Google
Web forums.dsstester.com

View Full Version : DSSFTP Subscription Info Hacked


toroechoguaquila
08-24-2006, 11:36 PM
C&P
Guys i had a sub thru dsftp and my tv went black this evening. Well i got this e-mail and it looks like everyone else that subbed with them did too.Im scared shitless could this be real?

To: DSSFTP End-User

From: DISH Network Signal Integrity

Subject: DISH Network Signal Theft Investigation

DISH Network Signal Integrity (DNSI) along with security provider NagraStar, has been conducting an investigation into a scheme designed by DSSFTP.com to defraud DISH Network.

This office has obtained information that you have been receiving programming for which you are not authorized. The investigation has revealed that you have had a receiver(s) activated on accounts associated with DSSFTP.com. You may be liable to D*sh Network for substantial damages.

The purpose of this email is to (1) advise you that your receiver(s) on these accounts have been disabled; (2) inform you that an investigation has confirmed the accuracy of the information; (3) and, that the investigation is ongoing.

You may contact us directly in order to discuss your options from 12:00 noon - 5:00 p.m. EST Monday through Friday. If you call outside these hours, leave your name and number and we will return your call. You can reach us at 1 800 562-2764.

DISH Network Signal Integrity

__________________________________________________ ________________

Below is a few posts from mili....C&P

Well it seems someone ran a brute force password cracker on the admin panel of the subsciptions program on my site then emailed every one of the subscribers a fake email deamanding this and that. I changed the password and put a .htaccess restriction on the interface. The only thing they got was receiver and cam IDs and emial addresses. Sorry guys there are a lot of assholes out there who spend 24-7 trying to screw me over. Ignore the emails they sent and I will email you all once I am satisfied they idiots are locked out.


Update

I was out all day running errands so I am just trying to catch up on this. I understand that many of the subs are down with red guide but not all. So most likely whover broke in was kind enough to send the CAM ID/Receiver ID and email address list to dishnet and had them turned off and indeed the letters originated from them. There is no customer data at all that was compromised only email addresses. This sucks ass indeed. Let me catch up on this and will post as soon as I got more info. Do not under any circumstances acknowledge the receipt of the email. They only got an email address nothing more.

mili
__________________________________________________ ________________

more...

I am sorry guys I fucked up indeed. No excuse. The good thing is no names addresses nothing was compromised except email addresses and card/IRD numbers.

mili
__________________________________________________ ________________

more...

C & P

Some accounts are still up and your guess is as good as mine why. It maybe down tomorrow who knows. Watch it while you can.
I got about a 1000 email in my inbox now and I am a one man enterprise. I need you to only email your cust# and if you are up or down. THat is it for now.
And no I don't see how I can go on selling this for now. Camkid lost his job thanks to this.

mili
__________________________________________________ ________________

reply from a customer...

Thats not a good thing for me. Dish has my e-mail addy from the sub i canceled to get your sub. All they have to do is check who the R0 number was sold to originaly. In my case the email addy will match the one they got from your "fuck up" I dont think being sorry is gonna keep them from putting 2 and 2 together to find out who alot of us are. I normaly use a different e-mail for things that may be a little shady... This time i didn't.

__________________________________________________ ________________

Looks like Nagra or someone they hired hacked mili's site. Of course "test" as a password wasn't very hard to brute force & hack in to.

It almost has to be Nagrastar to de-activate the accounts so quickly. Normally they are very slow to respond .. This looks bad for Mili & customers.. Only time will tell, but as you can see Nagrastar has become far more pro-active now and is even sending out letters like dave did. All the more reason why cardless is the safest route. Please people use your heads when doing anything on the net.. Use anonymous email accts. like msn, yahoo & others. If you were using mili's sub or services, DO NOT RESPOND to any emails! For the record, the number in the email IS the CORRECT # for DN Signal Integrity! This is a precautionary warning for our members more than anything else... Be careful out there, Charlie ain't playing nice anymore!.. Be safe & stay close to home.

2easy
08-25-2006, 01:41 AM
For anyone involved with Mili you may want to look here.

http://www.legal-rights.org/

Hondo
08-25-2006, 02:55 AM
I see this as a serious development and I feel for all of the people who just got left out (or hung out).

