PDA

View Full Version : What the?



Oskaar
08-24-2004, 11:10 PM
OK Vicky,

Have you been drinking mead and coding again?? LOL

Looks like an expansion and re-organization afoot. I like it!

Oskaar

webmaster
08-25-2004, 04:14 AM
Well, as long as I had to spend the *entire day* recovering and re-installing the forum, I decided to fix it up a bit. Turns out the original and subsequent hackings were the result of a non-secure calendar script we were using.

Yesterday, a Malaysian hacker opened a port and uploaded hundreds of MB of files to Gotmead, maxxing us out. He even placed a pirated copy of the new Exorcist movie on the site! Too bad I have a crappy dial up connection, or I might have checked it out. As it is, I deleted all the unauthorized files, removed the calendar script, and upgraded the forum and added a few hacks I found to expand it a bit.

Glad you like the changes!

Vicky - tired after battling the forces of hacking until 1 am and getting up at 5:30

WikdWaze
08-25-2004, 04:32 AM
Is it still illegal to hack hackers into tiny little pieces? Sort of an eye-for-an-eye.

Talon
08-25-2004, 06:05 AM
Not if they are being malignant, like this putz from Malaysia was being...

webmaster
08-25-2004, 06:16 AM
Y'know, wouldn't it be fab if you could set traps for them? So that if they broke in, a destructive virus would be installed on *their* system, and wipe it for them.

Meanwhile, I'm boning up on security, and I'll be *much* more careful about what scripts I use in the future. For the record, the calendar I was using was Calendarscript. Apparently its been causing all sorts of problems, or so I hear from my hosting contractor.

Vicky - tired, but victorious over the Forces of Evil (for the moment)

Oskaar
08-25-2004, 10:25 AM
I just went through that last week with one of my clients Vicky. Nothing more frustrating than chasing down an open door, and then whacking a few Gb of porno, games, virus files and about 200 directories.

Sorry it happend to you too.

Oskaar

webmaster
08-25-2004, 10:50 AM
Knock on wood, so far my clients haven't had a problem with this, although I suppose its only a matter of time. However, when I moved to this host, I replaced all their .cgi mailers with a new more secure script, and most of them don't use a lot of scripts on their sites.

randy
12-29-2004, 08:24 PM
Think they must be making rounds, we went through that a couple weeks ago.