Chaotic Dreams

Chaotic Dreams Official Forums
It is currently Thu Mar 30, 2017 4:45 pm

All times are UTC




Post new topic Reply to topic  [ 16 posts ]  Go to page 1, 2  Next
Author Message
 Post subject: Forums updated
PostPosted: Wed Feb 08, 2012 6:56 pm 
Offline
Chaotic Dreams Team
User avatar

Joined: Sun Aug 29, 2004 4:50 pm
Posts: 440
Location: Proxy King Lair
Well, as you've probably noticed, the forums have been updated. It had to be done due to security issues (for starters - but mostly because of that). From what I can see, the update went fine. There might be some subtle errors here and there - if you spot them, let me know.

I've also tracked down the problems with antivirus software - certain things were added to the main website and the forums' index.php. I suspect the initial breach has either happened on the old server (as I've previously stated, the old server was compromised a few days before the server move), although though because the problems seem to be limited to the system user who "owns" the Chaotic Dreams website, I suspect it had to do with an exploit in PhpBB2 - the software that was installed has a lot of known exploits - examples: http://www.cvedetails.com/vulnerability-list/vendor_id-1529/product_id-2635/version_id-47341/Phpbb-Phpbb-2.0.22.html.

This suspicion was reinforced by the fact that the problematic pieces of code kept reappearing, even when I've removed them before. Now that the forums have been updated, things should be better - if not, I'll try something else to get to the bottom of this.


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Wed Feb 08, 2012 7:13 pm 
Offline
Hermskii.com

Joined: Thu Aug 07, 2003 1:46 am
Posts: 144
Location: Houston, Texas
Great job Tim. thanks.


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Wed Feb 08, 2012 7:36 pm 
Offline
Chaotic Dreams Team
User avatar

Joined: Thu May 09, 2002 2:55 pm
Posts: 7942
[youtube]http://www.youtube.com/watch?v=hUQX2B67KL4[/youtube]

_________________
@RFlaggTOC


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Wed Feb 08, 2012 7:40 pm 
Offline
User avatar

Joined: Fri Feb 03, 2012 1:39 pm
Posts: 24
Location: Staines, UK
cool

_________________
- http://octaforge.org - OctaForge scriptable game engine
- FreeBSD user and open source enthusiast


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Thu Feb 09, 2012 11:49 am 
Offline
Chaotic Dreams Team
User avatar

Joined: Sun Aug 29, 2004 4:50 pm
Posts: 440
Location: Proxy King Lair
Well, the problem seems to have returned, despite the update - I'm looking at logs and doing different stuff to try and stop this from happening. I'll get to the bottom of this come hell or high water!

Fortunately, the problem is limited only to Chaos and didn't infect the rest of the system, meaning that whatever's been doing this cannot gain root access.
Unfortunately, the problem is in Chaos and didn't instead infect a less important site :evil:


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Thu Feb 09, 2012 8:48 pm 
Offline
The Rail Man

Joined: Fri Jul 25, 2003 12:24 am
Posts: 180
Location: Rhode Island
I haven't had any alerts or warning since you've switched over to the site.


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Fri Feb 10, 2012 12:29 am 
Offline
Hermskii.com

Joined: Thu Aug 07, 2003 1:46 am
Posts: 144
Location: Houston, Texas
Me neither!


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Mon Feb 13, 2012 11:06 pm 
Offline
The Rail Man

Joined: Fri Jul 25, 2003 12:24 am
Posts: 180
Location: Rhode Island
Just received a threat warning from avast as soon as the forums loaded.


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Tue Feb 14, 2012 10:59 am 
Offline
Chaotic Dreams Team
User avatar

Joined: Sun Aug 29, 2004 4:50 pm
Posts: 440
Location: Proxy King Lair
I know, I've been fighting this crap for days... Still can't find the source of the problem, but it's still limited to just this one user...


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Tue Feb 14, 2012 2:14 pm 
Offline
Hermskii.com

Joined: Thu Aug 07, 2003 1:46 am
Posts: 144
Location: Houston, Texas
It hasn't happened to me for a while. I was also thinking maybe it was a false positive for Avast but it lists the site this one tries to send me to so I have to think it is real. Very Odd.


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Wed Feb 15, 2012 10:38 am 
Offline
Chaotic Dreams Team
User avatar

Joined: Sun Aug 29, 2004 4:50 pm
Posts: 440
Location: Proxy King Lair
It's definitely real, I even know exactly which files were changed in the attacks and how often (3 times a day, and I'd rather not say which files due to security reasons).

What matters though is that the problems appear to have been fixed - there's not been an attack in a day and a half. I'd also rather not say how they were fixed, again, for security reasons (you know, in case the attacker[s] are reading this and whatnot).


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Wed Feb 15, 2012 2:45 pm 
Offline
Hermskii.com

Joined: Thu Aug 07, 2003 1:46 am
Posts: 144
Location: Houston, Texas
I have my fingers crossed Tim. I have not had a positive hit here in over a week and I'm here at least 5 times a day. I'm glad you know what you're doing! I'm grateful you are doing what you are doing too. Keep up the great work!

_________________
~Peace~

Hermskii
www.hermskii.com/forum


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Wed Feb 15, 2012 3:26 pm 
Offline

Joined: Wed Oct 19, 2011 3:54 pm
Posts: 44
Once the priorities are resolved..possible to replace the "phpbb" logo in the upper-left with a Chaos logo?


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Mon Feb 20, 2012 7:09 pm 
Offline
Chaotic Dreams Team
User avatar

Joined: Sun Aug 29, 2004 4:50 pm
Posts: 440
Location: Proxy King Lair
Still no breakins. I think it's safe to say that the problem has been defeated, at least for now :)

As for the logo, RFlagg tried to modify an old image to remove the white background so that it's transparent, but he didn't succeed (primarily because the file was a jpeg - low quality at that - and the artefacts were making problems with the removal).
I'll try using a model for CUT2 or similar to throw together a montage with a bunch of proxies and stuff (which was what was in the image) at the end of the week when I get back to my main computer and the software installed on it - I just hope I don't forget.

As an apology for the logo still lacking, I have added a Chaos Official Complementary Forum and Website Browser Icon (TM). In other words, the proxy icon for the forums and main website is back - it might take a while for your browser(s) to realize this, however :P


Top
 Profile  
 
 Post subject: Re: Forums updated
PostPosted: Tue Apr 03, 2012 11:12 am 
Offline
Chaotic Dreams Team
User avatar

Joined: Thu May 09, 2002 2:55 pm
Posts: 7942
Tim wrote:
- I just hope I don't forget.


.... Oops! :P

_________________
@RFlaggTOC


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 16 posts ]  Go to page 1, 2  Next

All times are UTC


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group