Shoutbox

Fluffy. How do u no so much about this? Its quite scary scene as it was wj who sorted it

I was there, and I was on IRC, where we were all talking about it.

It's a bit of a coincidence really... I'd just finished reading/answering posts and had left the forums, but wanted to say something in IRC, so I joined, which was a couple of minutes after the chaos in there had started - a minute later someone said something about the forums, and when I'd looked back they'd gone crazy.  This morning I logged on just as WDZ had reopened the forums.  The rest is just common sense working out what the hacker musta done.

Thanks for the quick response on this. I was there also on IRC when the fan got hit by the shit... and DX, you see, you did the good thing, no worries

The only question I have left is: Were the passwords comprimised? As in: many users will use the same password for there subscriptions to boards, email, etc...

quote:

---

Originally posted by fluffy_lobster
It was... I imagine WDZ will disable it when he gets on, or leave it because it looks so cool

---

Well, I didn't take the time to set everything back to exactly how it was... I'll leave that enabled if you want...

quote:

---

Originally posted by CookieRevised
The only question I have left is: Were the passwords comprimised? As in: many users will use the same password for there subscriptions to boards, email, etc...

---

Some passwords were definitely stolen from the IRC server. As for forum passwords, I believe some could have been taken, but we're not sure yet. Anyway, it really doesn't matter, because all the forum passwords are MD5-encrypted, and it's near impossible to decrypt and use them.

quote:

---

Originally posted by WDZ
Well, I didn't take the time to set everything back to exactly how it was... I'll leave that enabled if you want...

---

Yeay I think it's a nice feature...

quote:

---

Originally posted by WDZ
Some passwords were definitely stolen from the IRC server. As for forum passwords, I believe some could have been taken, but we're not sure yet. Anyway, it really doesn't matter, because all the forum passwords are MD5-encrypted, and it's near impossible to decrypt and use them.

---

Why aren't the nickserv passwords encrypted anyway?

And it's just occured to me - what does the lost password formr do seeing as the passwords are encrypted?

quote:

---

Originally posted by fluffy_lobster
And it's just occured to me - what does the lost password formr do seeing as the passwords are encrypted?

---

Generates a new password, sends it to you.

quote:

---

Originally posted by fluffy_lobster
Why aren't the NickServ passwords encrypted anyway?

---

Well, there's a precompile option to use MD5, but A. The Services' configuration script said it's an experimental feature, B. passwords can't be retrieved that way, and C. the server shouldn't be getting hacked in the first place!

I noticed that this test1 user had admin status, and i thought that it was pretty
Sadly, no admins were online at the time so i could do nothing about it. Luckily wj came online

quote:

---

Originally posted by wj
BTW, Thanks to Chrono and Johnny for there help making sure the forums got properly reset and to DX for his help in tracking down the cause of this problem though it wasnt what we thought it was.

---

quote:

---

Fluffy said:
kaslo is quite similar to chrono

---

Really?
Why?

quote:

---

Originally posted by Chrono

quote:

---

Fluffy said:
kaslo is quite similar to chrono

---

Really?
Why?

---

I didn't say that... I said kaslo is similar to chromo... like your proper name is chrono his proper name is laslo.

Well do you have any ideas on who, since you already banned a user who had nothing to do with it with no proof of nothing.

"Innocent till proven guilty" pfft