LWJGL Forum

Programming => Lightweight Java Gaming Library => Topic started by: riflemon on March 16, 2005, 04:52:31

Title: Puppygames Forums hacked.
Post by: riflemon on March 16, 2005, 04:52:31
could somebody let mr. prince know? I got some "I hacked the forum" email.
It seems to affect solely the Puppygames forums, not the LWJGL ones. It's almost 5 am GMT so I just couldn't phone in. I'll try to reach him first thing in the morning.

I'm afraid there's nothing in the email headers that will help since it seems to originate on the forums machines, however, there's a SpamAssasin header listing an IP:

24.200.4.121

Which I haven't been able to locate (thru RIPE). I suspect it's a red herring anyway. It'd be interesting to get a hold of the web server logs.
Title: Puppygames Forums hacked.
Post by: Matzon on March 16, 2005, 06:20:55
yeah - got the mail too, man he'll be pissed!
afaik, lwjgl uses the same forum version...
Title: Puppygames Forums hacked.
Post by: riflemon on March 16, 2005, 06:28:32
Not just the same version, but the same DB as well. I'm just concerned about losing the forums. They look gone on puppygames.
Title: Puppygames Forums hacked.
Post by: EgonOlsen on March 16, 2005, 06:34:53
This forum is using 2.0.4. Current is 2.0.13...i strongly suggest to upgrade!!
Title: Puppygames Forums hacked.
Post by: Matzon on March 16, 2005, 07:23:22
think we'll do an upgrade today, or asap - I took a db copy this morning, just to be on the safe side
Title: Puppygames Forums hacked.
Post by: Matzon on March 16, 2005, 08:44:19
elias has closed the presumed admin rights bug as described here:
http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=267563
we have also applied other fixes in the past, so the 2.0.4 version string isn't all that correct.

Elias will be doing an overhaul of the server that hosts lwjgl.org, and once that is done, I'll upgrade the forum to latest phpbb.
Title: Re: Puppygames Forums hacked.
Post by: CaptainJester on March 16, 2005, 12:52:17
Quote from: "riflemon"could somebody let mr. prince know? I got some "I hacked the forum" email.
It seems to affect solely the Puppygames forums, not the LWJGL ones. It's almost 5 am GMT so I just couldn't phone in. I'll try to reach him first thing in the morning.

I'm afraid there's nothing in the email headers that will help since it seems to originate on the forums machines, however, there's a SpamAssasin header listing an IP:

24.200.4.121

Which I haven't been able to locate (thru RIPE). I suspect it's a red herring anyway. It'd be interesting to get a hold of the web server logs.
He knows.  He posted on JavaGaming.org about it.