We're working on getting back the forum files -- a lot of the forum files were gone but the posts were still in the database so it doesn't look we lost anything.

There will probably be a ton of 404 errors when until we figure it all out -- so please bear with us.

In terms of the gameserver, that's going to take more work. Unlike our website, which is shared hosting with pretty good support -- we rent a private dedicated box in a datacenter that has limited hands-on support.

We've got a tech going out there now to hook up an IPKVM so I can get physical access, but the root SSH was hacked and changed -- so it could be a long ass time until we understand what the damage is and work to restore it.

At first glance, it looks as if a lot of files are missing -- I can't tell if the ones that are still there have been altered because I can't view the contents without privileges.

The IPKVM is annoying and slow (and expensive) so there's no real ETA on this -- the servers might come up and go down a few times before they're completely restored -- just a heads up.

12:50AM EST Update: Got the IPKVM all setup and I'm working on restoring what was lost -- luckily the OS seems to be fine -- it looks like its just the gameserver and the log files / admin files / etc. Will have another update in 20 - 30

Damn, what a fag. Hopefully it isn't incredibly to much work.

lol that was quick jim

Woo! Go go internet fixez!

Thanks for fixin the forums!

that was fucked up

Thanks Jim. Hopefully it's not too much work for yourself and the elders.

i always wondered what happend to gin

Wow... Thanks for bringing the community back up this quick Fomenta (and every1 else working with him on this!). This HOMOSEXUAL is definatly not welcome anymore here!

keep it up, i wish i could help but i don't even understand half of what you said, so the best i could do is wish you good luck on bringing everything back

pz n00bs!

well that was a nice bit of drama

what a F*CKING fagg0t.

Obviously I don't know exactly how this happened, but if you guys are allowing root logins over ssh that is a pretty bad idea. Doing that opens you up to dictionary attacks and other stuff.

I usually disable the root login completely and just grant sudo access to super users. That way there is no commonly known account on the system (i.e. root) that a user can try to attack. Another good thing you get from using sudo is that you can see which users executed config changes and such if you need to, if every super user is sharing the root account there is no way to know who is doing what.

Just food for thought.

♥ Fomenta for speedy recovery on forums

You are amazing. No exageration. Super Guido 4 to the max good sir. Thank you VERY VERY much!

Can we get a damage report on what Gin was actually able to get into? I'm wondering if Gin was able to get the e-mail addresses + passwords off the forums.

Good point Jet. Would be nice to know if the buttwipe got our email addresses at least. As far as passwords go PHPBB3 implements a proprietary hash method using /dev/urandom and md5, so the encryption is basically a one way transaction.

It is not possible to decrypt an MD5 encryption string, but there are lookup databases around you can plug an encrypted MD5 string into which can tell you what the originating password string was. With PHPBB3 this won't exactly work either, however, because the processing algorithm does some string manipulation before it executes the MD5 encryption. After it scrambles the original password it is highly unlikely that any lookup database will contain the source string used to produce the MD5 hash.

In any case, you should always be using unique passwords for any service you subscribe to...its not a good idea to use the same password for multiple sites.

that would be not good last thing i need is mexican porn links

The passwords are all hashed so no one has access to the plaintext passwords -- and the emails are all public just by hovering over the email button on the person's post. But it doesn't look like he got into anything other than the admin panel of the forums.

i missed it wtf happened?

We don't allow root logins over ssh unless we're using our web front-end to manage our gameservers in which case we enable it and then disable it afterwards.

Only two accounts have sudoer permissions -- the rest (which includes all the gameserver users) do not.