Page 1 of 4 1234 LastLast
Results 1 to 20 of 65

Thread: Site Hacked - again 2011-05-12

  1. #1
    It's all about the Light!
    Tech Admin
    Kym's Avatar
    Join Date
    15 Jun 2008
    Location
    Modbury, Adelaide
    Posts
    9,014

    Site Hacked - again 2011-05-12

    In summary... (deja vu)

    1. Were back !!

    2. I restored to the backup at 3.20am AEST today

    3. Many sites have been hacked, it was due to a 3rd party add-on that is very common. The add-on has been fixed.


    Edit:
    You need to re-vote and/or re-enter competitions, also re-post anything from this morning.

    Technical: It was an SQL injection attack (bug in the add-on product) that created a new Admin user, and went downhill from there.
    Last edited by Kym; 12-05-2011 at 4:55pm.
    regards, Kym Gallery Honest & Direct Constructive Critique Appreciated! ©
    Digital & film, Bits of glass covering 10mm to 500mm, and other stuff



  2. #2
    Arch-Σigmoid Ausphotography Regular ameerat42's Avatar
    Join Date
    18 Sep 2009
    Location
    Nthn Sydney
    Posts
    7,767

    Glad that's over!!!

    AP Team. Just wondering whether today's outage was as bad as the stupid video I got indicated???
    Am.
    Last edited by ameerat42; 05-05-2011 at 2:56pm.
    CC, Image editing OK.

  3. #3
    Amor fati! ving's Avatar
    Join Date
    28 Jun 2007
    Location
    St Helens Park
    Posts
    7,274
    go team!

  4. #4
    Loves All The Wildlife.. Mary Anne's Avatar
    Join Date
    19 Dec 2009
    Location
    Brisbane Southside.
    Posts
    24,416
    Great and
    My 52/2011 Challenge

    I shoot with And Cameras
    3 Macro Lenses plus others .... 1 Macro Lens and one other.

  5. #5
    Good to see it back up so quick!
    Last edited by mercho; 05-05-2011 at 3:01pm.
    Cheers, Brad




  6. #6
    Member
    Join Date
    24 Jun 2009
    Location
    Sydney
    Posts
    218
    I know some good Navy Seals that can sort the bas%$#ds out

  7. #7
    User of Photons
    Join Date
    16 Mar 2009
    Location
    South Coast
    Posts
    1,282
    I wondered what happened.
    .
    .
    .
    .
    f o t o w o r x

    People taking the time out to give me CC is always very much appreciated

  8. #8
    Ausphotography Addict geoffsta's Avatar
    Join Date
    07 May 2010
    Location
    Bruthen, East Gippsland
    Posts
    4,257
    I hope they didn't hack the site to gain info about members, like email addresses and stuff.
    Must have been the Hole family. Kayke Hole, Bung Hole, and Brother R. Sole.
    Geoff
    Honesty is best policy.
    CC is always welcome
    Nikon D3000 ... Nikon D90... Nikon D700 Various lenses, Home studio equipment and all the associated stuff
    Flickr

  9. #9
    It's all about the Light!
    Tech Admin
    Threadstarter
    Kym's Avatar
    Join Date
    15 Jun 2008
    Location
    Modbury, Adelaide
    Posts
    9,014
    Quote Originally Posted by geoffsta View Post
    I hope they didn't hack the site to gain info about members, like email addresses and stuff.
    Must have been the Hole family. Kayke Hole, Bung Hole, and Brother R. Sole.
    Yes, they may have, but we don't seem to have evidence that they did.

    Emails are the only thing of value.
    Passwords are one-way hashed so they can't get those.
    We don't store anything other that what you see in your profile.
    The shop does not store CC details.
    Last edited by Kym; 05-05-2011 at 3:24pm.

  10. #10
    All lines lead to Home ... arnica's Avatar
    Join Date
    12 Apr 2010
    Location
    Sydney
    Posts
    794
    I kept on refreshing ... wanting the site to be back up ....
    Regards,
    Phil

  11. #11
    Ausphotography Regular agb's Avatar
    Join Date
    15 Sep 2010
    Location
    Cleveland
    Posts
    763
    Is there any chance the users may have downloaded anything after viewing something on the site? I know I am possibly showing my ignorance of such matters, but I can cope with that. I hope.

  12. #12
    Ausphotography Veteran Analog6's Avatar
    Join Date
    20 Mar 2008
    Location
    Glenorchy
    Posts
    3,852
    Oxygen thieves. Thanks to all concerned for your great and speedy work restoring us.
    Odille

    “Can't keep my eyes from the circling sky”

    My Website | My Blog | Canon 1DsMkII | 40D | EF17-40mm f/4L USM | EF50mm f/1.8| Sigma 150-500mm F5-6.3 APO DG OS HSM | Mamiya 645DF | AF 35MM F3.5 D | AF 80MM F2.8 D | AF ULD 105-210MM F4.5 | Leaf Aptus 22 + tripods, flashes, filters etc

  13. #13
    Member
    Join Date
    08 Dec 2009
    Location
    Macleay Island
    Posts
    1,639
    Well done Kym, and all concerned. By coincidence the Westpac online site was down at the same time.
    Cheers, Paul.
    Canon 50D w BG l Nifty Fifty l Sigma 10-20 f4-5.6 l Sigma 24-70 f2.8 l EF 100mm f2.8 USM Macro l EF 300 f4L IS USM l EF 1.4X ll TC l 430EXII l Vanguard Alto Pro 263 w BH100 l Manfrotto 680B w 234RC l Lowepro Bags.l Sigma EM-140 Ring Flash.

