Hacked chit chat

[extacy]

We were hit by the hackers like most people and thanks to Block we're fine now. However being the kind of guy who cant leave well enough alone, I've done some diggin. I signed up for their forum under phony info of course. So, they have my ip, I'll just get a new one tomorrow if the ban me, not hard....

Anyway, I found this posted on there site.... notice the mention of tinyportal in there... anyone speak Turkish?

"kafam zoneye bozuldu deli oldum bende hackledim bunları
tinyportal aÇığı"

I will be harassing these guys over the next several weeks for anyone who wants to stop by and get a laugh it's www.imhatimi.com

Wait till I get ebolamonkeyman on them... (He helped me with the Nigerian 419 Scam)

Just to know....

any thoughts?

THX
X

[WSA]

"kafam zoneye bozuldu deli oldum bende hackledim bunları
tinyportal aÇığı"

If I am reading this correctly, it says something like "hey kafam, this bloczone thing is getting old.  Bend my hacking bunghole with TinyPortal, is that cool?"

I'm kind of rusty but that should be the jist of it. 

[extacy]

 

Good one WSA!!!!

[G6Cad]

I will be harassing these guys over the next several weeks for anyone who wants to stop by and get a laugh it's www.imhatimi.com

Wait till I get ebolamonkeyman on them... (He helped me with the Nigerian 419 Scam)

Just to know....

any thoughts?

Is that really a good idea?
After have browsed their site there, they seem to live 24/7 on just hack as many things and sites they can.
If you start to through them the ball back in every way you do, they will just come on even harder, and this time they might just go further and find even more ways that do even more harm then the exploit so far.

IMHO i think the best way is just to do what we do now, They find the mistakes and holes here, Bloc fix them, we have a go again. So mess with people that do this for fun isent a good way. Thats what I think about it.
Give them a reason to continue find ways to hack TP, and they will do just so.

[Techdomain]

Is there a list somewhere of what in TP/SMF needs to be chmoded to what? IE what can we tighten up, and what should remain writeable?

[G6Cad]

If you use the latest patch that Bloc released yesterday, you dont have to do anything more then just upload and replace 3 files from the patch

[Techdomain]

I wasnt referring to the shoutbox so much - I have that one nicely locked away in the arcade only... but I just want to make sure that the rest of my site is secure.

call me a nut, but if I can avoid any other trouble, then that would be nice!

[gerrymo]

I wasnt referring to the shoutbox so much - I have that one nicely locked away in the arcade only... but I just want to make sure that the rest of my site is secure.

call me a nut, but if I can avoid any other trouble, then that would be nice!

You can set the basic files that need to be 777 through the admin area.

One thing I do, is change settings.php to 644 after its all set up. Then when you go to the server settings in Admin, it's greyed out. That way, nothing on it can be changed, even in admin. You just need to remember to change it back to make any changes needed. (It also helps stop my non techy co admins making a mess of things by mistake. LOL ).

[Techdomain]

good plan

[extacy]

Is that really a good idea?
After have browsed their site there, they seem to live 24/7 on just hack as many things and sites they can.
If you start to through them the ball back in every way you do, they will just come on even harder, and this time they might just go further and find even more ways that do even more harm then the exploit so far.

IMHO i think the best way is just to do what we do now, They find the mistakes and holes here, Bloc fix them, we have a go again. So mess with people that do this for fun isent a good way. Thats what I think about it.
Give them a reason to continue find ways to hack TP, and they will do just so.

I respect your opinion but myself on the other hand from the rough streets of New Orleans deal with an attack a bit differently.

What I have done so far.

They use adsence, so I emailed Google, their reply is below....
I emailed there host and made them aware that they were hosting a wanna be hacker site. no reply yet...
I spent the night last night keeping them busy trying to get rid of me, so this is less time they spent hacking our sites. They cant even keep their site "muck free" I can only imagine if I had any "Real" coding skills, the damage I could do....



We've received your email alerting us to a potential policy violation on a
site displaying Google ads. Although we're unable to respond to individual
reports, we have forwarded your email to our team of specialists for
further investigation.

We appreciate your help in maintaining the quality of the AdSense program.


Sincerely,

The Google AdSense Team


I will note that I have in no way connected my actions to TP or the members of this forum or SMF for that matter. Also, I believe enough in my ability to fix anything they could possibly do to any of my 5 sites, that I don't fear them.

You go after their hosting and their $ (Adsence) because they were IMO to stupid to cover there tracks and they will loose the will to fight. Or not, which ever works for me..

THX
X

edit: I love it!!!!  Your little ip "you Are" thingy has me as an ip from south korea... Looks like I'm ready for round 2 with these guys.....lol