Posted by kikilxve

i don't use nsmbhd because i don't care about romhacking

Welcome to Kuribo64, the SMG/SM64DS romhacking board lol!

is there anything else to do, like checking the vendor's webpage?

I know His phone number. Wait... it... eh derp. I forgor.

Posted by kikilxve

that was a long time ago, you liar!

SMG yes, SM64DS no. Offtopic (not that there's any topic now anyway ), but I plan on porting my hack to a new ROM with More Objects Mod applied. That patch adds some really awesome stuff!

no, i probably can't call him without getting my dad an extra internet bill for calling to heaven with the home phone.

You can try and find a phone booth. But I heard even Chuck Norris failed at finding a phone booth in 2024...

---

Let's get a topic in again. Let's see... what are your plans for the weekend?

GAME FREAK, the company behind Pokémon, suffers from a massive leak, dubbed the Teraleak. Personal information of more than 2000 employees has been leaked! But... there's also an in my opinion positive side to this. The leak is currently bringing forth tons of Pokémon beta content! Beta sprites of Gen III, IV and V 'mons, including Latiken, beta Mudkip (or rather, Mudkip's predecessor), alpha Arceus, a scarier Cacturne and Metagross and beta Flygon! Also, lots of beta character sprites, dev tools and source code (feast upon this, hackers! Feast) and concept art! In a few weeks all beta content will probably be wiped off the internet, though, as Nintendo will summon its lolninjas. Many people over at GBAtemp said:

They waste all of their spare money on DMCA lawsuits and too little on security.

Presumably the leak could happen due to a phishing attack.

Of course, this shit is illegal, but I absolutely dig beta content, so I can definitely feast upon this as long as it's up. Want to know more? Check the threads about the Teraleak on Bulbagarden, GBAtemp and another board I won't mention. Yeah, that one.

Any thoughts about this Teraleak?

Relevant bump!

Posted by Swingball

I like libre-laptops with radio kill switches.

TF are those? Laptops, sure, but...

---

I liek mudkipz like Kaze Emanuar's ROM hacks.

NOOO, don't archive the board! New SM64DS hackers still use this board (there go my plans of a hack thread), and the general forums are still pretty active! But if you do decide to archive K64, please do start over on a new board, like back in 2012. It would be ideal if all threads here could be ported to there. And if that board would have some security measure, like a captcha every time you want to log in. Oh yeah, and call it Kuribo64x4.

In that case, maybe a better encryption of the new Kuribo64? I really hope K64 will continue to exist in whatever form, be it this board or a new one (I hope you'll stick with Acmlmboard).

Myeah. That's much true. The cyberattack made me aware of password security (can you imagine my previous NSMBHD password consisting of but 5 CHARACTERS). Now I have passwords so complex even I don't know them!

Anyway, do whatever is best for K64's security. If we can start over once, there's no reason we can't start over again. I will definitely be there on the new Kuribo64 too, should you decide to start over. As long as I don't need an email address to register.

EDIT (my last on this board?): Oh, and locking old accounts isn't a good idea. Reminds me of NSMBHD, where they have kind of a complex against non-posters. It just wouldn't be a good idea. Sometimes old users return to the board after a long time, like MoreCowbell a few months ago. And today, recent, whose last post was from 2017. We can't just let these people rereg only because they had lost interest in this site for a while!

EDIT 2: the electric boogaloo: Oh yeah, if you're going to archive this board, could you please not do that overnight, but specify a date? Otherwise my autism couldn't handle it. And we could all say goodbye to the old new Kuribo64 with memorable lines.

EDIT 33¹/₃: If Kuribo64 gets revived as a new board, it needs a new name too. I have a genius one. Kuribo is Goomba, right? So we have Goomba. And now its successor. Goomba... Koopa! Nokonoko64! What do you think?

Y'know what Arisotura can do to the board (either this iteration or a possible new one (c'mon Arisotura, you did it before, RIP old KuriBoard))? To prevent new accounts from getting hacked that easily? Add a filter that keeps you from registering or changing your password if its length is below 16 characters, doesn't contain symbols (non-letter, non-number) and doesn't contain uppercase letters AND lowercase letters AND numbers. My passwords apply to that rule - they're 20+ chars long and contain a whole bunch of leetspeak and DIFFERENT symbols, so that the Hacking Trekkie won't start bullshitting about "Sexy females in your city for night - Beautiful Dream" hurr durr dating advertisement shito. Blarg. I already have a nice speech in mind for my last post, about banned users and second chances (no drama, don't worry Stapul), because if we go to a new board (assuming we do, but please, if Kuribo64 doesn't come back in whatever form, SM64DS hacking will die with it (not that it's not already on the edge of death, blarg)), who will get a second chance?

Posted by salty

shoutouts to Staryu and kikilxve basically carrying the discussions

You forgot Xero and Thierry, you derp!

at the very least I'd want it to be only locked but still viewable (and maybe have the staff forum also for funsies )

The old KuriBoard is still readable; you can log in, but you cannot post. It'll probably be the same with this board.
Also lol @ the staff forums. We could see all deleted derp threads. But also Arisotura's first posts here, which were probably test posts.

