Blue Sun Room Hacked.
POSTED BY: Haken
UPDATED: Friday, November 9, 2007 22:37
VIEWED: 29524
PAGE 4 of 6
Let's wait till after Monday before reposting. I'll have a chance to talk with the sysadmins to see if they were able to come up with a recent backup.
One other thing I'll do from now on is to create backups of my own without relying on a third party.
Another idea I've been floating around in my head since yesterday is to create a mechanism to syndicate the content of the BSR so that authors and readers will have access to the postings. Possibly through either RSS or some sort of API.
What do you all think?
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
That's a good idea. A good idea. Tell us where the feed's at so I can shoot ya.
More seriously, on the topic of backups, is it not possible for even a partial restoration from a damaged backup? only avoid the broken bits? may need a little (considering it is over 7000 pieces of work, "little" probably means "huge amounts of" in this context) manual intervention though. Or is it a lot more work than that?
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
did anyone decide on a "Repost Monday" thing? i just went to my profile and it says i haven't posted anything...and...well, nothing you don't already know of...i still have copies elsewhere, i just...was curious...
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
Sorry but I'm new at this stuff. What do BSR RSS and API mean? Forgive my ignorance. Thanks
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
yes you have been hacked
to find the exact time look through your IIS logs for nvarchar or cast= or @s and you will find the url line
someone ran this against your sites url and injected/replaced your links with yl18.net/js.0 that is scripts to other vulnerabilties
you will find the address register in china somewhere
you will not see yl18.net or 0.js since it is hidden within the cast=string
copy the string in the cast to a hex converter site and you will see all the sql query commands with ; sperating them and the yl18.net and everything else
recommend restoring prior to the timestamp and make sure the account used for allowing the url to run not be writable
good luck
NOTIFY: N | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
Quote:
Originally posted by cbsteve:
Sorry but I'm new at this stuff. What do BSR RSS and API mean? Forgive my ignorance. Thanks
BSR = Blue Sun Room
API = Application Programming Interface. Computer jargon which you probably do not need to know.
RSS = RDF Style Syndication or Really Simple Syndication or some other syndication depending on who you ask. Can be used by other sites or feed readers to aggregate content. If that means nothing to you you probably do not need to know. Just think of it as some really fancy technology that is can be used by others.
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
Quote:
Originally posted by abbeygirl:
If we are going to have to repost any missing fics, maybe we should specify a time in order to do so. We probably don't want to mix in older stuff with newly posted items (who wants to scrounge around looking for the next installment of a fic in progress). For example, we could have "Repost Mondays" or something like that. On that day, it could be recommended that no new posts should be done and it would be a day specifically for people to repost their stuff. "Repost Mondays" could go on for several weeks (or months if needed) so that people have the time to go back and repost older items in a reasonable time frame.
Just a suggestion.
Repy - I lost all my fics back to May '06 as well and the way I intend to handle it is to gradually input all the stories from then up to date but in reverse order starting with a standalone from May '06, that way when anyone looks up an author's profile and list of items they will appear in the correct sequence. It is a pain but if we all do this it will make it a lot easier for Harken and those running the site to get everything shiny again. One question though, is there anyway we can ensure this doesn't happen again? Obviously regularly backing up the site is a must but how do we keep these heathens out?
Ali D :~)
You can't take the sky from me...NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
well - i'm not posting anything till i know
1) it's safe in the BSR.
2) (to be frank) - that all the better writers have had the chance to put their stuff back.
NOTIFY: N | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
Quote:You so rock! Thank you for this. I have all my old fics saved in several places, but I was really bummed at losing all the thoughtful feedback I've gotten on this site. Thankfully, I recovered all but 2 of my ~50 lost chapters.
Originally posted by JennyDiver:
If you would like to find them and reload them (when safe), you should try searching through Google's cache for a unique phrase from your story.
So... is it possible to recover all the BSR from google's cached pages? Can some kind of script be written to search and collect and restore stuff, including comments and times read stats?
-----------------------------------------------
hmm-burble-blah, blah-blah-blah, take a left
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME
OK, in searching for my two still missing fics, I've found some crazy stuff:
http://www.housesforsale-online.org/?q=node/28951
What the hell are those hackers doing? *scratches head*
-----------------------------------------------
hmm-burble-blah, blah-blah-blah, take a left
NOTIFY: Y | REPLY | REPLY WITH QUOTE | PERMALINK | TOP | HOME