Page 1 of 2

Someone else is contributing to my TEAM

Posted: Wed Nov 25, 2009 10:28 pm
by maxthompson
Today I viewed the status of my team 175186.

I used the hex hey for extra security.

I started the team to utilize some of my network computers that have intel duo and not being used now.

But - instead of my user being credited - a non team member called louze001 is getting the credit for the process. my userid shows 0.

So - since I just started this - I have to wonder - can I trust this situation - security is key and if someone that want's to donate - and others want to take the credit???

Please explain if someone knows before I disable usage.

Below it does not even show me as a team member and those credits below belong to me (maxthompson). Who the heck is "louse0001"?



ROCKET360

Report generated on 14:02:43 November 25, 2009
Date of last work unit 2009-11-25 12:14:53
Active CPUs within 50 days 1
Team Id 175186
Grand Score 383 (certificate)
Work Unit Count 2 (certificate)
Team Ranking (incl. aggregate) 63783 of 168865
Home Page

Team members
Rank
(within team) Donor Score WU
1 louze001 3

Re: Someone Hacked my New Team

Posted: Wed Nov 25, 2009 10:34 pm
by maxthompson
OK - So this is really strange - like just 1 minute after this post - someone modified the Team Status. Now I am showing, with less credit - and "louse0001" still showing.????

How can this be?

I've been in IT for 33 years - I know when to smell a fish!

Re: Someone Hacked my New Team

Posted: Wed Nov 25, 2009 10:41 pm
by maxthompson
Credits that belong to me are still being credited to louse0001 - who is louse0001?

How did they Hack the process off my computer. Maybe Stanford will have to address this Security Hack ASAP.

Re: Someone Hacked my New Team

Posted: Wed Nov 25, 2009 11:04 pm
by Grandpa_01
That's odd I just checked your team page (175186) and it shows Rocket360 with 4 WU's and a score of 803 no other members no louse0001

Re: Someone Hacked my New Team

Posted: Wed Nov 25, 2009 11:07 pm
by maxthompson
Yep - this is not good. Who is hacking the system and who needs to be notified?

The stats have been changed between my last post and by Grandpa_01 » Wed Nov 25, 2009 6:04 pm.

Re: Someone Hacked my New Team

Posted: Wed Nov 25, 2009 11:46 pm
by Slash_2CPU
Decent chance it was a stats "hiccup," and the credit never actually changed.

Re: Someone Hacked my New Team

Posted: Wed Nov 25, 2009 11:53 pm
by patonb
You now have 4 wus, with 3 as louis and 1 as max

Re: Someone Hacked my New Team

Posted: Wed Nov 25, 2009 11:56 pm
by maxthompson
Just ran the stats - same as before - so not sure what Grandpa_01 » Wed Nov 25, 2009 6:04 pm was looking at - unless they have two stat engines???


ROCKET360

Report generated on 15:47:18 November 25, 2009
Date of last work unit 2009-11-25 14:11:54
Active CPUs within 50 days 2
Team Id 175186
Grand Score 803 (certificate)
Work Unit Count 4 (certificate)
Team Ranking (incl. aggregate) 56905 of 168871
Home Page


Team members
Rank
(within team) Donor Score WU
1 louze001 467 3
2 maxthompson 336 1

Re: Someone Hacked my New Team

Posted: Thu Nov 26, 2009 12:20 am
by P5-133XL
The first thing you do when there is a suspicion that you are not getting credit for your WU's is to check your clients configuration and their logs. Who is listed as the user and what is the team number? Invariably, it is not that someone hacked something but that either the user name is incorrect or the team number is wrong and all that you have to do is reconfigure.

Please do not use a text editor to reconfigure but rather reconfigure from within the client. The client.cfg is NOT a text file! If you edit the file it is common that the file gets destroyed and all your work goes to anonymous...

Re: Someone Hacked my New Team

Posted: Thu Nov 26, 2009 3:07 am
by bruce
Use of the passkey is still in the process of of being implemented on the servers. It doesn't prevent anyone from contribituing to your team but eventually I expect you will be able to identify those contributions which used it.

The person louze001 is running four clients, one of which is crediting your team. The other three cleints are crediting a team number with one different digit. Obviously they've made a typographic error. I have no way to contact them to inform them of the error unless they show up here and ask why their team credits are too low. Nobody named louze001 has joined this forum.

