wait until I tell you about the malicious code I found inserted at the home page only shown to searchengine indexerszian wrote: Nice. Sorta.
Not nice that you found it. But that you found it.
dequi wrote:- phpBB database last backup was on 8/16/2013 at 9:19:19 PM
- mediaWiki database last backup was on (never)
And this, folks, is why we need someone who knows what they're doing in charge.dequi wrote:wait until I tell you about the malicious code I found inserted at the home page only shown to searchengine indexers
That's the keys to the kingdom. If any of you are reusing your forum password on other sites, you'd be well advised to update it at those other sites (and not here!) as soon as possible. Not only does somebody who's been here a week now have all of your passwords, so does everyone who's ever broken into the server under zian's reign, which we now know is at least one person (and probably more).dequi wrote:- phpBB database last backup was on 8/16/2013 at 9:19:19 PM
- mediaWiki database last backup was on (never)
A full offline backup of all files and databases is now sorted. We can restore if needed.
jachin99 wrote:I'll chime in here just from a forum user and fan's perspective. Kgschlosser helps out a lot around the forums, and he'll even setup remote sessions to help users. If you browse a lot of the topics around here, he is probably in around half of them helping people out. He has helped me personally, and I think from a customer service view point, he is someone I would want to have around helping out. Just my 2 cents.
Yes, apparently I can do a lot more than I expected, mind you, I never asked.blackwind wrote:That's the keys to the kingdom.
Although I can assure, you that I have the best of intentions:blackwind wrote:If any of you are reusing your forum password on other sites, you'd be well advised to update it at those other sites (and not here!) as soon as possible. Not only does somebody who's been here a week now have all of your passwords
As I say, I suspect that's probably the case, but ultimately, it's been a week. At this stage, who really knows?dequi wrote:Although I can assure, you that I have the best of intentions:
That's true, but irrelevant for all but the most complex passwords. If you haven't heard of rainbow tables or GPU password crackers, rest assured that the people breaking in have. They'll be hashed, but everyone with a copy of the database has the ability to gain access to your passwords in mere seconds if they so desire. And zian isn't just giving this stuff away to anyone who asks -- he's giving it away to people who haven't asked. If that doesn't frighten you, folks, it should.- I haven't checked yet but passwords at the server side should be always stored in a one-way hash and not clear in text. So hopefully I don't have them. But I'll check and keep everyone updated.
True, only I know.blackwind wrote:...but ultimately, it's been a week. At this stage, who really knows?
True again, no reason to trust me! The only thing everyone can ever (and in my opinion MUST DO) is use complex passwords and NEVER reuse them elsewhere.blackwind wrote:...but irrelevant for all but the most complex passwords. If you haven't heard of rainbow tables or GPU password crackers, rest assured that the people breaking in have. They'll be hashed, but everyone with a copy of the database has the ability to gain access to your passwords in mere seconds.
I've been raised to interpret if someone says it can't be done like I don't know how to do it, maybe you do?blackwind wrote:...though, we'll forever remain at this standstill. It's regrettable, but again, it's out of my hands.
Really hope you reconsider your ultimatum.Now we know... Where they go...zian wrote: I'm not even sure where those donations go.
I just donated $5 to somebody. lol
Thanks again.
We only needed donations for hosting etc that first time. Way back during "transition". Once we got Google AdSence here at the forum that income covers all the website expenses. Plus sum.krambriw wrote:But how do we then finance hosting and domain name fees? Wasn't that one of the purposes? I remember I donated once to keep the domain & hosting alive. (For personal donation, nobody ever donated anything to me while I had such a pay pal button, regardless of the value the plugin added or time I spent in developing. So I gave up and removed it...)
As donations are not coming to the project, I removed them from all headers and the contributing page in the docs until we get this sorted.zian wrote: 8KK50283blahblah5382F
Seller info
Lars-Peter Blah
[email protected]
Note to Lars-Peter Blah
Here is $5 Who gets it? Ian
Your purchase
EventGhost Project Donation$5.00[/i]
Life isn't fair. loldequi wrote: As for a personalized donate button I'am with krambriw on that one. It will leave contributors to the GitHub code in the cold, or those that take the time to write documentation. The ones that work behind the scenes...
