earlier) would normally suggest a
>> hacker.
>> --
>> https://mail.python.org/mailman/listinfo/python-list
>
> but... a very polite hacker
>

My highly trained team were all brought up to be extremely polite.

Mark Lawrence

unread,
Nov 8, 2013, 9:12:40 AM11/8/13
to pytho...@python.org
On 07/11/2013 23:10, Νίκος Αλεξόπουλος wrote:
>
> I will improve on linux and python scripting over time, day by day....

No you won't!!! Everytime you're offered advice on best practice you
state that you want to do it differently.

Mark Lawrence

unread,
Nov 8, 2013, 9:19:32 AM11/8/13
to pytho...@python.org
Ignoring the bit about shutting mounts, which shows how much effort you
ever put into anything that you post, actually here I agree with you.
But don't get too excited, it's only because "completely" isn't a strong
enough adjective to use for your level of incompetence.

Mark Lawrence

unread,
Nov 8, 2013, 9:15:57 AM11/8/13
to pytho...@python.org
Made my day :)

Νίκος Αλεξόπουλος

unread,
Nov 8, 2013, 9:34:00 AM11/8/13
to
Στις 8/11/2013 11:15 πμ, ο/η Mark Lawrence έγραψε:
> On 08/11/2013 01:32, alex23 wrote:
>> On 8/11/2013 7:39 AM, Ian Kelly wrote:
>>> Unless the Python installation on Nikos' system has become self-aware
>>> and is actively objecting to his code, I think that messages like
>>> "Read a manual" and "Learn to code" inserted into a database (as seen
>>> in the images that Nikos linked earlier) would normally suggest a
>>> hacker.
>>
>> I just assumed he'd written himself a to-do app and couldn't be bothered
>> with the hussle of creating a separate table to store its items.
>>
>
> Made my day :)
>


And if you jump over a bridge it would make my day!

Νίκος Αλεξόπουλος

unread,
Nov 8, 2013, 9:37:53 AM11/8/13
to
Στις 8/11/2013 11:19 πμ, ο/η Mark Lawrence έγραψε:
> On 08/11/2013 08:59, Νίκος Αλεξόπουλος wrote:
>> Στις 8/11/2013 10:31 πμ, ο/η Chris Angelico έγραψε:
>>> On Fri, Nov 8, 2013 at 7:20 PM, Νίκος Αλεξόπουλος
>>> <nikos...@gmail.com> wrote:
>>>> Fortunately for me they have all failed.
>>>> That means that i have *actually* made security of my scripts stronger.
>>>>
>>>> Now whoever called me incompetent should think again before he
>>>> accused me of
>>>> so. :-)
>>>
>>> https://en.wikipedia.org/wiki/Hubris
>>>
>>> ChrisA
>>>
>>
>>
>> I have said this not out of arrogance but to shut some mounts calling me
>> complete incompetent.
>
> Ignoring the bit about shutting mounts, which shows how much effort you
> ever put into anything that you post, actually here I agree with you.
> But don't get too excited, it's only because "completely" isn't a strong
> enough adjective to use for your level of incompetence.
>


You wouldn't be able to write the scripts i have written.
All you do is criticize me, but you never ever have posted code to
anything i have asked.

Perhaps you can't even write a simpel script

Νίκος Αλεξόπουλος

unread,
Nov 8, 2013, 9:39:17 AM11/8/13
to
Στις 8/11/2013 11:19 πμ, ο/η Mark Lawrence έγραψε:
> On 08/11/2013 08:59, Νίκος Αλεξόπουλος wrote:
>> Στις 8/11/2013 10:31 πμ, ο/η Chris Angelico έγραψε:
>>> On Fri, Nov 8, 2013 at 7:20 PM, Νίκος Αλεξόπουλος
>>> <nikos...@gmail.com> wrote:
>>>> Fortunately for me they have all failed.
>>>> That means that i have *actually* made security of my scripts stronger.
>>>>
>>>> Now whoever called me incompetent should think again before he
>>>> accused me of
>>>> so. :-)
>>>
>>> https://en.wikipedia.org/wiki/Hubris
>>>
>>> ChrisA
>>>
>>
>>
>> I have said this not out of arrogance but to shut some mounts calling me
>> complete incompetent.
>
> Ignoring the bit about shutting mounts, which shows how much effort you
> ever put into anything that you post, actually here I agree with you.
> But don't get too excited, it's only because "completely" isn't a strong
> enough adjective to use for your level of incompetence.
>


