Reprinted with permission from Mustang:


Specifically, I discovered while running their web site and ticketing, that the organizers had been operating a huge, secret back door in previous years, and were planning on doing it again this year, thereby taking advantage of you as you went through the public front door, and of course using the ticket system I was running as cover for impropriety. When Debra, the LLC president, told me on Easter night that she could no longer act as a firewall against the efforts of her peers to undermine the process, with their threats and abuse making her sick on a daily basis, I took the only principled action that I could think of, to take down the web site and ticketing system.

It is incorrect to say that I "took all of the contact info." "Took" implies theft which is false and defamatory. Sean, please do not defame me. (NOTE FROM DOVE: in a later email this was cleared up as it was not Sean who posted the initial email that Mustang felt was defaming him)

When a group of people routinely abuse basic burner principles by turning an official regional bun into essentially a frat party, where scores of people got VIP treatment because of who they know, and the rest of you have to contend for admission to the attendance-capped event, then someone needs to do something about it.

When Transformus LLC engages a neutral third party to perform an arms-length audit of their actual business records, and makes the report available to you (including the records from the PayPal account they strangely abandoned this year), then you will know that Transformus has not been operated in a way you are familiar with when you think of other regional burns. You will also discover other facts that you will be shocked to discover, like paying for board members' party expenses.

I submitted an official formal complaint to Burning Man regarding these matters, and I have other steps towards resolution as well. I am deeply offended that these folks feel that they can abuse the public trust as they have, abuse our common principles that bring us together, cover up and lie repeatedly to our faces about it, and then hide from accountability.

We all deserve true transparency and accountability of the people who run our regional burns.

All the best,
Mustang
posted by:
Dovelette
Rochester
  • Thanks for reposting this.

    From what I gathered, this is exactly the grievance I believed Mustang to have with the Transformus BOD. I personally do not agree with his method of dealing with the situation. If his claims are true, then I also do not agree with the BOD's decision to create a 'back door' without disclosing that information to the community. What do you do when both are right and both are wrong?

    There has been a thick air of negativity surrounding this matter exacerbated by people 'randomly' being left out (of the first round anyway). My only wish now is that every one face the problems with dignity and maturity, then find a resolution. I hope that we can soon put this all behind us and do what we do best. Now let's get back to creating something we can all enjoy.
  • I worked on the website for many months and never saw ANY backdoors whatsoever

    and i personally think that exposing this backdoor, making sure it never happened again and exposing the guilty parties would be a better course of action....deleting everything and running is a coward move that I would only expect out of a child
    • My thoughts exactlly!
      I thought it was rather cowardly how he just took the stuff and ran...
      Well Said!!!!
      • For those of us that do know Mustang, I believe we know he has always been passionate about his beliefs. He is very smart, had no need to do this as a motive, or innuendo. Financially, he definitely didn't need to even offer his time voluntarily or otherwise.

        I'm not going to start a fan club or go out on a limb of defense for him. And, I know many of us that love him, don't necessarily agree to the measure of how radical his action was, as it did effect a great deal.

        But remember, our eyes have been widely opened, we have had to suffer, we have had to struggle, and now we need to take this awareness and be a part, we are the family, we are the participants, we are the community, we are the 'Burn'.

        Let's cumulatively stand-up, and fight for what we want. No matter what any other burn does, let's makes ours the best it can be. Take part volunteer, get involved. Not just as a weekend party get away, but be a voice.

        Maybe then, we won't have a questionable gate system, invite process, or sense, that we as the community have been snow-balled.

        I mean, if you really read Mustang's post, he finally let's most of it out. It is pretty clear. And, I personally know Debra was fully open at the Town Hall meeting a couple a weeks ago, where she admitted who faults with her duties of the LLC, and openly admitted what the rest of the Board just brushed off. I also saw where everyone else was on the defense, Debra accepted and answered the best she could.

        Then for past Board members to mention, their distaste and similar reasons for leaving, it really makes one wonder.

        Although, it might be taken as hearsay. My boyfriend who has been involved in many of the questions on the Transforma lists and at the meeting, was approached by different BOD members, five to be exact, and three of those five incessitantly pointed the finger and blame on the others. That was very disheartening, because we are all adults and instead of wanting to fix it, just denying things or pointing fingers seems questionable all in itself. I was not involved in the discussions, they were one on ones so take what you will from it.

        I just know, after working on projects as volunteers, we didn't have much play time because he was pulled away by these members. It's okay, but I wish there had been recodings of those meetings. The reason, I have seen too many things twisted and turned so quickly, and a lot of he said, she said.

