Downtime

Check here or the main page for all news relating to the site. You can also post comments on any of the of the news items...ENJOY!!!

Moderators: onid41, jkanter

User avatar
Brock
DMBTabs.com Authority
Posts: 47687
Joined: Thu Oct 03, 2002 8:05 pm
Political views: Pragmatic civil libertarian with a tendency toward communal solutions to communal problems
Random movie quote to make you seem hip and "with it": Narcoleptic club owner Snoozin' Lucci
Location: Austin

Downtime

Unread post by Brock » Sat Mar 20, 2010 3:11 pm

My sincere apologies for the lengthy downtime today.

When I first saw the replaced content on the board index page, I assumed that there had been a breach of the physical server. I immediately logged in and didn't see any tell-tale signs of security actually having been breached except for one questionable process (it turned out to be normal). I ran several security scanners, rootkit hunters, et cetera; looked at all of the different places that a sysadmin looks when something like this happens and couldn't find anything. I immediately reported it to the datacenter so they wouldn't pull down the server if, in fact, someone had gotten access to the server and was using it to send out spam or as a node for a botnet or something like that.

I also immediately killed the processes running the web server in case there was a security exploit there that was being used. Unfortunately, that ended up making the problem much harder to solve. Since none of the other web sites the server hosts had been modified in any way, I immediately became suspicious of phpBB, which, in the past, had been notoriously prone to security vulnerabilities (though that has been rectified, to my knowledge). I checked all of the PHP code in the phpBB directory, diffed them against originals and backups, and could find no modifications. The only sign that there was a problem was in the directory that caches the compiled templates used to display the forums, where the "compromised" index page was being cached, though that cached data was, again, not to be found in the actual template directory.

Finally, I decided to boot up the web server processes, while restricting boards access to only my IP address, to do more investigation. As soon as I logged in to the administration panel, I saw what had happened — jpittman's account had been logged into at 1:08 PM CDT and used to modify the template for the board index; if the template is edited in this way, the change never makes it to the filesystem and it is instead held in memory, hence why I could not find evidence of it in any of the usual places.

Whomever it was used an IP address out of Bishkek, Kyrgyzstan, and actually was quite nice — they could have done a lot more damage. Everything is backed up off-site nightly, so it wouldn't have been permanent damage, it would have just meant the site would be down a lot longer than it actually was.

The content that replaced the index was annoying, but in no way harmful — it was not used for damaging scripts or anything of that nature. Also, since direct database access was not achieved, no private messages or anything non-public was able to be viewed.

TL;DR — jpittman's account was logged in to (presumably through a weak password vector found and fixed) and used to edit a template file. Nothing else was damaged or otherwise compromised.
business
blog

User avatar
onid41
DMBTabs.com Authority
Posts: 22983
Joined: Mon Jun 28, 2004 2:30 pm
Location: long island
Contact:

Unread post by onid41 » Sat Mar 20, 2010 3:23 pm

great job Brock.
-dino

User avatar
Pickles
DMBTabs.com Authority
Posts: 33692
Joined: Tue Nov 12, 2002 4:39 pm
Random movie quote to make you seem hip and "with it": I'm thinking about getting metal legs. It's a risky operation, but it'll be worth it.
Location: FL

Re:

Unread post by Pickles » Sat Mar 20, 2010 3:35 pm

onid41 wrote:great job Brock.
Sort Of A Protest Song wrote:I don't know if this is shameful or not, but after waking up in a girls bed that was really high up off the ground (almost top-bunkbed type high) I told her that if I fell off I'd "come back to life as a white wizard". I was still a bit tipsy. She did not laugh.
stoca2 wrote:well well well 8 years ago I was retarded, not I am autistic. Moving on up through the specturm!

User avatar
jsgksu
DMBTabs.com Authority
Posts: 40798
Joined: Wed Oct 02, 2002 11:18 am
Random movie quote to make you seem hip and "with it": The food court is downstairs. The cookie stand is upstairs. It's not like we're talking quantum physics here.
Location: South Side Pittsburgh
Contact:

Unread post by jsgksu » Sat Mar 20, 2010 3:39 pm

Keep fucking that chicken.
-Jayme

User avatar
Blake
DMBTabs.com Authority
Posts: 25459
Joined: Sun Apr 04, 2004 2:43 am
Location: Texas
Contact:

Unread post by Blake » Sat Mar 20, 2010 4:30 pm

nice lookin out brah
- Blake

User avatar
SimsUK
DMBTabs.com Authority
Posts: 10075
Joined: Wed Sep 26, 2007 8:33 pm
Political views: My favorite founding father is all of them.
Location: Random painted highway

Unread post by SimsUK » Sat Mar 20, 2010 4:42 pm

I get so turned on when Brock conquers DDoS attacks.

User avatar
Pickles
DMBTabs.com Authority
Posts: 33692
Joined: Tue Nov 12, 2002 4:39 pm
Random movie quote to make you seem hip and "with it": I'm thinking about getting metal legs. It's a risky operation, but it'll be worth it.
Location: FL

Re:

Unread post by Pickles » Sat Mar 20, 2010 4:46 pm

SimsUK wrote:*sploosh*
FYP
Sort Of A Protest Song wrote:I don't know if this is shameful or not, but after waking up in a girls bed that was really high up off the ground (almost top-bunkbed type high) I told her that if I fell off I'd "come back to life as a white wizard". I was still a bit tipsy. She did not laugh.
stoca2 wrote:well well well 8 years ago I was retarded, not I am autistic. Moving on up through the specturm!

