Page 1 of 2
Some bunch of #%&$s hacked our website
Posted: Mon Nov 22, 2010 5:42 pm
by Javaness
Some rotten toads hacked the IGA website.
Why do people have to do that. I have had to spend 3 hours now getting it cleaned and reinstalled etc before it can be unsuspended.
RAGE
PS: Anyone know where to find the A-Team?
Re: Some bunch of #%&$s hacked our website
Posted: Tue Nov 23, 2010 2:27 am
by kirkmc
Javaness wrote:Some rotten toads hacked the IGA website.
Why do people have to do that. I have had to spend 3 hours now getting it cleaned and reinstalled etc before it can be unsuspended.
RAGE
PS: Anyone know where to find the A-Team?
3 hours? You don't have backups? If you back up regularly, it should take you a very short time to reload everything. Just sayin'...
Re: Some bunch of #%&$s hacked our website
Posted: Tue Nov 23, 2010 2:42 am
by cdybeijing
kirkmc wrote:Javaness wrote:Some rotten toads hacked the IGA website.
Why do people have to do that. I have had to spend 3 hours now getting it cleaned and reinstalled etc before it can be unsuspended.
RAGE
PS: Anyone know where to find the A-Team?
3 hours? You don't have backups? If you back up regularly, it should take you a very short time to reload everything. Just sayin'...
Kick a man while he's down, why don't you?!

Re: Some bunch of #%&$s hacked our website
Posted: Tue Nov 23, 2010 3:56 am
by TMark
Kicking a man when he is up is rather difficult; the best time is when he down. Backup early, backup often. Any computer professional should know that.
Best wishes.
Re: Some bunch of #%&$s hacked our website
Posted: Tue Nov 23, 2010 6:59 am
by Fedya
kirkmc wrote:
3 hours? You don't have backups? If you back up regularly, it should take you a very short time to reload everything. Just sayin'...
I'm surprised you didn't tell him this wouldn't have happened if he'd been using a Mac.

Re: Some bunch of #%&$s hacked our website
Posted: Tue Nov 23, 2010 8:00 am
by kirkmc
Fedya wrote:kirkmc wrote:
3 hours? You don't have backups? If you back up regularly, it should take you a very short time to reload everything. Just sayin'...
I'm surprised you didn't tell him this wouldn't have happened if he'd been using a Mac.

Nothing to do with Macs. I manage a bunch of web sites and forums (all on hosted Linux servers). I have daily backups of the SQL databases, and regular backups of all files. If something like this happens, just delete everything and reload the backups.
Of course, you need to find how the hackers got in, which is a more serious problem. If you're using a CMS, you look for vulnerabilities; if not, there's a problem with your host.
Re: Some bunch of #%&$s hacked our website
Posted: Tue Nov 23, 2010 10:23 am
by vash3g
AGA is looking for a new webmaster, maybe they can help you find one too... ^_^
Re: Some bunch of #%&$s hacked our website
Posted: Tue Nov 23, 2010 10:57 am
by wms
And the three hours thing might mean with backups. KGS does a nightly backup to my server at home, but I have several gigabytes of database and a few hundred GB of game records. Plus there's a lot of configuration involved. If I had to start from a freshly formatted disk with just the OS (which is always best after being hacked), it would probably take me a solid day of hard work to get things working, then another day or two to get all the games put back.
Re: Some bunch of #%&$s hacked our website
Posted: Tue Nov 23, 2010 11:25 am
by Numsgil
wms wrote:but I have several gigabytes of database and a few hundred GB of game records.
Are the game records not stored in a database? I ask purely from curiosity

Re: Some bunch of #%&$s hacked our website
Posted: Tue Nov 23, 2010 12:21 pm
by Javaness
3 hours is roughly the entire timeframe for the trouble.
Discovering the website has some problem, figuring out what on earth is going on, finding out how to actually get some support from your hosting company, working out what to do (because it is not my job), doing it..
Re: Some bunch of #%&$s hacked our website
Posted: Tue Nov 23, 2010 1:00 pm
by wms
Numsgil wrote:wms wrote:but I have several gigabytes of database and a few hundred GB of game records.
Are the game records not stored in a database? I ask purely from curiosity

No, they are not. Multi-kbyte blocks of data can go into a database as BLOBs or TEXTs, but usually a plain file system is more efficient (especially if the files are rewritten frequently, as is the case for in-play KGS game records). After all, a file system *IS* a database, in that it maps file names to streams of data, and it does that extremely efficiently.
In addition to the runtime efficiency issues, having them as separate files makes it a lot easier to work with the backups; backing up 40 million smallish files, only a few thousand of which change or get added every day, is pretty easy. Backing up a 350GB database is a lot more effort.
Re: Some bunch of #%&$s hacked our website
Posted: Wed Nov 24, 2010 7:21 pm
by wessanenoctupus
hey there Mr.WMS
could you put up a torrent of the KGS database

it might be fun to look at.
Re: Some bunch of #%&$s hacked our website
Posted: Thu Nov 25, 2010 1:57 am
by kirkmc
wessanenoctupus wrote:hey there Mr.WMS
could you put up a torrent of the KGS database

it might be fun to look at.
"It might be fun?" 350 GB to download just because "it might be fun"? Geez...
Re: Some bunch of #%&$s hacked our website
Posted: Thu Nov 25, 2010 5:20 am
by Mehmet
How is it easy to hack a web site? Do you have a firewall?
I'm not a expert but do your web site use other than 8080 port? Close any other unused ports.
Re: Some bunch of #%&$s hacked our website
Posted: Thu Nov 25, 2010 5:30 am
by Li Kao
Mehmet wrote:How is it easy to hack a web site? Do you have a firewall?
I'm not a expert but do your web site use other than 8080 port? Close any other unused ports.
One of the most common types of attack is exploiting a known whole in standard web-applications like CMS, forums,...