MR2 Roadster Owners Club

The Workshop => General => Topic started by: aaronjb on January 28, 2008, 00:05

Title: MR2ROC hacked again :( - please read.. change your passwords
Post by: aaronjb on January 28, 2008, 00:05
Folks,

As you've probably seen we were hacked again.

I won't go into the technicalities now, but suffice to say our database was compromised - and this time not by a white-hat (friendly) hacker, but rather by someone with nefarious intentions.


Please, as a precaution, change your account password here - and anywhere else you use the same password - again, to prevent any unauthorised access to your online accounts.


We have taken further steps to hopefully prevent this from happening again in the future, and now have a number of additional mechanisms in place to protect us.


In the near future we will also likely be moving hosts to our own private server.  At that time we will look into implementing further server-based security systems to detect probable hacking attempts from usage patterns (I'll be looking at Apache's mod_security, for those of a technical persuasion - since I doubt we can afford a hardware WAF like F5's Application Security Module, or Imperva's SecureSphere).


Hopefully we'll be left alone for a little while now....
Title:
Post by: philster_d on January 28, 2008, 00:19
Thankyou
Title:
Post by: darrenjuggins on January 28, 2008, 00:34
Seconded... well done for getting us back up Aaron   s:D :D s:D
Title:
Post by: kentsmudger on January 28, 2008, 02:33
Good job Aaron!  s:bowdown: :bowdown: s:bowdown:
Title:
Post by: Liz on January 28, 2008, 06:14
Thank you Aaron, much appreciated!
Title:
Post by: normanh on January 28, 2008, 06:50
great job, but u lost me after word hacker!


normanh
Title:
Post by: spit on January 28, 2008, 07:07
Aaron, you're a star. Well done matey.
Title:
Post by: Anonymous on January 28, 2008, 07:20
Cheers mate, many are those of us who owe you a beer!
Title:
Post by: richbay on January 28, 2008, 07:43
good work, what would we do without you?
Title:
Post by: Anonymous on January 28, 2008, 08:12
Well done Aaron - never knew how much i used this site (and missed it) until  it was gone!

Nathan
Title:
Post by: loadswine on January 28, 2008, 08:37
Nice one Aaron mate!
Looks like you got home okay yesterday evening and still had time to sort this. That's dedication !   s8) 8) s8)
Title:
Post by: SimonC_Here on January 28, 2008, 08:52
Now I have something to do!

Simon
Title:
Post by: Wabbitkilla on January 28, 2008, 08:59
Well done Aaron, much thanks   s:D :D s:D  

I can get a Qualsys pen test report for the site if you want.
Title:
Post by: edward.carter on January 28, 2008, 09:11
Thanks  s8) 8) s8)    s:D :D s:D
Title:
Post by: Jigwar on January 28, 2008, 09:17
Top work Aaron.

Many thanks,

Steve
Title:
Post by: NorthandSouth on January 28, 2008, 09:27
Thanks for all your hard work Aaron..its great to be back...now you deserve a rest   s:wink: :wink: s:wink:
Title:
Post by: celmacmat on January 28, 2008, 09:41
Well done Aaron, you are our knight in shinny armor   s:D :D s:D
Title:
Post by: tonigmr2 on January 28, 2008, 09:52
Good job getting it back up guys.
T
Title:
Post by: DannyN on January 28, 2008, 09:53
Aaron,  you are the man!

great job


Danny
Title:
Post by: Silverman on January 28, 2008, 10:28
Many thanks Aaron for a great deal of work.  I wish the Club could reward you in a more meaningful way?  S'man.
Title:
Post by: northernalex on January 28, 2008, 10:41
Good work Aaron!!! Now how do I post a pint to someone over the internet?
Title: Good work that man!
Post by: Anonymous on January 28, 2008, 10:46
Good work  s:wink: :wink: s:wink:
Title:
Post by: red_leicester on January 28, 2008, 12:06
Yes, excellent work that man.

High Five!
Title:
Post by: Anonymous on January 28, 2008, 12:14
Thanks for all your hard work Aaron. Much appreichiated!
Title:
Post by: Anonymous on January 28, 2008, 12:54
Thanks Aaron - Great job.
Title:
Post by: RacingSnake on January 28, 2008, 13:21
Quote from: "northernalex"Good work Aaron!!! Now how do I post a pint to someone over the internet?

