Yes, the Smack Room was hacked

Are you having a problem with the Smack Room? Or problems with using the MTFFL website in general?
Post Reply
wolfe
The Commish
Posts: 3616
Joined: Tue Apr 29, 2003 4:52 pm
Name: Jeff Wolfe
MTFFL: Z-Town Zippers *1998, 2018*
MTFFL II: Beer Swillers
Location: MTFFL International Headquarters
Contact:
Contact wolfe

Yes, the Smack Room was hacked

Post by wolfe »

The Smack Room was hacked yesterday. The result didn't appear to be too malicious, just enough to disrupt everything for a little while.

The hack was the result of an known exploit in the message board software. I hadn't upgraded or patched the message board since I installed it 5 years ago. My fault. The hack was totally preventable but I didn't patch it because I had heavily modified it and felt everything would break if I upgraded to the latest version.

I've decided to do two things:
  • Upgrade to the most recent release of the message board (version 3.0.0). It works exactly the same as the old version, but it has a few new features and is more secure.
  • I'm going to try to prevent search engines from looking at the posts. From looking at the logs I can tell that the hacker first visited our site from a search engine. I really don't know why the message board needs to be visited by non-MTFFLers anyway.
Everything was supposed to be copied to the new version. But if anything seems to be out of place or not working please tell me ASAP.

I don't think member passwords were exposed but feel free to change yours. I've already changed all the system passwords just in case.
Last edited by wolfe on Sat Mar 22, 2008 7:10 pm, edited 2 times in total.
Reason: sticky
The rules are fair. The regulations are fair.
Top
Post Reply

Return to “Web Site Problems?”