Feedback Serious Compacts Hacked

[bartjeej]

at first, not aggravating him was what I tried to do... but then he started posting such panicky stuff that it became hilarious, and I couldn't resist

 

[Lightmancer]

Me neither but we must bear in mind that by definition we are dealing with nut-jobs...

Sent from another Galaxy

 

[Amin]

Apparently a ton of vBulletin forums have been hacked recently due to a vulnerability I was not aware of and have now remedied. Now to go about figuring out what damage has been done to the site and how to fix it!

 

[bartjeej]

great to hear that the vulnerability has been remedied! although I guess new ones will always be found in due time... Again, thanks for the hard work!

 

[pdh]

It occurs to me that some of the recent apparently pointless spams may have been "probes".

Just a thought ...

 

[pniev]

Amin,
Thanks for acting so quickly and I am sorry that you have to waste your time for things like this. A rather unfortunate byproduct of the web.
The good news of course is that seriouscompacts.com becomes popular around the globe!
There are a couple of things "bothering" me:
1. Could he left a backdoor?
2. Is there a way to use HTTPS instead of HTTP? with http it is easy to intercept passwords.
3. Is there a way to make signup a bit more challenging? I do realize that there are disadvantages but I do wonder if the pros outweigh the cons. There has been a lot of spam (also send to my email address)
Anyway, I am glad you solved it!
Thanks, Peter

 

[Amin]

Peter, those are all questions I am trying to deal with. At the same time I have a full time job, and time is limited.

I am wondering whether to roll the sites back 10 days (all posts lost) to be as certain as possible that they are truly clean.

 

[pdh]

eek!
Of course you must do what needs to be done, and though a rollback would be horrid, it's not the end of the world

 

[stillshunter]

Peter, those are all questions I am trying to deal with. At the same time I have a full time job, and time is limited.

I am wondering whether to roll the sites back 10 days (all posts lost) to be as certain as possible that they are truly clean.

Ah so our Red Prob Nut Job was just anti-Silver September. He had always planned to overthrow our challenge by winding us back to day one! Damn these criminal masterminds....:irked:

 

[drd1135]

No problem on the rollback. We tend to say the same things over and over, and we can all enjoy saying them again.

 

[pdh]

No problem on the rollback. We tend to say the same things over and over, and we can all enjoy them again. .

 

[kyteflyer]

We can always repost as a single Days 1-11 each.

 

[marlof]

No problem, I'd prefer the easiest way for you.

 

[Ripleysbaby]

No problem, I'd prefer the easiest way for you.

Ditto, likewise , +1 and all that .
No worries

 

[BBW]

I agree. Do the simplest thing you can do, Amin - as you can do it.

 

[Luke]

Here you go...... I rolled the site back....OOPS! Is 2008 a bit too far? SeriousCompacts

 

[Gubrz]

I feel my wittiness being set adrift! Ill be lost in time!

I'd roll it back. We can all post new pics and thoughts.

 

[Steve Noel]

Just logged on. And still can't edit. Just Information.

 

[Amin]

Thanks, all. Appreciate the support. Still hoping I can do this without a rollback. The editing bug will probably not change soon. Need time away from work to fix all the bugs.

 

[Lightmancer]

My vote (not that this is a democracy ) is for a rollback. Occam's Razor suggests that is the best and safest way (and I live not far from there )

Sent from another Galaxy