Hack attempts on SMF boards

Started by Blacklord, May 14, 2009, 10:56 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Blacklord

This is just an FYI for our members.

There's recently been a big increase in hack attacks on SMF boards.

These attacks are caused by fake avatar uploads that contain a PHP script that attaches to all PHP files on a server. Once there, these display ads rather than the expected forum contents.

They are NOT attacks that attempt to hack the database so no member information is compromised if a forum comes under attack.

They are extremely annoying however.....

I've just finished screwing down both this forum & the Ferries of Sydney forum that I also run. You guys shouldn't notice anything different, however all new registrations are now checked on the username, IP & email address against a remote spammer database. If a registration is marked suspicious it will not allow immediate registration & will require admin intervention to approve the account or otherwise.

Therefore some new members may experience a delay in accessing the forums if the checking daemon decides further investigation needs to be done (& it can be as simple as choosing a username that a known spammer uses).

Lance

airship

*sigh* It always seems to take so much effort for those who run useful web sites to keep spam at bay. Does anyone actually ever make any money from spamming Commodore sit...

DO YOU WANT A MASSIVE ORGAN? EMAIL TODAY!!!
Serving up content-free posts on the Interwebs since 1983.
History of INFO Magazine

RobertB

Quote from: airship on May 15, 2009, 12:34 AMDO YOU WANT A MASSIVE ORGAN?
I'd rather use a smaller Yamaha keyboard.  ;)

                      Truly,
                      Robert Bernardo
                      Fresno Commodore User Group
                      http://videocam.net.au/fcug
                      July 25-26 Commodore Vegas Expo - http://www.portcommodore.com/commvex

commodorejohn

Quote from: RobertB on May 15, 2009, 02:13 AM
Quote from: airship on May 15, 2009, 12:34 AMDO YOU WANT A MASSIVE ORGAN?
I'd rather use a smaller Yamaha keyboard.  ;)
No, no, you just can't get the same sound from a piffly little sampled keyboard. Not remotely.

airship

Bigger is always better. ALWAYS!!! No arguments allowed.

But I still wonder how they're going to email me a big organ...
Serving up content-free posts on the Interwebs since 1983.
History of INFO Magazine

Blacklord

Sorry mate - loungeroom isn't big enough :)

BigDumbDinosaur

I don't want a massive organ.  The church isn't big enough.
x86?  We ain't got no x86.  We don't need no stinking x86!

BigDumbDinosaur

BTW, this site would be much harder to crack if it weren't running on Windows.  You need to get off that crappy OS and on to some flavor of *NIX. :)
x86?  We ain't got no x86.  We don't need no stinking x86!

Blacklord

Quote from: BigDumbDinosaur on May 16, 2009, 11:14 AM
BTW, this site would be much harder to crack if it weren't running on Windows.  You need to get off that crappy OS and on to some flavor of *NIX. :)

It's (so far) never been hacked - any of the forums.

The particular hack in question also affects *nix boards (in fact, nearly all of the reported hacks are Linux based SMF's).

cheers,

Lance