        Also know, Mustang has remained active on these threads continously, received a lot of verbal abuse, and yet stands strong on these convictions of wrong doings. Even I received a private e-mail from a certain person who has become very well-known for his attacks, but I choose to separate myself from acknowledging it, and not even replying.

        But, what kind of person sets themselves up for that, really? I mean he (Mustang) has always been a die-hard give back to the community kind-of-guy. And, if you were on the Transforma list from the beginning, and read posts up to the 19th of March, you can see where he undeniably supported the Board up to that point.

        For those that stepped up, and got things back to rolling with the website and lists, you made the first step. Now, what will we do, the community? Or, is it okay to just let it be swept under a rug?

        It's all so sad, one thing is true, actions do speak louder than words!
    • You call it cowardly.

      I call it balls and principle.

      That said. I have yet to get a response, a new code or whatever else from invites to a payment that was already made.

      All are volunteers.

      The org doesn't own the code.

      If he was or believes that he was mislead as to what was going on. Believes that party expenses or other questionable things are going on with the ticket sales for "inner" circle then, more power to the principle.

      I've known mustang for a bit.

      Coward would be the last thing I'd associate with his name.

      Now, defamation by a llc......that I don't know enough about to judge.

      I do know enough to trust where he came from with this.
      • I agree. I've supported his decision (or at least his right to make it) and I know he wouldn't do this for no reason. I don't know what his reason is of course, so I've stayed out of it.

        Although it is worth pointing out that he did take things that were not his copyrighted property. He wiped the database out completely. Even the transforma-announce list was stored there (thats why we have to re-sign-up for the list). Thats not even part of the ticket system. It just happened to live on the same database server.

        He cleaned their clock. Err... database... whatever.

        So while the org doesn't own the code, they DO own the information they gathered in the operation of their business. I think that means this qualifies as overkill.
        • want copyright agreements? Make them. He took what he wrote, which included other things. I don't believe that was intentional but totally see your point Lars
          • I totally agree they should have gotten a contract and that he had a right to take his intellectual property. I also think they should not have handed the keys to just one person. They're painfully aware of that now. That is for sure :)

            I am writing this in an effort to convince you that it was intentional and what he wrote did not "include other things". (by "things" I assume you mean the invite info)

            He did delete it intentionally. It wasn't a mistake or simply an inevitable consequence of taking his code. It was a deliberate act which he knew the consequences of and which he did not NEED to do at all to remove his property (or for any other reason than to destroy the information).

            I've been a programmer for a very long time, and I am intimately familiar with the exact software and methods he used. Not that that makes me right, but it does mean I'm not out of my element here.

            You know how skeptical I am of everything thats going on, but I assure you I am as convinced as anyone could be about this.

            The database server is provided by the web hosting provider, and is completely separate from his code. There is no need to do anything to the database in order to remove all of his intellectual property completely. Deleting the database information is a separate act. They're not intertwined at all. His software just "talks" to the database server. They're completely separate, so separate that the database server could literally be on the other side of the planet and everything would still work just fine. Also, all sorts of software talks to the database that has nothing to do with his code, like the mailing list server for example.

            He actually had to write a very specific command (something like the subject of this comment) to tell the database server to delete all of its information. That is an intentional act. Nobody accidentally types that. There is no way you could do that by accident or be forced to do it in order to remove your own intellectual property. You could delete the entire website and all programs written by anyone and everyone, and still the database would be there. You have to TELL the database server to drop its information. This requires logging into it with a username and password and submitting a command that when translated into english means "delete everything stored in this database".

            If I had access to the server and my goal was to create as much destruction as I possibly could, thats exactly what I would do. I could not do more damage if I wanted to. Neither could he. If, on the other hand, my goal was simply to remove every trace my copyrighted intellectual property, I would simply remove it and leave the database untouched because it did not contain any of my code or property. With the possible exception of stored procedures, which can easily be removed from the database without disturbing the data itself.

            Again, I'm not making any judgment on if he should or should not have done this. I really don't care. I'm just saying I'm certain that he did.
            • You're absolutely correct Lars. As both a DBA (Database Adminstrator) and a web programmer for about 15 years, I can attest that yes, those are TWO separate actions that in larger organization would never be allowed to hang on just one guys' belt.