You wouldn't be able to write the scripts i have written.
All you do is criticize me, but you never ever have posted code to
anything i have asked.

Perhaps you can't even write a simple script.

Chris Angelico

unread,
Nov 8, 2013, 9:52:29 AM11/8/13
to pytho...@python.org
Mar-Kal El-awrence! Able to leap tall bridges in a single bound, more
powerful than a steaming (and fuming) Greek webmaster, the Man of
Silicon, BREAMOREBOY!

ChrisA
just finished watching this year's "Man of Steel" movie, and was
disappointed despite low expectations

Mark Lawrence

unread,
Nov 8, 2013, 9:52:22 AM11/8/13
to pytho...@python.org
I feel no need to jump but thank you anyway. When your customers start
taking legal action for you exposing their data, and when I start
visiting your web site and demanding data on my usage which you must
provide in accordance with EU law, then I'm hoping that you'll be kind
enough to us do this favour and jump. Failing that the blow lamp and
piece of iron are still available, I just wish they'd been used months
ago. No, I withdraw that last comment, the previous months have led to
some of the funniest threads I've ever seen on this list, and you've
been at the heart of them. Thank you for making me laugh my socks off.

Mark Lawrence

unread,
Nov 8, 2013, 9:58:01 AM11/8/13
to pytho...@python.org
On 08/11/2013 09:37, Νίκος Αλεξόπουλος wrote:
>
> You wouldn't be able to write the scripts i have written.
> All you do is criticize me, but you never ever have posted code to
> anything i have asked.
>
> Perhaps you can't even write a simpel script

I may be drunk, Miss, but in the morning I will be sober and you will
still be ugly. Winston Churchill.

Mark Lawrence

unread,
Nov 8, 2013, 9:55:26 AM11/8/13
to pytho...@python.org
On 08/11/2013 09:39, Νίκος Αλεξόπουλος wrote:
>
> You wouldn't be able to write the scripts i have written.
> All you do is criticize me, but you never ever have posted code to
> anything i have asked.
>
> Perhaps you can't even write a simple script.

That's again correct. Everytime a question gets asked on the tutor
mailing list, I read about it in the manuals, something that to my
knowledge you've never done, then I post a reply. I never reply to you
as I've no expertise in using Python on web sites, plus it's a waste of
time as you ignore the advice anyway.

Joel Goldstick

unread,
Nov 8, 2013, 9:59:55 AM11/8/13
to Mark Lawrence, pytho...@python.org
On Fri, Nov 8, 2013 at 4:58 AM, Mark Lawrence <bream...@yahoo.co.uk> wrote:
> On 08/11/2013 09:37, Νίκος Αλεξόπουλος wrote:
>>
>>
>> You wouldn't be able to write the scripts i have written.
>> All you do is criticize me, but you never ever have posted code to
>> anything i have asked.
>>
>> Perhaps you can't even write a simpel script
>
>
> I may be drunk, Miss, but in the morning I will be sober and you will still
> be ugly. Winston Churchill.
>
isn't that ulgy?
>
> --
> Python is the second best programming language in the world.
> But the best has yet to be invented. Christian Tismer
>
> Mark Lawrence
>
> --
> https://mail.python.org/mailman/listinfo/python-list



--
Joel Goldstick
http://joelgoldstick.com

Νίκος Αλεξόπουλος

unread,
Nov 8, 2013, 10:00:54 AM11/8/13
to
I have never exposed my client's data. Prove otherwise.

