HostNun Abbey Violated by WHMCS Insecurity

[GVH-Jon]

So to clear things up even further:

It was made clear in the previous HN thread that they were one of our resellers. The [email protected] email is the email that we give to resellers for them to register us an account on their helpdesk for us to reply to their clients' tickets as a part of our free end user support service.

 

[drmike]

So does GreenValue provider free ticketing then for resellers or just in limited cases or?

 

[GVH-Jon]

So does GreenValue provider free ticketing then for resellers or just in limited cases or?

If they have a helpdesk they can create a support operator account for us on their helpdesk and set email notifications to [email protected]. When we get notifications that one of their clients opened a tech support ticket, we log into their helpdesk ASAP and give our best effort to help them out in their tech support dept. We don't do sales, billing, management, none of those things for our resellers and we don't snoop around their data and such.

End user support is provided upon request only

Nothing abnormal there.

 

[Jack]

That would be Blacklotus -- Blacklotus was breached by Vypor aka Taylor Hayden Smyth - a 16 year old kid, he proceeded to compromised more then 15 hosts and "dox" the hosting company owners and staff(release all their detaisl).

Blacklotus requested he removed the database backup, he told them to, and I quote fuck off - therefore Blacklotus took it in to their hands to contact the FBI. In addition there was over $20k in fake orders processed before Blacklotus knew they were compromised.

When did Blacklotus get hacked? Did they inform clients?

 

[Virtovo]

When did Blacklotus get hacked? Did they inform clients?

Being a client, I can safely say no.

 

[vRozenSch00n]

<snip>. I discovered that Jon was/is still in high school on LET </snip>

Really? Care to share the link?

I have nothing against youngsters starting a business at an early age, as long as they embrace the facts that they are entering a world where responsibility and mature attitude really counts, so they are transparent in doing their business. 

Just to be clear, the following paragraphs has nothing to do with HostNun or GreenValueHost:

 

It is unfortunate that I encountered some youngster providers who stated in their offer that they are experts that have years of experience, then in another thread they ask the forum of how to set up OpenVZ containers or IP provisioning. :angry:

Other problem with some of them is they started shilling and spam the forum.

example: http://lowendtalk.com/discussion/19657/welovevps-com

Edit: clarification and example line added.

 

[drmike]

We used to have our WHMCS with GVH. We bought a reseller plan with them in the summer of 2013 because the price was right, not knowing that they were run by a teenager at the time. We no longer have our WHMCS with them. They offered 'end user support' at the time time, hence 'Yekaterina' (lol...). However, not once did their EUS ever respond to a support ticket. I discovered that Jon was/is still in high school on LET a few weeks ago, which explains a lot about the way he communicates w/ people, but not necessarily the quality of his hosting.

 

Congrats on your ten gallon junior NSA fedora, drmike, but I think the real question here is why are you obsessed with Host Nun? This is the second thread you've started about us.

 

Are you literally admitting to 'compromising our WHMCS' in order to 'get the dirt on GVH' or something? Because lmfao...

Also, why is this in 'Industry News'? Host Nun has nothing to do with 'VPS Industry News' lol.

I haven't much time this morning, I have to go brave the arctic weather again.

"We bought a reseller plan with them in the summer of 2013 because the price was right, not knowing that they were run by a teenager at the time."

Oh come on Jon and his buddy - well one of them is done with high school.    So much for due diligence.  Lured by those crazy prices.  

I've known Jon's approximate age since he started making offers quite a while back.  That said, age is just a number.  Not a reason to disqualify someone.  Ageism.

"Obsessed with Hostnun?"  Nah, not quite.   Just on my naughty/cautious list.  You really operate this religious slander as a brand?

Compromising your stuff to get dirt?  No, I use this thing called a search engine.  You happen to be found on a list of hosts who were compromised to some extent.    The day I stoop to compromising your stuff or anyone else's is probably the same week you/them would be put out of business forever.

 

[SrsX]

When did Blacklotus get hacked? Did they inform clients?

Probably not... However, ou can search a few sites to find it.





Wondering whom "ZMS" is? That's none other than Zeekill - a finland kid, who thinks hes a FBI agent... or something like that.

If you want to rage at him on skype: ihateblackpeople12345

 

[drmike]

That Vypor chap outing DOX on BlackLotus is a perplexing mess ---> http://pastebin.com/TLrPJA0F

Attacks BlackLotus for filtering for: niggermania.net and godhatesfags.com.

Then goes on to attack the owner(s) of BL as faggots a whopping three times.   

What a waste of talent/skills on Vypor's part.

 

[SrsX]

That Vypor chap outing DOX on BlackLotus is a perplexing mess ---> http://pastebin.com/TLrPJA0F

Attacks BlackLotus for filtering for: niggermania.net and godhatesfags.com.

