#ask-bmc-unsolved

[ask-bmc-unsolved]

Does Michael is gay?

Michael: Absolutely

[cherryspice111]

man, I wanted to draw something for this au for a shit ton of time,,, 

@viv-thepinkninja and @artttho are such amazing, loving, creative people!!

the askblog is so good @ask-bmc-unsolved  !!

[lesducks]

there's rumors that jd's ghost haunts the 7/11 slushy machine and the bmc kids go full buzzfeed unsolved trying to summon him and since i don't remember if the pizza place eva works at has a name, it's now 7/11 and she's the one who let them in

I LOVE THIS SO MUCH

Christine and Michael getting really into it, the others being sceptical but still showing up, them calling Eva up and asking her to let them in. She’s filming the entire thing and it’s hilarious because, while JD’s ghost hates everyone and doesn’t interact with them, Farrah shows up and starts making the slushie machine go haywire and the BMC kids freak out

[ellieluna26]

Hi! Which fandoms do you write ships for? :)

The umbrella academy , the flash, supergirl, pll, arrow ,marvel ,dc, teen wolf, maze runner, glee, harry potter (any era), stranger things, friends, supernatural, ahs ,doctor who, sherlock, heros (the tv show),, fantastic beasts, brooklyn nine nine, the good place jurassic world, oitnb , that 70s show , grease , hairspray , hamilton , heathers , misfits , it (2017) , hunger games , bmc, deh, star wars, the office, parks and rec, the vampire diaries the originals, legacies, big hero 6, newsies, something rotten ouat, buzzfeed unsolved,, tim burton criminal minds swing kids, xmen, dead poets society, only murders in the building, split, outerbanks, house md, back to the future, family ties, narnia, bill and ted, peacemaker, and all of us are dead, thanks for asking

[e-mell-y]

Hey ghouls! The boys are here! 

Happy Birthday Gabs!! ( @noyvijespers ) ( @ask-bmc-unsolved )

[ratsghost]

Here have asks: I know you write fanfic so do you post it anywhere? (If you do I'd love to read it). When did you start your Tumblr account? Why did you follow me (I swear I legit screamed when I saw the notification saying you did)? What fandoms are you a part of?

Hi! I usually post my fanfics on archiveofourown. My username is Trashygaymeme, It’s a rly stupid name but I made my account a while ago and I can’t figure out how to change it lmao. Also warning my fics are from three years ago because I’m a hardcore procrastinator, and I only updated one of them last night for like the first time in a year. I started my tumbler acc. like 3-4 years ago? I was v smol then and I had no idea what I was getting into. I followed you cuz I was like “o!!! This person tends to send me asks a lot and they are very nice soooo imma follow them!” Technically ur my mutual now so wanna be friends?? I am a part of waaaayyy to many fandoms. I used to be huge in the mainstream musical fandom like bmc, deh, and those types but now I’m just in the corner with my box of Anastasia, My Fair Lady, and Next to Normal. I am definitely in the Thomas sanders fandom! Uhhh I’m kinda in the miraculous fandom? I looovvveee critical role. I’m also in the buzzfeed unsolved fandom but I get scared easily so I only take it in healthy doses. Uhhh Steven universe no doubt. And this answer is already too long so imma stop there! Message me if ya wanna hear more ig?

[augchamp]

a massive shitpost for the @ask-bmc-unsolved au,, finally. 

link to youtube video

[hecctometer]

Be More Chill Unsolved/ghosthunter au :0! for this ask blog @ask-bmc-unsolved 

[janeynewton]

viv talks about 2017

2017 was a year of a lot of friends and a lot of amazing people in my life. it had a lot of highs, and a lot of lows, but overall, it was much better than 2016. so here’s a little bit to my friends:

@phoenixwwitch - miranda!!!!! you’re one of the first friends i made this year. i got most of what i wanted to say on that note to you, but just. i love you so much, and everyone with TAC is amazing, and i love them all and just. i dunno what my year would be without any of you, and the continuous support i get from all of you. i hope your new year is amazing <3

(the ohana chat @sheepgirly @definiciious @wewerekindbefore @kombuchass @suntails @zip-zoom @morgan (who i don’t remember their url rn but when i figure it out ill tag u) @matt @tyler @mei @anyone i missed) - you guys really changed my year as well. you’ve taught me so many things about art. every one of you is amazing and i love you all so, so much. you truly made my summer a safe place, and the chat a place for me to rest and laugh and smile. im so glad i met all of you, especially because it was an accident? i just wanted to do a project with @sheepgirly (now our official mother) and it slowly became a huge group of friends. i hope 2018 is good to every one of you. i love you all so much.

