Page 1 of 2
MMOC site hacked
Posted: Thu Aug 18, 2005 12:21 am
by WebEditor
Yeah, we've been hacked again. It's getting boring isn't it?
If you've experienced any glitches in the MMOC website over the past couple of days, then this is due to a some sad individuals who hacked into our website, deleted numerous important files and replaced them with messages of their own. Now only does this mean that the entire website was affected, but that we had to sepnd hours rebuilding it all again.
We're doing everything we possibly can to prevent this, and also to get the site up and running as quickly as possible. But it's difficult to compete against people who have no lives, personality or friends, and who spend 24/7 welded to their computers.
In the meantime, please accept our apologies. If you notice anything strange or inappropriate, please notify MMOC officials and Moderators as soon as possible.
Normal service will be resumed as soon as possible.
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 9:21 am
by chickenjohn
Well done for getting it back Andrew!
Is there any way of stopping them other than changing the user name/ password and re-loading the site???
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 9:32 am
by Cam
Well, it's a little more involved than that unfortunately. These little 'script kiddies' are finding access points and running malicious programs on our server which routes out certain files and deletes/replaces them with abusive text files...
It's a shame that they can't find something constructive to do, but that's what happens I guess when your computer is your only friend.
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 10:05 am
by guydenning
No need to apologise - we know you're doing your best... and a grand job it is too
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 10:56 am
by chickenjohn
Could you not put a firewall on your server?? (If that would work, I don't know that much about server security).
Sort of puts arguing about Mig wire size into perspective! ;)
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 11:20 am
by Cam
Yes as far as I'm aware we have one, but even those don't offer 100% protection. There are ways and means which it's best not to go into on here.
Arguing about mig wire?? Discussing surely!
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 11:32 am
by rayofleamington
Arguing about mig wire?? Discussing surely!
Well I though everyone was discussing and sharing their experiences and tips. Maybe someone was arguing?! ;-)
And many many thanks to Andrew / Billy for keeping the site up and running, and for their hours of work yet again due to these hackers. We are really greatful
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 11:54 am
by chickenjohn
Whether you use 0.6 or 0.8mm wire- at least you're doing something constructive! Constructing a restored car from an old wreck.
Unlike the cybervandals who seem to get enjoyment from deconstructing a useful resource to Moggie fans everywhere.
I meant "arguing" in a "discussing" kind of way, its easy to misunderstand the meaning behind the text in e-mails and internet posts without the tone of voice and non- verbal expression one gets from face to face communications. Wasn't it said that 90% of communication is non verbal!
and lastly, why don;t the skykids get a Morris Minor and learn how to do it up, surely much more worthwhile use of time and energy than wrecking message boards.
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 11:59 am
by Cam
Perhaps they will John when they get through puberty!
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 1:48 pm
by bigginger
BORING FACT - Did you know that the Russian for discussion is 'Argument'. I did the sound for years on a programme called Argument, couldn't work out why everyone was so calm and friendly... I don't think we ever got onto MIG wire though.
a
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 9:04 pm
by bmcecosse
Well done sorting out the problem - but I did see in today's paper something about a Windows glitch/faults which was letting hackers in - I believe there is a patch available for it.
RE: MMOC site hacked
Posted: Thu Aug 18, 2005 11:26 pm
by Cam
I don't think the server that this forum is hosted on is running windows. I'm pretty sure it's unix/linux based.
RE: MMOC site hacked
Posted: Fri Aug 19, 2005 8:32 am
by Admin
I love hackers!!!! This last lot did a great job so I was up until 3am sorting it out. FYI :We are indeed running on a linux server so if any of you are linux internet security expert or even a friendly hasker wanting to help secure the website, please feel free to contact me!
RE: MMOC site hacked
Posted: Fri Aug 19, 2005 9:43 am
by chickenjohn
Its well known that Apple computers are much more secure than other computers- there are currently no known viruses or worms for Mac OSX. Maybe you could get a 2nd hand Mac running OSX and run that as a server.
Macs are dead easy to use as well. Not cheap though! although considering the cost of your guys time it might we worth a though.
