NukeWorker Logo
NukeWorker.com
NukeWorker Logo
NukeWorker Menu

Redirected

Started by JustinHEMI05, Mar 12, 2011, 02:45

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Print
Go Down Pages 1 2 All
User actions

drayer54

#25
Mar 13, 2011, 05:09
How bout we get redirected to a NCAA tourney pool?

Marlin

#26
Mar 13, 2011, 05:12
Spell check seems to be working again and I have not been directed away from the site for a while.

Rennhack

#27
Mar 13, 2011, 05:29
I'm replacing some files that i suspect have been compromised, but I have not found the source of their ability to compromise them... so the investigation continues.

I also just deleted any attachments posted since 2/14/11, so don't freak out when all of your clever political satire is gone.  I'm just cleaning house, to try to stop this from getting worse.

OldHP

#28
Mar 13, 2011, 08:12
Since about noon today I keep getting dumped to windows media player!
Humor is a wonderful way to prevent hardening of the attitudes! unknown
The government is like a baby's alimentary canal, with a happy appetite at one end and no responsibility at the other. Regan

Rennhack

#29
Mar 14, 2011, 01:42
This seems to be an active bunch of hackers.  As I 'fix' issues, they reinfect files.  They 'somehow' are appending a script onto the end of files that add the redirection.

I'm cleaning files as fast as I can, and looking for how they are doing it.  I had the forum software clean last night, and tonight its re-infected.

It's going to be a long week.

JustinHEMI05

#30
Mar 14, 2011, 02:00
Quote from: Rennhack on Mar 14, 2011, 01:42
This seems to be an active bunch of hackers.  As I 'fix' issues, they reinfect files.  They 'somehow' are appending a script onto the end of files that add the redirection.

I'm cleaning files as fast as I can, and looking for how they are doing it.  I had the forum software clean last night, and tonight its re-infected.

It's going to be a long week.

I know you have attemtped to go to 2.0 RC before, but you might want to revisit that plan. I had to upgrade a gaming site I run to 2.0 RC4 because of a similar issue. We might have to give up some things for a while, but site security is a higher priority.

Rennhack

#31
Mar 14, 2011, 03:04
Quote from: JustinHEMI on Mar 14, 2011, 02:00
I know you have attemtped to go to 2.0 RC before, but you might want to revisit that plan. I had to upgrade a gaming site I run to 2.0 RC4 because of a similar issue. We might have to give up some things for a while, but site security is a higher priority.

If it wouldn't break the home page, the forum, the quiz section, the picture section, the facility rating section....

Rennhack

#32
Mar 14, 2011, 03:24
Every time it starts up again, let me know again....

Rennhack

#33
Mar 14, 2011, 04:40
It seems that there was a breach of security in the online store, I may close it down.

The photo gallery also seems to have had issues. -- It's currently deleted entirely, while I scrub it.

The forum software was compromised, using who knows what, replacing the .js files (controls the spell checker, and the BB code, etc)

I've uploaded an older version of  the forum, while I work on the rest of the site.

The job board seems untouched, it does not use open source like the others do.

JustinHEMI05

#34
Mar 14, 2011, 04:41
Quote from: Rennhack on Mar 14, 2011, 03:04
If it wouldn't break the home page, the forum, the quiz section, the picture section, the facility rating section....

Yeah I hear ya, this site is much more complicated than the one I run. Good luck!

OldHP

#35
Mar 14, 2011, 06:24
Quote from: Rennhack on Mar 14, 2011, 04:40
The forum software was compromised, using who knows what, replacing the .js files (controls the spell checker, and the BB code, etc)
I've uploaded an older version of  the forum, while I work on the rest of the site.
The job board seems untouched, it us not open source like the others are.

Mike:

[salute] [salute] [salute]
First time since this all started that I've been able to use the "Quote" function and have been able to use my back function.
Humor is a wonderful way to prevent hardening of the attitudes! unknown
The government is like a baby's alimentary canal, with a happy appetite at one end and no responsibility at the other. Regan

MacGyver

#36
Mar 15, 2011, 10:33
Quote from: Rennhack on Mar 14, 2011, 04:40
It seems that there was a breach of security in the online store, I may close it down.

The photo gallery also seems to have had issues. -- It's currently deleted entirely, while I scrub it.

The forum software was compromised, using who knows what, replacing the .js files (controls the spell checker, and the BB code, etc)

I've uploaded an older version of  the forum, while I work on the rest of the site.

The job board seems untouched, it us not open source like the others are.