Charles has certainly upped his game lately...

johniedoe
08-25-2006, 03:05 AM
Not Good at all.

Looks like there'll be a lot of ird's selling cheap on fleabay while peeps try to dump the evidence.

Good Luck to all.

DoctorNik
08-25-2006, 06:52 AM
it's too late to dump the evidence though... even though milli says they 'only' got the email addy,,, well as one person has already said,, he used is real one.. how many others done the same ? Most people that would use his service would not be savvy enough to realize the 'danger' they were stepping into,, and would blunder along leaving trails all over...

at least milli is taking responsibility,, but.. too little too late...

sorry for the guys that are getting caught

SpooN-FeedeR
08-25-2006, 07:41 AM
We'll see...Past history Dish usually throws it's tail between it's legs when it comes to suing endusers. There have been a few people sued in the past but not to to extent to twart people from stealing their signal. Maybe Dish will make examples of the people they can connect with Mili's sub service. Maybe they will go on a campain just like DTV. Worst case...your out several grand. Not the end of the worl, nothing to lose sleep over.

DoctorNik
08-25-2006, 08:30 AM
well, actually, worst case is it goes federal and criminal.. depending what DN wants to do and what message they want to send...

SpooN-FeedeR
08-25-2006, 08:37 AM
I would think if they go that route would they would have to have a pretty solid case, not sure if IP alone will do it, maybe, I'm no lawyer...I'm sure in Civil, they only need to have preponderance of the evidence. I never really kepted up on what happen to those people that got sued by DTV, if many that went to court lost due to preponderance.

Caracallynx
08-25-2006, 10:03 AM
I work for a city IT department in transport. Just for common information.

If a crime has been committed I can get a home address from an IP in 2 days.


I first reverse resolve the IP address to get a who-is. I contact the ISP by phone and report my incident and request. I explain that I will have a subpoena on their desk in the morning or they can by gentleman’s agreement and to avoid personal legal problems provide it to me now. 95% of ISP will give names and home addresses immediately. If they are reluctant I contact the local police fill out a police report and a subpoena is issued immediately and I have the information by the next day. Note: Once AOL has identified you as a sys admin you no longer need subpoenas they will just pass the info along.

All ISP retain information even if the IP is dynamic they are required to maintain time stamp records of who has that IP at what time.

I have received address in Africa, France, Korea, and of course USA. I have never been unable to get an address of a hacker. I have even received actual addresses from proxy server accounts out of a Zimbabwe proxy. Interpol is on top of internet crime.

So bluntly there is no place to hide on the internet if you use an account from a physical address.

I will get forty responses from pseudo hackers and script kitties who disagree but the true hackers will tell you unless your scammed into someone else’s network you can be traced just like a phone number.

This is an absolute no grey area.

DoctorNik
08-25-2006, 10:21 AM
Here is at least 1 responce from an old timer with a little common sense and even more experience than that..

and here's some plus reps for ya too..

excellent post..

Caracallynx
08-25-2006, 10:53 AM
Thanks Doc.

I don't really care if people do what they choose or I wouldn't hang out on this site. I just hate when people pass along cousins girlfriends brothers heard some one say law.

No matter what kind of denial you’re in I feel you need to have as many facts as possible.

It’s easier to keep your self safe if you know the rules to the game you’re playing.

><><><><><><><><><><

Now Testing:

Societies patience
Laws against humanity
Twinkies against Ho-Ho’s resistance to microwave energy

CM
08-25-2006, 11:54 AM
Lynx is a 100% right on the IP tracing
And Dish learned from Dave and will go civil.
Back in the days when Dave was sending letters out to everyone trying to scare them...the Federal/criminal aspect of case was really hard.
But the Civil was much easier and Dave switched mainly to that...you only need 51% for lack of a better term to get a guilty in Civil. Much Much easier
And I think Charlie will start to pull out even more stops. Milli got complacent and figured his set up was safe, feel sorry for those people that got popped
Saying Im sorry wont do squat for them
Im wondering if Dish will come after Milli? If so I bet he will roll and roll quickly

acs33
08-25-2006, 12:09 PM
damn ,I'm going to start having those Dave nightmares again


let DN make the first moves

qrb123
08-25-2006, 12:14 PM
Wow, this is very interesting indeed.

