Stevie D
Vault Cornwall my ansome
Looks like the hackers have been at DAC. At the time of writing, if you go to http://www.duckandcover.cx you get a white screen with H4ck3rsBr Group in the top left.
DAC Hacked?
- Thread starter Stevie D
- Start date
Yep, looks like haxxored to me.
Unless Teatime is trying something new.
Unless Teatime is trying something new.
King of Creation
Vault Fossil
Yeah...we've apparently been hacked. Very childish, if you ask me.
Wow, how did they do it?
The word, people, is cracked, not hacked. Well, kind of. Hackers are, historically, the people tending to the servers and all that, they're the ones toying around with PCs, sadly anyone labelling himself a hacker is seen as someone who cracks security and PCs, instead of someone who likes to toy around with PCs.
Anyway, *shrugs*, shit happens, no security system, aside from unplugging, is failsafe.
Anyway, *shrugs*, shit happens, no security system, aside from unplugging, is failsafe.
King of Creation
Vault Fossil
I'm not really sure of all the details. I'm home for the week, so I don't have access to everything (passwords, programs, and such being on my computer at school), so I'm not sure how deep the damage goes. I won't until about Monday. Teatime has been trying to sort through the damage as best he can right now. We'll hopefully get over it and be operational again soon.
Jesus Christ.
Always remember to keep a copy of all files you got on your website on a local harddrive. If someone replaces one you just overwrite it with your local copy.
I suppose you got "hacked" (technically you got "hacked" by a cracker but most people don't have the slightest clue anyway) through some pigeon hole in one of your upload scripts.
Usually people become vulnerable by using upload scripts without checking for legal values.
Technically you can't hack into a website, you can only exploit its lack of input validation mechanisms
As for the difference between hackers and crackers:
Hackers are problem solvers. The kind of people that takes anything you give them apart in order to try to find out how it works and how it can be improved. Hackers got strict ethics and are commonly found in open source communities.
Crackers are hackers without ethics. Their intention is not improvment but destruction. They will hack into a website and deface it (what happend to DAC) or ransack the DB just to show off their skills or to sabotage others' work.
Another kind of crackers are hackers with loose ethics who deface websites but leave the content intact. They point out security holes by exploiting them, but they don't cause any direct harm.
Then there's script kiddies who are would-be crackers utilizing not some actual knowledge but just pre-written tools that do the work for them. They are what you usually find on IRC.
The verbs are less specific. You "hack into" a system and as a result the website is "hacked". However you could also say you "crack" a system, which usually has a subtle undertone implying that the cracker did something respectworthy tho (which usually isn't the case) IMO.
Lastly there's the problem that the media has been using the term "hacker" when talking about crackers ever since the 80s or so. That's usually where a lot of the misunderstandings come from.
For more and more accurate information just look up the definitions from the Jargon File by searching at dict.org.
Always remember to keep a copy of all files you got on your website on a local harddrive. If someone replaces one you just overwrite it with your local copy.
I suppose you got "hacked" (technically you got "hacked" by a cracker but most people don't have the slightest clue anyway) through some pigeon hole in one of your upload scripts.
Usually people become vulnerable by using upload scripts without checking for legal values.
Technically you can't hack into a website, you can only exploit its lack of input validation mechanisms
As for the difference between hackers and crackers:
Hackers are problem solvers. The kind of people that takes anything you give them apart in order to try to find out how it works and how it can be improved. Hackers got strict ethics and are commonly found in open source communities.
Crackers are hackers without ethics. Their intention is not improvment but destruction. They will hack into a website and deface it (what happend to DAC) or ransack the DB just to show off their skills or to sabotage others' work.
Another kind of crackers are hackers with loose ethics who deface websites but leave the content intact. They point out security holes by exploiting them, but they don't cause any direct harm.
Then there's script kiddies who are would-be crackers utilizing not some actual knowledge but just pre-written tools that do the work for them. They are what you usually find on IRC.
The verbs are less specific. You "hack into" a system and as a result the website is "hacked". However you could also say you "crack" a system, which usually has a subtle undertone implying that the cracker did something respectworthy tho (which usually isn't the case) IMO.
Lastly there's the problem that the media has been using the term "hacker" when talking about crackers ever since the 80s or so. That's usually where a lot of the misunderstandings come from.
For more and more accurate information just look up the definitions from the Jargon File by searching at dict.org.
King of Creation
Vault Fossil
Ashmo said:
Luckily Teatime, myself, and DU I believe all have complete backups.
I mean, just last week I got a mail from the guy who took over the website I worked on for a company and the guy asked me if I could upload all the files again because he accidentally fucked the whole thing up.
Backups are highly valuable.
Backups are highly valuable.
King of Creation said:
I'm still amazed that the site isn't up yet
I suppose they just like the way it looks right now.
Maybe you should make a template like that? I dig the black on white acti- ... stuff.
Too much porn for me. I need a hobbie or something.
Maybe you should make a template like that? I dig the black on white acti- ... stuff.
Too much porn for me. I need a hobbie or something.
King of Creation
Vault Fossil
Apparently, DU hasn't logged on yet and doesn't know what's happened, and Teatime doesn't have the all-imporant index.php file. So we're stuck either until DU logs in, or until Monday when I get back to my computer.Odin said:I'm still amazed that the site isn't up yet
Next victim is RPGDot...
PsychoSniper
So Old I'm Losing Radiation Signs
Predicting or are they down ?
Better backup Odin, if theyre getting hit then NMAs a target (unless its an NMAer)
Better backup Odin, if theyre getting hit then NMAs a target (unless its an NMAer)
The Vault Dweller
always looking for water.
PsychoSniper said:
I sense a strong feeling of foreboding in those words...who would do it though if it was someone from here?
Would probably have to be someone who knows code which is unfortunately 1/4 the people here.
>_>,
The Vault Dweller
PsychoSniper
So Old I'm Losing Radiation Signs
Theyd have to know code ?
Im safe then, I barley knew enough html to post news articles when I was at DAC.
Im safe then, I barley knew enough html to post news articles when I was at DAC.
script kiddies could pull this off...
but this is probably a cracker, although i can't see the point in taking down those specific sites (DAC & several V:tM-B sites).
the dude is probably compensating for something...
but this is probably a cracker, although i can't see the point in taking down those specific sites (DAC & several V:tM-B sites).
the dude is probably compensating for something...
PsychoSniper
So Old I'm Losing Radiation Signs
It could be Herve.......... He now realizes that Troika's got more chance of a succesful MMO than he does.(wait, my cat has more chance of a succesful MMO licking her ass than herve does.)
I'm betting we're a target, so I've taken all precautions I can. And I already have a backup of the site