Down time

[Charles Wirth]

We were hacked into and a c99 shell was uploaded but they spared us major grief in destroying databases and files.

They left a calling card with email.

Anyway, we are back up and running.
Registration is turned off

Newest VB installed

[chispy]

Thank you for the update Charles.

[japamd]

Sorry to hear that

It was due to a Vbulletin exploit?

[Buckeye]

Good to see its back up again Charles. I know that was a ton of work on your part to get this cleaned up.

Thanks !!!

[Evantaur]

user info safe?
also "what's new" looks stupid atm

[yojimbo197]

I"m happy XS is back up and running. However, it would be nice to be notified by e-mail if there is a major incident resulting in extended downtime.

[MaddMuppet]

At least we are back. That's the main thing. Good work to the admin team.

[yojimbo197]

At least we are back. That's the main thing. Good work to the admin team.

Right, I"m grateful they were able to get the site back up and going. But for at least a day and a half I had no idea what was going on with the website. And this isn't the first time its been down for a while. I'm just saying that some sort of auto-email with "Hey guys, we are having problems and we are working as fast as we can to resolve them" or something of that sort would be nice to get instead of knowing nothing.

[Buckeye]

I"m happy XS is back up and running. However, it would be nice to be notified by e-mail if there is a major incident resulting in extended downtime.

How could he do that if the site was hacked and taken down ?

[yojimbo197]

How could he do that if the site was hacked and taken down ?

A database of e-mail addresses cached somewhere else online and/or offline.

Or make a deal with another forum/website that allows for posting of a "Hey we got hacked or Hey we have mega server" problems" type message.

[alpha0ne]

Thanks for the fast fix Fugger , I was starting to miss my XS fix

[Movieman]

A database of e-mail addresses cached somewhere else online and/or offline.

Or make a deal with another forum/website that allows for posting of a "Hey we got hacked or Hey we have mega server" problems" type message.

I understand how you feel but there's over 135,000 members and emailing each is a headache like you wouldn't beleive..
I know I've done it in years past using the option in the software and it takes like 6 solid hours to accomplish plus having a database off site isn't viable as the member list is constantly changing..

[M.Beier]

Good that we're back boss!
Much needed for Buckies health, he'll get time off from me!

[yojimbo197]

I understand how you feel but there's over 135,000 members and emailing each is a headache like you wouldn't beleive..
I know I've done it in years past using the option in the software and it takes like 6 solid hours to accomplish plus having a database off site isn't viable as the member list is constantly changing..

Right I get that. However, I don't see why the second suggestion, finding a website hosted by someone or some group friendly to XS that would carve out a little "XS members notifications in case of emergency/downtime" section in return for reciprocating the same sort of thing on XS couldn't be done.

Just got an e-mail from one of the WCG guys. I guess there is something like what I was talking about here:
http://forums.pureoverclock.com/worl...-campsite.html

[OldChap]

Appreciate the hard work you put into fixing this.

We need our XS fix

EDIT: I'm not seeing any smilies just now while using Opera, reports of same using FF. Anyone got a trick to fix this?

[Sparky]

They're working for me. Must be you

[NEOAethyr]

Nope I'm not seeing the smilies in firefox either.
v23.01, I refuse to upgrade it right now ... (builtin on demand flash went to complete shiz in newer vers)
I can't see the smilies but I still try to use them lol...

I wouldn't bother with trying to waste your time with emails.
I thought maybe you guys lost your server over rent or something .
But I'm glad to see it back, 45mins sure is a long time though eh ? .

I see some glitchies with some of the borders around the top menu.
For example where it says what's new, forum, superi pi mod 1.5, and search.
That area looks it has some borders and stuff to fix up.

The login and pass boxes, before you login, look like that have a pink color border thing instead of the blue it used to have.
The thanks under our profile info on the left of each post is missing (if it's gone for good then so beit, but it's kind of a bummer too).

Oh the the link:
http://www.xtremesystems.org/forums/
It's bring me to some page I think it was called what's new?, it's called activity stream.
http://www.xtremesystems.org/forums/activity.php
Before the upgrade it would bring to the forums and not that activity thingy.
That's what my bookmark is set to lol.


So who hacked the freaking server?
What was this so called email about?

Edit:

On the edit post page, the smilies don't work either, they are showing up as there vb code.
This is the advanced edit page I'm talking about.
The post icons below are working though.
So perhaps if I use a post icon, that might show up above my actual post (yep that works).

[s1nykuL]

Fugger, I presume the hackers gained access to the database.
If so, are email addresses stored un-encrypted? VB does not do this by default only the password is encrypted and salted.

I doubt the passwords could be cracked in a reasonable time frame even with a rack of GPU. However, it would be good policy to inform users of the breach, that their email addresses HAVE been compromised and that the password they use for this site could be compromised too. And that they really should change their credentials on any other site that they use the same email address/password combination.

I don't know what your LAMP skills are Fugger... Though I am sure you are aware that
The user list could be dumped daily as an sql file via a cron job to another machine
A PHP/perl/bash script could parse that sql file and send email to every address in it, speed of execution would depend on hardware and network bandwidth.

There are a lot of smart people using these forums, many much smarter than I.
Still if you need any help.

[MaJ0r]

I'm glad that you get over hackers attack. XS very interesting and helpful site for me so it's good to see it online.
P.S. There're some bugs here: no smiles, no reputation etc

[mongoled]

Fugger, I presume the hackers gained access to the database.
If so, are email addresses stored un-encrypted? VB does not do this by default only the password is encrypted and salted.

Please, please, please we ALL need an answer for this !

However, it would be good policy to inform users of the breach, that their email addresses HAVE been compromised and that the password they use for this site could be compromised too. And that they really should change their credentials on any other site that they use the same email address/password combination.

This ^^^^^^^^

I don't know what your LAMP skills are Fugger... Though I am sure you are aware that
The user list could be dumped daily as an sql file via a cron job to another machine
A PHP/perl/bash script could parse that sql file and send email to every address in it, speed of execution would depend on hardware and network bandwidth.

Should be in place ...

There are a lot of smart people using these forums, many much smarter than I.
Still if you need any help.

Nice of you to offer, hope they take this up !

Grrrrr, cant leave thanks for this post

[[XC] Oj101]

Smilies not working for me on Opera 11.64, Chrome 31 or Firefox 23.

[Don_Dan]

I'm not seeing any smilies just now while using Opera, reports of same using FF. Anyone got a trick to fix this?

They're working for me. Must be you

Smilies not working for me on Opera 11.64, Chrome 31 or Firefox 23.

As I said in another thread, I can see all smilies. I guess my brain cached them due to the excessive usage of XS...

[Shocker003]

We were hacked into and a c99 shell was uploaded but they spared us major grief in destroying databases and files.

They left a calling card with email.

Anyway, we are back up and running.
Registration is turned off

Newest VB installed

do we need to reset our passwords?
am happy XS is back online

[Charles Wirth]

Yes, they had access to the database
Change your passwords
Passwords were salted on XS
Emails addresses were clear text

[DeathReborn]

FUGGER, Is the Activity Stream staying? Even though my bookmark is set to Forum it always shows that instead since the downtime, which is mildly annoying.