The only legal action that will happen will take place in your
Asperger's Syndrome sick imagination.

Mark Lawrence

unread,
Nov 8, 2013, 10:00:10 AM11/8/13
to pytho...@python.org
On 08/11/2013 09:52, Chris Angelico wrote:
> On Fri, Nov 8, 2013 at 8:34 PM, Νίκος Αλεξόπουλος <nikos...@gmail.com> wrote:
> Mar-Kal El-awrence! Able to leap tall bridges in a single bound, more
> powerful than a steaming (and fuming) Greek webmaster, the Man of
> Silicon, BREAMOREBOY!
>
> ChrisA
> just finished watching this year's "Man of Steel" movie, and was
> disappointed despite low expectations
>

Thank you for shouting out the name of the village that's at *THE*
center of *THE* universe :)

Νίκος Αλεξόπουλος

unread,
Nov 8, 2013, 10:05:58 AM11/8/13
to
Στις 8/11/2013 11:55 πμ, ο/η Mark Lawrence έγραψε:
> On 08/11/2013 09:39, Νίκος Αλεξόπουλος wrote:
>>
>> You wouldn't be able to write the scripts i have written.
>> All you do is criticize me, but you never ever have posted code to
>> anything i have asked.
>>
>> Perhaps you can't even write a simple script.
>
> That's again correct. Everytime a question gets asked on the tutor
> mailing list, I read about it in the manuals, something that to my
> knowledge you've never done, then I post a reply. I never reply to you
> as I've no expertise in using Python on web sites, plus it's a waste of
> time as you ignore the advice anyway.
>


I never ignore advices.
I read all answers as carefully as i can.
But nevertheless sometimes i feel things should have been better
implemented using my way.

Not of course that i know better, but thats better suited for me in the
level iam.

Chris Angelico

unread,
Nov 8, 2013, 10:09:26 AM11/8/13
to pytho...@python.org
On Fri, Nov 8, 2013 at 9:00 PM, Mark Lawrence <bream...@yahoo.co.uk> wrote:
> On 08/11/2013 09:52, Chris Angelico wrote:
>> Mar-Kal El-awrence! Able to leap tall bridges in a single bound, more
>> powerful than a steaming (and fuming) Greek webmaster, the Man of
>> Silicon, BREAMOREBOY!
>
> Thank you for shouting out the name of the village that's at *THE* center of
> *THE* universe :)

I've no idea where that village is - or even that it's a village - all
I did was take your superhero name from your email address. :)

ChrisA

Chris Angelico

unread,
Nov 8, 2013, 10:13:10 AM11/8/13
to pytho...@python.org
On Fri, Nov 8, 2013 at 9:05 PM, Νίκος Αλεξόπουλος <nikos...@gmail.com> wrote:
> I never ignore advices.
> I read all answers as carefully as i can.
> But nevertheless sometimes i feel things should have been better implemented
> using my way.
>
> Not of course that i know better, but thats better suited for me in the
> level iam.

Nikos: "How can I use a hammer to put in screws?"
Us: "Use a screwdriver instead."
Nikos: "But I want to use a hammer! Why does my house fall apart? I
used screws, they're supposed to be better!"

ChrisA

Maarten

unread,
Nov 8, 2013, 11:08:39 AM11/8/13
to
On Friday, November 8, 2013 11:00:54 AM UTC+1, Ferrous Cranus wrote:

> I have never exposed my client's data. Prove otherwise.

'Hackers' enter your database. How is that not exposing client's data? Or is this just your development machine? That would prove you learnt at least something here.

Judging from the questions and the code quality you post here, it is only a matter of time before accidents happen.

Maarten

Tim Delaney

unread,
Nov 8, 2013, 1:12:23 PM11/8/13
to Νίκος Αλεξόπουλος, Python-List
On 8 November 2013 21:00, Νίκος Αλεξόπουλος <nikos...@gmail.com> wrote:
I have never exposed my client's data. Prove otherwise.