Re: Someone contributed to my New Team

Posted: Thu Nov 26, 2009 5:44 am
by 7im
And just for the record, nothing was hacked. This is just a misunderstanding of how the crediting process works for user names and team numbers. And a title edit might be in order. No use scaring people...

Edit by Mod: Done.

Re: Someone contributed to my New Team

Posted: Fri Nov 27, 2009 4:17 am
by maxthompson
No - something is still not right - I'm not scaring people. In fact louze001 is still getting credit for the processes that are running on my machine.

My CPU is generating all the work that is posted for it. I have monitored the processing and no credit is being made to my CPU's

This team was created and immediately louze001 started getting my credit - now there is no way that some random person joined my team the same moment I created the team.

Hey I've been in IT for over 30 years - so it's not a mystery of what - but why and how.

If I am going to trust you to use my CPU's then - Why are you dismissing this as a fluke.

And if your systems are so Glitchable/ FLUKE-ish - how can you produce reliable scientific data??? - this is 2009 and the old GLITCH story dosen't fly.

SO next time I say someone HACKED my Team - let's find the problem and not glaze - and DO NOT ALTER my valid concern post TITLE - as Someone Contributed - ha this is a slap in the face of a donation.

I'll be contacting the University Admin Next week.

Best Reguards

Re: Someone HACKED my TEAM

Posted: Fri Nov 27, 2009 4:21 am
by maxthompson
As you can see below - my CPU's have been processing non stop - although the credits are still going to louze001. Louze001 is not running these processes - my CPU's are.


ROCKET360

Report generated on 19:53:13 November 26, 2009
Date of last work unit 2009-11-26 00:06:37
Active CPUs within 50 days 2
Team Id 175186
Grand Score 1305 (certificate)
Work Unit Count 7 (certificate)
Team Ranking (incl. aggregate) 52163 of 168933
Home Page http://fah-web.stanford.edu/generic.html


Team members
Rank
(within team) Donor Score WU
1 maxthompson 672 2
2 louze001 633 5

Re: Someone HACKED my TEAM

Posted: Fri Nov 27, 2009 4:43 am
by bruce
Please post FAHlog.txt from the clients which are being credited to louze001 and we'll get this straightened out. According to the information I have, the most recent credits for those clients are
Intel Windows 2009-11-24 20:05:55 P4626 R20 C90 G42
Intel Windows 2009-11-26 12:07:26 P4602 R14 C83 G19
PS3 -PS3 2009-11-26 18:12:25 P3462 R29 C176 G21
AMD Windows 2009-11-26 20:07:05 P6316 R26 C12 G9

Re: Someone HACKED my TEAM

Posted: Sat Nov 28, 2009 1:41 am
by 7im
To repeat what Bruce said above... louie is a valid user, but mistyped his/her team number (by one digit) in one of the 4 clients s/he is using to donate to Stanford. That mistake just happens to be your team number. Louie is not taking your work, s/he is simply adding to your team totals (in addition to your donations) by mistake.

Yes, please post your fah logs so we can see more details about what may be going on with your clients. And while your clients may have been running non-stop for several days, how many work units have your clients actually completed? Remember, it can take several days just to complete a single work unit. Again, your logs will show that, or may show something else completely.

And I'm glad you've had some IT experience, so then you will understand well the information I am going to present... Stanford takes security very seriously, and has various checks in place to prevent what I would describe as a third person hack. First, the fah client can only be downloaded from Stanford, so we know the client has not been hacked unless someone did so on your computer. (With your IT experience, we'll just assume that didn't happen.) Next, completed work units will only be accepted by the Stanford work servers when that WU is sent back to Stanford from the same fah client ID on your computer which that WU was originally assigned to at the start. Again, unless someone hacked your computer, and has your Client ID, the Stanford server won't accept the work unit for credit from another source. And if someone can hack the 2048 bit digital signatures that FAH uses en route to your system, in the 2 days time it takes to complete your work units, then the world has bigger problems, and much more likely targets than your fah client. ;)

I apologize if we have seemed dismissive. I can see where our confidence in the strong security of the fah clients and servers, and the excellent 10 year (clean) track record might be misinterpreted. Basically, whatever you configured in your client for a fah user name and team number is where the points will be credited. I can't rule out some new glitch at Stanford, but let's just say it's very unlikely. So again, please post your fah log contents. Thank you.

References: FAH FAQ: What about security issues?