Hacker issue

Alrigh, I need some help here.

On a site, We have a troublesome user who keeps doing defacement of our forums through a security hole in our login script, however he has previously uploaded malicious files and stolen passwords from our site, other sites, etc etc (though we have no real evidence of other than admission of the other sites). Regardless, is there anything we can do about this user, the web hosting company is worthless, and won't help us find anything, so is there anyone we can report him to? He already has a record with hacking and clearing other sites through some bugs. Can you help me out on what to do with this jerk?

Maybe the cops.. technically information theft is a crime.

I'm just not sure what police to contact... We've informed our host, but they are lazy and don't really care. I want to see this guy go down basically, because I'm tired of him, and I'm tired of him messing with stuff

Your local police station should guide you forwards.

even if you're lucky enough to have a cyber-crime unit in your area, they probably won't be to concerned about it.. they have child molestors and fraud to worry about. just plug the hole. or, switch hosts.

Exactly...you have to show something like $250,000 in damage for the police to care about it...

Like notepad said..plug the security holes have everyone change their passwords and move on...

alright, done and done.


We found out what the exploit was, and it was related to the host, not one of our scripts, which allowd him to upload the wonderful script PHP shell, and do all kinds of fun... Ironically, the host has frequently ignored our complaints about it, and now they turned off exec/system calls (only after we switched hosts, and sent them a long complaint), though they failed to do anything about the original hole that allowed him access in the first place.... oh well, its their problem now

If he always comes through the same IP address, you could try contacting the ISP that owns the address.

We're also trying that too, but since we have a horribly un-cooperative web host, they kind of won't help us out... so I guess we'll have to drop it... For other reasons, we know his name, his address, his phone number, and all sorts of stuff not related to this, but thats kind of useless if we don't have real solid proof... which could be gotten from the webhost, but they kinda won't....

You could have Tony The Wrench pay him a little visit. You know; make him an offer he can't refuse ;-)