11 replies to this topic

[Bruce Klein]

I believe that Edward Younan (LifeMirage) has deleted all of ImmInst's Wiki pages.

The IP address from LifeMirage 24.148.91.56 vandalized ImmInst's Wiki by deleting all pages (which can be revived by going to history).

Here's the confirmation that this is LM's IP at ImmInst:
http://www.imminst.o...617

Username	Date	IP Address
LifeMirage	Sep 25 2005-21:06	24.136.6.72
uniquenutrition	Sep 17 2005-16:47	24.136.6.72
LifeMirage	Sep  8 2005-11:51	24.136.6.72
uniquenutrition	Aug 30 2005-05:04	24.136.6.72
LifeMirage	Aug 29 2005-23:39	24.136.6.72
--	--	--
LifeMirage	May 13 2005-19:13	24.148.57.20
uniquenutrition	May 11 2005-19:05	24.148.57.20
--	--	--
LifeMirage	Jun 8 2005-01:42	67.173.91.15
uniquenutrition	Jun 4 2005-07:44	67.173.91.15
--	--	--
uniquenutrition	Mar 9 2006-21:42	24.148.91.56*
LifeMirage	Mar 1 2006-12:36	24.148.91.56*
--	--
uniquenutrition	Mar 10 2006-14:22	67.176.147.11$
LifeMirage	Feb 10 2006-10:54	67.176.147.11$

Edit: * = added IP, based on new evidence. See the following post for details:
http://www.imminst.o...=40
Edit 2: $ = added IP, based on new evidence. uniquenutrition posted the following thread using the IP address 67.176.147.11:
http://www.imminst.o...f=137&t=9675&s=

(Bold added for emphasis)

[Bruce Klein]

Here's the log of vandalization (including the IP 24.148.91.56) of ImmInst's wiki:

Attached Files

•  lm_2.png   40.14KB   3 downloads

[Bruce Klein]

Maggy has blocked the IP 24.148.91.56 from ImmInst

---

Magdalena Donea: I blocked him via the main .htaccess file for the site
Magdalena Donea: you'll see in there now there are two lines, one that starts with Order... and another immediately under it that contains the IP
Bruce J. Klein: thank you, for me to do others, i would need to do so... ok, great
Magdalena Donea: it looks like this: Order deny,allow
Deny from 24.148.91.56

Bruce J. Klein: k
Magdalena Donea: you can add another deny line i think, or just replace the IP
Magdalena Donea: the ip, fwiw, belongs to: 24-148-91-56.stk-bsr1.chi-stk.il.cable.rcn.com
Bruce J. Klein: ah, ok..
Magdalena Donea: so if he hangs up and gets another IP, you can replace that whole router (assuming you have no other customers via cable from rcn.com, or none you'd mind denying. and you can then make it:
Bruce J. Klein: looks like chicago?
Magdalena Donea: Deny from chi-stk.il.cable.rcn.com
Magdalena Donea: yes, definitely chicago
Bruce J. Klein: k..
Magdalena Donea: what a fuss he's putting up. he must have time on his hands
Bruce J. Klein: yeah... pretty sad
Magdalena Donea: i wonder if you can complain to his isp
Bruce J. Klein: hmm... he'd probably be able to change, no?
Magdalena Donea: ok here we go: http://www.rcn.com/c...ss_agreemnt.php
Magdalena Donea: if you scroll down to IX. Acceptance by User
Magdalena Donea: and then to 1. Prohibities/abusive activities
Bruce J. Klein: k
Magdalena Donea: i'd say he's broken b, c, i, j, l, n and r
Magdalena Donea: and probably more
Bruce J. Klein: k..
Magdalena Donea: so if you contact rcn, they will probably at least suspend the account
Bruce J. Klein: k...
Bruce J. Klein: i'll need to bring to leadership first
Magdalena Donea: naturally! just a thought.
Bruce J. Klein: i think it's a good thought
Magdalena Donea: and if you continue scrolling, you'll actually see they have a complaint procedure you can follow, too
Bruce J. Klein: ok

[Mind]

Magdalena Donea: so if you contact rcn, they will probably at least suspend the account
Bruce J. Klein: k...
Bruce J. Klein: i'll need to bring to leadership first
Magdalena Donea: naturally! just a thought.
Bruce J. Klein: i think it's a good thought
Magdalena Donea: and if you continue scrolling, you'll actually see they have a complaint procedure you can follow, too
Bruce J. Klein: ok

Most definitely we should pressure rcn to suspend the account.

