Have you been hacked?

[el canadiano]

I backup my forums very often. As a matter of fact, I will do it now.

My forums never have been hacked, but a forum I used to run got hacked after I sold it.

 

[Joshua Farrell]

Haven't had that happen to me, or any forum that I happen to be on yet.

 

[Acorn]

Are we talking about hacking, or cracking?

Our forum wsa never cracked but it WAS hacked. A Javascript whiz set up a malicious site then PM it to an administrator which when she clicked on it in her inbox, commanded her account to delete a whole category and then a whole board. We were able to get about 90% of it restored when I did some investigating. I call this sort of thing hacking. and yes this was on proboards.

Cracking is when someone gets your password and uses that to access the forum and do whatever they may. It's very different from hacking.

 

[Shahrier]

No my forum hasn't been hacked, though I have had over 50 attempts of hacking 😵

Losers.

 

[Impulse]

I make enough backups that I don't really have to worry about it.

 

[Cosmic]

My futurama forum got hacked. I made a member who we all trusted a moderator. As a moderator he was then able to turn himself into an admin and deleted 3000 posts which probably would have been more had I not have stopped him. But apart from that, nope.

How did he do that? Sounds like more of a software exploit than a hack though, to me.

 

[Mr.Hazey]

My hosts backup dailly and weekly and I backup dailly, but if I have done a big change or been a lot of activity will do an extra one, touch wood I've never been hacked and hope I never do

 

[Cosmic]

My hosts backup dailly and weekly and I backup dailly, but if I have done a big change or been a lot of activity will do an extra one, touch wood I've never been hacked and hope I never do

What if your host deletes your account for some reason or just ceases to exist?

 

[Mr.Hazey]

That is very unlikley seen as I know the company on a personal level and know how well the company is doing.

 

[Cloverfield]

My futurama forum got hacked. I made a member who we all trusted a moderator. As a moderator he was then able to turn himself into an admin and deleted 3000 posts which probably would have been more had I not have stopped him. But apart from that, nope.

How did he do that? Sounds like more of a software exploit than a hack though, to me.

He obviously knew what he was doing.

 

[Leo Ghost]

He obviously knew what he was doing.

The general public just doesn't realize how many exploits are traded and sold daily in certain locations. They're almost like trading cards, being passed around for stocks and cash more often than a cheap whore. Of course at some point they reach a person who either leaks them, or uses them in such a manner that the exploited administrators can trace the exploit, in which case they become "patched" by the forum software provider. As a general rule, however, it's safe to assume there are at least 20 "high profile" exploits being sold for all major forum software at any given time. (Basically a "hacker" will purchase these exploits from "providers", and then charge fees for using said exploits on high profile sites. The thought is that they will be able to turn enough profit to pay for the purchase of the exploit).

Of course, I don't about such things as far as any of you know :shrug:

 

[el canadiano]

He obviously knew what he was doing.

The general public just doesn't realize how many exploits are traded and sold daily in certain locations. They're almost like trading cards, being passed around for stocks and cash more often than a cheap whore. Of course at some point they reach a person who either leaks them, or uses them in such a manner that the exploited administrators can trace the exploit, in which case they become "patched" by the forum software provider. As a general rule, however, it's safe to assume there are at least 20 "high profile" exploits being sold for all major forum software at any given time. (Basically a "hacker" will purchase these exploits from "providers", and then charge fees for using said exploits on high profile sites. The thought is that they will be able to turn enough profit to pay for the purchase of the exploit).

Of course, I don't about such things as far as any of you know :shrug:

Script kiddies =/.

 

[Acorn]

Did he somehow use code to force your account to change him to admin? Or how? Was the account accidentally able to promote itself? This is scary, now I dunno about moving to a new forum software if it could do that...scary...

 

[Cloverfield]

It can happen on any software acorn. If it happened on my vBulletin, it can happen on what you are on now, smf, phpbb etc. I don't exactly what he did. He may, like you said, have had a script which forced me to change him into an Admin. Who knows. He's history now and my forum does a backup automatically every hour so I'm really not fussed.

 

[Deleted member 1609]

I've never had a forum of mine hacked, but I have been DDoSed before. 😵

 

[swood]

Nope and i hope i never do. I'd hate to wake up one morning to find someone has hacked my forum

 

[Acorn]

Clicking a tainted link that uses your account to do stuff is one way. That happened to one of my admins like I said on another thread. But, he did seem unable to do it until he was made a moderator, indicating there is some limit.

Backing up every hour? Smart.