[Skydiver]

So what was the cause of the redirects?

[Dogstopper]

It appears that we had a malicious malcontent who though it'd be funny to hack our site. I do believe it was a SQL injection even through IPB and with PreparedStatements. When I tlaked to Chris, he said the server guys found the problem, so whatever it was, let's hope we don't get it again.

However, we lost most, if not all of today's posts.

[smohd]

Still redirected when using my computer, I deleted all cookies and cleared cache but the same thing. Am I hacked also!?

[no2pencil]

Dogstopper, on 01 August 2012 - 04:18 PM, said:

However, we lost most, if not all of today's posts.

Great, so I have to re-troll an 11 year old girl.

[Skydiver]

It was a server side hack. Your machine should be okay unless you got directed to that one page that seemed to want Javascript and was trying to force me to open a .pdf file. On a test machine, examining the .pdf seemed to show a corrupted file. Probably part of an exploit.

[Kilorn]

I purposely checked out the redirect a couple of times on this work machine with a restore point from last night. Installed at least 1 trojan each time I let the re-directed page load. Fun stuff.

[qwertyuu]

Maybe it's... one of us?

Just kidding... Got the same problem myself. Cleaning the Firefox's cache made it work right away.

yay!

[jared.deckard]

I don't think they thought it was funny, they knew what they were doing.

Exploit Source: http://ideone.com/6Jm1u

[BBeck]

no2pencil, on 01 August 2012 - 02:54 PM, said:

Dogstopper, on 01 August 2012 - 04:18 PM, said:

However, we lost most, if not all of today's posts.

Great, so I have to re-troll an 11 year old girl.

Naw. I'll just let that one go. I think the concensus was that everyone thought I was wrong or at least blowing it out of proportion. So, I'll leave it at that. :-)

I did miss about half the posts on that thread though. I went to go do some other stuff and came back an hour later to a mail box full of notifications that people had posted. I deleted all of them in my email because I was going to the forum to read them. So, I went to the forum to read them and got diverted to a bunch of odd websites instead. So, I didn't get to read much after my last post.

[smohd]

Now it is fine...

Quote

However, we lost most, if not all of today's posts.

Not only posts but also PMs. This evening I got a chance to login without a redirect and saw I have new PM, but now it is gone and I havent read it- hope the sender will resend it. And also I see some threads missing replies which were there in the morning.
glad we are back in position now

[Duckington]

Dogstopper, on 01 August 2012 - 09:18 PM, said:

It appears that we had a malicious malcontent who though it'd be funny to hack our site. I do believe it was a SQL injection even through IPB and with PreparedStatements. When I tlaked to Chris, he said the server guys found the problem, so whatever it was, let's hope we don't get it again.

However, we lost most, if not all of today's posts.

I thought the whole point of prepared statements was that they seperated the instructions from the data, making it impossible to inject anything....

[BBeck]

smohd, on 01 August 2012 - 03:25 PM, said:

Now it is fine...

Quote

However, we lost most, if not all of today's posts.

Not only posts but also PMs. This evening I got a chance to login without a redirect and saw I have new PM, but now it is gone and I havent read it- hope the sender will resend it. And also I see some threads missing replies which were there in the morning.
glad we are back in position now

I also got a "PM" that "disappeared". I think that was actually part of the attack. When I tried to open it during the attack it redirected me to another site. I tried it several times and that's all it did every time. So, there's a good chance that the PM wasn't real, but just part of the attack.

Unless, I also missed a PM. :-)

[no2pencil]

smohd, on 01 August 2012 - 05:25 PM, said:

Now it is fine...

Quote

However, we lost most, if not all of today's posts.

Not only posts but also PMs.

Not just posts, not just PMs, but I also created a snippet of jQuery using dynamic Twitter Bootstrap icons.

[Mossypne]

Do a scan guys. I only redirected nothing loaded or anything but i've ran Malware Bytes and got 1 detected Item. It's still mid scan so i'm not sure if it's this yet but just in case.

[atraub]

jared.deckard, on 01 August 2012 - 05:08 PM, said:

I don't think they thought it was funny, they knew what they were doing.

Exploit Source: http://ideone.com/6Jm1u

You really believe that someone would take down DIC on purpose? No... No this can't be true. Surely they did it as a joke that got out of hand. Never could they have dreamed that their little prank would keep us from using the site for a few hours AND lose a few posts. That would be... dare I say, "mean"? Someone, please explain to this young lad that no one on the internet is ever intentionally cruel, we're a tight nit group of peace loving activists who always get along.

Now that that's out of my system, let me explain. I know what will happen when I trip one of those fuckers wearing skate shoes... but I still find it hilarious. Case and Point: being malicious can be funny.

Mossypne, on 01 August 2012 - 05:35 PM, said:

Do a scan guys. I only redirected nothing loaded or anything but i've ran Malware Bytes and got 1 detected Item. It's still mid scan so i'm not sure if it's this yet but just in case.

Could be from other web related "activity." Everytime I checked I just got a sad nginx message.... It'd be a real trick if DIC didn't use Nginx,then I'd be entertained by all this.

This post has been edited by atraub: 01 August 2012 - 02:45 PM