Token of Appreciation

Getting a server error. We’ll email Steve

Bandwidth Limit Exceeded

The server is temporarily unable to service your request due to the site owner reaching his/her bandwidth limit. Please try again later.
Apache/1.3.37 Server at www.rackandroll.alakmalak.net Port 80

I assume this includes NEM’s?

Thanks Kathie and Jenny for the quick replies!!

I’m sure this puts some people at ease now. lol

I included me, so go for it!

What was that email again?

Mark,
Of course!!!
The NEM’s are recognized as important members of a team.:slight_smile:
The NEMO annual meeting is even listed in the “Essential Information” this year.

To address the other questions:

Not all areas have Senior Mentors. Steve is trying to reach out to the areas where he might not be able to capture the mentor names.
I sent him the 50 that I know of attending from Maryland from FVC, FLL and FRC. We have mentors (and a student from each team) from many of the Baltimore area teams attending after an invite from Team 1727, the Chesapeake RCA winner. A stuffed bus!

I was asked by Steve Cramer from FIRST to post his e-mail.
scremer@usfirst.org.

Steve works for FIRST and is collecting the names of 4 mentors from each team to be able to give them a special gift delivered to their pit at the Championship.

YES this is for real … I checked.

The problem is that the response to the link he provided cannot handle the traffic ( I offered Chiefdelphi.com next year).

Time is short! He needs your team number and the 4 mentors you want to get a gift - ONLY four please.

E-mail him if you have not already done so.

Nobody said anything about the site owner’s nationality. The main “proof of a hoax” seemed based on the impossibly short deadline, the fact that other pages on the site also asked for personal information, and the lack of obvious identification on the original email. I think it’s reasonable to expect that official communication from FIRST would come from an official FIRST source, not from an AOL address.

…the problem was not one of bandwidth…

No?

Bandwidth Limit Exceeded

The server is temporarily unable to service your request due to the site owner reaching his/her bandwidth limit. Please try again later.

Without looking at the server logs, it seems plausible that this was just the “slashdot effect” of having a URL published in a spot where a large number of curious people see it all at once.

I’m sorry, but I believe your above statements are not true. Look, go see it. It is there. It is not hacked: it is insecure. Malicious people can prey on our mentors with this publicly accessible data. This is not safe. Outside people know that these are FIRST team mentors, who will be out of town for a few days they have a full name, and a full phone number, and with that, can easily obtain a home address. I wouldn’t want to return home after Atlanta to find my door busted through, and all my valuables gone. I appreciate your efforts in recognizing the mentors, but I don’t think their recognition needs to come at the cost of putting them at risk for home invasion, or identity theft due to an insecure website done last minute. This is the day and age of internet safety and security. Your publicly accessible list is not safe, nor secure. Please make it so. FIRST prides itself on safety. It shouldn’t be limited to only the pit area.

The only thing that set alarms off in my head was the fact that a phone number was asked for. I’m used to short, often rushed, deadlines in the FIRST community, the book submission being one of them. I didn’t see the actual website, however, just a warning of exceeded bandwidth. I still didn’t provide any phone numbers when I emailed Steve, but not because I didn’t have any onhand, but because anyone can make up an email address with anything as the @address.com using AOL now.

I hope this is for real, and I don’t doubt now that it isn’t.

Sorry, but may I suggest that FSM emails not be posted in public forums? I believe they are sent to specific emails only and are not for general release.

Jackie,

While I thank you for your concerns regarding this issue, I hope that you realize that those who were weary were trying to protect their mentors.

Personally, I wasn’t too fond of the idea. It was not a usfirst.org website, nor a usfirst.org email address. That automatically raises red flags to someone whose father’s credit card has been stolen 4 times, 2 of which were online transactions. Yes, we were only asked to provide names, however when I clicked on the link sent in the email sent to me, the page did not exist, I had to follow the link in this thread.

Which brings me to my next point on how the site likely was hacked. The email’s content was posted in this thread in an attempt to verify validity. There are hundreds of spiders here each day, and I imagine that the website was logged onto by one of those.

