OMG Hacking Terror Spree!!!1

Post by **Tenacious B** » September 6, 2006, 9:16 am

ok, we got hacked.

yes, it was my fault.

no, it did no permanent damage (unless you use internet explorer, in which case the hack probably infected you from top to toe with trojans).

anyone who wants the gritty details, let me know, but suffice to say that i should have upgraded this forum years ago. when i find the time this week, i will.

anyway, thanks for the heads-up from porl. and thanks to everyone who fled like rats from a sinking ship

one of the cool things this debacle has taught me, is that it seems my hosts make backups of every database on the site every day. good one, hosts.

Ceek · Post by **Ceek** » September 6, 2006, 9:28 am

I would like to hear the gritty details!!

Post by **Tenacious B** » September 6, 2006, 9:53 am

ok.

some turkish hacking group used a known exploit in this version of the forum software to use the "highlighting" function of the search facility to inject code into the description for the first found category (viewforum.php?forum=1), meaning that every time it retrieved the forum names it also injected the infected code to browser.

once again, i hope you weren't using explorer.

Ceek · Post by **Ceek** » September 6, 2006, 10:34 am

Please invite root to come on again. It would be so perfect it he got a virus because of M$. I haven't used explorer since the dinosaurs roamed the planet. No wait, i haven't used toilet paper since the dinosaurs roamed the planet but i haven't used IE in quite a long time.

We got a turkish injection

.

:turkhackeremoticon:

Post by **PORL** » September 6, 2006, 10:46 am

i'm using explorer (it's not my pc), should i be doing a virus scan or some shit??

Post by **Tenacious B** » September 6, 2006, 10:55 am

yes. most definitely.

check for any trojans.

tetrahc · Post by **tetrahc** » September 6, 2006, 1:13 pm

also check for turks

Post by **Tenacious B** » September 6, 2006, 1:55 pm

i once found a fully grown turk and was forced to nuke the site from orbit.

it was the only way to be sure.

tetrahc · Post by **tetrahc** » September 6, 2006, 2:02 pm

the world would be a much darker place if we didn't have icbms

Post by **PORL** » September 6, 2006, 4:00 pm

darker SKINNED place

HAHAAAAHA!!!

Stiff Cliff · Post by **Stiff Cliff** » September 6, 2006, 6:01 pm

fucking turks.

karmapolice · Post by **karmapolice** » September 7, 2006, 12:06 am

i was using firefox...

today my computer was acting a bit dodgy...

using avg and ad-awareSE... anything else i should be doing?

Post by **PORL** » September 7, 2006, 3:46 am

IE users (although i think i'm the only idiot using it >.<), and MAYBE other browser users (i don't know how firefox etc works):

check this path

C:\Documents and Settings\<username>\Application Data\Sun\Java\Deployment\cache\javapi\v1. 0\jar\

should be a blackbox trojan in there, so virus scan the directory/delete the correct file if you know what you're doing

also open control panel, then the java plug-in console. click the 'cache' tab and then clear the cache

i did a full virus scan last night, and the trojan was the only thing it found - so i don't think anyone has anything to worry about if my results are a reflection of the 'damage' caused

Post by **Tenacious B** » September 7, 2006, 8:48 am

i hate to break it to you, but i think that java trojan is not really a trojan. lots of virus programs read the java jar install as a trojan but it really isn't.

still, no harm done, and it looks like you're totally clean.

and nick: if you have your avg updated you don't need to worry.

Post by **PORL** » September 7, 2006, 7:50 pm

hey man i don't care i was just making sure everyone was going sweet like a nut - java sucks my balls anyway and doesn't really do anything i can't fix instantly so you're not really breaking anything to me apart from the fact you had sex with your mothers mother

Post by **Tenacious B** » September 8, 2006, 9:11 am

i told you that in privacy

karmapolice · Post by **karmapolice** » September 28, 2006, 11:30 am

thanks... i hear we have been hacked again... lol... my avg is always up to date.

Post by **Tenacious B** » September 28, 2006, 2:22 pm

it was only for a couple of minutes - and i'm becoming kind of an expert in getting rid of the defacements.

Post by **PORL** » September 28, 2006, 3:47 pm

is there not a security update of somekind for the site??

LEXY!!! · Post by **LEXY!!!** » September 28, 2006, 3:50 pm

i couldn't log in yesterday, i thought you banned me

Post by **Tenacious B** » September 28, 2006, 3:52 pm

it's a long story, but basically i can't update the forum without breaking all the functionality.

i'm waiting for the next major release, which apparently has an upgrade path from this one.

Post by **Tenacious B** » September 28, 2006, 3:53 pm

and if i banned lexy where the hell would i get my handjobs from?

LEXY!!! · Post by **LEXY!!!** » September 28, 2006, 3:56 pm

warren

Post by **PORL** » September 28, 2006, 3:56 pm

voting mac

Post by **Tenacious B** » September 28, 2006, 4:00 pm

oh god these are such good suggestions

LEXY!!! · Post by **LEXY!!!** » September 28, 2006, 4:01 pm

please don't ban me though

Post by **Tenacious B** » September 28, 2006, 4:03 pm

i dunno, some warren handjobs sound quite appealing

LEXY!!! · Post by **LEXY!!!** » September 28, 2006, 4:04 pm

yeah i mean you should keep me around purely out of gratitude for suggesting it

Post by **Tenacious B** » September 28, 2006, 4:13 pm

that's fair enough i like your spunk.

LEXY!!! · Post by **LEXY!!!** » September 28, 2006, 4:18 pm

i like your spunk