Or don't you consider giving the root password for a server containing client data to a complete stranger to be "exposing" that data?

Tim Delaney

Antoon Pardon

unread,
Nov 8, 2013, 1:27:58 PM11/8/13
to pytho...@python.org
Op 08-11-13 11:05, Νίκος Αλεξόπουλος schreef:
>
> I never ignore advices.

I doubt that. You have too often come back with the same
question some time after it was answered a previous time
for this to be credible.

> I read all answers as carefully as i can.

Then your reading skills leave much to be desired.

> But nevertheless sometimes i feel things should have been better
> implemented using my way.

That is ignoring advice. Implementing things in a way that goes against
the advice of those who know better, is what people mean by "ignoring
advice"

> Not of course that i know better, but thats better suited for me in the
> level iam.

Faulty code is better suited for the level you are in?

--
Antoon Pardon

Mark Lawrence

unread,
Nov 8, 2013, 1:30:36 PM11/8/13
to pytho...@python.org
On 08/11/2013 10:00, Νίκος Αλεξόπουλος wrote:
>
>
> I have never exposed my client's data. Prove otherwise.

If your site has successfully been hacked *TWICE* then by definition
your clients data has been exposed. Didn't you also hand out your
password, that's really secure, isn't it?

>
> The only legal action that will happen will take place in your
> Asperger's Syndrome sick imagination.

I must be winning as you've now had to resort to insults. I assume that
you're jealous because my "Asperger Syndrome sick" mind knows what
"TypeError: 'NoneType' object is not iterable" actually means. You
couldn't work it out despite Steven D'Aprano literally spelling it out
in words of one syllable or less.

Mark Lawrence

unread,
Nov 8, 2013, 1:31:02 PM11/8/13
to pytho...@python.org
On 08/11/2013 10:05, Νίκος Αλεξόπουλος wrote:
>
> I never ignore advices.
> I read all answers as carefully as i can.
> But nevertheless sometimes i feel things should have been better
> implemented using my way.

The only relational database that has no relationships as effectively
there's only one table, despite what Denis McMahon (amongst others?) has
said.

>
> Not of course that i know better, but thats better suited for me in the
> level iam.

And better suited to your customers as you've never exposed their data
have you? Apart from...

Mark Lawrence

unread,
Nov 8, 2013, 1:40:32 PM11/8/13
to pytho...@python.org
Don't they teach geography down under? Surely everybody has heard of
Breamore, after all I was born (yes born :) there? :)

Oh and if anybody is looking for a small holiday home how about this, I
was born in the room behind the top window second from the right
http://www.rightmove.co.uk/property-for-sale/property-40834711.html

Νίκος Αλεξόπουλος

unread,
Nov 8, 2013, 1:48:16 PM11/8/13
to
Στις 8/11/2013 3:12 μμ, ο/η Tim Delaney έγραψε:
> On 8 November 2013 21:00, Νίκος Αλεξόπουλος <nikos...@gmail.com
> <mailto:nikos...@gmail.com>> wrote:
>
> I have never exposed my client's data. Prove otherwise.
>
>
> https://mail.python.org/pipermail/python-list/2013-June/648550.html
>
> Or don't you consider giving the root password for a server containing
> client data to a complete stranger to be "exposing" that data?
>
> Tim Delaney


I gave the root password to Chris because i was under the false(as
proven) impression that he was gonna actually help my code.

If i knew, that this wasn't his intention i would not give it away.

Antoon Pardon

unread,
Nov 8, 2013, 1:53:44 PM11/8/13
to pytho...@python.org
Op 08-11-13 14:31, Mark Lawrence schreef:
> On 08/11/2013 10:05, Νίκος Αλεξόπουλος wrote:
>>
>> I never ignore advices.
>> I read all answers as carefully as i can.
>> But nevertheless sometimes i feel things should have been better
>> implemented using my way.
>
> The only relational database that has no relationships as effectively
> there's only one table, despite what Denis McMahon (amongst others?) has
> said.

