Log in

View Full Version : A Welcome To Adam, And Patch Your phpBB Box!

Janak Parekh
11-22-2004, 07:00 PM
First off, please join me in welcoming our new sysadmin, Adam Lynch. He's going to be joining Jorj Bauer, our existing sysadmin, in optimizing our box and making sure it works smoothly. :)<br /><br />Second, I'd like to apologize for the downtime this morning. We woke up and noticed something was wrong when Jason's account was renamed on Smartphone Thoughts. 8O Thanks to Jorj and Adam in helping us track down what exactly happened. (What a day to be a new sysadmin. :lol:)<br /><br />For those of you curious and for those of you who run your own webboards: if you use phpBB, you should take note of this phpBB <a href="http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=240513">exploit notice</a> and <a href="http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=240636">latest update</a> and install it immediately. There are hackers on the prowl today breaking into boxes all over the place and they're installing backdoors as well.
Pat Logsdon
11-22-2004, 07:06 PM
First off, please join me in welcoming our new sysadmin, Adam Lynch. He's going to be joining Jorj Bauer, our existing sysadmin, in optimizing our box and making sure it works smoothly. :)
Welcome, Adam!

(What a day to be a new sysadmin. :lol:)
On the positive side, a trial by fire makes one less likely to be burned in the future. ;) Good job, guys!
Mitch D
11-22-2004, 07:51 PM
Welcome Adam,

May the PPC gremlins have mercey on you sole!

:!:
JvanEkris
11-22-2004, 09:20 PM
Welcome,

Please watch good over the box, tell it is a nice machine, DO NOT KICK IT, and do not put pizza in it.....

Jaap
OSUKid7
11-22-2004, 09:22 PM
Welcome Adam. :D So SMT was hacked? or rather exploited? Ah what a world we're coming to. Glad to hear everything's back now though. :) Best of luck in the future.
r90a22
11-22-2004, 10:20 PM
Welcome, AdAm
Jason Dunn
11-22-2004, 10:58 PM
You have NO idea how happy I am to have Adam on board. :mrgreen:
Jonathon Watkins
11-23-2004, 12:52 AM
Indeed. Good to have you on board Adam.

Reminds me of my first day at a previous job as tech support - the day the 'I Love You' virus hit. 8O :lol:
Mike Temporale
11-23-2004, 03:46 AM
Welcome Adam! I'm sorry we had you up and running on the first day. :)

Thanks to everyone that got their hands dirty this morning. Take a trip to Starbucks on me. :mrgreen:
Godsongz
11-23-2004, 04:07 AM
Looks like PPCT is still based on 2.0.8 which isn't vulnerable to that exploit, but SPT was on 2.0.10? DMT too maybe?

I had just finished updating one of my heavily modded sites to 2.0.10 the day before the exploit was announced. Ugh :) Thankfully its not too big of an update to jump to 2.0.11, only took me about 15 minutes.

Welcome Adam!
Janak Parekh
11-23-2004, 04:23 AM
Looks like PPCT is still based on 2.0.8 which isn't vulnerable to that exploit, but SPT was on 2.0.10? DMT too maybe?
2.0.8 was most definitely vulnerable - we patched it by hand for the moment. Hopefully the TM sites will all be up to 2.0.11 by midweek.

--janak
Jeff Rutledge
11-23-2004, 04:49 AM
Welcome aboard Adam!
maximus
11-23-2004, 07:02 AM
I used to think that hacker is the coolest job on earth. uh uh.
ctmagnus
11-23-2004, 07:06 AM
Yep. That would belong to the Antarctic scientists. ;)
wocket
11-23-2004, 10:41 AM
Welcome,

Please watch good over the box, tell it is a nice machine, DO NOT KICK IT, and do not put pizza in it.....

Jaap

I kick our server at least once a day to get it to stop making a clunking noises :devilboy: Not that I would recomend that to everyone you really have to know the right place to do it (if there is one).

Welcome Adam to the thoughts world :!:
Godsongz
11-23-2004, 01:34 PM
2.0.8 was most definitely vulnerable - we patched it by hand for the moment. Hopefully the TM sites will all be up to 2.0.11 by midweek.

Really? I misunderstood the notice then, I thought it was strictly a 2.0.10 vulnerability.
Darius Wey
11-23-2004, 02:23 PM
Howdy Adam! 8)
Janak Parekh
11-23-2004, 04:37 PM
Really? I misunderstood the notice then, I thought it was strictly a 2.0.10 vulnerability.
Nope. We had strong evidence to show that someone was attempting (and succeeding to an extent) to exploit it when it was nipped in the bud. It's possible it was worse in 2.0.10?

--janak
Janak Parekh
11-23-2004, 04:38 PM
I used to think that hacker is the coolest job on earth. uh uh.
Well, there are multiple kinds of hackers. To an extent, I "hack" (code) programs out for fun -- but they're not malicious. Some people refer to the malicious kind as "crackers", but that term really hasn't stuck.

--janak
Godsongz
11-23-2004, 07:06 PM
I used to think that hacker is the coolest job on earth. uh uh.
Well, there are multiple kinds of hackers. To an extent, I "hack" (code) programs out for fun -- but they're not malicious. Some people refer to the malicious kind as "crackers", but that term really hasn't stuck.

--janak

I recently hired a group of "white-hat hackers", though they actually prefer the term Samurai (definition at http://www.wordspy.com/words/samurai.asp)

hehehe a geek is a geek is a geek