Well, if you imagine Aaron with some hair & less pounds   s:P :P s:P  you could try:
 m http://www.buy-me-a-beer.com/virtualbeer.php (http://www.buy-me-a-beer.com/virtualbeer.php) m
.. oh, & a different name!   s:lol: :lol: s:lol:  
Thanks for the site restore Aaron   s:wink: :wink: s:wink:
Title:
Post by: heathstimpson on January 28, 2008, 13:38
Quote from: "nelix"Cheers mate, many are those of us who owe you a beer!
Too right that's another one I owe young Aaron. You are a top bloke for always helping out in the time of need  s8) 8) s8)
Title:
Post by: roger on January 28, 2008, 13:44
Good'un Aaron   s8) 8) s8)
Title:
Post by: Anonymous on January 28, 2008, 14:31
Great stuff Aaron! Now if you just let me know next time you're in Sweden and I'll buy you a beer for that! Heck, make it two!  s:D :D s:D
Title:
Post by: Anonymous on January 28, 2008, 16:40
Great to see the site up and running again.

These *^%£*$("^&"*'s should be strung up for hacking...!!
Title:
Post by: Anonymous on January 28, 2008, 16:43
I still say it took too long. Honestly, he drags his feet and just expects us to put up with it. I propose a Club hanging to be order, or at the very least a mild groping.
Title:
Post by: aaronjb on January 28, 2008, 16:49
Quote from: "Ekona"a mild groping.

 s:shock: :shock: s:shock:  Do I get to pick who is doing the groping?
Title:
Post by: Anonymous on January 28, 2008, 16:54
Quote from: "aaronjb"
Quote from: "Ekona"a mild groping.

 s:shock: :shock: s:shock:  Do I get to pick who is doing the groping?

God i hope so! Hate to see it go to a vote or drawing a name out of a hat.  s:shock: :shock: s:shock:  

Still time to book Glencoe mate, then you can collect on all the pledged pints.  s:D :D s:D
Title:
Post by: alancdavis on January 28, 2008, 16:56
Well done mate,,  s:bowdown: :bowdown: s:bowdown:
Title:
Post by: Anonymous on January 28, 2008, 17:08
Respect to one who can from one who can't  s:bowdown: :bowdown: s:bowdown:  

Good to be back.  s:D :D s:D
Title:
Post by: kanujunkie on January 28, 2008, 17:26
a hearty well done matey, cheers for all your hard work  s:wink: :wink: s:wink:
Title:
Post by: uktotty on January 28, 2008, 19:44
Well done Aaron! Nightmare job, my site has been hacked on many occasions but not to this level!
Still worth looking into vbulletin tho mate???
Title:
Post by: aaronjb on January 28, 2008, 19:56
Quote from: "uktotty"Well done Aaron! Nightmare job, my site has been hacked on many occasions but not to this level!
Still worth looking into vbulletin though mate???

Yeah, we'll be looking at alternative board software when we organise the host move I think - evaluate the alternatives and see what they're like and if they suit us  s:) :) s:)
Title:
Post by: Anonymous on January 28, 2008, 19:57
VB is the ugliest forum software ever, and should be cast into hell at the earliest opportunity.

PhpBB3 or bust, says I.
Title:
Post by: markiii on January 28, 2008, 20:03
must admit I personally hate VB with a vengeance

nice feature set awful useability
Title:
Post by: Anonymous on January 30, 2008, 17:38
Just to add my appreciation for the good work in getting the site up and running. Well done Aaron.
Title:
Post by: Jaik on January 30, 2008, 22:43
Yep, good work Aaron; working as a web developer I know how much of a nightmare it is when something like this happens.
Title:
Post by: Anonymous on January 30, 2008, 23:17
God dreams of being Aaron.  s:bowdown: :bowdown: s:bowdown:
Title:
Post by: carl_evs on January 31, 2008, 12:52
I'm not into this whole forum format thing so excuse the ignorance!!

What do SC use? I know it had a few issues when they changed it around but they seem to have them sorted now - and I'm sure Don would be happy to help out in avoiding some of those?!

I actually like some of the stuff they have over there...just too much politicalchat!!
Title:
Post by: Anonymous on January 31, 2008, 13:40
Cheers from me too - This is a great forum, a source of all sorts of great information, and I appreciate all the hard work which goes into it.
Title:
Post by: Anonymous on February 1, 2008, 10:05
Well done clever man!!
Title:
Post by: Anonymous on February 1, 2008, 11:01
Thanks Aaron - I don't post much, but I do enjoy my visits to MR2OC.