Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Happy New Year Breach!

(Jan 1, 2014 07:04 PM)Omniscient Wrote:  @Eryn yes you were the 3rd guy to get RF'd. You probably deserved one anyways though.


Not that I care but why do you say I deserved it?
I do nothing but contribute to the forums. Fuck you too then.
I find it funny that they did all this, and all they got out of it was some public attention. No damage was done, other than you loosing your breakfast (most important meal of the day), and a few hours of work. That sucks, but it's good nothing else happened.

Thanks a lot for taking care of HF, even though it can be tough sometimes. Very well done, Omni.

Now a question: Would it be possible, and efficient, to implent a lockdown add-on, which could put Hack Forums into a lockdown, where the only people able to access it, would be the people with the password. The lockdown page/site/whatever would only be accessable to admins and superadmins, and it would require a password (a different one from the "unlockdown")?
Thanks for removing my award Omni it felt wrong having it.
And since this compromise occurred off HF I'd like to post the 3 IPs logged that had Servage access.

212.139.91.248 (Dynamic talktalk account)
198.20.101.102 (VPN)
216.104.36.236 (VPN)

IPs that access my HF account:
46.194.97.76 (Swedish ISP)
212.139.91.248 (Dynamic talktalk)
94.126.178.1 (proxy)
197.85.186.42 (south african mweb isp)

Not terribly important but I figure I'll post for historical purposes. Just in case.
Dang man, that's crazy. Seems like you are fine now which is good.
And complaining about a repfuck will only get you banned.
(Jan 1, 2014 07:09 PM)'Snorlax Wrote:  Now a question: Would it be possible, and efficient, to implent a lockdown add-on, which could put Hack Forums into a lockdown, where the only people able to access it, would be the people with the password. The lockdown page/site/whatever would only be accessable to admins and superadmins, and it would require a password (a different one from the "unlockdown")?

I'd assume you could make it only accessible by local, or assigned IP addresses. On my game site I have this assigned to specific IP addresses. Our administrator panels cannot be accessed by people who are not authorized.
[Image: SY7Xhmu.png]
(Jan 1, 2014 07:11 PM)Omniscient Wrote:  And since this compromise occurred off HF I'd like to post the 3 IPs logged that had Servage access.

212.139.91.248 (Dynamic talktalk account)
198.20.101.102 (VPN)
216.104.36.236 (VPN)

IPs that access my HF account:
46.194.97.76 (Swedish ISP)
212.139.91.248 (Dynamic talktalk)
94.126.178.1 (proxy)
197.85.186.42 (south african mweb isp)

Not terribly important but I figure I'll post for historical purposes. Just in case.

I noticed the "hackers" shared an image made by memegenerator.net to the twitter. I contacted the owner of the site, and hopefully I can get a copy of the IP which created the image.
And one more thing. They linked to a Danish song. I'm thinking they might be danes.
Quote:Would it be possible, and efficient, to implent a lockdown add-on, which could put Hack Forums into a lockdown, where the only people able to access it, would be the people with the password. The lockdown page/site/whatever would only be accessable to admins and superadmins, and it would require a password (a different one from the "unlockdown")?

I could probably whip something up but no time right now. Maybe some other day. I could create a nuclear feature which would htaccess deny the site for everyone.
Brian Krebbs can I please get a shoutout in your Video/Post about this??

anyways glad it wasn't major gj on the qikfix
(Jan 1, 2014 07:04 PM)Omniscient Wrote:  @Eryn yes you were the 3rd guy to get RF'd. You probably deserved one anyways though.

This is like the 5th time this has happened. I'm getting as efficient at it as the Matrix Architect was at destroying Zion. :) Yes, that's really nerdy sounding.

As per my policy, I don't care who did it or why. My focus is on HF and maintaining security. I don't dwell, get revenge, or seek answers. I don't really care enough about these skids to waste additional time on them. As far as I'm concerned this is just another short-lived prank that's as effective as ringing my door bell and running away. Skids will be skidz and I live (proverbial) in a neighborhood full of them. I'm just so used to this that it no longer phases me.

No, they only think they did. Which is exactly what I want them to believe.

I'm sure we'll get it all sorted out but may take a few days to figure out a good plan. I gotta see if Astonish has a more recent backup.

Ahh...I didn't notice that. I'm sure there might be a thing or two I didn't yet spot. Fixed it btw.

Pretty much. They got probably all they could and this just gives me a good excuse to take steps to prevent this from being a future problem.

It looked so good too. I took 2 bites and took off for home. But the security of HF takes precedence over just about everything else.

No. You can see the repfucklogs that it was just those few users.

Much more secure. If your forward is stolen and you have it set right they gain no access to any real inbox or your previous emails. And fixing a forward is normally as easy as editing a DNS entry with your host or registrar. They key is always keeping the box it forwards to secure and hidden. And with forwards you can do it 2-3 times without problems. [email protected] -> [email protected] -> [email protected] will do the trick for most people. And there is no reason not to spread out your forwards you use so that if one forward is stolen your whole world isn't stolen at once.

[email protected]
[email protected]
[email protected]
[email protected]
[email protected]

Easiest way to thwart an email loss.

It's offline right now until I can access the damage and come up with a solution.

You were rep fucked by me actually.

You will never get ub3r. Sorry bud.
You're quite possibly the perfect balance between a gentleman and a cunt. And I mean that in a nice way, it's just hilarious.

Thanks for the update on the site, last few times things like this have happened I never saw an official announcement, so it's nice to be informed on the goings on of stuff like this.
I'm glad to see that not much damage was done.

I'll be looking forward to rebuilding HC spawn and market place.

Happy New Years!

Did you take any pictures of Katy Perry?
(Jan 1, 2014 07:14 PM)J. McCarthy Wrote:  Brian Krebbs can I please get a shoutout in your Video/Post about this??

anyways glad it wasn't major gj on the qikfix

Sorry mate but since they threatened him to ban me or else, I will once again be getting the shout out from my main man Krebby McKrebKrebs.
still lurkin. still bitcoin cashin.
Omni, I think this is also a good time to continue GAuth again! When you login from an unknown IP, You will need your code from your mobile.. I also like 'Snorlax's idea of the lockdown..
Very dedicated administrator. Glad you had everything in control.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by OmniscientJan 4, 2026 12:28 PM 31 966 Jan 4, 2026 12:28 PM
Last Post: Terry A. Davis
by OmniscientJun 16, 2021 09:29 AM 77 3,237 Jun 16, 2021 09:29 AM
Last Post: Omniscient
by illuminati▲Jan 3, 2017 04:13 AM 41 2,267 Jan 3, 2017 04:13 AM
Last Post: Dredd