Profile link :
https://hackforums.net/member.php?action...uid=682909
Thread:
https://hackforums.net/showthread.php?tid=5810868
Contract:
https://hackforums.net/contracts.php?act...&cid=16521
TXID:
https://www.blockchain.com/en/btc/tx/4cf...dac8baa127
https://www.blockchain.com/en/btc/tx/5e2...8429153adc
https://i.imgur.com/u1j4Dh2.png
https://i.imgur.com/M15RRQE.png
Summary:
I contacted Bear somewhere in November to do a paper for me. Made it clear that this paper that he was gonna do is not your typical general paper but instead it will be technical paper, I wrote down all the requirement and objective of the paper into a PDF which was given to him via Skype and included it into the HF contract as URL. The paper's primary objective was "Developing a sets of security guideline on how to defend honeypot/honeynets" however as of the deadline there was none in his final draft. Bear did provide some "attacks" in his final draft such as his "remote code execution" but it was no use to me as there he did not achieve the project objective
There was also a demo which was stated in the HF contract, to demonstrate the usefulness of the paper that Bear was to do. It's simply proving a attack is successful in attacking a honeypot that was not secure with the paper vs a honeypot that was secure with the paper. Bear told me he rented a VPS specially for this mini demo however on the dateline, there was no clear instruction to perform the mini demo neither was I given access to the said VPS. If I recalled correctly, back then there wasn't any "technical" aspect of the paper done yet,just a bunch of general/background information. He even asked me what and my team have done so far, what attacks we have done or what methods we have undertake to secure the honeypot so far
Bear did mentioned to me that Honeypot are secure by nature, I did clarify with him that I am not asking him to find any sort of zero day exploit. I clarified that even by changing the Honeypot default configuration such as its port 2222 is a form of securing it as it will help prevent attacker to find out that its indeed a honeypot
Payment was made fully end November but the first draft was only received on the 22nd of December 2018.
Based on the contract, which states "The absolute deadline is 10 weeks from the initiation of contract" the due date would be 7th February(HF time). Looking at the progress I've contacted Bear for a refund
Proof:
Bear reply to a refund: https://i.imgur.com/pIaQ4Oe.png , https://i.imgur.com/LFeovdC.png
December delays : https://i.imgur.com/C1T1hU3.png , https://i.imgur.com/yX1X7Ui.png , https://i.imgur.com/6bmOu69.png
Mini demo : https://i.imgur.com/oFxjDEA.png , https://i.imgur.com/QQyj92m.png
Clarification on securing the HP : https://i.imgur.com/D6bjSU7.png
Lack of updates: https://i.imgur.com/t5yqJlT.png
Last convo I had with Bear : https://i.imgur.com/4azNjkC.png
Remote code execution : https://i.imgur.com/7FZblym.png
https://hackforums.net/member.php?action...uid=682909
Thread:
https://hackforums.net/showthread.php?tid=5810868
Contract:
https://hackforums.net/contracts.php?act...&cid=16521
TXID:
https://www.blockchain.com/en/btc/tx/4cf...dac8baa127
https://www.blockchain.com/en/btc/tx/5e2...8429153adc
https://i.imgur.com/u1j4Dh2.png
https://i.imgur.com/M15RRQE.png
Summary:
I contacted Bear somewhere in November to do a paper for me. Made it clear that this paper that he was gonna do is not your typical general paper but instead it will be technical paper, I wrote down all the requirement and objective of the paper into a PDF which was given to him via Skype and included it into the HF contract as URL. The paper's primary objective was "Developing a sets of security guideline on how to defend honeypot/honeynets" however as of the deadline there was none in his final draft. Bear did provide some "attacks" in his final draft such as his "remote code execution" but it was no use to me as there he did not achieve the project objective
There was also a demo which was stated in the HF contract, to demonstrate the usefulness of the paper that Bear was to do. It's simply proving a attack is successful in attacking a honeypot that was not secure with the paper vs a honeypot that was secure with the paper. Bear told me he rented a VPS specially for this mini demo however on the dateline, there was no clear instruction to perform the mini demo neither was I given access to the said VPS. If I recalled correctly, back then there wasn't any "technical" aspect of the paper done yet,just a bunch of general/background information. He even asked me what and my team have done so far, what attacks we have done or what methods we have undertake to secure the honeypot so far
Bear did mentioned to me that Honeypot are secure by nature, I did clarify with him that I am not asking him to find any sort of zero day exploit. I clarified that even by changing the Honeypot default configuration such as its port 2222 is a form of securing it as it will help prevent attacker to find out that its indeed a honeypot
Payment was made fully end November but the first draft was only received on the 22nd of December 2018.
Based on the contract, which states "The absolute deadline is 10 weeks from the initiation of contract" the due date would be 7th February(HF time). Looking at the progress I've contacted Bear for a refund
Proof:
Bear reply to a refund: https://i.imgur.com/pIaQ4Oe.png , https://i.imgur.com/LFeovdC.png
December delays : https://i.imgur.com/C1T1hU3.png , https://i.imgur.com/yX1X7Ui.png , https://i.imgur.com/6bmOu69.png
Mini demo : https://i.imgur.com/oFxjDEA.png , https://i.imgur.com/QQyj92m.png
Clarification on securing the HP : https://i.imgur.com/D6bjSU7.png
Lack of updates: https://i.imgur.com/t5yqJlT.png
Last convo I had with Bear : https://i.imgur.com/4azNjkC.png
Remote code execution : https://i.imgur.com/7FZblym.png




![[Image: kmRJ0jq.gif]](https://i.imgur.com/kmRJ0jq.gif)

![[Image: Z5YQIwQ.gif]](https://i.imgur.com/Z5YQIwQ.gif)