Will people please stop now...

[ReflectingGod]

Anyone who has been messing around with the topic count, the invisible threads and everytihng else will you please stop. You are fucking up the forum for everyone else... I don't care if it was only a joke, you people should be banned.

[elDiablo]

yeah, too right! i couldn't get on yesterday, and that's annoying! and think of chris having to repair it all

[Death]

Maybe they should upgrade the forum then...this is what happens when you use old BB software - full of holes.

I think the exploit for this one allows arbitrary command execution because of some stupid cookie handling.

[The GoldFish]

No this is what happends when you have stupid people in the forum and old BB software. If there weren't here, there wouldnt be so big a problem.

[Death]

Security "enthusiasts" often scour the internet for old software and apply the exploits, just for the hell of it.

[The GoldFish]

Fair enough . I could understand if it was "enthusiasts" as you put it, but the key thing is, as faw as I am aware, is it was a mamber, or several of, of this board that did it, apperently thinking it was "cool", which as far as the majority of users think, it isnt... especially when the forum gets put out action, all be-it temporarily.

[Icepick]

Well this place has certianly gone down hill in my absence...

[The GoldFish]

Frankly, it probably would have gone down hill if you *had* been here...

[Icepick]

Yeah i know.
/me sighs

[The GoldFish]

I even changed my Sig for the occasion...
/me sighs also

[Icepick]

I think im just gonna give the forums a break for a while, wait for all these idiots to leave.
I'll come back again when i get my connection at home.

[The GoldFish]

Whens that gonna be?

Anyhow, we'll keep the FAQ bumped... assuming the forums dont die again... :S

[Rushyo]

/me sighs for the hell of it.

Maybe it's a buffer overflowing. Having not read of those documents Goldfish so kindly linked to. I'm probably talking utter rubbish but it would be quite funny since buffer overflowing is a common hack.

Hacking a hacking game, get it? No? Oh, it's crap... right.

I've just come back to the forums so I'm pretty disappointed. I hate to be pushy but we really should move forums if stuff like this keeps happening.



(Edited by Rushyo at 2:16 pm on July 3, 2002)

[Chris]

Basically there is someone (or a couple of people) that are repeatedly creating threads like
1.001010101010e+40

I can see them being creating when I ftp into the site.  Someone is creating lots of them.  Each one of them totally wrecks that forum, so I have to delete them all.  Even if I take the forum down for a bit, they keep getting added when I bring it back up.

This is most annoying, and in all honesty I can't see an easy way around it.  The next version of Ikonboard (3.x) has its own security flaws, which would be exploited in the same way.  It would also take me hours to set up, and even longer to import the existing forum database since the formats are totally different.  This won't get done since we are currently working on Nakatomi, the Site Treasure Hunt, the Palm version and a couple of other things.  None of us have time for this.

We've never had this problem until now - so far we've had "one time only" hack attempts, and we've fixed them.  This appears to be a sustained attempt to bring the forums down.

If anyone knows of a fix for this specific bug (in Ikonboard 2.1.9b) then PLEASE get in touch with us.

Chris

[Death]

Can't get the IP addresses?

Personally, I use PHPBoard, haven't used any CGI powered boards since UBB 6.0 got me booted from my host...stupid thing was sucking CPU time.


(Edited by Death at 2:22 pm on July 3, 2002)