Forum/website errors

The latest Team MightyBoy news and updates, plus your ideas and feedback
Post Reply
User avatar
Brayden
Posts: 9101
Joined: Sun Apr 11, 2004 3:09 am
Location: Canberra ACT
Contact:

Hey guys, I've been noticing a few error messages lately when trying to use the forums.

Just thought I'd let you know that I'm working to sort it out. ;)
F8B EFI turbo - Three pots and a snail.
User avatar
Brayden
Posts: 9101
Joined: Sun Apr 11, 2004 3:09 am
Location: Canberra ACT
Contact:

A quick note to let everyone know that there may be some forum downtime while the domain name and web hosting is renewed. :oops:

So if the site disappears you'll know why. :wink:
F8B EFI turbo - Three pots and a snail.
User avatar
Brayden
Posts: 9101
Joined: Sun Apr 11, 2004 3:09 am
Location: Canberra ACT
Contact:

Oh noes! Some hacker decided that the forum would be a good place to hack. Sorry for the inconvenience if you stumbled across the forum in its "altered" state earlier today. :oops:
F8B EFI turbo - Three pots and a snail.
User avatar
truder44
Posts: 97
Joined: Tue Apr 13, 2004 8:41 pm
Location: Newcastle, NSW

Brayden
Didn't see the hack but found this on Austech.Info site-
From Ipex Quote

warning to anone running a phpbb forum

--------------------------------------------------------------------------------

A Web worm that identifies potential victims by searching Google is spreading among online bulletin boards using a vulnerable version of the program phpBB, security professionals said on Tuesday.

The Santy worm uses a flaw, announced last week, in the software that interprets Web pages written in the widely used scripting language PHP: Hypertext Preprocessor (PHP). However, rather than attempt to infect all Web sites running PHP, the worm instead targets a specific application--the PHP Bulletin Board (phpBB)--and searches Google for vulnerable sites, antivirus firm Kaspersky said in a statement.

Almost 40,000 sites may have already been infected. Using Microsoft's Search engine to scan for the phrase "NeverEverNoSanity"--part of the defacement text that the Santy worm uses to replace files on infected Web sites--returns nearly 39,000 hits.

"Santy.a is spreading rapidly, and has caused an epidemic," antivirus firm Kaspersky stated in a new release published Tuesday. "However, this does not directly affect users. Although the worm infects Web sites, it does not infect computers used to view those sites."

The worm sends Google a specific search request, essentially asking for a list of vulnerable sites. Armed with the list, the worm then attempts to spread to those sites using a PHP request designed to exploit the phpBB bulletin board software.

The worm is the latest twist on using Google as an attack tool, a practice known as Google hacking. It may also be the first time that a program used Google to identify victims for an attack.
Around 6 million sites appear to be running the phpBB software, according to a search of Google for the phrase "Powered by phpBB"--an acknowledgment appended to the bottom of any site that use the software.

"There are tons of these PHP bulletin board installs around," said Johannes Ullrich, chief technology officer of the Internet Storm Center, which tracks online threats.

Using Google to determine vulnerable sites is not an academic exercise. The worm does exactly that: Once Santy infects a Web site, it searches Google for other sites running phpBB and then attempts to infect those sites as well.

After it has taken over a site, the worm deletes all HTML, PHP, active server pages (ASP), Java server pages (JSP), and secure HTML pages, and replaces them with the text, "This site is defaced!!! This site is defaced!!! NeverEverNoSanity WebWorm generation X," according to Kaspersky. For "X," the worm inserts a number representing how far the current instance of the program is descended from the original worm release. MSN searches have found 24th generations of the worm.

Google did not immediately comment on the worm, but a spokesman did say that the company had seen the information and had started to study the issue.

The response, or lack thereof, frustrated some members of the antivirus community, who believed that the search giant could easily stop the worm by filtering out its search for victims.

"We know exactly which searches to stop," said Mikko Hypponen, research director of antivirus firm F-Secure. "It would be trivial to stop this thing."

Web sites using a vulnerable version of PHP should upgrade, the phpBB Project site advises.

http://news.com.com/Net+worm+using+...725.html?tag=nl

/Quote
User avatar
Josh
Posts: 1263
Joined: Tue Apr 13, 2004 2:22 am
Location: Canberra ACT
Contact:

C0ND0R BL0WS G0AT5!
[url=http://www.tamon.org/?page=owners&id=10][img]http://www.tamon.org/forum/images/ute_specs.gif[/img][/url]
User avatar
truder44
Posts: 97
Joined: Tue Apr 13, 2004 8:41 pm
Location: Newcastle, NSW

Forum error?

Interesting heading :-o
User avatar
Brayden
Posts: 9101
Joined: Sun Apr 11, 2004 3:09 am
Location: Canberra ACT
Contact:

Should all be fixed now. Thanks for the info on the worm. Fortunately that wasn't what happened in this case, it was just some malicious hackers showing me a loophole in their own style. 8)
F8B EFI turbo - Three pots and a snail.
User avatar
Josh
Posts: 1263
Joined: Tue Apr 13, 2004 2:22 am
Location: Canberra ACT
Contact:

C0ND0R SUX TEH WANG
[url=http://www.tamon.org/?page=owners&id=10][img]http://www.tamon.org/forum/images/ute_specs.gif[/img][/url]
User avatar
Colin
Posts: 1145
Joined: Tue Apr 13, 2004 8:46 am
Location: South Coast (NSW)

still cant get the pic's of project mb open on the site :(
MORE BEER! :beer:
Post Reply