Someone got access using armyguyot1's credentials. The hacker deleted half the site, and banned most of the internet from accessing it.
Locking the hacker out was difficult, since armyguy's account still had a higher privilege level than mine, and I couldn't change it. I had to do it on the back end server using SQL database foo.
Fortunately, the site gets nightly automatic backups. Unfortunately, I had to use last night's backup to restore the site - which means that all activity from the last ~21 hours has been lost.
Sorry for the inconvenience, but I'm breathing a sigh of relief that I was able to bring back nearly everything.
Carry on fellow perverts. I've got your backs.
OHW got hacked
Re: OHW got hacked
Unfortunately, they got us again. This time, using my account.
As it turns out, there was a horrible security exploit in the version of phpBB we've been using. A simple remote query could log an attacker in as any board user. I have disabled the exploit and will update the board software shortly.
[ For my fellow nerds: CVE-2026-48611 https://pentest-tools.com/research/phpb ... ion-bypass ]
Again, unfortunately, I've had to restore the site from backup - meaning that all activity over the last ~19 hours has been lost again.
Sorry about this, everybody. Someone is actively targeting us.
p.s.> I have a pretty firm guess as to who - butthurt much SD? Despite everything, we're all so much better off without you here, and you're only proving the point. Go fuck yourself, matey.
As it turns out, there was a horrible security exploit in the version of phpBB we've been using. A simple remote query could log an attacker in as any board user. I have disabled the exploit and will update the board software shortly.
[ For my fellow nerds: CVE-2026-48611 https://pentest-tools.com/research/phpb ... ion-bypass ]
Again, unfortunately, I've had to restore the site from backup - meaning that all activity over the last ~19 hours has been lost again.
Sorry about this, everybody. Someone is actively targeting us.
p.s.> I have a pretty firm guess as to who - butthurt much SD? Despite everything, we're all so much better off without you here, and you're only proving the point. Go fuck yourself, matey.
Re: OHW got hacked
No repeat performance today, thankfully.
I was pretty confident in the fix. But I did make a couple of extra backups today, just in case
.
I was pretty confident in the fix. But I did make a couple of extra backups today, just in case
.