It is currently Fri Oct 02, 2026 9:12 am

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 5 posts ] 
Author Message
 Post subject: RyPN was Definitely Attacked
PostPosted: Tue May 17, 2005 12:04 am 
Site Admin

Joined: Tue Aug 10, 2004 2:31 pm
Posts: 68
Somebody deleted all the posts in the RyPN Interchange database.We are not sure how they gained entry, but they apparently had access to the Interchange admin page and used the pruner (built in function capable of deleting all the posts in one command).We did a backup last night but in the process of trying to restore the database we found our back up software has a problem. It apparently can only back up 5 megs at a shot, and the database was 17 megs when the attack happened.What's worse, is the 5 megs that did get backed up are the oldest stuff, the newer stuff, as in the last 5-6 months is gone.Our only hope at this point is that our host provider, Interland, can restore the database from some period of time shorter than the last 5-6 months. Based on my knowledge of the Interland Mysql service I am not optimistic.So, we changed the passwords. Not sure that will stop covert access, but nothing else we can do at the moment. Tomorrow, we will contact Interland and enquire about the possibility of restoration. If they can't do a restore we will restore what we have, and figure out a reliable way to do complete back ups.That's the sad news. We'll update more as we get info.The board is now unlocked. We will attempt to save any new posts that may occur between now and whenever and whatever restoration is made.Hume Kading

_________________
Interchange Moderator


Offline
 Profile  
 
 Post subject: Re: RyPN was Definitely Attacked
PostPosted: Tue May 17, 2005 4:20 am 
User avatar

Joined: Sun Oct 10, 2004 11:30 am
Posts: 1263
Location: Eagan, MN
If you're really running unpatched V2.09 of phpBB, then you're completely vulnerable to a variety of exploits whether or not you've changed the admin password.You need to upgrade to Version 2.15 of phpBB asap.We currently support 12 copies of phpBB and it has been a security nightmare for us.Regards,Doug


Offline
 Profile  
 
 Post subject: Re: RyPN was Definitely Attacked
PostPosted: Tue May 17, 2005 7:25 am 

Joined: Thu Aug 19, 2004 2:01 pm
Posts: 213
Location: Seattle, WA
Well, we have installed at least one patch. But, I think you're right, an upgrade is in order, and this may be the time to do it.

_________________
Hume Kading
Don't eat live food.


Offline
 Profile  
 
 Post subject: Re: RyPN was Definitely Attacked
PostPosted: Tue May 17, 2005 7:43 am 

Joined: Mon Aug 23, 2004 9:56 am
Posts: 604
Location: Rochester, NY
If it helps, the "wayback machine" has a record of posts from 1998-2004.http://web.archive.org/web/*/http://www.rypn.orgit doesnt have Novemner 2004 to present, but at least its something.scot


Offline
 Profile  
 
 Post subject: Re: RyPN was Definitely Attacked
PostPosted: Tue May 17, 2005 8:10 am 
User avatar

Joined: Sun Oct 10, 2004 11:30 am
Posts: 1263
Location: Eagan, MN
After this is all settled, I'll be happy to provide you with access to a MySQL server that is NOT connected to a phpBB where you can regularly back up the rypn database, no charge.If your host isn't doing proper backups of your database(s) you should use a number of short, harsh words in discussing this issue with them.Regards,Doug


Offline
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC - 5 hours [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to: