Jump to content

What happened to the forums?

Captain Sierra

By Captain Sierra
in KSP1 Discussion

 Share

Recommended Posts

CalculusWarrior

CalculusWarrior

Posted
Posted
It's nice to see everything back up and running!!!! ...and not in the middle of being hacked...

Hold on... at the top of the post box... could it be... BUTTONS!!!:cool:They're back!:rolleyes:'

now all we need is spoiler tags...

I missed you dearly, my sweet buttons! Now I can actually reply without having to click through to a whole new page! :D

Link to comment
Share on other sites
maackey

maackey

Posted
Posted (edited)

The hack was through the forum software I believe (vBulletin). It happened to Xenonauts as well (guess which forum software they use!) It was religious propaganda, spreading information about Muslim religion and the like. Really counterproductive if you ask me...

Edited by maackey
Link to comment
Share on other sites
Apollo13

Apollo13

Posted
Posted
I can't guess what a "hacktivist" group could have against this forum. Anyways, I'm glad it's all solved happily :D

Well, you know Syrians from Security Lions Hackers, specifically Security Dragon...they just don't like the freedoms that all Kerbals enjoy.

Link to comment
Share on other sites
Simplicity

Simplicity

Posted
Posted
Alot of the posts which had links to other posts no longer work is this a feature or a bug also i had some saved shortcuts which no longer work and trying to find those posts is a nightmare

yea me too, I had been saving all my notifications so I could just click on them and continue, but all I get clicking on them now is a "file not found" - this could be a nightmare waiting to happen for a lot of people methinks..

Link to comment
Share on other sites
Simplicity

Simplicity

Posted
Posted
For those who are trying to access old links: Change the "showthread.php/" bit of the URL to "threads/". The link should work as normal.

Yup, many thanks, that works perfectly, did a copy and paste in all the old links in my email program and it loaded all the pages :)

Link to comment
Share on other sites
pxi

pxi

Posted
Posted (edited)

Really in an age of proxies, TOR and whatnot, it's nigh-on impossible to say where someone is based on the IP address alone.

I had a popup asking for my authorization shortly after the forums came back up, I assume this is what we're talking about?

Anyone that uses the same username/password combinations on other sites might want to change their passwords if they happened to fill in that form.

Oh, and congrats on getting the forums back up btw, was much missed in these parts.

Edited by pxi
Posting at 5.30am is not conducive to sense-making.
Link to comment
Share on other sites
OdinYggd

OdinYggd

Posted
Posted
I had a popup asking for my authorization shortly after the forums came back up, I assume this is what we're talking about?

Anyone that uses the same username/password combinations on other sites might want to change their passwords if they happened to fill in that form.

I was asked my username and password right after I've seen the server message that it got hacked, so I haven't entered anything. o_o

The login box that appeared after the hacked pages were removed was SQUAD's doing. At that point N3X15 and the rest of the tech team put the entire forum behind a stand alone login system so that they could work on it without exposing anyone else to the malware carried by the defaced site.

Although it would be a good idea to do a full antimalware scan if you saw the defaced site especially if you clicked links on it. Subsequent analysis of the hacked version showed that it was packed with malware.

Changing your passwords probably wouldn't hurt, but if you had only put them into the authentication box that appeared after the defaced site dissappeared you should be okay. By that point the relevant admins were on top of things and had already begun repairs.

Link to comment
Share on other sites
Mick2

Mick2

Posted
Posted

I would just like to take this opportunity to Thank Squad for their efforts.

They have told us that the problem was caused by external entities. They have told us the action they took (if a little sparse on detail for some) upon realising the problem existed.

I think they have done quite a professional job with resolving the issue.

I will admit that I was at a loss at to why the forums were not up during the issue, but that fact in itself eluded to problems and all I need do is wait for a resolution to be implemented.

I can understand that people have questions like Why? and How was it fixed ? or possibly even How can this be avoided in the future ?

I think that hackers motivations will be lost on most of us and really I don't think it matters who (as that will never really be know unless some admits to it) or even why they did it. In some cases simply discussing the motives may only end in the result they wanted.(propagation of propaganda)

For those after a more detailed after action report on the hack or server migration (from a professional standpoint) may be appeased by such a report in the Dev Blog Entries on the right side of the main forum. (I have seen mention in there of web server work in the past)

Once again Squad, Thank You for your diligent work and I am sure if it is pertinent to us you will detail what you can without compromising security when it is appropriate.

Rest easy for now team, you've done a good job.

Link to comment
Share on other sites
Mishkin_007

Mishkin_007

Posted
Posted (edited)
The login box that appeared after the hacked pages were removed was SQUAD's doing. At that point N3X15 and the rest of the tech team put the entire forum behind a stand alone login system so that they could work on it without exposing anyone else to the malware carried by the defaced site.

They password protected the directory root of the server because someone else had access most likely.

Edited by Mishkin_007
Link to comment
Share on other sites
This thread is quite old. Please consider starting a new thread rather than reviving this one.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing
×
×
  • Create New...