@overcooked-spooks - val, you meant so much to me. you still do. im sorry things went the way they did, and that we’re not…. really friends anymore, but you were a support beam for a huge chunk of the year. i still play the song occasionally, or giggle about your whole rubbing alcohol thing. i hope the new year is good to you, and even though we’re probably never going to be as close again, i just want you to know you’re amazing. im glad i got to be your friend. and more

@ghostboyos / @artttho (i didn’t know which you’d see first :0) - GABBY!!!!!! dude i am so glad i met you via your bmc unsolved au. im so glad i decided to message you. i love you and all your aus!!! even if they make me sad sometimes!!!! i can’t wait to work with you more and see where @ask-bmc-unsolved will go!! <3

@connormurphweed - hailey. i am so lucky to have you as my friend. your writing is a blessing to this world, and ive never met anyone with the same amount of love for jeremy heere (except maybe chris). you’re so talented, and you’re just. always open to give love and advice. im so happy we’re friends, and i can’t wait to see you (at some point) during the new year!!!!!!!!! love you lots and lots my friend <3

@tinylittle-femalechrist - CHRIS! i love all of your aus. and your art. and being a friend to you! i hope that the new year is fabulous to you :0

@all-things-geekie - though im still having trouble pronouncing your name, im so so glad we’re friends!!!!! im glad you got to hear the rap skills of my baby sister, and just. love ur aus. i can’t wait to get to know you more over the new year and i hope it’s amazing for you!!!!!

@puglebug - my brother, the angst king. you never have a limit on excitement and you’re always so nice!!!! it’s nice fawning over boys with you, and just being excited together!!!!! i can’t believe i met you through a rarepair jdhdjakff <3

@twoplayergame - KAIT!! im never amazed with how optimistic and nice you are to me. you are officially my mom. i hope you have an exceptional new year <3

@e-mell-y @quirkyquills - HEY I LOVE YOU BOTH!!!! we don't get to talk all that often but know i love you!!!!!!!!

to anyone i missed - i love you, and i hope that your new year is just. absolutely amazing.

to myself - viv. you’ve worked really really hard over the last year. opportunities await in 2018. take them. seize every ounce of happiness you can find and hold it close. don’t forget to do ur homework. xoxo

[phanmoonmother-blog]

about me

hello it's past time i make this so here it is

name: alex

pronouns: he • him (currently transitioning ftm, was non binary pls accept me if u do I have cookies)

I guess I'm pansexual but I prefer women

im currently closeted to my family

i love Gerard Way

phil lester ™

favorite band is my chemical romance

favorite song is ode to sleep by tøp

I'm nervous 24/7

Please message me!!!! I love making friends!!

i can draw a bit ? I never post though

I have the worst sleep schedule ever!!

don't ask my follow count please!!

I get overexcited about a lot of things

I LOVE musicals (hamilton, deh, bom (kinda), bmc, heathers, Les mis, wicked)

favorite shows are supernatural, yuri on ice, voltron, stranger things

this is my main blog

I love buzzfeed unsolved (my account is spiritofcctinsley)

my gif tag is "mygif" or "mygifs" But i use mobile to make them so they suck (getting photoshop soon)

this blog is a safe spot for everyone!! no matter your skin color, sexuality, gender, race, etc

This blog is not a safe spot for racists, homo/trans/bi/pan/ace/etc phobes, pedophiles, porn bots, etc

please ask for advice!! or come message me!!

I love everyone!!

[ask-bmc-unsolved]

You guys ever run into some guys named the Winchesters? Two brothers?

Jeremy: We actually work with the Winchesters every day!