  14. #14
    phew, that swedish song was on par with being rick rolled!
    Call me Dylan! www.everlookphotography.com | www.everlookphotography.wordpress.com | www.flickr.com/photos/dmtoh
    Canon EOS 5dmk3 : 17-40 F4 L, 70-200F2.8 canon L, 24-70mm canon L, Gitzo Safari +1178 ballhead. |Canon 5dmkII, 16-35mmF2.8 II L, Gitzo 2541 )
    Singh Ray/Hitech/Lee assorted filters, Z pro modified system Cokin holder
    Post : Lightroom 3.6 catalogue -> Export as 16bit TIFF, Edited CS5 -> resized for web.

  15. #15
    It's all about the Light!
    Tech Admin
    Threadstarter
    Kym's Avatar
    Join Date
    15 Jun 2008
    Location
    Modbury, Adelaide
    Posts
    9,014
    Quote Originally Posted by ameerat42 View Post
    AP Team. Just wondering whether today's outage was as bad as the stupid video I got indicated???
    Am.
    Quote Originally Posted by dtoh View Post
    phew, that swedish song was on par with being rick rolled!
    Yup the video was the goal of the exercise.

    From what is reported by other sites it was not very damaging. I did a full recovery, as it was the safest option.
    Some user accounts had passwords changes, account titles changed to "hacked by xxx", and the annoying video replacing several index files.
    Also all Admins were banned and a new false Admin account created. Rick, Cheryl and I have a backdoor key so that is pointless.
    I have changed key internal passwords.

  16. #16
    and I thought i'd been banned....
    CC is welcomed & appreciated

    5d Mark II

    Photography by nature is spiritual, considering it comes from the darkness to show the light.
    - Kevin Russo

  17. #17
    Administrator (Site Owner) ricktas's Avatar
    Join Date
    24 Jun 2007
    Location
    Hobart
    Posts
    13,224
    NOTE : all posts, threads, competition entries and votes placed this morning before the hack will no longer exist. Everything posted to AP between about 3.20am and the hack time, is gone. We have restored the site from the backup that happens around 3.20am (AEST) each day.

    Please feel free to re-post your threads and comments, re-enter your competition entries and vote again. This only affects those posts, threads, votes and entries since around 3.20am today. Anything done before that time has been restored.
    Last edited by ricktas; 05-05-2011 at 7:41pm.
    RICK
    Constructive Critique of my photographs is always appreciated
    Nikon, etc!

    www.tassiephotos.com

  18. #18
    Ausphotography Regular Ian Brewster's Avatar
    Join Date
    18 Nov 2010
    Location
    Brisbane
    Posts
    1,741
    Hi Kym,

    Your quick efforts much appreciated.

    With the competitions that closed yesterday 5th May, the Qualifying Vote is showing in orange. If I go to re-vote, I am advised that my vote has been recorded - thats fine. I presume some later date will now apply before this vote can move to the Final Vote status. Could we be advised what is planned/happening on these comps?

    Ian
    Sony Alpha SLT A57; Sony Zeiss 16-80mm f3.5-4.5 lens; Sigma 10-20mm UWA lens; converted Nikon 50mm f2.0 lens; Filters: ND4,ND8,ND1000, CP; Photoshop CS6. 82.7% of statistics are made up!




  19. #19
    Administrator (Site Owner) ricktas's Avatar
    Join Date
    24 Jun 2007
    Location
    Hobart
    Posts
    13,224
    Quote Originally Posted by Ian Brewster View Post
    Hi Kym,

    Your quick efforts much appreciated.

    With the competitions that closed yesterday 5th May, the Qualifying Vote is showing in orange. If I go to re-vote, I am advised that my vote has been recorded - thats fine. I presume some later date will now apply before this vote can move to the Final Vote status. Could we be advised what is planned/happening on these comps?

    Ian
    That is now fixed. With all that transpired yesterday, I wanted to make sure the site was stable and everything was fine before I moved the polls to final voting. By leaving them, it also allowed those that had voted and lost their votes, to re-vote. Final Polls are now up and running

  20. #20
    Cloud Gazer
    Join Date
    22 Jan 2011
    Location
    Goolwa
    Posts
    3,777
    Sorry Kym for inboxing you on this without actually reading what had happened. I thought I was going senile. Have to say sorry to someone else for accusing them of deleting their image and then re-posting the edited version.
    Monika
    Equipment: Canon 60D, Nikon FE, Nikkor 50mm 1.8 lens, Fancier FT-662A tripod, 18-55mm kit lens, 55-250mm kit lens, 30mm 1.4 Sigma lens, LR4, PS Elements
    Check out my Flickr photos ... http://www.flickr.com/photos/missmonny/
    ... and then you can like me on www.facebook.com/PhotoByMB or see my shop on http://www.redbubble.com/people/msmonny



Page 1 of 4 1234 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •