HACKED!?

[Chomperz]

I'm playing skeptic till i hear official words from the admins.

i mean seriously, if you had access to a popular site and you blew it on just resizing thumbnails, well... that's just dumb.

 

[codewolf]

Explain why there were dozens of 'I can't log in' posts right before it went down then, Code?


I fear that my sources tell me the server's been compromised on a massive scale.

well im afraid your sources maybe slightly screwed then mate.....

the reason it would have done that is that if a site is going down one of thae main thigs that goes first is the database or rather the connection to it...therefore if they tried to log in basically they'd be sending their passwords off into nowhere as there is nothing to reference the password to.....

and for those of you that dont know...if something has been stored in a database using MD5 encription the password field in the database would read something along the lines of 51D7FE4312 rather than your password ("fish" for example)

 

[HyBroMcYenapants]

OK ALL I HERE IS THIS.......BAWWWWWWWWWWW


LOL JUST KIDDING BUT DAMN YA'LL GOT OWNED

 

[Orlith Nemeth]

Also, has anyone else noticed that the forums are insanely slow right now? I'm even getting MySQL "too many connections" errors. DoS attack, or just too many furs wondering where their fapping materials went? (j/k!)

Take care, and good luck, Admins!

Thats actually probably the case, since last time i actually managed to connect to the Site Status forum, there were 466 guest users, and countless more registered users viewing the forum :/

 

[dave hyena]

Preyfar made a site status post, giving some infomation about this:

http://www.furaffinityforums.net/showthread.php?tid=11488

More details will follow.

 

[Sslaxx]

Wasn't it FA that had, unencrypted, passwords available via port 80 once? Why, Codewolf, should anyone believe that the passwords are in anything other than plain text or ROT13 at best?

 

[crimsonwolf90]

I've got a word for this and it rhymes with muster bluck...^^

...anyways, one of the admins is on and aperently the database was just fine, at least, that's what they said. It was "untouched" so to speak.

 

[Allan]

I hear from a reliable source that someone got banned as a result of this drama.

 

[codewolf]

Wasn't it FA that had, unencrypted, passwords available via port 80 once? Why, Codewolf, should anyone believe that the passwords are in anything other than plain text or ROT13 at best?

because, to be perfectly honest...you'd have to be some sort of retard to not have passowrds encypted on a site with well over 40,000 users on it

 

[SDWolf]

Hrmmmm....

An administrative account was taken over...

Lovely. Strong Passwords, anyone?

*le sigh*

 

[Stratelier]

(Better change my forum pass just to be sure, separate accounts should use separate pwds anyway, but they get harder to remember that way....)

 

[Jade-Starrz]

Well this was nice to wake up to. Now I can't check anything and some little hacker moron should have a foot shoved up his bum. I don't understand how people can have nothing else to do with their time to the point of hacking.

 

[Dragoneer]

Hrmmmm....

An administrative account was taken over...

Lovely. Strong Passwords, anyone?

*le sigh*

The issue in question did not have to do with password strength -- it had to do with a vulnerability using public wireless networks.

 

[Janglur]

This looks like this could mean FA is down for a while, then... things are fitting together in a bad way indeed, Jangular! It looks like you're quite right that the security leak was more than the FA admin let on.

Explain why there were dozens of 'I can't log in' posts right before it went down then, Code?


I fear that my sources tell me the server's been compromised on a massive scale.

well im afraid your sources maybe slightly screwed then mate.....

the reason it would have done that is that if a site is going down one of thae main thigs that goes first is the database or rather the connection to it...therefore if they tried to log in basically they'd be sending their passwords off into nowhere as there is nothing to reference the password to.....

and for those of you that dont know...if something has been stored in a database using MD5 encription the password field in the database would read something along the lines of 51D7FE4312 rather than your password ("fish" for example)

I answer this with the following quote:

Wasn't it FA that had, unencrypted, passwords available via port 80 once? Why, Codewolf, should anyone believe that the passwords are in anything other than plain text or ROT13 at best?

Considering the DB leaked not once, but twice, unencrypted.. yyyeeaaahhh. Wouldn't surprise me if it wasn't encrypted now, either. And a metric buttload of people couldn't log in. Ten minutes later, errors came up, then moments later the site's down. I doubt a ten mintue timespan was JUST a case of server shutdown. Seems a bit too long.

And we all know that at least one account leaked today. I would not remotely doubt that it was more serious than admin are letting on, and the site defacement was only the tip of the iceberg.
After all, the stuff staff usually dismiss as unimportant seems to consistantly blow up in their face.

After all, the last security issue was 'not that big a deal', enough that they didn't feel it necessary to even casually mention it. Until another admin went batshit over the implications. That admin lost, plus the drama it ensued, was pretty big enough to have warranted more attention than was given (see: none). Now this security breach...
Are we all now paying for this oversight?

Thank god I changed my password when that drama happened, and took down all my art.

 

[falderal]

Dr. Wil, if the DB has been compromised (and it sure fucking looks that way) then they can see your NEW password right now, too.

You're supposed to change it AFTER they regain control...

