Chatroulette's Screenshot Collection of YOU

[Masterchat]

bigups to all the hunters, just wanted to give a shout out to Lulek by far The Coolest Hunter Around, @joeman @ellesjay and god damn waddup to the Don from Nigeria, SWOSH. This is your boy, feeling all sentimental n shit.

Neways, not going to let these barely lucid dreams keep me back from sharing with you all a little bit of entertainment.

Below, you will find over 4,000 photos that were saved from the chatroulette online storage, where chatroulette et. al (& Co. if you prefer, seeing as how the Russian is getting real serious) secretly hides their biggest perversion of all: that they store every1 that uses their site's photo.

The second you sign onto chatroulette, a screenshot is taken of your webcam and sent to chatroulette for screening. If algorithms don't detect that you're anything offensive, you'll be in the clear. If it's suspicious but perhaps not fully nude, the algorithm will toss your photo aside to a "Human" who can verify if it's inauspicious to Chatroulette's image, to have you with your balls out lips on the beer, hand on the bong.

Newayz, Andrey Ternovskiy is the biggest pervert of them all. That's the truth. He is a good guy, and I am happy for him, but I think it goes without saying that this is like his Private Collection, and he probably hovers around his computer, looking at his gigantic photo album (i'm sure it must have nearly a 100,000,000 photos of users by now) like it's his own personal scrapbook or toy.

Think of all the crazy, illegal, horrible things, that Andrey personally has evidence to on his webservers. LOL. There is no way any of that data is ever deleted. NOTHING ON THE INTERNET IS EVER DELETED. TRUTH. Once it's crawled by googlebot, it's practically PUBLIC DOMAIN! HA!

Enjoy to all, Greetz again to ELLESJAY who I see just logged into the forum, probably because she misses me :)


CLICK HERE TO DOWNLOAD THE 4,000 PHOTOS IN ONE .ZIP FILE
note: password is MASTERCHAT

[nbuzard]

Aww no what-up for me? I see how it is.

[Masterchat]

lol nbuzard, this very TOPIC, is implicitly the biggest ups to you of all, as of course we all know you were instrumental in discovering the very fact of the Russian's nefarious picture hoarding perversions

you are missed incredibly bro, how are things?

[nbuzard]

Things are great! I'm not really doing CR stuff any more but there's always something new to mess with! I'm having a little fun with "secure" "anonymous" file storage sites... Not having any luck with the attachment button tonight though.

[Masterchat]

Things are great! I'm not really doing CR stuff any more but there's always something new to mess with! I'm having a little fun with "secure" "anonymous" file storage sites... Not having any luck with the attachment button tonight though.

Attachment 56876

Sorry man I know I am really working on getting the forum internals working again, but god damn the attachments etc all really blow, it never really worked that well. I got to tell you about some new projects your boy is working on. Taught his self PHP and MYSQL, drank a few beers, caused a little mayhem.

been meaning to ask you--whats your opinion on the whole Bitcoin phenom? I remember stumbling upon it when bitcoins were trading a few $ per coin, months ago, and now it's like $17 a coin so your boy is all wet and upset thinking how he couldve had every Library computer in the Valley running that bitcoin miner back in the day...shit.

[nbuzard]

The fun thing about bitcoin is that nobody has heard of it. They're the new Linden, and in 10 years will be right where the Linden is now.

What sort of php/mysql mayhem did you get into? Most of my toy projects are php, very few end up requiring a database...

[Masterchat]

Wow, second Life, jesus your boy had never heard of that... sounds very sad.

What i've been working on it well, nothing I'd want to make too overtly public here :) but a few things involving some scraping techniques which will hopefully prove fortuitous for your boy in the future...fuck this fuckin' economy, can't find no real job, except flipping Clickbank books & shit. what you been up to these NBUZ? what's new with you

[nbuzard]

I'm kinda looking for a new project honestly. These streaming sites were a lot easier wen they were written in Java...

[Masterchat]

what's changed? for instance, what did the Russian do for the /beta/? it all looks like the same rehashed junk to me...

