vBulletin 5.5.6 PL1 - Post hack

[Snake Plissken]

Just a quick update - a security flaw was discovered in vBulletin and I didn't manage to get it all patched in time before a bunch of Indonesian hackers exploited it to take over the site and backend database. They weren't very good hackers, because we managed to get the whole thing restored from last nights backup.

As mentioned on Twitter, the hack happened at 4am and the last backup was taken at midnight, so anything posted between then is lost, like tears in the rain.

Most of the work was done by Tim and Nathan at the ISP, I just patched us up. Speaking of which, there is an additional upgrade that will be done shortly to get us onto a later version. I'm also going to be much more proactive in updating OTF, which will unfortunately see us go offline for an hour or so every six weeks or so depending on releases.

Bear with me as I tidy away bits and pieces. The indexes are about to be rebuilt, but I think we're good enough to go for now.

[Nefertiti2]

Thanks for all your efforts Ken.

[ursus arctos]

One Kenny Snakepiss

There's only one Kenny Snakepiss

[Sporting]

Heĺlo

[Sporting]

and thanks.

[Capybara]

Thanks Ken.

[San Bernardhinault]

Thanks Kenny.

[Diable Rouge]

Thanks.

[Toby Gymshorts]

Cheers, Ken. That was all very exciting, wasn't it?

If nothing else it forced me to use a decent (Last Pass generated) password for once.

[San Bernardhinault]

I produced so much brilliant OTF content in the hours between the last back-up and the hack, though. It was hilarious, insightful and deeply compassionate. Now it is lost forever. Now none of you will ever be able to read it and will just have to take me at my word about how utterly world-class all those posts were.

[Cal Alamein]

Many thanks for the testing, Ken SP.

[Benjm]

That Ken Snakepiss is one helluva guy. They say he never sleeps and is invisible to bat radar.

[longeared]

Many thanks Snakey. I blame Covid 19.

[Antepli Ejderha]

Many thanks Snake/Ken

Every time I click on the home icon I get taken back to the hacked page, is there anything I can do except not press home?

[elguapo4]

Well done Snake, I thought I was locked out for good, I was surprised how upset I was, I'd miss the lot of youse.

[Amor de Cosmos]

I wondered what had happened. Many thanks for the prompt fix Snakeman.

[Ken Snakepiss]

Don't put me back in the box. I don't want to be put back in the box.

[nmrfox]

What's the frequency Kenneth? An hour or so every six weeks is a small price to pay to keep this site online and, more importantly, safe. Smart work whateveryournameis.

[Third rate Leszno]

Nice work Snakey, much appreciated.

[Kevin S]

Many thanks Snake/Ken

Every time I click on the home icon I get taken back to the hacked page, is there anything I can do except not press home?

Yes, me too. Or if I try to get to the site via onetouchfootball.com

[Snake Plissken]

Hmm, what browser are you using? I keep getting redirected to www.onetouchfootball.com which is the correct home page.

[Rogin the Armchair fan]

"Indonesian hackers", you say, well they were obviously only coming in to subvert the holiday destinations vote. I've been to Indonesia, yeah, it's fucking gorgeous, but so is the rest of South East Asia and frankly your cuisine is like fourth out of six there, and your only sport is badminton which no-one cares about so just do one!

[Snake Plissken]

They left a message in the source code for the hacked main page saying “indonesian hackers rule”.

To be fair, I would have done the same if I was a teenager hacking stuff. Hypothetically speaking, of course.

[hobbes]

You're a legend, Snakey

[Antepli Ejderha]

Hmm, what browser are you using? I keep getting redirected to www.onetouchfootball.com which is the correct home page.

Chrome, that link sends me to the hackers page.