I thought that in a relational database, the tables were the relations.
So a database with one table, defined one relation.

--
Antoon Pardon

Antoon Pardon

unread,
Nov 8, 2013, 1:55:52 PM11/8/13
to pytho...@python.org
Op 08-11-13 14:48, Νίκος Αλεξόπουλος schreef:
So you exposed your clients' data. That it wasn't your intention doesn't
change that.

--
Antoon Pardon

Νίκος Αλεξόπουλος

unread,
Nov 8, 2013, 1:57:25 PM11/8/13
to
Στις 8/11/2013 3:30 μμ, ο/η Mark Lawrence έγραψε:
> On 08/11/2013 10:00, Νίκος Αλεξόπουλος wrote:
>>
>>
>> I have never exposed my client's data. Prove otherwise.
>
> If your site has successfully been hacked *TWICE* then by definition
> your clients data has been exposed. Didn't you also hand out your
> password, that's really secure, isn't it?
>
>>
>> The only legal action that will happen will take place in your
>> Asperger's Syndrome sick imagination.
>
> I must be winning as you've now had to resort to insults. I assume that
> you're jealous because my "Asperger Syndrome sick" mind knows what
> "TypeError: 'NoneType' object is not iterable" actually means. You
> couldn't work it out despite Steven D'Aprano literally spelling it out
> in words of one syllable or less.
>


Of course i know what it means. It says it clearly.

An object returned None as a result, and None is not something we can
iterate upon. My question was actually referring to the reason of that
object being empty instead of holding value(s) within it. It was more of
a supreise that it didn't return back any data.

Mark Lawrence

unread,
Nov 8, 2013, 2:02:34 PM11/8/13
to pytho...@python.org
On 08/11/2013 10:09, Chris Angelico wrote:
> On Fri, Nov 8, 2013 at 9:00 PM, Mark Lawrence <bream...@yahoo.co.uk> wrote:
>> On 08/11/2013 09:52, Chris Angelico wrote:
>>> Mar-Kal El-awrence! Able to leap tall bridges in a single bound, more
>>> powerful than a steaming (and fuming) Greek webmaster, the Man of
>>> Silicon, BREAMOREBOY!
>>
>> Thank you for shouting out the name of the village that's at *THE* center of
>> *THE* universe :)
>
> I've no idea where that village is - or even that it's a village - all
> I did was take your superhero name from your email address. :)
>
> ChrisA
>

Poor old Nikos wouldn't even qualify as Bicycle Repair Man. In fact I
doubt that he can ride a bike, or even a trike for that matter :)

Aurélien DESBRIÈRES

unread,
Nov 8, 2013, 1:56:03 PM11/8/13
to Mark Lawrence, pytho...@python.org
Mark Lawrence <bream...@yahoo.co.uk> writes:

> On 08/11/2013 10:09, Chris Angelico wrote:
>> On Fri, Nov 8, 2013 at 9:00 PM, Mark Lawrence <bream...@yahoo.co.uk> wrote:
>>> On 08/11/2013 09:52, Chris Angelico wrote:
>>>> Mar-Kal El-awrence! Able to leap tall bridges in a single bound, more
>>>> powerful than a steaming (and fuming) Greek webmaster, the Man of
>>>> Silicon, BREAMOREBOY!
>>>
>>> Thank you for shouting out the name of the village that's at *THE* center of
>>> *THE* universe :)
>>
>> I've no idea where that village is - or even that it's a village - all
>> I did was take your superhero name from your email address. :)
>>
>> ChrisA
>>
>
> Don't they teach geography down under? Surely everybody has heard of
> Breamore, after all I was born (yes born :) there? :)
>
> Oh and if anybody is looking for a small holiday home how about this,
> I was born in the room behind the top window second from the right
> http://www.rightmove.co.uk/property-for-sale/property-40834711.html
>
> --
> Python is the second best programming language in the world.
> But the best has yet to be invented. Christian Tismer
>
> Mark Lawrence

Hacked? or Cracked?