Michael: Chris and Brooke are the biggest Supernatural fans and its the cutest

[acxropolis]

Random Info Tag Meme

tagged by @emolette tagging @lambwhispers @parkinglottrash @welcome-to-the-emiverse Last song I listened to: you said okay by flatsound Last book you read/listened to: be more chill Favourite color: red Top three shows: the 100, izombie, buzzfeed unsolved Top three characters: lance mcclain (VLD), jeremy heere (BMC), and liv moore (iZ) Top three ships: klance (VLD), tree bros (DEH), and boyf riends (BMC) 2) Rules: BOLD the statements that are true for you! APPEARANCE: I am 5'7" or taller: For those who use m (1,70m)  I wear glasses I have at least one tattoo I have at least one piercing I have blonde hair I have brown eyes I have short hair My abs are at least somewhat defined I have or have had braces PERSONALITY: I love meeting new people People tell me that I’m funny  Helping others with their problems is a big priority for me I enjoy physical challenges I enjoy mental challenges I’m playfully rude with people I know well  I started saying something ironically and now I can’t stop saying it There is something I would change about my personality ABILITY: I can sing well (????) I can play an instrument I can do over 30 pushups without stopping I’m a fast runner I can draw well I have a good memory I’m good at doing math in my head I can hold my breath underwater for over a minute I have beaten at least 2 people in arm wrestling I know how to cook at least 3 meals from scratch I know how to throw a proper punch HOBBIES: I enjoy playing sports I’m on a sports team at my school or somewhere else  I’m in an orchestra or choir at my school or somewhere else I have learned a new song in the past week I work out at least once a week I’ve gone for runs at least once a week in the warmer months  I have drawn something in the past month I enjoy writing Fandoms are my #1 passion I do or have done martial arts EXPERIENCES: I have had my first kiss I have had alcohol I have scored the winning goal in a sports game  I have watched an entire season of a TV show in one sitting I have been at an overnight event  I have been in a taxi I have been in the hospital or ER in the past year  I have beaten a video game in one day I have visited another country I have been to one of my favorite band’s concerts RELATIONSHIPS: I’m in a relationship  I have a crush on a celebrity I have a crush on someone I know  I have been in at least 3 relationships  I have never been in a relationship I have asked someone out or admitted my feelings to them I get crushes easily I have had a crush on someone for over a year I have been in a relationship for at least a year I have had feelings for a friend MY LIFE: I have at least one person I consider a “best friend” I live close to my school My parents are still together I have at least one sibling I live in the united states There is snow right now where I live  I have hung out with a friend in the past month I have a smartphone I have at least 15 CD’s I share my room with someone RANDOM SHIT: I have breakdanced I know a person named Jamie I have had a teacher with a last name that’s hard to pronounce I have dyed my hair I’m listening to one song on repeat right now  I have punched someone in the past week I know someone who has gone to jail I have broken a bone I have eaten a waffle today I know what I want to do with my life  I speak at least 2 languages I have made a new friend in the past year I have been given flowers before

[lbcybersecurity]

Drinkman and Smilianets Sentenced: The End to Our Longest Databreach Saga?

On Thursday, February 15, 2018, we may have finally reached the end of the Albert Gonzalez Databreach Saga.  Vladimir Drinkman, age 37, was sentenced to 144 months in prison, after pleading guilty before U.S. District Judge Jerome Simandle in New Jersey.  His colleague, Dmitriy Smilianets, age 34, had also pleased guilty and was sentenced to 51 months and 21 days in prison (which is basically "time served", so he'll walk immediately).  The pair were actually arrested in the Netherlands on June 28, 2012, and the guilty pleas had happened in September 2015th after they were extradited to New Jersey.

Those who follow data breaches will certainly be familiar with Albert Gonzalez, but may not realize how far back his criminal career goes.

On July 24, 2003, the NYPD arrested Gonzalez in front of a Chase Bank ATM at 2219 Broadway found Gonzalez in possession of 15 counterfeit Chase ATM cards and $3,000 in cash. (See case 1:09-cr-00626-JBS).  After that arrest, Gonzalez was taken under the wing of a pair of Secret Service agents, David Esposito and Steve Ward.  Gonzalez describes some of the activities he engaged in during his time as a CI in his 53 page appeal that he files March 24, 2011 from his prison cell in Milan, Michigan.

At one point, he claims that he explained to Agent Ward that he owed a Russian criminal $5,000 and he couldn't afford to pay it.  According to his appeal, he claims Ward told him to "Go do your thing, just don't get caught" and that Agent Ward later asked him if he had "handled it." Because of this, Gonzalez (who again, according to his own sentencing memo, likely has Asperger's) claims he believed that he had permission to hack, as long as he didn't get caught.

