These forums were hacked this morning

[Joe Siegler]

Why do the forums look this way? Well...

This morning around 3AM or so (Dallas time), these forums were hacked. Apparently, a vulnerability in the vB codebase we were using allowed whoever did this to insert their own code into the sql database which redirected any attempt to use the boards to their hack message. Played a song about Muslims and Baghdad and something. No idea if the Muslim stuff was real (for the love of God, we don't need a Muslim debate here). But I've reversed all that stuff, and we should be good to go going forward. I've also brought the code up to date, which is not vulnerable to the same problem.

They also altered my user account somewhat, but I've repaired that damage, and changed my password. But it made me think...

I STRONGLY URGE YOU TO CHANGE YOUR PASSWORD FOR HERE NOW!

While I do not believe they have access to everyone's passwords, I cannot for a 100% fact say whether they did or not. I'm fairly sure they don't have it, but still.. With that in mind, I urge you to change your password, and I may institute a password policy here because of this. Meaning you will be forced to change your password from time to time.

Anyway, the reason the forums look this way is that part of what was corrupted was the template set for the forums. I deleted all the templates in use to make sure the malicious code was gone, and created a new set from the "default look", which is what this pastel-ly thing is. This is what vB looks like "out of the box". I will get the custom skin back up here in a few days, I have some other stuff I need to deal with first, but the old look we had will return. In the meantime, at least the forums work again.

If you notice any problems regarding user accounts, or irregularities, please post them here.

PLEASE DON'T ASK WHY THE FORUMS LOOK LIKE THIS - I'VE HAD ENOUGH AGGRAVATION OVER THIS, I DON'T NEED PEOPLE IGNORING MY EXPLANATION AND ASKING ANYWAY - THANK YOU!

[IommiRules]

I tried to log in this morning only to find some "bug" or scorpion kinda shit on my screen. It said you had been hacked by some f-ing loser. Metaphorically, I'd say if you find the guys that did this- well, paybacks are a bitch.

PLEASE everyone. If for whatever reason these hackers put up pro/anti Muslim crap, or Christian, or Jew, or Hindu Or Buddhist, or left handed Blonde Nun's on Unicycles- gang let's promise each other to NEVER bring that stuff on to Joe's Forum, OK? Joe, I make you that promise right now.

On another front, if for any reason these hackers cost you any money, we will help you recover. Just set up a PayPal account when you are re-secured and we will contribute. You provide a community for people from Scandanavia, to the UK, Eastern Europe, Portugal, France, Iran, North America, South America, Australia and probably more I'm not remembering right now. We thank you. Seriously, if you need financial assistance- we're here.

[Joe Siegler]

I tried to log in this morning only to find some "bug" or scorpion kinda shit on my screen.

Yeah, that was their hack message.

On another front, if for any reason these hackers cost you any money, we will help you recover. Just set up a PayPal account when you are re-secured and we will contribute. You provide a community for people from Scandanavia, to the UK, Eastern Europe, Portugal, France, Iran, North America, South America, Australia and probably more I'm not remembering right now. We thank you. Seriously, if you need financial assistance- we're here.

No, it shouldn't be a financial loss at all. Just my wasted time fixing it all. Thanks for the thought, though.

[Charger]

I saw this shit earlier today as well...Goddamn hackers suck ass.

I hope you'll get everything sorted Joe, I know this is a huge pain in the ass!

[Axeman77]

Gutted, we should all team together at a place and get pictures of the devil and crosses and attack them

But this is really bad.

Do you think it will go back to normal Joe?

[Joe Siegler]

Do you think it will go back to normal Joe?

Read the first message.

[Axeman77]

Read the first message.

Oh yeah... Thanks.

[BunnyPink]

I STRONGLY URGE YOU TO CHANGE YOUR PASSWORD FOR HERE NOW![/B]

Password changed. Thanks.

[RedZero]

Please don't make us change the passwords at regular intervals. We already have enough passwords on our lives and having to change it all the time is really a hassle. That being said, I just updated mine. We should be good now.

[Sabbathfan78]

I changed my password yesterday. Hopefully everything can get back to normal. I don't know much about computers but this seems like a terrible pain in the ass.

[fondula]

Of greater importance than changing your password to this forum may be to change your password for the email account attached to your profile here if you use the same password in both places.
http://xkcd.com/792/

[Joe Siegler]

Of greater importance than changing your password to this forum may be to change your password for the email account attached to your profile here if you use the same password in both places.
http://xkcd.com/792/

Using the same password in more than one place is "Password stupidity #1". Shouldn't be done. Would also be the primary reason I'd get into password changing.

[fondula]

Using the same password in more than one place is "Password stupidity #1". Shouldn't be done. Would also be the primary reason I'd get into password changing.