Then goes on to attack the owner(s) of BL as faggots a whopping three times.   

What a waste of talent/skills on Vypor's part.

You'd love to speak to ZMS (zeekill) if you want to talk about Vypor. They're butt buddies, if you want some real dirt on Vypor (Taylor Hayden Smyth), ask Intangir.

 

[drmike]

I wish these folks would use their skills for something good instead of shear mess making.   

Black Lotus protecting free speech = good.  Liberal mentality exhibited by el hacker of intolerance of language against their pet causes is perplexing.  Considering both blacks and gays have benefited and exploited both free speech and additional "special" speech.  Good when it's benefits them, bad when the opposition embarks on the same.   

I remember when free speech was a bastion of liberalness.  So was privacy and general anti big brother state.  Now, often a 180 degree turn.  That's why liberal causes have lost me as a supporter.

Plenty of real docs to unearth and they aren't utility / phone / BW bills on private citizens.  Rather, they are the big corporations, military and government and the people that run such.

Of course, these modern hackers won't dare do that since the nature of a swatting their way might included missiles and instant death.  Glad I grew up when hackers (some) used their skills for real good instead of political hot potato games.

 

[HN-Matt]

It appears tail end of October that HostNun was another, ehh victim of WHMCS insecurity.  Prayer probably isn't going to make things better in this instance.

1:HN-Matt:[email protected]:0d12d19d25f7a455a7f91166d365ca


2:HN-Laura:[email protected]:12a4e0bb36c4b9ae82a28f09b7572d


4:HN-Yekaterina:[email protected]:15d40d77ebff4eb9a9712d410b3174

NOTED:  [email protected] in the data....  Ho hum.

Edited:  last long value is actual hash..

We used to have our WHMCS with GVH. We bought a reseller plan with them in the summer of 2013 because the price was right, not knowing that they were run by a teenager at the time. We no longer have our WHMCS with them. They offered 'end user support' at the time time, hence 'Yekaterina' (lol...). However, not once did their EUS ever respond to a support ticket. I discovered that Jon was/is still in high school on LET a few weeks ago, which explains a lot about the way he communicates w/ people, but not necessarily the quality of his hosting.

 

Congrats on your ten gallon junior NSA fedora, drmike, but I think the real question here is why are you obsessed with Host Nun? This is the second thread you've started about us.

 

Are you literally admitting to 'compromising our WHMCS' in order to 'get the dirt on GVH' or something? Because lmfao...

Also, why is this in 'Industry News'? Host Nun has nothing to do with 'VPS Industry News' lol.

 

[HN-Matt]

In drmike's first creepy internet detective thread fraught with inaccuracies and stupid garbage, I asked if he was a pomeranian or a shih tzu and the thread was immediately locked for unknown reasons, so the question still stands.

Speculations are now leaning toward http://www.onechihuahua.com/heres-the-thing-i-am-a-chihuahua/

 

[HN-Matt]

That HN-Yekaterina entry looks mighty suspicious.

"Huuurrrrr, no biggie that some weirdo compromised their WHMCS, I'll act like a cop and call the compromised data 'suspicious' instead of pointing out the fact that some creep posted it to begin with."

 

[HN-Matt]

Duh, Yekatarina Samutsevich.  This whole HostNun charade was the blasphemous work of PussyRiot.

If proper notification procedures weren't followed then the customers were the real victims.

We have always updated our WHMCS immediately. What becomes most interesting in this thread is the materiality of the fedoras of those who nevertheless decided to come in through the back door.

 

[HN-Matt]

The stats on drmike: http://www.onechihuahua.com/stats/

 

[HN-Matt]

Now, a prayer for our friends at HostNun.

http://hostnun.net/drmike.png

 

[HN-Matt]

The day I stoop to compromising your stuff or anyone else's is probably the same week you/them would be put out of business forever.

& once your megalomania is finished putting the helpless nuns out of business forever, what's next, pal? Karma? What About, Like, Schopenhauer's Veil Of Maya? It Has A Veil Too, Bro. These Are The Days Of Are Lifes...

 

Okay, drmike. I'm not angry at you for doing what you do, and I agree with a lot of what you're saying, but as a true supernoob, I find some of your methods bizarre. If you would kindly stop mistaking The Bad Internet Nuns Who Should Be Out Of Business for a fire hydrant the next time you start growling at GVH and giving them the yappy 'tude, we would be thankful. That and I'd have appreciated it if you had contacted us directly about the WHMCS exploit rather than doing an 'arf arf! doggy pastebin fetch!' with a singled out list of names. Like, what kind of 10 gallon fedora will compliment my next unwitting self parody of a blowhard internet detective weirdo? How can I best become an admirable lap dog sat atop the contemporary trash heap of NSA peeping-tomism?