No. If worse comes to worse, they can just deny all connections to Furaffinity's servers and get to it from the physical location of the servers. Don't worry, the data is quite safe, very easy to disable network connections or hit the power buttons while they sort out through the extend of the comprimise.

 

[devillo]

The forums are lagging probably because EVERYONE is on them going mental over this. Which is fair enough. This whole security thing happening AT FA:U (which is what the post suggests to me) means someone left a computer unattended or left the password on it, and someone therefore just dropped the ball. Ah well, Hopefully tomorrow some 12 year olds power gets blown and he has to do without the internet for half an hour. He just might explode.

 

[Jade-Starrz]

This looks like this could mean FA is down for a while, then... things are fitting together in a bad way indeed, Jangular! It looks like you're quite right that the security leak was more than the FA admin let on.

How do you figure? Just curious... I am new to the site so I am still trying to figure things out.

 

[Dragoneer]

Considering the DB leaked not once, but twice, unencrypted.. yyyeeaaahhh. Wouldn't surprise me if it wasn't encrypted now, either. And a metric buttload of people couldn't log in. Ten minutes later, errors came up, then moments later the site's down. I doubt a ten mintue timespan was JUST a case of server shutdown. Seems a bit too long

An administrator account was exploited, but the database is fine. You can not access the full database from an admin account -- you have to do it through a root account, and the root is fine. The DB is fine.

 

[Sslaxx]

And why, exactly, should we believe you Preyfar? Janglur points out that the things you dismissed as unimportant tended to backfire on you. One lesson should be, if you're humble enough to learn it, is that everything is important.

 

[Liode]

*growls darkly* Hackers?! Lead me to them! Anyone with the audacity to hack into a community like this shall merit themselves a serious scar or two...

But...as long as the security issue is fixed...and soon...

Hmm...maybe now they'll take us seriously...?

 

[codewolf]

Are we all now paying for this oversight?

last time i checked...youh had'nt payed a singe penny (cent/whatever) towards fa....

 

[falderal]

Wasn't it FA that had, unencrypted, passwords available via port 80 once? Why, Codewolf, should anyone believe that the passwords are in anything other than plain text or ROT13 at best?

Considering the DB leaked not once, but twice, unencrypted.. yyyeeaaahhh. Wouldn't surprise me if it wasn't encrypted now, either. And a metric buttload of people couldn't log in. Ten minutes later, errors came up, then moments later the site's down. I doubt a ten mintue timespan was JUST a case of server shutdown. Seems a bit too long.

And we all know that at least one account leaked today. I would not remotely doubt that it was more serious than admin are letting on, and the site defacement was only the tip of the iceberg.
After all, the stuff staff usually dismiss as unimportant seems to consistantly blow up in their face.

After all, the last security issue was 'not that big a deal', enough that they didn't feel it necessary to even casually mention it. Until another admin went batshit over the implications. That admin lost, plus the drama it ensued, was pretty big enough to have warranted more attention than was given (see: none). Now this security breach...
Are we all now paying for this oversight?

Thank god I changed my password when that drama happened, and took down all my art.

If a computer is being subjected to more than a usual amount of traffic or stress, then it can most certainly take longer to shutdown. It's very easy to disable connections with right click, and click stop.
Even if not, when any server is taken down, say the server for the site's Database: SQL, which they do run, there is no data coming in from that server and computer's tend to not like when they were receiving data and suddenly it stopped.
There would be a lot more problems if a high security account was broken into, we may not even see anything at all, the domain may even come up saying it's for sale. I would think that they were more concerned about the security breach than about putting up a webpage saying that furaffinity is down.
In all, that it took the time it took, is admirable. It takes some of the administrators longer than that to respond to big problems where I work. The damage is more than likely serious but not critical.

 

[Dragoneer]

And why, exactly, should we believe you Preyfar? Janglur points out that the things you dismissed as unimportant tended to backfire on you. One lesson should be, if you're humble enough to learn it, is that everything is important.

My account was the one that was jacked and admin accounts can not access the DB -- you can only do that through root, and root is fine. My root password is much more secure and is fine.

My admin account got hijacked due to a vulnerability with wireless systems, we were aware of it, but due to certain issues not able to fix it when we wanted to. The damage is small, and affects only those people who accessed FA over wireless while attending FAU. Due to the hotel's anonymous, free wireless, there is no way to track the data and there -- and this is problem of any free public wireless system.

We've locked the site, secured what we can and are currently looking into seeing what damage has been done. Thankfully, Crypto and I were able to get stop the problem roughly after 10 minutes after it started, so I think the damage is minimal at best. We know WHO did it, too.

 

[STrRedWolf]

The issue in question did not have to do with password strength -- it had to do with a vulnerability using public wireless networks.

Someone forgot to shut down Telnet and use SSH instead... lovely.

 

[crabby_the_frog]

Snip.

We know WHO did it, too.

Well, that's great news, indeed. Hopefully you'll be able to learn how said person did whatever to get your password, and as such, develop a new defence agaimst it?

I dunno... but it's good to hear that things are under control. Possible hackings aside, how was the convention?