RE: MMOC site hacked
Posted: Fri Aug 19, 2005 10:57 am
by Cam
Actually there ARE viruses for Macs, but they are very few and far between. This is not a virus problem in the conventional sense though (although it's similar). It's hackers gaining entry and spawning programs to do damage. The security issue is preventing them gaining access in the first place.
I *think* the server is currently just a paid for service and as such we can't specify the equipment, but Linux/Unix is pretty much recognised as the OS choice for secure servers. Trouble is that nothing is totally secure and (like cars) if they want to break in badly enough they will do.
Unfortunately my knowledge of computer security (and unix) is badly out of date now so I don't think I can help although I'd love to...
But perhaps we could consider using SSH instead of FTP?
RE: MMOC site hacked
Posted: Fri Aug 19, 2005 11:35 am
by chickenjohn
Cam there were a few viruses for the old Mac OS9 and earlier but since the Unix based OS X (OS 10) there are no known viruses.
http://www.eweek.com/article2/0,1759,1777202,00.asp
Its one of the benefits! trouble free internet usage!
With all the computer jiggerypokery in modern cars, it wont be long before they are affected by viruses and worms too! a benefit of running a moggie!
RE: MMOC site hacked
Posted: Fri Aug 19, 2005 11:49 am
by Cam
John, from the article:
How do I know there are no Mac OS X viruses and malware out there?
Because the Mac product manager of one of the major security software companies told me so.
Despite the good news, I am not telling you to turn off the anti-virus software that's running on your Macintosh. And I still encourage you to purchase anti-virus protection for all your machines.
Why spend the money?
First, because it's possible the guy was wrong. Second, someone may have created a threat in the two weeks since I spoke to him (or may be about to). Third, your Mac probably has some Windows viruses or malware on it.
To read more about a possible exploit that could affect computers running Mac OS X and Mac OS X Server versions 10.0.0 through 10.3.7, click here.
While these won't damage the Mac, if you are on a network or just send e-mail, you can innocently send the pathogenic software to Windows users.
No, that is not the point of owning a Mac.
I've already alluded to why Mac OS X is essentially virus-free: because almost nobody uses it.
The Mac is a truly great machine and I seriously considered buying one until I saw the price!
Also, being as I currently share lots of windows files between machines I can't practically have a non-windows machine for compatability reasons.
I tried the various Linux versions on the PC for better security but they were more trouble than they were worth.
So, I'm back with Windows but with an anti-virus program. It's the cheapest and easiest solution, and like you now I have trouble free internet usage!
(at a fraction of the cost
).
With all the computer jiggerypokery in modern cars, it wont be long before they are affected by viruses and worms too! a benefit of running a moggie!
Only if they are DAFT enough to connect them to an external network, and to be honest I think they ARE that daft!
Viva la Mog!
RE: MMOC site hacked
Posted: Fri Aug 19, 2005 12:54 pm
by chickenjohn
The next incarnation of Sat Nav/nanny state vehicle usage control will be the networked car, hopefully they will leave us 0.2% classic owners alone!
RE: MMOC site hacked
Posted: Fri Aug 19, 2005 1:04 pm
by Pyoor_Kate
One of the easiest security measures is, indeed, to turn of FTP and use SSH (there are SSH visual file clients for windows, free ones, too) instead.
In this case, it's most likely not so much a linux issue as a PHP/BB2 issue, I would guess. Unfortunately my experience as a linux sysadmin is... well.. out of date, and I never did worry that much about security beyond really basic measures.
Improving the firewall however, will also give you much greater security...
Re: RE: MMOC site hacked
Posted: Fri Aug 19, 2005 2:02 pm
by Cam
Pyoor_Kate wrote:In this case, it's most likely not so much a linux issue as a PHP/BB2 issue, I would guess.
Well for the messageboard, yes, but other areas of the site (non PHP/BB2) were attacked too and the index.html files overwritten by a robot program that searched them out. The security issue there is of course remote access to the server to allow you to upload and spawn a process of that nature!