              A question though about back-ups... I guess they weren't being managed... or was the back-ups (of both the Database and web directories) also sabotaged? Any database worth it's salt has roll-back capability embedded to allow for recovery of just this sort of thing (malicious or otherwise).
              • I wondered the exact same thing about backups/rollback. Dreamhost does provide backups AFAIK. I would be surprised if they didn't.

                All that I know about what happened came from emailing Jace (who was very helpful), but I do know they took about a week to get the "keys" back and get in and start to pick up the pieces. I think its possible they don't do short and long term alternating backups, and the "Destroyed" database may have been backed up again (overwriting a previous backup) before they could get in? Just a guess.

                Its a damn good question. Thats for sure. More of an "autopsy" curiosity at this point though, as they clearly were unable to retrieve the original information and are moving on with this new method now using partial backups from PDF documents as the basis for a new database.
            • Oh no, Lars, I mean it was intentional.

              He deleted intentionally. And I believe with principle. But that is my personal belief which I state clearly here.

              The invite info collected was directly tied to his code provided to the org I thought. You're probably right, I haven't done programming for several years.

              If so, then when things were clear to him (not to us, necessarily), that info was absolutely his to delete. Similar things have happened at other events. Has it been treated as "oh someone got upset and took all the information" publicly, on every regional list? Nope. Why the difference here?

              If a contract was written, that's a different story. There wasn't. I see the principle here well out-waying my own p'd offness at paying for tickets that have no codes associated.

              Don't know if it was the best course of action, but it certainly was his own to make. If what he laid out was true...I may have done the same thing.
  • "Transformus has not been operated in a way you are familiar with when you think of other regional burns."

    I think thats more than apparent already. If there is another regional operating anything like this, I've certainly never seen or heard about it.
    • HA! I certainly think yall posted the above in jest... or in blissful ignorance of the MASSIVE amount of tickets our beloved Thing-in-the-desert gives away every year. I've got close personal friends (who will remain namely since it doesn't really matter) who were, and will be again, a part of the DPW and they've told me stories about the folks who look the other way at gate, or get batches of tickets given to them for no reason other than "knowing" people.

      I don't really know what the "back door" was, nor do I care, but if any Regional takes it's queues from the Big Burn, you better believe there are more than one way to get into the event.

      (still crossing fingers for TR08)...
      bh
      • Burning Man pays lots of people for the work they do,
        and gives away lots of tickets. One veteran Burner claims he
        gets 40 free tickets a year, based on stuff he did years ago.
        The people who wrote the Ten Principles have a,
        shall we say, very liberal interpretation of them.
        Are the 10 Priciples the unalterable word of Gawd, handed down
        from on high that should be strictly interpreted, and never varied
        from in any way? Larry Harvey doesn't think so.
        • Burning Man is also typically upfront about ticket comps and such. I think the complaint is more that there was no transparency or honesty. Not that tickets were given away, but that tickets being given away or reserved was hidden from the community. Plus, Burning Man doesn't sell out of tickets, so it is not as big a deal. Everyone who wants and can afford a ticket will still get one.

          Also, Burning Man is Burning Man, not Transformus. To quote your mother, "If all your friends jumped off of a building, would you?" Just because one person does something, doesn't mean everyone else should be excused for doing so. Burning Man is also over 33 times the size of Transformus. That requires that things be run a little differently. A handful of people spend their whole year working on BM as their day job and a number of people spend 5-7 months working on it full time. It is like comparing apples to orchards.

          Also the vet burner who claims to recieve 40 free tickets to hand out a year because he did some stuff in previous years is possibly full of it. I won't say it is impossible, but it is unlikely. I've never heard of anyone getting handfuls of free tickets that weren't for something specific. For instance, temple crew usually gets some free and/or discount artist tickets for their crew. Various conclave groups get a limited number of artist ticekts. DPW gets free tickets for the crew that works full time, etc. Either way, the claim that BM hands out tickets left and right for no reason other than past deeds, is no more substantiated at this point than any other rumor or heresay and is meaningless to the discussion.
      • I was referring to the whole mess in its entierty, but most specifically the lottery. Not the favoritism. I'm staying out of that debate. I can see how that would be confusing considering I was quoting someone with a specific bone to pick. I was just making a broad generalization. I should have been more clear. And yes, take it as you will, if I was referring to the favoritism, it would be an ironic statement made in jest. :)

        And yes, I am well aware of how BMorg operates. I've been on the receiving end of that favoritism.

        "I don't really know what the "back door" was, nor do I care..."