Because if they hacked your database, do they give to python.org the way
to correct it?

http://www.gnu.org/philosophy/words-to-avoid.html#Hacker

"False words are not only evil in themselves, but they infect the soul
with evil." --Pato



--
Aurélien DESBRIÈRES
Run Free - Run GNU.org

Mark Lawrence

unread,
Nov 8, 2013, 2:09:15 PM11/8/13
to pytho...@python.org
On 08/11/2013 13:57, Νίκος Αλεξόπουλος wrote:
> It was more of a supreise that it didn't return back any data.

You're still surprised that *YOUR* crap code doesn't return data,
funnier by the minute.

"Here Nikos have some code and a database design that works".

"No I'm doing it my way".

Your one saving grace is that if someone decides to sue you there's not
much evidence. Apart from a few threads that you've started here, of
course.

Antoon Pardon

unread,
Nov 8, 2013, 2:44:55 PM11/8/13
to pytho...@python.org
Op 08-11-13 14:57, Νίκος Αλεξόπουλος schreef:
Yet reading the documentation of fetchone, would have informed you of
the reason and removed the surprise. Reading that documentation would
also have taken a minute at most. Yet instead of reading the
documentation and be informed within five minutes, you chose to waste
your time by repeatly coming here in the hope that someone would
spoon feed you. Even when you should know by now that people here
are getting less and less inclined to do so.

The way you behave looks like you are doing it purposeful in a way that
is least likely to be fruitful.

--
Antoon Pardon.

Νίκος Αλεξόπουλος

unread,
Nov 8, 2013, 3:15:47 PM11/8/13
to
Στις 8/11/2013 4:02 μμ, ο/η Mark Lawrence έγραψε:
> On 08/11/2013 10:09, Chris Angelico wrote:
>> On Fri, Nov 8, 2013 at 9:00 PM, Mark Lawrence
>> <bream...@yahoo.co.uk> wrote:
>>> On 08/11/2013 09:52, Chris Angelico wrote:
>>>> Mar-Kal El-awrence! Able to leap tall bridges in a single bound, more
>>>> powerful than a steaming (and fuming) Greek webmaster, the Man of
>>>> Silicon, BREAMOREBOY!
>>>
>>> Thank you for shouting out the name of the village that's at *THE*
>>> center of
>>> *THE* universe :)
>>
>> I've no idea where that village is - or even that it's a village - all
>> I did was take your superhero name from your email address. :)
>>
>> ChrisA
>>
>
> Poor old Nikos wouldn't even qualify as Bicycle Repair Man. In fact I
> doubt that he can ride a bike, or even a trike for that matter :)
>


If one of us were to feel sorry about himself, that would be you because
of suffering of Autism disorder.

You have demonstrated significant difficulties in social interaction and
behavior.

Seek help ASAP!

Mark Lawrence

unread,
Nov 8, 2013, 4:06:05 PM11/8/13
to pytho...@python.org
I haven't felt better in years so why should I feel sorry for myself?
Besides humour is a great thing, and with such a wonderful comedian as
yourself to boost my feelings, what more could I ask for?

>
> You have demonstrated significant difficulties in social interaction and
> behavior.
>
> Seek help ASAP!

I don't need help thank you as I've already had it. You on the other
hand are past help.

But let's not waste any more time on this. Please get back to checking
your web site. She might have been hacking again. Or little fingers
from one of my highly paid contractors might have been up to no good.
Oh but I forgot, you've made it hacker proof now. You'll sleep much
better knowing your site is safe. Or is it?

unknown

unread,
Nov 8, 2013, 4:10:19 PM11/8/13
to
>
> You have demonstrated significant difficulties in social interaction and
> behavior.

Pot - Kettle
It is loading more messages.
0 new messages