> First, is there anyway he could have unintentionally done this, or did
> he have to "hack" or "crack" intentionally?
No, there is no way of doing it unintentionally.
As he said and as I know, he know what he was doing, just he didn't know the
consecuences of his actions.
> Second, what is to be gained from legal action?
> I think we need to create a banned for life list, due to other issues as
> well (exploitation or foul behavior), question is:
> How do we enforce it when people can change accounts and names on the
> accounts with such ease?
No, I don't agree at all.
This is against GPL and this would open a door to situations that I don't like
at all. Like forbidding access to people of some countries...
I won't code this feature, but it is obvious that it is trivial to add it.
> I do think that this person is sorry for what they have done, now, but
> did they do what they did intentionally?
And I don't think he is sorry at all, he is just scared by the legal
consecuences of his actions, not by the fact of having destroy several days of
work on the website.
> If the answer is yes shame on us for not securing the site better, and
> shame on them for taking advantage of it. First priority, we need to secure
> the site and prevent it from happening again. Second we need to ban this
> person publically so that in whatever forum we are discussing Arianne issues
> this person has no access, to prevent them from further compromising Arianne
> in the future. If this person has real talent then perhaps they could work
> their way out of being banned from Arianne forums by contributing
> directly through you Miguel. I think that they have their own self interest
> in mind and not one of any particular project and you should view any code
> that is or has been submitted by them as being suspect, a possible virus, and
> review its use very carefully.
Yes, Arianne site security sucked!...
I have fixed permisions, now it will be harded to delete files, but database
can still be removed on a few seconds as Sourceforge staff is still changing
the permision of the file.
I really don't care to ban people, it is not my task to ban people, for me it
is really sad to ban or kick someone because it means that there is no way of
communication between us.
I can't suppervise any code submision that is send by an Arianne developer,
from time to time I just read code to look for bugs and add comments, but I
have no time to do what you ask.
> We need to fix the site.
I want help with the site, I need people that help me to add news and to manage
it in general.
> I need to know if he did this with intention, to determine be able to
> offer a just opinion as to the the extent of the actions we should take.
I have followed his email to the mailing list, just read it and decide yourself.