        I agree.
  • I said this on the list, and I will say it here

    I started on the web team before mustang ever was there, and the first thing I did was go through EVERYTHING...there were no scripts, there was nothing in the code, there were no mysql injections, nothing

    there was NO back door, not a single one, and anything that he claims was there, had to be there AFTER he treated me like shit and elbowed my out of the team

    and yes, even though you might like mustang and believe in him, he was the reason I left the web team. he was a snobby, egotistical jerk who knew everything and treated me like poop on the ground, and once I left he set his shit attitude on others.

    once again though, to make sure it is heard....THERE WAS NO BACKDOOR WHILE I WAS THERE
    • To be frank, whatever code that was on the site, was a donation. Do you give money or goods to the Salvation Army then walk into their thrift shop and just take stuff because you made a donation? To take back the donation of "his" code, Mustang caused a huge disruption and a lot of stress for lots of everyday Burners, not just the Board. We're all trying to make the best Burn we can, we all donate time and effort, but most of us, once it's donated, don't try to snatch it back. There was a better way for Mustang to handle his issue.
    • I never said that I thought there was a back-door in the code... as a software programmer for over a decade, I can attest to making one is even more work than making the "front" door.

      Back-door: Can be something as simple as selling a ticket (not a re-sell, but an original) to a friend after the public sale is over and done with.
    • Jace,

      I have never had to work with him, and it is understood you did. I make no judgements on you. I do appreciate you along with others getting things moving as I mentioned before. Also, I mentioned I do not necessarily agree with the radical action taken to measure it was, but I want us to get past this point. You guys got it back up and running.

      As far as 'Backdoor' goes, I have no idea. I would think that because of the type of community we are, anyone in a higher position of control wanting to accomplish a 'back door' would surely NOT go through the website or Paypal for that matter. I would think they would try their best to keep in under wraps, except for those they really trusted.

      The only thing if it happened I could see, is they got messy, or cocky, and didn't clean up their tracks and someone witnessed it. But, again that is if it happened. Until there is solidified proof I can't question it whatsoever.

      My only concern is we all get involved as participants as we make the 'whole' community. That also means folks who haven't stepped up before, really should.

      But the last thing I would hate to hear is, some start shouting, "Why is this happening, why is that happening", when they chose to turn a blind eye instead of being involved in resolutions, and hopefully growth from here on out.

      Warmly,
      Siryn
    • Jace,

      "there was NO back door, not a single one"

      I believe you saw no overt back door in the code. I am quite sure that it is what you said it is. However, even if that is true, keep in mind that (as I pointed out already) even if things are as you say they are, there was still a gaping security hole. I.E. a back door.

      The people planning this knew it was a straight up lottery. Everyone else was told to fill out an application with lots of info, and were misled into thinking it was a "fair" selection process based on that info. They were misled, probably in an attempt to prevent them from abusing the security flaw. Some people STILL think it was not a lottery but based on their applications. STILL!

      The key here is that a lot of people knew the true nature of it. That it was just pure chance. EVERYONE on the "inside" knew this.

      Show me some evidence that you can determine if someone entered the lottery more than once. If you cant demonstrate that there is some security process to prevent that exploitation of the system by entering more than one request, then there IS a back door. One you can drive a truck through. A big truck.

      This is probably not the back door mustang was talking about, but its a back door nonetheless.

      Also... Which specific board members were rejected by the lottery? Statistics tells us at least some of them had to be rejected. So, who are they? And if you cant even find them in the lottery results at all, then isn't that a de facto back door right there?

      And the 150 tickets? Where did they go? What is "front door" about them?

      Also, did you get a ticket? How?
      • Ya know I have been thinking about this and wish I had taken a screen shot, but like 3 days before the people who were approved were picked. There were 10 approved invites....I watched that page day in day out waiting and hoping to get approved for my invites. I just wonder who those 10 people were and why they deserved a 3 day in advance approval. What made them so Different than all the rest of us? The Infractured rolls were suppose to come out of those remaining 150 invites that were left over after everything was all said and done. Just curious is all!
        • Yeah I'm curious about the 150 not going back into the second round too.

          And the 10 early ones? Hmmm... that is strange. Could be just testing, but who tests on a live system?

          It does seem strange, but then again, nothing really seems strange about this anymore. If something sane or rational happened I'd be shocked.

          I keep having this recurring dream, where I go to the transformus site at a predetermined time, and buy a ticket. The dream only lasts for about 30 seconds... But its a good dream. Then I wake up and I'm all disappointed (and sticky).
          • "Could be just testing, but who tests on a live system? "


            Uhh... people working with a small budget and crew?