User avatar
hofdaddy
DMBTabs.com Authority
Posts: 54329
Joined: Mon Dec 15, 2003 3:43 pm
Political views: whatever is cool and trendy but will waffle under pressure
Random movie quote to make you seem hip and "with it": This place has a sign hangin' over the urinal that says, "Don't eat the big white mint".
Location: Mizzle

Unread post by hofdaddy » Sat Mar 20, 2010 5:16 pm

I feel violated
Give a woman an inch and she'll take a foot. Give a woman a foot and she'll moan like a whore

A pair of Kings beats a pair of Queens because men are better than women

User avatar
DJR
DMBTabs.com Authority
Posts: 12129
Joined: Wed Sep 17, 2003 3:18 am
Random movie quote to make you seem hip and "with it": Do you use this word? Alcoves?
Location: Alexandria
Contact:

Re: Downtime

Unread post by DJR » Sat Mar 20, 2010 7:16 pm

got this at one point :?: :lol:
Attachments
Untitled.png
-Dennis

User avatar
Speenis
DMBTabs.com Authority
Posts: 44018
Joined: Wed Oct 02, 2002 4:07 pm
Political views: #MakeDonaldDrumpfAgain
Random movie quote to make you seem hip and "with it": Spalding.get.your.foot.off.the.boat!
Location: Cleveland

Unread post by Speenis » Sat Mar 20, 2010 7:25 pm

It must have been Michael from the 'stan. Afghanistan that is, not Kyrgyzstan.
hofdaddy wrote:better tie your meat curtains together Whitney. cause one sip of Speen ale will make you gush out of your vagina

User avatar
checkii
DMBTabs.com Authority
Posts: 28239
Joined: Sun Jun 18, 2006 10:01 am
Political views: always bet on black
Location: the sunny side of Santo Poco
Contact:

Re:

Unread post by checkii » Sat Mar 20, 2010 8:44 pm

Speenis wrote:It must have been Michael from the 'stan. Afghanistan that is, not Kyrgyzstan.
that was the first thing i thought when i saw "Mr. Green"
stoca2 wrote:
Thu May 21, 2020 2:46 pm
I had a dream last night that Gayle King touched my penis and gave me her number. It was exactly her face but a older black women touch my penis while we looked out a window and she gave me her number and wrote Gail on it.

User avatar
chosta
DMBTabs.com Authority
Posts: 31879
Joined: Tue Feb 04, 2003 8:33 pm
Political views: red sox
Random movie quote to make you seem hip and "with it": i know a good sand guy, we can get it at a price
Location: the deep blue
Contact:

Unread post by chosta » Sat Mar 20, 2010 9:00 pm

USA! USA! USA! USA!
-Matt
checkii wrote:It's cool to hate on Chosta, I get it. But the prejudice that people take into his posts makes people so stupid it's hilarious to read. I take every gif I watch (which is A LOT) with a humongous grain of salt. But I don't let that grain of salt get into my eye and blind me to whatever truth can be found in what I'm watching. He is not any worse than any other poster here, and the people who claim he is just don't know what they're talking about. The demonization has gotten ridiculously out of hand.

User avatar
GSR
DMBTabs.com Authority
Posts: 39288
Joined: Tue Dec 31, 2002 7:30 pm

Unread post by GSR » Sat Mar 20, 2010 9:36 pm

I'm glad this didn't happen on a week day.
Andrew

User avatar
stoca2
DMBTabs.com Authority
Posts: 37440
Joined: Fri Dec 17, 2004 1:43 pm
Political views: RETIRED FROM THE BOARDS
Random movie quote to make you seem hip and "with it": BE BACK IN 10 YEARS FOR MY BLOW JAYS WHEN HEALTH INSURANCE FUCKED US

Re:

Unread post by stoca2 » Sun Mar 21, 2010 4:24 am

chosta wrote:USA! USA! USA! USA!
czech wrote:...it's 4am, and I just realized something. I have been really deppressed about my girlfriend leaving me. but i realized that i already have a true love. DMB. Just got done listening to a bunch of DMB and realized that as long as they can make good music, then I can have passion for something. And as soon as they get strung out, i'll just start loving the flecktones or something

User avatar
mbgreen
DMBTabs.com Authority
Posts: 11628
Joined: Thu Oct 03, 2002 1:49 pm
Political views: Whatever is convenient at the moment.
Location: Colorado

Re:

Unread post by mbgreen » Sun Mar 21, 2010 5:12 am

Speenis wrote:It must have been Michael from the 'stan. Afghanistan that is, not Kyrgyzstan.
Dude, Kyrgyzstan is the point of entry for Afghanistan. I was there for about 4 days in October. Probably shouldn't have left pittman's password laying around.

Whatever happened to Pittman anyway?
- Michael

"Don't talk to me about naval tradition. It's nothing but rum, sodomy and the lash."

Post Reply

Return to “News & Updates”

Who is online

Users browsing this forum: No registered users and 4 guests