[nbuzard]

Back in the day, when Flash was a joke and streaming sites used Java, it was way easier to hack them. You could unzip a .jar file, use functionality built-in to java to reveal methods in classes, even decompile them to source with third party tools. You could also change an Applet to a Panel and implement a couple missing methods and have a desktop app instead of something that required a browser.

The /beta/ site on CR would appear to be a fully Flash version of the site, without the burden of html/css.It looks like they implemented a class loader instead of a monolithic app. Not much to say beyond that, are there any particular hacks that need to be done?

[Masterchat]

Only one which is of course an anti-ban.
Seems like it would be very difficult.

[nbuzard]

So a quick look at the /beta/ site...

There is enough html there to load a javascript file (http://www.chatroulette.com/beta/swfobject.js) which appears to have nothing to do with the site. It then loads their loader (http://www.chatroulette.com/beta/loader.swf), which tell is to load two other flash files (http://www.chatroulette.com/beta/director.swf and http://www.chatroulette.com/beta/roulette.swf). All the "work" is done in roulette.swf.
At some point, it assigns a persistant key based on unix timestamp (plus 3 digits or sub-seconds). Probably arbitrary and you could use any number you want.
Next, it loads a configuration file, http://chatroulette.com/conf/s4v0/roulette/loader.php?[timestamp key]&all
This config file gives it the streaming host info as well as the site info for uploading your image to the russian, plus a few misc details.

Once the app is ready to go, it sets a 120 second timer for uploading a refreshed image of yourself. This is different than last time I was looking at this stuff, where it only did it at the beginning of your session or when someone hi the report button. Every time you upload an image, it responds back with a 'key' and a 'code'.

When you press start, it requests control/sun/roulette/start.php which assigns you a session ID and connection info to start the game.
Every time you hit next (or the other person hits next), it calls scan.php which updates your stream servers as well as lets them check to see if you've been banned. I ran a gif for about 20 minutes and never got banned, and I saw a bunch of penises so i'm not sure the banning is useful. Obviously since I didn't get banned I can't talk about an anti-ban.. My best bet would be to substitute the image being uploaded for something static and innocent that would never get banned.

---------- Post added at 02:52 PM ---------- Previous post was at 02:46 PM ----------

It would be fairly simple to make it upload your own photo, but frankly I'm not going to bother unless there is some real interest. Is anyone still hunting on CR?

[Gummybear]

When you press start, it requests control/sun/roulette/start.php which assigns you a session ID and connection info to start the game.
Every time you hit next (or the other person hits next), it calls scan.php which updates your stream servers as well as lets them check to see if you've been banned. I ran a gif for about 20 minutes and never got banned, and I saw a bunch of penises so i'm not sure the banning is useful. Obviously since I didn't get banned I can't talk about an anti-ban.. My best bet would be to substitute the image being uploaded for something static and innocent that would never get banned.

This is interesting, i already gave up on CR cause it started to piss me off, but are you sure in just something on the beginning? I don't think so, cause mostly i get the ban around 3-5 minutes after beeing connected to someone when i run a video. With myself on cam it even worst, i manage to stay unbanned with hiding 90% of my cam's image with my hand, when i find someone i'll take my hand off and from this this moment - no dick on cam - i get banned in 60 seconds. ^^
I guess there is something else checking in between the conversations, i already talked to lulek about this fact, but i'm not sure, cause he doesn't get those bans. Maybe it something else or something random, i just don't know...

[nbuzard]

No it is uploading an image every 120 seconds, so you can certainly be banned mid-chat. It only does the check t osee if you're banned when you go to a new person.

---------- Post added at 03:09 PM ---------- Previous post was at 03:07 PM ----------

I guess the flip side (and maybe the more important part) is that if you do get a girl naked, chances are she will be banned even if you aren't.

[Masterchat]

Does the Russian still redirect a lot of his jerker traffic to AdultFriendFinder? That little expat bastard claimed he was pulling in $50,000 a month from those jerkers. God damn

[nbuzard]

That would be one way to do it.

Are there any good alternative sites that might be worth researching?

[Masterchat]

probably not....

