Hackers Get Their Own Scoreboard and Rankings

wiredmikey writes "Sometimes hacking is about money; other times, it's about competition, and when that happens, it is also about getting a little credit. Enter RankMyHack.com. The site is described as the world's 'first elite hacker ranking system,' and invites people to submit proof of their Website hacks in exchange for points — the higher the points, the higher the place on the leader board. In order to get ranked, hackers need to prove they have indeed hacked a site – by inserting a predetermined text into the hacked site page. Rankmyhack then scans for the text in the page and gives score based on how popular the website is, with lower points awarded for XSS attacks. Assuming the site is real – and early reports indicate that it is – hackers can now see where their hacks stack up against those of their peers. Will this morph into a playground for hacktivists to hone their skills?"

This is ridiculous

[Anonymous Coward]

No true hacker does it for points.

Re:

[sakdoctor]

You got first post! You should definitely submit that.

Re:

[Zaiff Urgulbunger]

Following that train of thought.... if I signed up to that site, got my unique code and then posted it as a comment here, would I show as having hacked slashdot?

Re:

[cjb658]

How many points will I get if I hack rankmyhack.com?

Re:

[knappe duivel]

How many points will I get if I hack rankmyhack.com?

48

Re:

[stealth_finger]

How many points will I get if I hack rankmyhack.com?

All of them

Re:This is ridiculous

[Guignol]

Yes it is, and I am counting the minutes until rankmyhack.com is hacked to begin with so as to show bogus (well not that bogus in the end) scores...

Re:

[AngryDeuce]

I suspect that this site is going to be of the "pissing in an ocean of piss" variety in about 3 days.

Re:

[Canazza]

I suspect someone will find an XSS attack vector within 2

Re:

[blair1q]

Mod parent up. He's a l4m3r.

Re:

[PRMan]

And the first rule of getting away with a hack is never discussing it with anyone. Not that I hack, but I've had friends who were very good hackers that wouldn't tell me ANYTHING they had done.

Re:

[hedwards]

That was my thought, I'd be surprised if this particular site wasn't set up by law enforcement.

Re:This is ridiculous

[Anonymous Coward]

I've had friends who were very good hackers that wouldn't tell me ANYTHING they had done.

No, you've had friends who claimed they were very good hackers.

Re:

[ArsenneLupin]

Not that I hack, but I've had friends who were very good hackers that wouldn't tell me ANYTHING they had done.

So, how do you know?

Re:

[rioki]

RFC1149?

Hmmm

[WrongSizeGlass]

I guess I'll be visiting them to see where *I* should be looking on our clients' websites for these newer, praise-worthy shenanigans.

Well, well, well...

[fuzzyfuzzyfungus]

I'm going to express my full confidence that this site couldn't possibly be a trap.

Re:

[elsurexiste]

My thoughts exactly :) . It would be insane to submit your hacks.

Re:

[GameboyRMH]

What if I post from behind 7 proxies?

Squidink

[GodInHell]

It's a trap.

Run.

Re:

[phantomfive]

At the same time, if you can't post something on the internet without being traced, maybe you shouldn't be hacking websites to begin with.

Relatedly: I hereby announce that I am the greatest hacker in the world, and announce hereby IN FULL PUBLIC, that I shall HACK THE FRONT PAGE of Slashdot, and it shall never be traced back to me. You will know it was me, because I will post a story titled, "Customer Email Address Leaks," or "Graphene in Space Offers Clues to Life on Earth." I shall continue the hack i

Re:

[phantomfive]

That is, though I am the greatest hacker in the world, I cannot form HTML correctly. I meant, I shall post stories randomly selected from this page [goo.gl].

Re:

[rioki]

Yea, everyone knows that you don't hack into a gibson from home. That is retarded!

Re:

[blair1q]

And there's no fighting in the war room.

Re:

[blair1q]

One court order later, it will be.

Whois rankmyhack.com

[Anonymous Coward]

Current Registrar: FBI (Friendly-to Blackhat Institute)

I love this!

[MyLongNickName]

In fact, I posted my first hack there fifteen minutes ago. Wait... why's my doorbell ringing? No one ever visits...

I'll give it a week

[uigrad_2000]

I'll bet that the site remains unhacked for no longer than a week.

Re:

[cervesaebraciator]

... and is then promptly restored so the perpetrator can get points for taking it down.

Re:

[Psylok]

"rankmyhack.com is worth 48 Ranking Points.
XSS attacks against rankmyhack.com are worth 0 points. "

not really worth it. (if not for the fun of it)

Re:

[hedwards]

XSS attacks yield more lulz though.

Re:

[Amouth]

it's funny they give them selves a very very low point value compared to other sites.. they must not think much of them selves.

honeypot

[shentino]

ITSATRAP

Re:

[Anonymous Coward]

# dig rankmyhack.com ns

;; ANSWER SECTION:
rankmyhack.com. 264 IN NS ns1.fbi.gov.
rankmyhack.com. 264 IN NS ns3.fbi.gov.
rankmyhack.com. 264 IN NS ns2.fbi.gov.