I suggested IP bans regularly in PMs. Since it's probably possible to see which IP client logs in to an account (isn't that also how you track down reregs), shouldn't you be able to notice any overlap between the four hacked accounts and find the correct IPs to ban? And does a security measure like this exist already on K64: after six failed attempts of logging in, a guest will be blocked from accessing the login page for one day or a week?

Anyway, if no good security measures can be taken, the safest choice would be to archive the board and move to a new one.

And isn't there anyone you consider active and capable enough to promote to admin or something, so that this board can be moderated better? I'm willing to, but begging for it would be n00bish, so yeah, you don't have to. Just promote whoever you find capable enough, if anyone and only if you want it.

Posted by kikilxve

i'm really sure she can, but, vpns exist and there are LOTS and LOTS of free shitty vpns that can be used just to do that. yk, dumb indians don't just expose their location every time they call you, else there would be no scam call centers.

Yeah, that's much true - even IP bans can be evaded. But maybe a specific location (not a country, because not all people from India, Russia or hell, even AMERICA, are spammers; I mean more like a circumference around a certain physical address) can be banned by adding some shit to do that. Even such a simple language like HTML has geolocation functions. Whoever the derpo is who hacks random accounts, they are probably attacking from the same location every time, unless they have a server with the bruteforcer of whatever in a van, but that shit doesn't happen much outside of movies.

imo the old accounts should just be marked as inactive like in the melonDS forums (probably the only reason they appear here is because the only way they were able to do shit was removed), and only leave actually kinda-sorta from time-to-time used accounts as normal.

Maybe if this gets done, base it on last view and postcount? But then again, lezg_g had 103 posts before they got hacked. It would solve the problem of MoreCowbell getting his account locked, but...

but yeah, most people at the time were younger than me just joining a cool romhacking project for funsies and have since moved on with life, so it would make sense both to make those accounts inactive AND that they could've just set 123456789 as their password but no one gave a fuck about password guessing so they just left it like that.

Locking inactive accounts with weak passwords might be a good idea. Arisotura can probably view passwords. If she wants to keep it private, she can create some kind of algorithm that tracks down inactive users with weak passwords.

the only person i can remotely think of is thierry.

Thierry is already an admin on NSMBHD, but she isn't very active here (no matter how often she tries to be so again), she is busy IRL with a job and she's busy writing NSMB hacking tutorials. I also thought of nekholm.

But Lite Dash's bantitle (hacked account too) says:

Posted by Lite Dash's bantitle

Account likely fucked. Password scrambled for security.

So you are able to change passwords.

---

Anyway, how does that locking inactive account thing on the MelonDS board work? Is it some kind of auto-ban? Are users with locked accounts still able to log in and send PMs to staff members? Because in that case, I think it would be a good measure (even though it'd make 99% of all usernames in a thread greyed-out, so maybe make a new "Inactive users" group with the normal user username colours?). If a user who has been inactive for a while and all of a sudden comes back, like MoreCowbell or JeDa, comes back, they can just send a staff member a PM to have their account recovered.

Posted by Arisotura

The inactive account thing is pretty much that -- users with few posts who have been inactive for more than one month(...)

On Kuribo64, I would do three months or so.

(...)to have their account reactivated. Once that is done, they won't be deactivated again.

Which means they are an eternal sitting duck for hackers after reactivation. Maybe just make it so that every non-banned account, reactivated or not, will get locked after three months of inactivity. Either way, it seems like a good thing to implement. I hope you'll work on it soon.

---

P.S.: Could you also implement the changes to the register and edit profile pages with disallowing new passwords that:
   • don't have at least 16 characters;
   • don't have at least one non-alphanumerical symbol;
   • don't have at least one uppercase letter, one lowercase letter and at least one number?

These would ideally be three different checks so that error messages can be more specific.

EDIT: If the inactive account locking feature is implemented, you should write a paragraph about it on the FAQ, detailing what happened and what to do as an inactive user (and what NOT to do _{*cough*rereg*cough*}).

Posted by nekholm

Thanks, I hate it.

LMAO XD. Very honest lel!

I think it's too cluttered, there's just too much stuff, and the signature is too big. Plus there's no way of telling where your post ends and the signature starts. If you removed the scrolling text and put the image inside the gray box, it wouldn't be such a mess.

Thanks, I was already wondering which signature version to keep, the metallic one or the marquee one. Guess nuking the marquee sig it is, then! And maybe giving the main post div some sort of more pronounced background colour?...

Honestly my sig is still beta BTW.

EDIT: I slightly fixed my layout, putting the toolbar (which I won't nuke, because it'll be interactive as soon as I'm unlazy enough to implement that. Simple dropdowns and <a> elements) above the layout background div, making the main post div .1 more opaque, adding some padding, making the links a lighter colour and nuking the marquee div, putting the image in the metallic div. Looks more organized IMO too. Thanks nekholm!