Over Christmas 2007, Gonzalez and his crew hacked Heartland Payments Systems and stole around 130 million credit and debit cards.  He was also charged with hacking 7-Eleven (August 2007), Hannaford Brothers (November 2007) where he stole 4.2 million credit and debit cards. Two additional data breaches against "Company A" and "Company B" were also listed as victims.  In Gonzalez's indictment, it refers to "HACKER 1 who resided in or near Russia" and "HACKER 2 who resided in or near Russia."  Another co-conspirator "PT" was later identified as Patrick Toey, a resident of Virginia Beach, VA.  (Patrick Toey's sentencing memorandum is a fascinating document that describes his first "Cash out trip" working for Albert Gonzalez in 2003. Toey describes being a high school drop out who smoked marijuana and drank heavily who was "put on a bus to New York" by his mother to do the cash out run because she needed rent money.  Toey later moved in with Gonzalez in Miami, where he describes hacking Forever 21 "for Gonzalez" among other hacks.

Gonzalez's extracurricular activities caught up with him when Maksym Yastremskiy (AKA Maksik) was arrested in Turkey.  Another point of Gonzalez's appeal was to say that Maksik was tortured by Turkish police, and that without said torture, he never would have confessed, which would have meant that Gonzalez (then acting online as "Segvec") would never have been identified or arrested.  Gonzalez claims that he suffered from an inadequate defense, because his lawyer should have objected to the evidence "obtained under torture."  These charges against Gonzalez were tried in the Eastern District of New York (2:08-cr-00160-SJF-AKT) and proved that Gonzalez was part of the Dave & Buster's data breach

On December 15, 2009, Gonzalez tried to shrug off some of his federal charges by filing a sentencing memo claiming that he lacked the "capacity to knowingly evaluate the wrongfulness of his actions" and asserting that his criminal behavior "was consistent with description of the Asperger's discorder" and that he exhibited characteristics of "Internet addiction."  Two weeks later, after fighting that the court could not conduct their own psychological exam, Gonzalez signed a guilty plea, agreeing that the prosecutor would try to limit his sentence to 17 years. He is currently imprisoned in Yazoo, Mississippi (FBOP # 25702-050) scheduled to be released October 29, 2025.

Eventually "HACKER 1" and "HACKER 2" were indicted themselves in April 2012, with an arrest warrant issued in July 2012, but due to criminals still at large, the indictment was not unsealed until December 18, 2013. HACKER 1 was Drinkman.  HACKER 2 was Alexandr Kalinin, who was also indicted with Drinkman and Smilianets.

Shortly after the Target Data Breach, I created a presentation called "Target Data Breach: Lessons Learned" which drew heavily on the history of Drinkman and Smilianets. Some of their documented data breaches included:

Victim Date Damages NASDAQ May 2007  loss of control 7-ELEVEN August 2007 Carrefour October 2007 2 million cards JCPenney October 2007 Hannaford November 2007 4.2 million cards Wet Seal January 2008 Commidea November 2008 30 million cards Dexia Bank Belgium Feb'08-Feb'09 Jet Blue Jan'08 to Feb '11 Dow Jones 2009 EuroNet Jul '10 to Oct '11  2 million cards Visa Jordan Feb-Mar '11  800,000 cards Global Payments Systems Jan '11 to Mar '12 Diners Club Singapore Jun '11 Ingenicard Mar '12 to Dec '12

During the time of these attacks, Dimitry Smilianets was also leading the video game world.  His team, The Moscow 5, were the "Intel Extreme Masters" champions in the first League of Legends championship, also placing in the CounterStrike category.   Smilianets turned out not to be the hacker, but rather specialized in selling the credit cards that the other team members stole.  Steal a few hundred million credit cards and you can buy a nice gaming rig!

Smilianets with his World Champion League of Legends team in 2012

 How did these databreaches work?

Lockheed Martin's famous paper "Intelligence-Driven Computer Network Defense Informed by Analysis of Adversary Campaigns and Intrusion Kill Chains" laid out the phases of an attack like this:

But my friend Daniel Clemens had explained these same phases to me when he was teaching me the basics of Penetration Testing years before when he was first starting Packet Ninjas!

1. External Recon - Gonzalez and his crew scan for Internet-facing SQL servers 2. Attack (Dan calls this "Establishing a Foothold") - using common SQL configuration weaknesses, they caused a set of additional tools to be downloaded from the Internet 3. Internal Recon - these tools included a Password Dumper, Password Cracker, Port Scanner,  and tools for bulk exporting data 4. Expand (Dan calls this "Creating a Stronghold")  - usually this consisted with monitoring the network until they found a Domain Admin userid and password.  (for example, in the Heartland Payments attack, the VERITAS userid was found to have the password "BACKUP" which unlocked every server on the network! 5. Dominate - Gonzalez' crew would then schedule an SQL script to run a nightly dump their card data 6. Exfiltrate - data sent to remote servers via an outbound FTP.