Re:

[shentino]

shentino@localhost 1 ~ $ dig rankmyhack.com ns

; > DiG 9.7.3 > rankmyhack.com ns ;; global options: +cmd ;; Got answer: ;; ->>HEADER- opcode: QUERY, status: NOERROR, id: 43444 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;rankmyhack.com. IN NS ;; ANSWER SECTION:
rankmyhack.com. 83829 IN NS ns24.underhost.com.
rankmyhack.com. 83829 IN NS ns23.underhost.com. ;; Query time: 1 msec ;; SERVER: 127.0.0.1#53(127.0.0

Re:

[shentino]

Maybe, maybe not.

Setting up a scoreboard to attract hackers with big egos would be rather convenient if it was a trap. Maybe humor wasn't actually part of the question.

Re:

[Inda]

A fakeposting bullshitter?!!??!!?

On Slashdot?!?!?!?

Posting as AC?!?!?

On the internet?!?!?!?

Shut up!

Anyone else read this as "Hookers get their ..." ?

[ccandreva]

I was kinda disappointed when I saw the article.

Re:

[GameboyRMH]

Check this out:

http://www.somethingawful.com/d/weekend-web/beautifulcompanions-missbimbo.php [somethingawful.com]

(hope I copied that right from my phone)

Good

[i_ate_god]

I'd rather it be for karma then for lulz

OH you mean....

[Lumpy]

My DCI ranking is pretty high... Oh wait... Hacker not nerd....

Nevermind...

Re:

[sakdoctor]

Rank my epenis

Re:

[webmistressrachel]

Oh :-( Nobody can rank my epenis, because I'll never have one.

I once posted to a discussion here in which people were bragging about their gaming laptop specs, complete with link to a HP product page, and they referred to it as e-penis envy.

So even though I never thought about cocks, I was still a "lamer" cos my machine outspecced the boys' machines and I'm a woman, therefore don't qualify. :-(

I bet if I was a boy, I'd probably have a bigger one than half of you, or just a little less... </obviousgendert

Re:

[webmistressrachel]

Lol... 1st bite...

On a serious note, how is posting my specs in reply to other similar posts being a whiny bitch about it?

Re:

[webmistressrachel]

Mudkip is a Pokemon! It's a Mud-type pokemon, with Water and Ground-like attributes.

Lemme guess...

[AngryDeuce]

Aaron Barr's new site?

An image is worth a thousand word

[Zen-Mind]

If that site doesn't ring an alarm, them perhaps you should teach your children right-way to stay away from vans like this one [photobucket.com] as common-sense doesn't seem to be in your genes.

how much to hack rankmyhack.com?

[XaXXon]

48 points.

Surprised it doesn't have some smart-ass message when you type that in at the bottom to get how much it's worth.

Re:

[Sir Realist]

And the text you have to insert? "This site sponsored by the FBI." So apparently they're constrained by truth in advertising laws.

How many points to...

[Randwulf]

How many points to hack rankmyhack.com? :-)

Re:

[account_deleted]

Comment removed based on user account deletion

Re:

[archer, the]

13. Also an amusing character on House.

/. not worth a lot :(

[dufachi]

slashdot.org is worth 110132 Ranking Points. XSS attacks against slashdot.org are worth 1101 points.

Wow, real stupidity

[hesaigo999ca]

So technically, you are placing all the information of who hacked what and which site, so that someone can not only get a signed confession,
but also can let that webmaster know he has been hacked. Come on...I hope no real hax0r falls for this....
FBI head my warning, anonymous i r me, will reveal you to the world......

Won't it be constant question of..

[__aasehi2499]

Whether the number one ranked entity earned for hacking another website or this one?

a better hacking challenge

[Errtu76]

would be this site:

http://securityoverride.com/challenges/index.php [securityoverride.com]

at least it actually teaches you something

One stop shopping

[DarthVain]

for all your hacking prosecution needs...

if ever there was a website for the FBI etc... to hack and infiltrate that would be it.

Problem is, you are only going to get the hackers stupid enough to post there, which are likely too stupid too do anything too bad.

Maybe rename it scriptkiddies.com, of course then the FBI would really be all over you...

Re:

[gl4ss]

just name it rootshell.

oh the times when you could play warbirds with a generated cc and all you needed for root was to do an altavista search on the boxes version strings and instead of torrent you had just lists of ftp sites of public organizations with bad configs.

NSA.gov is Only Worth 2,497 Points?!?!

[InitZero]

Points are awarded based on the wrong algorithm. For example, NSA.gov is only worth 2,497 points but HomeDepot.com is worth 219,941? The Department of Homeland Security (dhs.gov) is worth 17,068 while facebook.com is 75,000,000? Really? Until the rankings better reflect the underlying difficulty and associated risk, I refuse to participate in this sham. Cheers, Matt

Re:

[Georules]

What exactly do you think would be interesting on the public webservers of the NSA or DHS government websites? I'd be willing to bet, not much. A few HTML files, some images. Pretty much everything you could get without hacking it.

This seems like a Gov fishing ploy!

[Paracelcus]

Think about it!
Get the immature, young, reckless wannabes to turn themselves in so that Eric Holder can trumpet his triumph over the EEEVILE hakorzz!

Re:

[DangerOnTheRanger]

Think about it!

That's asking too much of most people.

how about points are based on...

[PJ6]

how many you give yourself after hacking the site itself?

Hack Rank My Hack

[Tim12s]

Well it will be a very short time until someone hacks that site to come out with billions of points.

Honeypot?

Re:

[account_deleted]

Comment removed based on user account deletion