            Earth to Lars... Earth to Lars... this is Earth station calling Lars... Please start your thrusters and come back from planet Imaginarily-perfect-302; your transmissions are clogging our communication channels. Our engineers believe your transmitter is stuck in a loop, it keeps repeating itself.
            • You think they never tested the new ticket system before it was visible on the site? No, they could never do that! That would require a huge budget and crew! Oh wait, they did do it. For weeks.

              Its trivial to have a separate copy of the same code and data on the server. Its called a sandbox. I cant believe I have to even say that.

              I never said anything was perfect. I posed a rhetorical question, which you answered, and to which you gave the wrong answer.

              Its simply MORE WORK to clean up after a test on a live system than to do it in a sandbox you can throw away. Your budget and crew argument is backwards.

              Go back to planet "engineering school". Mustang has a CS degree and a successful software venture. Do you really think he cant copy his code to another place on the server without a "budget and crew"?

              I think you're just taunting me for fun. Your response is far too ignorant and humorous to be serious.

              • uh, yeah. I was thinking the same thing - exactly the same thing. No one else have a separate server seems bizarre and silly considering this is about the tickets than I think is being recognized but people are people too - sometimes shit happens.

                still lars - you know the medium of how certain words are read when it comes to the solution being tossed out with a little more *uh um* puncture inducing chosen words :-)

                Even when we disagree, I see lars' points. I'm not seeing from this odd internet-exchange though, I'm not seeing him from maybe outside experience.

                BTW, I know Lars brings solutions that (usually) make a ton of sense....to at least consider. Solutions grow that way for the future. And well, you know what they say about repeating the same thing being and expecting a different result is insane. So please, on the other responders, too, try to at least read the post over before posting it.

                A community that eats itself isn't a community I think any of us embrace...so i dunno, breathe a bit.
                The more i read all of this bickering the sadder I am getting about attending transfmous this coming season so may have two tics for people who needed them. We'll still go to

                Shoot a pm over with regular email that you want to be contacted about 2 tics with issued codes. I'll know by next week and will send them to folks.
              • Wow!

                I never knew we had so much CS talent in our community!
                This place is hoppin' with people willing to surmise FOR HOURS on the possible use of pseudo random number generators and platform independent web apps while waving their degrees like they're trying to flag down the last search plane from their deserted desert island.

                Amazing, I guess, how well hidden all that talent is.
                I mean, shit. It's a community run festival and the community can't seem to get a website together.
                Ah-fucking-mazing.
            • Um anyone who deals with software and applications that are run on multiple different environments (ie Windows, Mac, Unix, Linux) will use a program such as um VMWare to test out if the software (or script) will work based on the data entered by multiple different OS programs. WIthout that simple test procedure, a website may not interact with anything except Internet Explorer or Firefox. What if someone is running Ubunutu and is using the native internet navigation tool? To say that people actually do their testing live "because they cannot afford to test it otherwise" is silly and, and not something a competent software engineer would do, when all it takes is a couple hours and some freeware and one person who has a clue.
              • Hmm ... yes ... let us all make guesses ... no, let us hold hand in cyber-space and connect ... our collective consciousness will unravel the past we did not witness ... but let us put away all this trivial banter about software and servers and native internet navigation tools ... what does the ancient wisdom of the Ubunutu people have to offer us? ... let us get down to fingers and keys ... it comes down to that yes? ... everyone simultaneously touch the G button on your keyboard and we will be transported in time back to the moment when the fingers touched the keys and we will know what and why and where and when and how ... fire your thrusters now and join us in the quantum leap consciousness society ... live testing ... who does live testing anymore? It's so cruel ... all that Johnson & Johnson baby shampoo in the eyes of all those baby rabbits. How many were blinded and fed to firefoxes to satisfy your quest for tear-free-baby bathing and who eats all those babies when their bathed, eh? ... no one thinks to ask this question ... yes? We don't have any stomach for multiple different OS programs and those silly ones who cannot afford any but live testing ... those fools! We shall soon see all! Touch your G spot now!

Recent topics in "Transformus"

Topic Author Replies Last Post
Fire dancer roll call!! :) 2008 offline~taz~ 7 Today, 3:19 PM
Update on the man who was burned in the Temple fire? Merritt 28 Today, 3:00 PM
Mind Blowing Transformus!!! offlineTigger 2 Today, 2:44 PM
pyramid offlineMorgana 7 Today, 1:59 PM