Omegle is alright. Personally your boy stopped using these services long ago, but mostly just gets entertainment from being Admin of a forum

[nbuzard]

I think Omegle is pretty well served with the omegle middle man greasemonkey extension, I'm unaware of any way to get around the captcha but that seemed a reasonable trade from being banned.

I found myself a good CR girl and am sticking with her, so I'm just in it for the hacking... and the trolling of course.

[Masterchat]

man, if only I could stay faithful to one bingo bitch I might be a happy man. I guess your boy just grew up in a house where the marriage didnt make me feel like it was too appealing.

Newayz, been meaning to ask you: where did you learn comp. security, etc?

[nbuzard]

I've been hacking this stuff longer than most of the members here have been alive (get off my lawn). I started programming back in the 8 bit days and have been doing the security stuff in one sense of the term or another pretty much since then. Also, I have many leather bound books, and my apartment smells of rich mahogany. I'm kind of a big deal.

[Masterchat]

Fuck yeah! that's what it's all about. god damn, it makes me happy to know that people like you are alive and well. always knew we had a couple of good old boys around here.

What do you think about all these new-age mentally ill "Hacktivists" pulling off the shenanigans like what LulzSec has been up to? I thought these guys were joking around until there was an article on them on the front page of the New York Times Business section.

[nbuzard]

I think its pretty amusing, particularly the Sony stuff. People expect a big company like them to be more secure than just any old joe, but all a big company is is a lo of joes with less structure to oversee joe's work. SQL injection is the new bottom rung (there are a few things even stupider, but they're too stupid to even mention), and its a completely solved problem (parameterized SQL exists in basically any language). I think the pseudo-political aspect of it all is just a diversion, and these guys are coming up with reasons for things after they've done them. It really amounts to nothing more then "hey wouldn't it be funny if..."

[Masterchat]

This video is so touching, and beautiful. Granted I love the girl's voice, and it's a spinoff of one of my favorite songs (MGMT - Kids), but this line:

"It's what we all crave,
even the seemingly lifeless politicians and emotionless, middle-aged self-titled
failures.

You are not failures. You have not blown away.

You can get what you want
and you are worth having it, believe in yourself."

&&&

"Behind this jolly visage of rainbows and top hats, we are
people. People with a preference for music, a preference for food; we have varying taste in clothes and television, we are just like you. Even Hitler and Osama Bin Laden had these unique variations and style, and isn't that interesting to know?"

Both incredibly touching statements. Your boy shed a tear over here.

[heligabal]

Hi guys,nice to see a such an interesting conversation,without the "tits,pussy,or what vid are you using" routine.About the info being sent to CR's servers,you can find this out yourself using Firefox's HTTPFox add-on .It will give you info about what CR gets from you,your webcam brand,how many fps you send,how many persons you have gone through,etc.The pic,is taken more often(last time i checked it was about 30-40 seconds interval)and it has around 4 Mb. Another add-on (Tamper Data) you can block the picture being sent,but that results in a kick from the system or "failure to connect to the system" bla bla...BUT you can also change the code of the picture(for ex. a dick) with something completely neutral...but it takes time while u do it and Tamper Data crashes my browser. About those leather books Nbuzard are they collectors items,old rare books?i am fascinated with this things,there are so many old books,forbidden in their time full of information,even ones that talk about things from space,other dimensions ,and this are books written in the 1200 or 1300's .

[simplyhot]

what a nice thread, I am really glad I found this.
I agree completely with heligabal, one of the few threads without dicks, pussies and that stuff.
I don't know anything of that programming stuff, but maybe I can contribute with my CR experience.
I have been on Cr for about 3 months, not daily but I used several windows to improve the chance of getting a girl.
Funny thing is that I was only banned twice!!! and these bans did not last very long.
I am using a fake vid, which is fully clothed at the beginning and when it gets down to business I stopp all other conversations on CR.

I have tried a naked guy vid, but only short and I wasn't banned while testing it for about half an hour.
There are still some completely naked guys showing their dicks and they don't get banned, so they either have a method to avoid that ban or there is some kind mistake in that algorism.

That was my personal experience ;)