23 December 2005 @ 06:42 am
Merry f*cking Christmas, F*cktard!  
Yes, INAP was hacked. Again.

Thank you to [livejournal.com profile] liz_marcs, [livejournal.com profile] nemo_gravis and [livejournal.com profile] jgracio for giving me the head's up here - the hacker signed up under the username shader and managed to not only upload a virus to the parrot/ subdomain, but also managed to create a whole new subdomain and loaded a virus in there. Plus he loaded a bunhc of BitTorrent files to my webspace which puts me in violation of my ToS with my webhost. I'm in contact with them to explain the situation but in the meantime INAP is not taking new submissions or new signups. Everything is switched off at the moment and I'll be going through it with a fine-tooth comb to make sure there's nothing else going on there.

Unfortunately this means another delay in the launch and update on the other sites. B/X site is on hold until I get this sorted, the F/X site is stuck as is right now, WKA is most likely not going to launch the new round in January the way I had planned and all my other sites are not going to be updated until I can be damn sure security is as tight as I can make it.

I love INAP, I do not want to see it go, but right now I'm sick of the problems I've been having with eFiction. When (and it probably is 'when' rather than 'if') it returns, it may be in a different format.
Tags: ,
 
 
Current Mood: gloomy
 
 
( Post a new comment )
[identity profile] velvetwhip.livejournal.com on December 22nd, 2005 10:46 pm (UTC)
Why did they do that to you? That is HORRIBLE!!!! I don't understand this at all! You poor baby!


Gabrielle
(Reply) (Link)
[identity profile] velvetwhip.livejournal.com on December 22nd, 2005 10:50 pm (UTC)
Thank you for the heads up, they signed up at Velvet Vampire, too! I just delated them and will notify Shannon immediately! Thank heavens my site doesn't take submissions from anyone but me!


Gabrielle
[identity profile] whiskyinmind.livejournal.com on December 22nd, 2005 10:52 pm (UTC)
I actually just realised that your site was efiction as well! Gah! I think what's happening is this guy is googling 'efiction' and signing up wherever he gets a hit.

I've posted a topic to the efiction support forum as well.
[identity profile] velvetwhip.livejournal.com on December 22nd, 2005 10:55 pm (UTC)
Do you think I'll be okay? No one but me can upload fics there.


Gabrielle
[identity profile] whiskyinmind.livejournal.com on December 22nd, 2005 10:59 pm (UTC)
It should be, it might be an idea to change your password and get Shannon to check for any dodgy looking files on the server. (Although you've deleted his account on the site, he'll still have a folder on the server but Shannon should be able to get rid of that for you.)

One thing she should look for is a folder called "WySiWYgPro" which seemed to be where he'd loaded a Trojan - and also any odd looking codes in the 'stories' folder of your site. (There should only be folders for each other with .txt files in there, nothing else.)

I]m just heading off to work but once I get there I'll email Shannon with what to look for.

I'm sure it'll be fine now that you've found him though!
[identity profile] velvetwhip.livejournal.com on December 22nd, 2005 11:02 pm (UTC)
Thank you! I cannot tell you how much I appreciate your help. I can't check any of the code stuff, I don't even know how. But I'm sure Shannon will as soon as she waked up and gets my email and yours. Thank you again! Please give all the info you can to Shannon, cause I can't do anything.


Gabrielle
[identity profile] emeraldswan.livejournal.com on December 22nd, 2005 11:37 pm (UTC)
{{hugs}}
[identity profile] whiskyinmind.livejournal.com on December 23rd, 2005 12:10 am (UTC)
:)

You'd better check your site after a couple of days - after Gabrielle mentioned he was on her site I checked all of the other ones Shannon runs (that I know of) and he wasn't there, but now that he's been found on one he may try to sign up for others.
[identity profile] emeraldswan.livejournal.com on December 23rd, 2005 12:33 am (UTC)
Oh, I know. I checked as soon as I read G's comment. Figures this would happen right as I'm going out of town. *frown* I'll worry and want to check while I'm gone, most likely.

In lighter news, I LOVE your new layout!!!
[identity profile] whiskyinmind.livejournal.com on December 23rd, 2005 01:32 am (UTC)
I wouldn't worry too much about it - maybe get in touch with Shannon as well though because there could be all sorts of things hidden in odd places because of it.

And thanks! I love my sparkles - I'll be sad to see them go after the holdiday season.
[identity profile] jgracio.livejournal.com on December 23rd, 2005 05:25 am (UTC)
Would this thing have happened if the posts had to be I dunno authorized or checked in or something, before really going into the site?
[identity profile] whiskyinmind.livejournal.com on December 23rd, 2005 05:36 am (UTC)
Yup, unfortunately it wouldn't have prevented it - as soon as this guy got himself a password on the author list he managed to get into the code.

The people who took over the coding of the eFiction script have added a security patch on the 10th December, apparently to get rid of the weakness this guy found. So I'll be upgrading over the holiday break. Problem with that is that the upgraded version is based on entirely different layouts so the look and feel of the site will change quite drastically.

And I may be moving it to a new subdomain as well, but I'll see how the upgrade goes.
[identity profile] jgracio.livejournal.com on December 23rd, 2005 05:44 am (UTC)
I don't have a problem with a different look and feel as long as it means less problems for you. Don't think any user should.

You okay today? No headachy feelings? Hope you didn't let that bastard hacker get to you...
[identity profile] whiskyinmind.livejournal.com on December 23rd, 2005 05:56 am (UTC)
Fine today - last day of work - yay!

I was more touched that you guys were on the case that annoyed at the hacker to be honest - thank you again!
[identity profile] liz-marcs.livejournal.com on December 23rd, 2005 06:50 am (UTC)
{{hugs}}

Not a lot of help, I know since the tech details were a little beyond my grasp. If you click on the link in my post about it, they seem to have more information.

Glad we were able to do something before he triggered your site and everything got lost.

Sorry for you getting hit again. Why fucktards go after pretty harmless sites, I don't know.

Merry Christmas. I hope the holidays are better than this event.
[identity profile] whiskyinmind.livejournal.com on December 23rd, 2005 08:10 am (UTC)
Thank you so much - again! And you kinda got the brunt of my annoyance this morning in the email I sent you - sorry about that! It is now definitely 'when' the site will be back up, not 'if'. *g*
[identity profile] thedothatgirl.livejournal.com on December 23rd, 2005 09:10 am (UTC)
Heck Sho :( Sorry to hear about that fuckwit hacker. Good job you got to it quickly.

I can't imagine how annoyed you must feel - I get miffed when some jerk puts something dumb on my tag board.

Anyway have a lovely Christmas.

(Reply) (Link)