Jump to content

[FORUM CRACKED] Salvaging the rubble...


Jay Kae

Recommended Posts

Alright, this has been a fun morning, at 5:01am I got a SMF error msg sent to my iPhone, then the Orbx site went down. Denial Of Service is very enjoyable, at the same time an exploit was used to gain access to the forum, not the database. Just want you all to know that your information is save and secure because I use 256b encryption. Now, even though the forum is up again, there will be errors as I am going through every single bit of coding etc that is available on the forum backend. I do have to say for SMF to have the upgrade to RC3 available made life a little easier because I was able to upgrade the old faulty files :) :)

Please report any errors in this thread.

EDIT: I am aware that no enhancement to the forums is currently functioning :(

Link to comment
Share on other sites

TBH, I have been a little skeptical about using RCs for production, mayby even first release. But then again, someone has to do it to allow RCs become releases. Something is going on with SMFs being targets of cracking attempts increasingly often. I'm guessing the RC lures them out.

I'm running 1.1.11, and by luck, recently happened to be online when I suddenly saw my guest count rise to many many times normal. I traced the IPs and saw they were coming from eastern europe, china, africa etc. so I knew it was an attempt with fake IPs or captured hosts. I put the forum into maintenance mode to minimize all services and waited few hours until I re-enabled everything. Seemed to work. That was all I could think of, I'm a software architect/developer, not a security specialist. I wonder what is the correct procedure when you're being attacked?

Link to comment
Share on other sites

Thanks guys, I have been coding and whatnot for over 12 hours straight, did not get any normal work done really ;) Not really making headway other than that the forums are up and running sort of ...

@yallu, the sole reason I went to RC2 was because 1.1.11 was leaving too much open for people to exploit and I had to hook the forum so that any out of the ordinary was immediately sent to my iphone, very annoying and when a Flash exploit was used, that did it for me.

Link to comment
Share on other sites

Well done JK, i wondered what had happend last night when i could not get back on to the forum THANK you for all the hard work in sorting this out for us mate. And yet again i cant understand these people who do this hacking. Good luck with sorting this out and i only hope you can find out who done this but i guess there will be no come back to them they should be brought before some international court to answer for there actions but the cost will be no doubt very big,

cheers

Iain

Link to comment
Share on other sites

Mustard Mitt, when the forum went down (I was halfway through writing a reply...!), I just assumed you were putting on RC3. Didn't realise all this nastiness was going on too. Well done for catching it.

Link to comment
Share on other sites

Jay, 

I was just remembering the other day when the VOZ Forum was first hacked, this brings back memories.

Glad to see you have it up and running again.

Cheers

John

Posted Image]

AU GOLD_6065  AU BLUE_ 6065  AU YMML_ 10811  AU GREEN_ 12237  AU YSCH_ 13174  AU RED_13383  AU YPJT_13721  AU YWVA_17449

AU YMAV_21209  AU YPEC_24047  FTX AUSTRALIA SP3_28758  AU YHBA_30885

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Windows 7 64bit

Asus P6T Deluxe OC Palm /Intel i7 940 2.93 GHz /NOCTUA NH-U12P SE1366 Heat sink with Dual Fans

Corsair 6 GB TR3X1600C8D XMP Dominator Triple Channel DDR3/Dominator Triple Channel AIRFLOW Fan

Asus GPU GTX280 1 GB / 2x Sony DL Sata Optical Drives

HDD WD 2x320 Raid0 [OS]_WD 2x640 Raid0 [FSX]_WD 2x320 Raid0[Music Pictures Video]

Acer Monitors 3x24†2ms + TH2G / Saitek Cyborg Keyboard

Thermaltake 1200W Toughpower/Thermaltake Armor + Full Tower Case

Link to comment
Share on other sites

Ok I am now about 18 hours into it or something and I am seeing the light at the end of the tunnel, added a new feature to the forums as well while I was at it, logo click is back, couple of other bits and pieces as well that have been fixed.

Link to comment
Share on other sites

Loads of reasons to want to hack a forum, particularly if popular... just think of the data...

Or extortion...

Just to name but two...

A constant fight to stay one step ahead of them...

Good call JK, it is a hard job and you do it well!

Andrew

Link to comment
Share on other sites

I thought software not actual people cracked forums. Why would someone want to crack a Flight Sim forum? Like ORBX is extremely popular (i would think). Why would be the benefit from cracking into a forum? Makes no sense to me at all.

Link to comment
Share on other sites

I thought software not actual people cracked forums. Why would someone want to crack a Flight Sim forum? Like ORBX is extremely popular (i would think). Why would be the benefit from cracking into a forum? Makes no sense to me at all.

Because some people (especially kids), get a high from cracking sites. If you ask me they need a good and honest job, like digging ditches!

Link to comment
Share on other sites

I thought software not actual people cracked forums. Why would someone want to crack a Flight Sim forum? Like ORBX is extremely popular (i would think). Why would be the benefit from cracking into a forum? Makes no sense to me at all.

Because some people (especially kids), get a high from cracking sites. If you ask me they need a good and honest job, like digging ditches!

LOL...yes!

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...