In Rolling Stone, Gonzalez claims he compromised more than 250 networks

In the Rolling Stone article, "Sex, Drugs, and the Biggest Cybercrime of All Time" , Steven Watt, who was charged in Massachusetts for providing attack tools to Gonzalez in October 2008.  Watt's tools were used in breaches, including BJ's Wholesale Club, Boston Market, Barnes & Noble, Sports Authority, Forever 21, DSW, and OfficeMax.  As part of his sentencing, Watt was ordered to repay $171.5 Million dollars.

Almost all of those databreaches followed the same model ... scan, SQL Inject, download tools, plant a foothold, convert it to a stronghold by becoming a domain admin, dominate the network, and exfiltrate the data. 

How did the TARGET Data breach happen, by the way?  Target is still listed as being "Unsolved" ...   but let's review.  An SQL injection led to downloaded tools, (including NetCat, PSExec, QuarksPWDump, ElcomSoft's Proactive Password Auditor, SomarSoft's DumpSec, Angry IP Scanner (for finding database servers), and Microsoft's OSQL and BCP (Bulk Copy)), a Domain Admin password was found (in Target's case, a BMC server monitoring tool running the default password), the POS Malware was installed, and data exfiltration begun. 

Sound familiar???

Justice?

With most of Gonzalez's crew in prison by 2010, the data breaches kept right on coming, thanks to Drinkman and Smilianets. 

Drinkman, the hacker, was sentenced to 144 months in prison. Smilianets, the card broker, was sentenced to 51 months and 21 days, which was basically "time served" -- he was extradited to the US on September 7, 2012, so he'll basically walk.

Will Smilianets return to video gaming? to money laundering? or perhaps choose to go straight?

Meanwhile, Alexandr Kalinin, of St. Petersburg, Russia; Mikhail Rytikov, of Odessa, Ukraine; and Roman Kotov, of Moscow, Russia, are all still at large.  Have they learned from the fate of their co-conspirators? or are they in all likelihood, scanning networks for SQL servers, injecting them, dropping tools, planting footholds, creating strongholds, and exfiltrating credit card data from American companies every day?

Kalinin (AKA Grig, AKA "g", AKA "tempo") is wanted for hacking NASDAQ and planting malware that ran on the NASDAQ networks from 2008 to 2010.  (See the indictment in the Southern District of New York, filed 24JUL2013 ==> 1:13-cr-00548-ALC )

Mykhailo Sergiyovych Rytikov is wanted in the Western District of Pennsylvania for his role in a major Zeus malware case.  Rytikov leased servers to other malware operators.  Rytikov is also indicted in the Eastern District of Virginia along with Andriy DERKACH for running a "Dumps Checking Service" that processed at least 1.8 million credit cards in the first half of 2009 and that directly led to more than $12M in fraud.  ( 1:12-cr-00522-AJT filed 08AUG2013.)  Rytikov did have a New York attorney presenting a defense in the case -- Arkady Bukh argues that while Rytikov is definitely involved in web-hosting, he isn't responsible for what happens on the websites he hosts.

Roman Kotov, and Rytikov and Kalinin, are still wanted in New Jersey as part of the case 1:09-cr-00626-JBS (Chief Judge Jerome B. Simandle ). This is the same case Drinkman and Smilianets were just sentenced under.

The post Drinkman and Smilianets Sentenced: The End to Our Longest Databreach Saga? appeared first on Security Boulevard.

from Drinkman and Smilianets Sentenced: The End to Our Longest Databreach Saga?

[ask-bmc-unsolved]

Jeremy: Yeah, he really is.

[ask-bmc-unsolved]

I just saw Stephanie Hsu as Karen the computer in the SpongeBob musical! It made me wonder, is Christine any good with computer stuff?

Christine: i help with most of the set up and checks!! I was the president of the Computer Science Club in highschool, it was really cool!

[ask-bmc-unsolved]

When Jeremy got possessed, what did the ghost or demon make him do?

Jeremy: I just… i just needed to be able to protect Michael… he’s always the one getting hurt and… i couldn’t stand around and see him get seriously injured… that’s what the squip promised…