Agreed.... but I thought people should be reminded of this which is why I posted it. Having one's google (or hotmail, etc) account compromised would be WAY WORSE than having one's black-sabbath.com forum account compromised.
At the very least, I'd bet we all have more spam to look forward to in our inboxes.

[Zee]

Changed my password as per request. Hope the forum goes back to looking like normal again, this generic look is too weird.

[DiosSword]

Kudos to you Joe.

I have a degree in Computer Information Systems and I was an IT puke for many years.

The advice you gave is exactly what I would have: change your password.

My boss and I used to say that hackers should have their hands amputated.

Hang in, stay strong.

[Trogg]

Changed my password, Joe.

[Neon_Knight]

Changed my password... hope these attacks doesn't happen any more.

[Joe Siegler]

I'll be fixing the "look" this weekend sometime.

[IommiRules]

Used this site getting hacked as a wake up call and change all of my passwords. (F-ing 34 total passwords- I had the same one for everything. HURRAY for Lifelock, huh?) Thanks for letting us play while you do all the work Joe.

[Joe Siegler]

The skin is back. Sorry it took so long, I got held up with some personal crap.

I had to recreate my modifications from scratch, so let me know if anything looks wrong. Tkx.

[DISCMAN1969]

Thanks Joe for all your hard work at getting our forums back to how we like them. Without doubt this is the best web site and best forum I have been on. Thanks again.

[Sabbathman]

Thanks Joe, good job in bringing back "the black"!!!

Honestly, considering the inspirations behind & the wealth of this site, I got to say I felt pretty bleak when the forums were "defaulted"...luckily "the black" is back!!!

[IommiRules]

Thanks Joe!!!!

[Metal Priest]

Thanks Joe!

[Charger]

Thanks a million Joe for taking the time to fix this up again!

[The Butt]

Thanks Joe. Though I was probably one of the few that didn't mind the white skin, and maybe even sorta preferred it. Would there be an option in the future to get the default skin in the list of skins?

Also, you said to let you know if anything was different... everything I type in the quick reply box is bold. Just letting you know. No big deal but still.

[Joe Siegler]

Thanks Joe. Though I was probably one of the few that didn't mind the white skin, and maybe even sorta preferred it. Would there be an option in the future to get the default skin in the list of skins?

Yeah, I can turn that on if you want. I just didn't see why anyone would prefer that.

Edit: You should be able to choose the "default style" if you want - it's in your profile.

Also, you said to let you know if anything was different... everything I type in the quick reply box is bold. Just letting you know. No big deal but still.

K. Tkx. I'll look into it.

Edit 2: Bold should be gone now.

[The Butt]

Ah, okay, thank you. I just didn't remember it being there before the hacking.

Thank you though!

[nunoni]

forum's looking goooooood! Thanks!

[Axeman77]

Thanks so much, this just shows how much Joe puts into this website, i wasn't posting much when it had the "the White skin" it looked so bleak, my heart wasn't it lol I never thought we'd have the proper "skin" back, thanks Joe!

[Joe Siegler]

I never thought we'd have the proper "skin" back

Why? Why would you say that?

[Axeman77]

Why? Why would you say that?

I don't know, i just thought you wouldn't be able to get it back. I thought the hackers had taken every thing, i'm no computer genuis, i was suprised when i first clicked on the "white" forums, that we'd have all our post counts and avaters and everything. Thanks though Joe for getting it all back to normal, i think it felt so empty without the normal "skin" do you?

[RLP4ever]

Joe, ever since the hacking, and the restoration of the forums, I have a curious new glitch to deal with. It's that during my browsing sessions, I get 'timed out' and asked to 'log in' again..e.g. I write out a long post, and when I click to 'submit', I get the message that I'm not logged in, and need to do so again, to proceed. So, it's a bit annoying to have to log back in again, and resend my post. Wonder why this is happening for the very first time, in all my years here.

thanks!

[kentuckyfan]

Someday we will have the power to deal with hackers in thew Willian Gibson method. Read some of his books and fear my firebolt!!!!!

[DiosSword]

The skin is back. Sorry it took so long, I got held up with some personal crap.

I had to recreate my modifications from scratch, so let me know if anything looks wrong. Tkx.

Way to go, Joe. Outstanding. You rock.

To whoever the rotten waste of human flesh is that hacked Joe's site:

[RLP4ever]

Joe, ever since the hacking, and the restoration of the forums, I have a curious new glitch to deal with. It's that during my browsing sessions, I get 'timed out' and asked to 'log in' again..e.g. I write out a long post, and when I click to 'submit', I get the message that I'm not logged in, and need to do so again, to proceed. So, it's a bit annoying to have to log back in again, and resend my post. Wonder why this is happening for the very first time, in all my years here.

thanks!

Awfully weird how one of my extremely rare queries here, in this particular forum (About the Forums/Site), goes unanswered for close to two months.