We appreciate the effort of you and your technical staff Mike  +K


NukeWorker.com support tech at work  ;) :P

Rennhack

#37
Mar 15, 2011, 04:57
I've deleted the shop and photo gallery, The shop will likely stay gone, It's just not worth the risk.  The photo gallery will be back as soon as I can get all of the security updates in place.  I've finished manually scrubbing the site.  I think I've found all of the exploits.

Rennhack

#38
Mar 20, 2011, 08:25
Quote from: Marssim on Mar 20, 2011, 08:22
Someone's been busy today (3/20/2011),...

What's up?!?!?! Not a college hoops fan?!?!?!?

I don't watch sports on TV, except the the super bowel, or Mike Tyson..

Yes, I've been busy... trying to get the site back to pre-FUBAR days.  It's getting better.

When we are (I am) done, the site should be better than ever.

Rennhack

#39
Mar 21, 2011, 01:21
And just so you know, I am aware that there are still some problems, like the "<img src=" title=" +K" /> <img src=" title=" -K" />" formatting issue.

Rennhack

#40
Mar 21, 2011, 03:11

I think I have the karma (description) log hack working again...

I also have registration working again... it was not working for a whole week!  That's around 300 people we turned away!

http://www.nukeworker.com/forum/index.php?action=stats;expand=201103#201103

Rennhack

#41
Mar 21, 2011, 07:14
Quote from: Rennhack on Mar 21, 2011, 03:11
I also have registration working again... it was not working for a whole week!  That's around 300 people we turned away!

It seems the registration isn't working again... ;(

Rennhack

#42
Mar 23, 2011, 02:51
Quote from: Rennhack on Mar 21, 2011, 07:14
It seems the registration isn't working again... ;(

And... now they are... I verified it this time.

I also noticed the karma buttons in the PM section was fubar, and fixed that.

We HAVE to be getting close to getting the forum working again.

01changeup

#43
Mar 23, 2011, 10:11
Quote from: Rennhack on Mar 23, 2011, 02:51
And... now they are... I verified it this time.

I also noticed the karma buttons in the PM section was fubar, and fixed that.

We HAVE to be getting close to getting the forum working again.

Good luck my friend. I would offer my help, but I am afraid that I would be worse than useless! My advise would always be to just kick the darn thing! But in all seriousness, good luck.

V/R
01changeup

Rennhack

#44
Mar 24, 2011, 12:10
Quote from: Rennhack on Mar 15, 2011, 04:57
I've deleted the shop and photo gallery, The shop will likely stay gone, It's just not worth the risk.  The photo gallery will be back as soon as I can get all of the security updates in place.  I've finished manually scrubbing the site.  I think I've found all of the exploits.


The photo gallery is back online.  New and improved too!  Great new up-loader.

We are missing some pictures from the "cleaning" that occurred recently, but those files should be restored soon.

We were able to take this opportunity to update the software while it was down.  It has a new look, and a fantastic new picture up-loader.

Rennhack

#45
Mar 28, 2011, 01:50
Quote from: Rennhack on Mar 24, 2011, 12:10
We are missing some pictures from the "cleaning" that occurred recently, but those files should be restored soon.

The 'missing' pictures have been restored.  The photo gallery should be at 100% now.


The shop... something has to be done about that.

Rennhack

#46
May 21, 2013, 02:55
Woot, 2 months without an issue.  That's a lot better than two hours.

RDTroja

#47
May 21, 2013, 03:02
I guess that means you are not superstitious.
"I won't eat anything that has intelligent life, but I'd gladly eat a network executive or a politician."

                                  -Marty Feldman

"Politics is supposed to be the second-oldest profession. I have come to understand that it bears a very close resemblance to the first."
                                  -Ronald Reagan

I have never made but one prayer to God, a very short one: 'O Lord, make my enemies ridiculous.' And God granted it.

                                  - Voltaire

cedugger

#48
May 21, 2013, 03:44
I never saw this thread when it was still fresh.

About two months ago, nukeworker.com started getting blocked on my DoD computer. I get the "Website Blocked" from US Cyber Command. It was still blocked as of last week (I'm not at work this week). Not sure why it's being blocked.

Rennhack

#49
May 21, 2013, 05:10
Quote from: slavutich on May 21, 2013, 03:44
I never saw this thread when it was still fresh.

About two months ago, nukeworker.com started getting blocked on my DoD computer. I get the "Website Blocked" from US Cyber Command. It was still blocked as of last week (I'm not at work this week). Not sure why it's being blocked.

Two months ago, there was some malicious code injected into the site.  As far as I know, it has been removed.  The DoD block, as well as any companies block isn't lifted automatically.  You have to request that it be re-evaluated.

If you ask them to re-evaluate it, please let me know of the outcome.
Print
Go Up Pages 1 2 All
User actions