The Hackening II: The Hackening Strikes Back

[Touzen]

We've been there.

The hackening returned last night, requiring a revert to the last day. The issue doesn' seem to be with us though, even the company creating Vbulletin itself got hacked, but currently still claims that there are no issues with its software. This remains to be seen. For collecting security information it is likely best if we keep the forum running so I can continue monitoring matters. Another possible vector that might have caused this latest hack, should the Vbulletin crew speak the truth, could be that the old, compromised, forum still remained on the server, although it was completely inaccessible. Maybe the hackers somehow used it to gain access and compromise this new forum as well. The old forum has since been removed from the server, leaving only the latest version of the forum software which is claimed to have no exploits. If we get hacked again it means that it clearly is hackable and in that case I can forward the information to the software company so they can hopefully use that information to fix the exploit that could target thousands of sites like the latest exploit to which we fell victim.

For now, I ask you to immediately report any strange behavior on the site to me or another admin/mod on either the forum, if you still can, or on IRC. Also keep copies of your post for the next few days as we hit the waves of uncertainty again.

As always, thanks for flying Europe.

 

[Hanseatic Republics]

I'm not very accessible at the moment. But as I told Yanks in the IRC, if this proves devastating I'll be willing to chip in to end the hackenings.

 

[Miratak]

Fark me, I stop coming on here a while and the place gets hacked..twice..?
You said in the other thread fighting him is your number 1 priority...I'm coming to Europe next year, maybe I can go find that crazy Belgian friend of ours and drag his ass out of whatever gutter he has passed out in and we can go bash the hacker for you Xen..

 

[Khemia]

Fark me, I stop coming on here a while and the place gets hacked..twice..?
You said in the other thread fighting him is your number 1 priority...I'm coming to Europe next year, maybe I can go find that crazy Belgian friend of ours and drag his ass out of whatever gutter he has passed out in and we can go bash the hacker for you Xen..

I believe that the current thought is the hacker is targeting vBulletin itself, and we are unfortunate collateral damage; not that the hacker is targeting this forum specifically. If nothing else, there's always the thought process that we could transition from vBulletin to Invisionfree or some such, though the logistics of that are simply inconvenient to too many people.

 

[Touzen]

There have been no new updates from the developer, and there are only a few reports as of now for successful hackers of the version of the software we are running right now, and it's not clear if these hacks are due to inherent faults or failures on parts of the respective admins. Things are quiet right now, and I sincerely hope they stay that way. The last few days allow for cautious optimism.