I am continuously grateful to all of the senior mentors out there and hope that they can all step out of the shadows a bit so that if a similar mass blast needs to be sent out in the future, we’ll all know who it is from, and trust without confusion

Quite a bit more trust would have been established if it had been hosted by FIRST, NEMO, a team, or some other group associated with FIRST. It would also have been helpful to say on the page who was handling this (FIRST, NEMO, a team, a state planning group, individuals, etc). The lack of these clues, in addition to the very large security hole (both for privacy and for the server), made many of us seriously question the validity of the whole setup.

Having said that, I wish to apologize to Steve Cremer and the FIRST community at large for playing a major role in taking down the server. By taking out a legitimate site, no matter what other good doing so did, I did wrong. Nothing I say above or below changes this.

(Detailed explanation deleted by Mike Aubry Team 47 Chief Delphi)

(Detailed explanation deleted by Mike Aubry Team 47 Chief Delphi)

Understand that at the time I had good interests in mind – protecting the FIRST community from phishing attacks.

This is also a good lesson for all those involved - webmasters writing forms, PR people writing pages, and all of us keeping our eyes out. I misunderstood the intent of the website, partly from the lack of information on the site, partly from my lack of research. I learned about unintended consequences and Murphy’s law (I try to do a good thing and it turns out I’m hindering another good thing and hurting my own community).

Again, none of this excuses the fact that I unknowingly attacked and took down a legitimate site trying to accomplish an honorable goal – recognizing mentors. Everyone involved (which is almost everyone in FIRST) has a right to dislike me for it.

If you wish to talk to me more, I will be at championships.

PS - You’ll find every spoofed team has a team number greater than or equal to 2500.

Wow. Just… wow. I understand that you realize this was wrong, but do you realize that this action would have been wrong even if it was not a legitimate site? This action is simply never appropriate.

Please, to you and any others reading this. Learn to be a good net citizen and handle things like an adult. Actions like this are unacceptable and are the kinds of things that give smart, computer-savvy students like yourself a bad name.

This is very disappointing. I thought our community was better than that.

This member of our community was acting to protect the safety of many other members of our community. While what he did may not be right, it was with good intentions, and for the greater good really. Anyone could take the information from that site, call up these mentors, and say “Hi, I’m calling from FIRST, and it appears that there was an error in processing your Championship registration payment. I need to verify your credit card information or you will be dropped from the event.” or any number of other spoofs to sieze the identity of the innocent. He acted in the name of safety, and for that, we shall not punish him.

No. Good intentions do not excuse completely inappropriate behavior.

Correct action would have been contacting FIRST, contacting the owner of the site, posting here on CD, contacting the senior mentors, any number of things. Many of those things were already being done anyway.

Breaking the law (yes, he broke a federal law doing this!), even if you claim the intentions are valid, is not acceptable!!!

True, but likewise, good intentions (honoring our mentors) do not excuse pure ignorance (the publicly accessible list).

And in regards to breaking the law, I have about six thousand spam e-mails. I’m not spending tax dollars to investigate every one of those and lock up every one of those senders, and I’m thinking the rest of America wouldn’t either.

But, I’m beginning to engage in a one-on-one discussion here, which is against CD rules, so,I’ll stop now.

It’s the championship folks! Let’s leave CD behind, and admire the incredibly awesome artforms about to show their stuff in this oh so magnificent game we play!

There’s an old saying: “The road to hell is paved with good intentions”

Doing wrong, even while intending to do good, is wrong. The proper thing to have done was to report the possible phishing to the proper people (in this case the webmaster of the site, FIRST, and possibly the FBI {as federal laws may be being broken}).

Vigilanteeism (and thats what this is) is never acceptable, and should not be condoned by any community, especially one that proports itself as being GP.

It is my hope that Astronouth7303 and the rest of the CD community have learned from this experiance that it is better to work within the system than to take it upon oneself to go outside the laws.

I’ve thought about this, and I do have to agree. The creation of the site to recognize the mentors seemed like a rushed effort. The takedown of the site was also a rushed effort. Neither was done properly. Both sides did some wrong here, and everyone has learned something, and I think we can move on. Can I get a thread close?