ralphcramden
08-25-2006, 12:22 PM
In this game , never reveal your true identity by email or otherwise and also in my opinion Do Not Answer any email or letter as it may be used against you ... do not admit to anything .. you dont know what they are talking about and keep that stance to the end ... they have to prove it but , is mili telling the truth ??? are email addresses all they got ? chances are you wont be told the truth about what was gathered .... :no: :wacko:




RC

ralphcramden
08-25-2006, 12:28 PM
Some accounts are still up and your guess is as good as mine why. It maybe down tomorrow who knows. Watch it while you can.
I got about a 1000 email in my inbox now and I am a one man enterprise. I need you to only email your cust# and if you are up or down. THat is it for now.
And no I don't see how I can go on selling this for now. Camkid lost his job thanks to this.


I wouldnt email him jack ... what if they bust him and find that too ? not good .. dont do it . lay low and dont do anything ...


RC

Hondo
08-25-2006, 12:33 PM
I suspect that Dish is not behind this "hack" into Mili's server database. What think is that one of Mili's competitors or enemies (and he certainly has his share) hacked in and obtained the information. I also think there's an excellent chance that the emails were not from Dish but from the hackers. Back in 2004 his server was repeated attacked by TMT with DDoS attacks. I wouldn't at all be surprised to see this as a similar effort. No matter how you slice this it's a serious and very damaging blow to Mili's business.

I just don't see Dish's legal department authorizing acting in any way, shape or form on illegally obtained information other than shutting down the IRD's or CAMs in question. Evidenciary rules are set up to exclude illegally obtained evidence and all of it would be considered fruit of the poisonous tree and thrown out. It could also lead to action being taken against Dish for the hack itself. If they use the info they directly tie themselves to a crime. Not gonna happen.

The most important thing I would advise anybody who got caught up in this is to NEVER respond to anything you get sent. Play ignorant, play stupid. I think (and hope) this will dry up and blow away.

CM
08-25-2006, 12:38 PM
Good point Ralph I wondered why ANYONE would take a knowingly illegal subscription and use a REAL email or a traceable email address
I mean you can use hushmail, hotmail etc.....at least dont use your real info etc
seems kinda strange but hey who knows

ralphcramden
08-25-2006, 12:42 PM
Yes that could be true like you said Hondo but the bad thing is , what if some of them who got that email actually do call dish and get theirselves in big trouble ... that would be a real bad thing for the ones who may panic and figure they best do as the email says .. hopefully nobody does that !


RC

DoctorNik
08-25-2006, 12:43 PM
I suspect that Dish is not behind this "hack" into Mili's server database. What think is that one of Mili's competitors or enemies (and he certainly has his share) hacked in and obtained the information. I also think there's an excellent chance that the emails were not from Dish but from the hackers. Back in 2004 his server was repeated attacked by TMT with DDoS attacks. I wouldn't at all be surprised to see this as a similar effort. No matter how you slice this it's a serious and very damaging blow to Mili's business.

I just don't see Dish's legal department authorizing acting in any way, shape or form on illegally obtained information other than shutting down the IRD's or CAMs in question. Evidenciary rules are set up to exclude illegally obtained evidence and all of it would be considered fruit of the poisonous tree and thrown out. It could also lead to action being taken against Dish for the hack itself. If they use the info they directly tie themselves to a crime. Not gonna happen.

The most important thing I would advise anybody who got caught up in this is to NEVER respond to anything you get sent. Play ignorant, play stupid. I think (and hope) this will dry up and blow away.


Word has it that mili's 'insider' was 'fired'.. so he is no longer any help...

now.. it's not said.. but fired could mean,, busted,, and the kid turned over the information knowing that an account with user test and pass test existed..(or even his own account).. therefore, DN got the information 'legally'.. not physically hacking the server...

the emails have been traced to the DN server as well.. now whether that was spoofed,, who knows for sure... mili doesn't think so..

ralphcramden
08-25-2006, 12:48 PM
Good point Ralph I wondered why ANYONE would take a knowingly illegal subscription and use a REAL email or a traceable email address
I mean you can use hushmail, hotmail etc.....at least dont use your real info etc
seems kinda strange but hey who knows


me too Celtic but it is probably because some people put too much faith in their info being protected by " server and info offshore or etc etc " or just didnt think about it when they signed up for it .. me myself i would never subscribe to anything like that with any site .. that is like painting a target right on my forehead .. just remember guys , your info is never protected enough to use your real info .. be safe and fake your info wherever possible ...

