SOLVED Brief Outage Friday May 6, 2016 - 10pm - 1am

[burningmetal]

Sweet. It worked, Halo. Thanks man.

I cleared my Browser yesterday after I first saw the hacker message, just as a precaution. I didn't think to try it again.

[AsylumGuido]

I was going through withdrawals. I was even missing JP.

[Halo]

Originally Posted by AsylumGuido

I was going through withdrawals. I was even missing JP.

LOL

We're cleaning up the entire server now. If there are any hiccups, please excuse us and we'll get it fixed soon.

[B_Dub_Saint]

I think Forever Fan loaded up way to much cat porn and blew out the servers

[Crusader]

I am still having problems with the Saints forum. I have cleared my cache a bunch of times but I am still getting redirected to some other strange page. It is only the Saints forum thou.


Edit: Now it works

[jnormand]

Good hell! Whos running this dog and pony show?! 😂

[foreverfan]

Originally Posted by B_Dub_Saint

I think Forever Fan loaded up way to much cat porn and blew out the servers

I did it again?

[Halo]

There was no data breach. You don't have to change passwords and your account info is safe. This was a deface attempt which is a lot different than other attacks. These are usually carried out by a neophyte in the hacking community trying to make a reputation for himself or herself. The attack was against the server software and not against BNG. In fact, BNG was the least affected site. It was briefly redirected but no files were uploaded. They get root access then change a server file to redirect everything to their stupid website bragging about how awesome they are. It's childish, but good news is they really don't want to KILL the server.

They will upload garbage to infect active sites to keep them pointing to their site. Their goal isn't to take down the server but to keep it going... hijacked.... so it will point back at their stupid website. I've seen at least 100 of these.

By the time the redirect started I had already changed the root password back and I worked with a specialist to patch the security hole in the software. I really didn't have to restore any data. It took about 12 hours for a script to meticulously search for and hunt down all the crap they uploaded.

Once we actually found the problem hole and that hole could be patched, it was essentially over.
If we didn't patch the right hole, it could happen again, but fortunately I have backups and we'll continuously live to die another day. You would be shocked at how many businesses and websites do NOT keep adequate backups.

[SmashMouth]

Was it the "russians"? #confused