What time frame are we talking about when the vandalization occurred? I see the IP log shows March 1st (before the ban), in the second post it shows March 22nd, today (after the ban). Was this all pre-ban activity that we are just now finding out about? Or did it occur just last night/early morning?

[Bruce Klein]

The table of IPs in the first post (which is from the vote to ban LifeMirage and Steve Sliwa, and shows the IPs they shared before LM was banned) is posted in order to confirm that 24.148.91.56 is connected to LifeMirage. The image in the second post is from the ImmInst Wiki log, which shows that 24.148.91.56 was the IP which deleted all Wiki pages.

[Mind]

When were the Wiki pages deleted?

[jaydfox]

Interesting. Steve Sliwa is caught in a big fat lie.

He specifically told me over the phone last week that LifeMirage (Lee Crost) was no longer allowed to use his computer network, and I'm 80% sure that that is Steve's primary IP address for logging in lately.

So, either the vandalism was done by Edward or Lee (i.e., LifeMirage), or it was done by Steve Sliwa himself. Either way, he just lost what little benefit of the doubt I was willing to give him. We need to publish this.

Edit: If this IP isn't for Steve's place of work, then it's probably for his place of residence, or it's LifeMirage's place of work or residence. At any rate, the collaboration between the two is obviously not severed, unless Steve is willing to admit he was the one that deleted the pages.

Edited by jaydfox, 22 March 2006 - 09:07 PM.

[jaydfox]

I see Maggy suggested filing a complaint with his ISP. I suggest we do so.

BTW, he's getting sloppy, he's been so careful when attacking us to hide his IPs. Perhaps he just thinks we're incompetent? I'm somewhat offended he didn't at leasy try to mask his identity.

[jaydfox]

Steve Sliwa is caught in a big fat lie.
He specifically told me over the phone last week that LifeMirage (Lee Crost) was no longer allowed to use his computer network

When were the Wiki pages deleted?

Yes, when were the pages deleted? If they were deleted on, after, or shortly before March 14, then Steve lied to me.

Edit: In retrospect, I realize my call with Steve was March 14, not March 15. Prometheus's call was March 15, the day the site went down. For the curious, the site went down within a few minutes of when Prometheus called Steve, and then came back up about 50 minutes later. Then the site went down again, knocking out one of two routes to our site, perhaps 5 or 10 minutes or so after Prometheus's call with Steve ended.

Edited by jaydfox, 22 March 2006 - 08:57 PM.

[Bruce Klein]

As one can see from the second posted image posted above, the Wiki pages were deleted early this morning, Mar 22 between 3:18 and 3:27 AM

One can also see from the Wiki recent pages the IP and changes made:
http://www.imminst.o...l:Recentchanges

We can post this to membership.

[jaydfox]

Update:
Last night, a user PM'ed me to inform me that he spotted LifeMirage online last night. I was able to grab the following IP address and timestamp:
LifeMirage ( 24.13.8.242 ) Viewing Board Index Mar 29 2006-21:00

It should be noted for the curious that this did not match uniquenutrition's IP address from about four hours earlier in the day:
uniquenutrition ( 75.2.113.199 ) Viewing Online List Mar 29 2006-17:06

So as far as speculation over whether the original vandalism was LifeMirage or Steve Sliwa, as evidence I put forward a new Wiki vandalism effort:

Main Page; 02:01 . . 24.13.8.242 (Talk) (¨See Also)
Main Page; 02:01 . . 24.13.8.242 (Talk) (¨External links)

As you can see from the Wiki Recent Changes, all LifeMirage did was delete all the links under See Also and External links

I suppose his plan was to be more subtle this time, in the hopes that no one would catch him, and that the page would remain vandalized far longer. No such luck, however, as you can see that the page was fixed within about three hours.

Edit: In order for the wiki change log to make sense in this situation, keep in mind that the wiki times are GMT, and the 21:00 time I captured for LifeMirage when he was online was EST, or GMT -0500. So The wiki vandalism was actually at 21:01 EST, which makes more sense.

Attached Files

•  LifeMirage_Wiki_Vandal.gif   13.54KB   2 downloads

Edited by jaydfox, 31 March 2006 - 12:06 AM.