joer
08-25-2006, 01:15 PM
I suspect that Dish is not behind this "hack" into Mili's server database. What think is that one of Mili's competitors or enemies (and he certainly has his share) hacked in and obtained the information. I also think there's an excellent chance that the emails were not from Dish but from the hackers. Back in 2004 his server was repeated attacked by TMT with DDoS attacks. I wouldn't at all be surprised to see this as a similar effort. No matter how you slice this it's a serious and very damaging blow to Mili's business.

I just don't see Dish's legal department authorizing acting in any way, shape or form on illegally obtained information other than shutting down the IRD's or CAMs in question. Evidenciary rules are set up to exclude illegally obtained evidence and all of it would be considered fruit of the poisonous tree and thrown out. It could also lead to action being taken against Dish for the hack itself. If they use the info they directly tie themselves to a crime. Not gonna happen.

The most important thing I would advise anybody who got caught up in this is to NEVER respond to anything you get sent. Play ignorant, play stupid. I think (and hope) this will dry up and blow away.

Hondo,
You're right on the money about the "fruit of the poison tree" as it's called in the legal circle. The ONLY person I'd be talking to right now is my attorney. Show him what you've got and let him be the mouthpiece, that's what you pay him for. ANY correspondence, written, oral or otherwise should immediately be referred to the attorney. You're right, whoever presents the "preponderence of evidence will be the winner if it goes civil, which I'm sure it will after Dave's dismal failure with his criminal effort. Look stupid, act stupid and say stupid. In the ummortal words of Corporal Klinger "I know nothing!"
:hat: :beer:

Back to lurk mode,
jr

DoctorNik
08-25-2006, 01:20 PM
In the ummortal words of Corporal Klinger "I know nothing!"
I think I'm going to show my age....
it was actually Sgt Schultz that coined that phrase... in Stalag 13... ;)
Hogan's Heroes I believe...

joer
08-25-2006, 01:48 PM
I think I'm going to show my age....
it was actually Sgt Schultz that coined that phrase... in Stalag 13... ;)
Hogan's Heroes I believe...
Doc,
Of COURSE you're right! Aren't you always?:wow: I started the :beer: a little early today. Iwas in the hospital yesterday for a heart tune-up and I have to go again today fo another part of the body to get prepped for surgery. The old saying "It's better than being dead" is proving to be less and less of worth to me!

:hat: :beer: Live long and prosper! Doc Spock!!!!

Back to lurk mode,
jr

chuckles
08-25-2006, 02:17 PM
I know I'm a newbee but having been in the field of law for the past 25 years, The law says that a person has to have "cause to believe a crime has been committed". Along with that there has to be the "fruits of the crime"IE: cards, boxes and dishes,so if you have no "evidence" what crime has been committed? FTA(reg. channels) is legal. Cases have been won where the bottom line is" Did you see or do you have the item that was recieving that signal to give you all the other channels." No your honor, we don't have a box or a card...just a printout that says the suspect was getting the channels....The case is now no good and thrown out. I hope this helps and those involved read between the lines....Clean the DN stuff off the computor and get rid of the evidence

eldiablo
08-25-2006, 02:17 PM
Not Good at all.

Looks like there'll be a lot of ird's selling cheap on fleabay while peeps try to dump the evidence.

Good Luck to all.

johnnie, if you are a bystander/observer, why would anyone want to implicate
their name with someone, who will get a visit from Charlie..sooner or later.
buying one of those ird's, isn't helping yourself.

mackz
08-25-2006, 02:21 PM
came upon this on a sister site,is it true and any idea how much a good attorney will cost these days? l

c&p
i read something i think at dsscentral that Milli has worse problems with some company called Payzip,they have turned over their credit card records to dish and withheld thousands of dollars he might never see

could this be the reason why so many are now getting demand letters from dishnetwork?

do you think Mili will cooperate with them if he's arrested??

i feel sorry to some extent for his site members who actually beleived that he would always protect them and didnt have any email or financial records.

a lot of people and their families will be hurt by this if its true

God,i love this site and my viewsat extreme!

nogoodbum
08-25-2006, 02:40 PM
I have received similar emails over the past five or so years. I have never responded to any of them, and have never heard anything again. Only once have I received more than one email from the same entity. One even wanted a few hundred dollars and a letter admitting guilt, and a promise to never do it again. What B.S.! NEVER RESPOND TO THEM! Don't hire an attorney yet. My atty. usually requires a minimum of $2500 retainer. Why spend it when you don't need it yet and probably never will. Like Ralphcramden posted: "just lay low" Thats the best advice, ignore the emails and they will probably just go away.

