Happy New Year everyone. I had a great time this week and for New Years I was at a private party even with Katy Perry as the entertainment. It was awesome. The wife and I had a blast and it was just a magical night full of good food, friends, and the welcoming of a new year. I hope everyone experienced something similar.
Now for the lowdown.
First off...member data was in no way compromised. Not even close. They think they got something they don't really have. So don't be fooled by screenshots or bullshit. Your data wasn't taken or accessed in any ways.
So today while having a late breakfast I got some emails about access to accounts and password resets. These security triggers alerted me pretty quickly that I had a compromise. A follow up email was sent to me threatening me to ban Orgy or else. This was about 12:30pm PST give or take 10 mins. Initially I wasn't sure what was accessed and unfortunately I only had phone access at my location. But within 30 minutes it was clear I had a breach that needed immediate attention.
I left my breakfast, which looked delicious, and drove home which takes about 30 minutes. Not sure exact time I was home but I'd say maybe 1:30ish.
I knew the focal point of the breach was my Servage account which hosts Witza.com and as many know I have some emails I use there. These emails were the key to a few accounts getting compromised. I'm an avid user of email forwards which actually keeps me more secure and compartmentalizes breaches like these. I can quickly make adjustments to secure things.
While they had access to Witza.com and the Servage account there is NO USER DATA there and the upgrade and donation pages stem from an unknown host for net.witza.com. Which was never compromised.
A defacement page was placed at www.witza.com as well and a tag page which I've kept up: http://www.witza.com/rofl.php Congrats to Onionzcrew btw. I'm sure they're super happy they managed to do this. This really just cost me 2 hours of work and a lost breakfast. I consider this a very minor breach and I've seen much worse by much better hackers with tons more skillz. But kudos to them anyways if for nothing more than causing some alarm.
A few members ( Orgy and Diabolic) got rep fucked which can't be undone and some reps were removed from other member accounts too.
The admincp is htaccess secured and was never accessed. The staff section requires a password and that also was never access but to be frank with you...the staff section doesn't have anything important in it. It's just staff discussing policies and sometimes a thread to consider new staff. Very benign stuff. I don't run a drama queen website. We don't waste our time trash talking members and stirring up trouble. We're the trouble killers.
The few accounts compromised from me personally was the PP account which no damage was done and it's fully recovered. PP was the first phone call I made.
An unused personal Twitter account was stolen and used to update everyone about the compromise. It's now recovered and all their tweets are deleted except their original tweet. They can keep their shout out trophy.
A digitalocean account was compromised via a PW reset. I opened a DO account because it was dirt cheap and I wanted to toy around with it. I have like 10 hosting accounts on various services under aliases and different emails. There was zilch in the DO account. Account is also now recovered.
My HF account was compromised with a PW reset as well. This has the most damaging potential except for the fact our admincp is protected. And I have lots of safeguards for this contingency anyways. Very very little damage actually happened. Of course I was immediately able to fix this and recover the account just fine.
My Coinbase PW was reset but because I have 2FA they couldn't log in.
My Omniscient Minecraft account was stolen. They logged into HackerCraft and griefed. This was probably the only real damage the person did. We have a bit of a problem because it appears the backups stopped working a month ago and I'm not sure what Astonish has done so we can recover. But worse case scenario we just rebuild which was probably going to happen anyways for various reasons. In a way..they did me a favor. Silver lining in the clouds and all. Oh and account is recovered too.
During these few hours of the compromise some of my account do have credit cards attached and they might show last 4 digits in the billing page. This doesn't alarm me. I won't even bother to change my CC numbers. I might rotate a few cards, change a few emails, but overall this breach was very minor.
I know that those who get anything related to me think they've accomplished the climbing of Mt Omni and are heralded for amazing feats of superhuman ability but in this case. It's just not so. Heck I'm not even embarrassed a slight bit. Someone managed to get through the security of Servage through social engineering and took the low-hanging fruit. That stuff is practically a honey trap which gives me lots of alerts of a compromise. I've lost no accounts. I've not lost 1 cent and other than a couple hours of security work I'm going to go about my day as if this didn't happen.
Funniest part is they wanted Orgy banned but they rep fucked him and I just reset all his reps. He has a better rep now than before.
