what happened last night?

[rocketmn333]

ok so i was on the forums last night around 1 am my time and all of a sudden some guy was posting so really disgusting picture and spammed it all over the website, does anyone know what was up with that, did the site admins or mods take care of it?

[nekret]

I noticed that too, it seems the same thing happened in the advanced section for a user that didn't have advanced access. This makes me wonder if lp101 is running on a vulnerable version of phpBB. Either that or someone got a hold of somebody else's account information.

[Proctor]

Yeah i seen it too

[rocketmn333]

yea well the guys name was something like mr. sea cucumber or something like that and he had like no posts so that he couldn't of gotten into the advanced section, so i don't know, maybe a hacker or something, but he ruined a whole bunch of posts and stuff, so some info had to be deleted with the phots because they were on the same page

[rocketmn333]

sorry i mean photos

[pickmonger]

Seems a user named sea cucumber did a lot of work to post all over the site.

I counted over 20 postings of the same crap porn images in different sections.

Poor Shrub was cleaning the mess up at around 6am EDT.

Sometimes the really disgusting porn images do not get deleted for several days.

This certainly is not the first time and won't be the last time, but couldn't we make it harder for new users to post or have better screening of users before they log on.

Might we have a system where certain trusted users have a few telephone numbers to call to get stuff zapped. Calling for stupid reasons would result in being site banned or some other drastic penalty.

I happened to be accessing lp101 this morning where others were around. A few people who happened to be around and saw my monitor were real impressed how pickymonger spends company time surfing SCAT PORN.

[pickmonger]

Actually Mr Sea Cucumber made 38 identical posts all in 1 night.

same sick image repeated a bunch of times.

Even more disturbing is that one or more mods were (allegedly) on and had to have seen it and did nothing about deleteing it.

Then again knowing some people around here maybe it was just posting family photos of a good nights fun.

[nekret]

What really concerns me is how those posts were made in the advanced section. I really only see three options;
1. This forum's software or the hosting server was compromised.
2. Someone got a hold of an admin's account information.
3. One of the admins/mods are playing a sick joke on us all. (I highly doubt this one but, after shrub modified one of Eyes_Only's links to point to an auction for penis pills, I just don't know... )

[Eyes_Only]

Ha ha ha. Yeah, we'll never forget that one.

[Legion303]

What really concerns me is how those posts were made in the advanced section. I really only see three options;

That's interesting. Which forums were they in? I saw you come into the channel looking for a mod, and checked the site shortly afterwards (not to imply I'm a mod, it was just a coincidence of timing) and saw some obvious spam but nothing in the advanced sections.

*Any* version of phpBB is prone to vulnerabilities. It's gotten a lot better, but it still resembles the early days of sendmail, where a new exploit was being found every month or so. The last major exploit I found for phpBB2 was from the beginning of June. I just tried it and got the message "Hacking attempt," so clearly it's been dealt with (attn mods: don't shoot me!). There have been some recent security fixes for phpBB3 betas, but as far as I can tell we're still on v2.

-steve

[Legion303]

I looked into it a little more, and the "exploit" posted at the beginning of June was actually fixed some time ago, so right now phpBB is doing a lot better than sendmail did in the early days. the next newest exploit is an SQL injection in a phpBB mod from 6 weeks ago, which I understand MrPicks doesn't use.

-steve

[nekret]

That's interesting. Which forums were they in? I saw you come into the channel looking for a mod, and checked the site shortly afterwards (not to imply I'm a mod, it was just a coincidence of timing) and saw some obvious spam but nothing in the advanced sections.

*Any* version of phpBB is prone to vulnerabilities. It's gotten a lot better, but it still resembles the early days of sendmail, where a new exploit was being found every month or so. The last major exploit I found for phpBB2 was from the beginning of June. I just tried it and got the message "Hacking attempt," so clearly it's been dealt with (attn mods: don't shoot me!). There have been some recent security fixes for phpBB3 betas, but as far as I can tell we're still on v2.

-steve

I popped into the IRC channel last night to see if any of the mods were up and around to check in on what was going on. I do remember a post or two in the advanced section but since it has been cleaned up I can't find the thread it was in. Also as for the phpBB on this site, I wouldn't expect it to be the newest (and thus some of the newer exploits likely won't work on it) considering the somewhat dead nature of the other sites on the server.

[rocketmn333]

yea it was messed up

[Kaotik]

I was on last night between 1-2:00am Central Time, so I can vouch for it being in the advance section as well. I just don't recall the exact section.

There were two names though, one was the_Sea_ CuCUmber and the other was Mister_Sea_ CuCUmber or something along those lines. That same picture was posted everywhere back to back saying something like "you don't f*x with RE, RE f*x with you" written between every photo.

Very disturbing.

[rocketmn333]

yea thats what his name was, mister sea cucumber, and yea, i had no clue how he got into advanced section either, dont you have to have a serten amount of posts to get in it or something?