Keltic
08-25-2006, 03:52 PM
I know I'm a newbee but having been in the field of law for the past 25 years, The law says that a person has to have "cause to believe a crime has been committed". Along with that there has to be the "fruits of the crime"IE: cards, boxes and dishes,so if you have no "evidence" what crime has been committed? FTA(reg. channels) is legal. Cases have been won where the bottom line is" Did you see or do you have the item that was recieving that signal to give you all the other channels." No your honor, we don't have a box or a card...just a printout that says the suspect was getting the channels....The case is now no good and thrown out. I hope this helps and those involved read between the lines....Clean the DN stuff off the computor and get rid of the evidence


I think Dave found a way around that. Take it to civil court so that the burden of proof is on the defendant.

As to what is happening with Mili, many of us have put out warnings about dealing with him and now some of our fears are coming to fruition. I see the end user being the one that takes loses out in this action. Mili can make all the claims of wait a week for me to get this worked out he wants. However, with his track record I wouldn’t hold my breath on my money. Remember the PayZip fiasco. Quite a few lost money and never received their orders over that one.
If I were the end user, in this case I would be doing everything possible to CMA. Don’t answer e-mails, change e-mails addys, go as far as getting a wireless router and not encrypting the signal. Then you can claim someone was using you signal. Nevertheless, be prepared, this could get worse before it gets better.

ironeddie
08-25-2006, 05:42 PM
I work for a city IT department in transport. Just for common information.

If a crime has been committed I can get a home address from an IP in 2 days.


I first reverse resolve the IP address to get a who-is. I contact the ISP by phone and report my incident and request. I explain that I will have a subpoena on their desk in the morning or they can by gentleman’s agreement and to avoid personal legal problems provide it to me now. 95% of ISP will give names and home addresses immediately. If they are reluctant I contact the local police fill out a police report and a subpoena is issued immediately and I have the information by the next day. Note: Once AOL has identified you as a sys admin you no longer need subpoenas they will just pass the info along.

All ISP retain information even if the IP is dynamic they are required to maintain time stamp records of who has that IP at what time.

I have received address in Africa, France, Korea, and of course USA. I have never been unable to get an address of a hacker. I have even received actual addresses from proxy server accounts out of a Zimbabwe proxy. Interpol is on top of internet crime.

So bluntly there is no place to hide on the internet if you use an account from a physical address.

I will get forty responses from pseudo hackers and script kitties who disagree but the true hackers will tell you unless your scammed into someone else’s network you can be traced just like a phone number.

This is an absolute no grey area.

the above is all true 100% doesnt matter what you use high speed static address or random generated ip from like a 56k modem if you signed up for internet service and you did they have got the goods on you no matter what you may think unless like he said you are hacked into someone elses network in which case the heat will come back to them.these are some troubling times we are about to go thru im afraid.chuck is not playing anymore id say it is out of desperation its either try to stop theft or go under and they know it!

Big Dismal
08-25-2006, 05:45 PM
Keep us informed....


Watch over at Millis what others are saying/doing. Check this and other web sites to see whats going on. See how other people handle this and see what happens. May even want to start some kind of group on the web at a centralized location so each of you can easily reach each other in case things change.

qrb123
08-25-2006, 10:37 PM
This is why people should not deal with business in this "hobby" just too high profile of a target....

Deal with guys who actualy do this stuff, or better yet, find crap at flea markets - I am shocked any one, much less thousands of people would by subs from a dealer, when you can find 4 family members, or friends, save $$, and not have any hassles...