If anything I'll get extra traffic from the publicity and the drama. :)
Any questions?
Now for the lowdown.
First off...member data was in no way compromised. Not even close. They think they got something they don't really have. So don't be fooled by screenshots or bullshit. Your data wasn't taken or accessed in any ways.
So today while having a late breakfast I got some emails about access to accounts and password resets. These security triggers alerted me pretty quickly that I had a compromise. A follow up email was sent to me threatening me to ban Orgy or else. This was about 12:30pm PST give or take 10 mins. Initially I wasn't sure what was accessed and unfortunately I only had phone access at my location. But within 30 minutes it was clear I had a breach that needed immediate attention.
I left my breakfast, which looked delicious, and drove home which takes about 30 minutes. Not sure exact time I was home but I'd say maybe 1:30ish.
I knew the focal point of the breach was my Servage account which hosts Witza.com and as many know I have some emails I use there. These emails were the key to a few accounts getting compromised. I'm an avid user of email forwards which actually keeps me more secure and compartmentalizes breaches like these. I can quickly make adjustments to secure things.
While they had access to Witza.com and the Servage account there is NO USER DATA there and the upgrade and donation pages stem from an unknown host for net.witza.com. Which was never compromised.
A defacement page was placed at www.witza.com as well and a tag page which I've kept up: http://www.witza.com/rofl.php Congrats to Onionzcrew btw. I'm sure they're super happy they managed to do this. This really just cost me 2 hours of work and a lost breakfast. I consider this a very minor breach and I've seen much worse by much better hackers with tons more skillz. But kudos to them anyways if for nothing more than causing some alarm.
A few members ( Orgy and Diabolic) got rep fucked which can't be undone and some reps were removed from other member accounts too.
The admincp is htaccess secured and was never accessed. The staff section requires a password and that also was never access but to be frank with you...the staff section doesn't have anything important in it. It's just staff discussing policies and sometimes a thread to consider new staff. Very benign stuff. I don't run a drama queen website. We don't waste our time trash talking members and stirring up trouble. We're the trouble killers.
The few accounts compromised from me personally was the PP account which no damage was done and it's fully recovered. PP was the first phone call I made.
An unused personal Twitter account was stolen and used to update everyone about the compromise. It's now recovered and all their tweets are deleted except their original tweet. They can keep their shout out trophy.
A digitalocean account was compromised via a PW reset. I opened a DO account because it was dirt cheap and I wanted to toy around with it. I have like 10 hosting accounts on various services under aliases and different emails. There was zilch in the DO account. Account is also now recovered.
My HF account was compromised with a PW reset as well. This has the most damaging potential except for the fact our admincp is protected. And I have lots of safeguards for this contingency anyways. Very very little damage actually happened. Of course I was immediately able to fix this and recover the account just fine.
My Coinbase PW was reset but because I have 2FA they couldn't log in.
My Omniscient Minecraft account was stolen. They logged into HackerCraft and griefed. This was probably the only real damage the person did. We have a bit of a problem because it appears the backups stopped working a month ago and I'm not sure what Astonish has done so we can recover. But worse case scenario we just rebuild which was probably going to happen anyways for various reasons. In a way..they did me a favor. Silver lining in the clouds and all. Oh and account is recovered too.
During these few hours of the compromise some of my account do have credit cards attached and they might show last 4 digits in the billing page. This doesn't alarm me. I won't even bother to change my CC numbers. I might rotate a few cards, change a few emails, but overall this breach was very minor.
I know that those who get anything related to me think they've accomplished the climbing of Mt Omni and are heralded for amazing feats of superhuman ability but in this case. It's just not so. Heck I'm not even embarrassed a slight bit. Someone managed to get through the security of Servage through social engineering and took the low-hanging fruit. That stuff is practically a honey trap which gives me lots of alerts of a compromise. I've lost no accounts. I've not lost 1 cent and other than a couple hours of security work I'm going to go about my day as if this didn't happen.
Funniest part is they wanted Orgy banned but they rep fucked him and I just reset all his reps. He has a better rep now than before.
If anything I'll get extra traffic from the publicity and the drama. :)
Any questions?
![[Image: tGl3Trx.gif]](https://i.imgur.com/tGl3Trx.gif)