C H I L L
08-27-2006, 01:19 PM
Word has it that mili's 'insider' was 'fired'.. so he is no longer any help...

now.. it's not said.. but fired could mean,, busted,, and the kid turned over the information knowing that an account with user test and pass test existed..(or even his own account).. therefore, DN got the information 'legally'.. not physically hacking the server...

the emails have been traced to the DN server as well.. now whether that was spoofed,, who knows for sure... mili doesn't think so..

What makes you think the kid(CAMkid) isn't mili?
I have researched few post CAMkid have and there very much similar to mili's post. Why are CAMkid's post not removed for security reasons???
He may have created that name as a fallguy just in case he ran into some serious issues in the future. So CAMkid keeps all the % since mili can't get any of it back..hmm..mil will only give back so much of a % to customers that have activations with the exception of ones that have not got activated yet.

Last summer mili opened a thread asking subscribed members for there account. In exchange they would get a free platinum sub to use it for sharing. I have looked for that post but seems the only archives that have stayed are after 2006.

Hondo
08-27-2006, 01:52 PM
What makes you think the kid(CAMkid) isn't mili?



Maybe it's because the setup required someone inside at DN to make it work and I SERIOUSLY doubt Mili is moonlighting for EchoStar.

My bet is that CAMkid is in some seriously deep shit right now. As in going to jail eventually. They have some really nasty law ontheir side if they choose to use it on him.

The number of paid shared subscriptions Mili used last year was VERY small. It took care of a very limited number of people. It was nothing like this deal at all.

magic0
08-27-2006, 01:59 PM
What makes you think the kid(CAM kid) isn't mili?
I have researched few post CAMkid have and there very much similar to mili's post. Why are Camkids post not removed for security reasons???
He may have created that name as a fall guy just in case he ran into some serious issues in the future. So CAMkid keeps all the % since mili can't get any of it back..hmm..mil will only give back so much of a % to customers that have activations with the exception of ones that have not got activated yet.

Last summer mili opened a thread asking subscribed members for there account. In exchange they would get a free platinum sub to use it for sharing. I have looked for that post but seems the only archives that have stayed are after 2006.


Now I like that conspiracy theory ......could it be true? .....It is possible..:yes:

C H I L L
08-27-2006, 02:28 PM
Maybe it's because the setup required someone inside at DN to make it work and I SERIOUSLY doubt Mili is moonlighting for EchoStar.

My bet is that CAMkid is in some seriously deep shit right now. As in going to jail eventually. They have some really nasty law ontheir side if they choose to use it on him.

The number of paid shared subscriptions Mili used last year was VERY small. It took care of a very limited number of people. It was nothing like this deal at all.

There is no accusations that mili worked for EchoStar. Great possibility he got hacked.

1: If you were a dealer or not would you keep CAMkid's account on site for security reasons? Why isn't it removed?

2: Do you know how many customers he had on the accounts? Lets not forget many did not continue there subscription in the fall due to N2 been comprimised.

3: You know how many have pm'd him to get a free platinum to use there account for sharing?

I know on the first day he made that thread 3 have said he has pm in public. How many more privately pm'd him?

Big Dismal
08-27-2006, 07:19 PM
He had or has someone in over at Dave too, but alot of people were having problems with those subs. Not to sure how he's doing it, but damn, talk about having some b@lls.

Big Dismal
12-07-2006, 05:05 PM
Been a few months now, just curious what became of this.
I had read a few weeks ago over at Millis about a few people getting some legal letters or emails and was getting various advice via threads on what to do. Some said tracking it that it was legit, some said it was B.S.. Just curious, hate to bring ot back up......

qrb123
12-07-2006, 05:41 PM
I doubt any one would have gotton any thing legal from dish. The info, whatever it was, came from illegal means.

Dish can't use any of it for anything inside of a court. They did what they could do, send desub to non legit subs, that they found out about, after that, they can't do anything.

eldiablo
12-07-2006, 06:05 PM
Can't see what DN would say to justify the means (in front of the judge).

.."You see judge, we hacked into milli's server so we can obtain the
identities of these pirate bastards..."

Somehow, can't fathom the receptivity to this argument!! (lol)

qrb123
12-07-2006, 06:08 PM
I doubt DN was behind it, I suspect one of milli's enemies, no small list of people there, did it, and emailed the info to signal integrity... But who knows?