broodwarmaps.net banner

BWMN Time
03/28/2024
11:24
News
new account
list users
Login:
name:
:PW.:
Replays
Map DB
ICCup
Map Access
New map
Edit map
 


Back to mainpage
BWMN got hacked - but we were lucky06 of August 2006 09:00 AM
Posted by:panschk[FP]


Good sunday morning everyone :]

Someone (I really don't know who would be evil enough to do something like that) deleted all entries to our beloved map database last night.

I really thought all the work we put into this in the last months dissapear from the face of the earth in a few secounds, as I did not do a backup in half a year. I got lucky though, as the great people from my webhoster make backups regulary and were able to put the backup back up (^^). The backup is from friday afternoon, so not too much is lost.

I do not know (yet) what technique the person who did that used, I did not see how it is possible to abuse the scripts on the page to mass delete, so it is possible the hacker somehow got the password to the mysql-Admin area. This password is changed, plus all user-passwords are stored encrypted now in the DB, at least it should not be possible for a hacker to get your personal passwords. You might get "wrong password" messages here and there because of this, please tell me so that I can fix.

Actually I might just do a few updates today and tomorrow, make sure you'll let me know, tuesday I'll be back to my lazy self ;D


Thanks to everyone who supported me.
Thanks again to my great web hoster, I can really recommend them, at least if you speak german ;)


www.allinkl.com
Comments:

spinesheath
It might help you to get out how all this was done and to prevent it in the future:

At first, the News and Competition sections seemed corrupted. The hacker then was able to delete single maps and the articles section may have been down right from the start.
He then continued a little on the news section and deleted some more maps. And at the end, he must have found a way to delete all maps at once...
LGI
Thank you panschk!

The first thing that i saw was the news in PGT, while i read the comments i click refrsh on the web site that i NEVER close and i see your newspost.

Thank you for saving our hard work and everything!

WE LOVE YOU!
Starparty
Some ppl just got way too much time on their hands..
Starparty
but jealousy can be an evil thing
spinesheath
On PGT someone posted SEN was also hacked, and indeed, they had a similar problem. They also got an IP (no proxy), and I suspect that it might have been the same person. You should check that out.
Valug
Was just about to say, someone got ahold of Moose's password on SEN, banned all the mods, deleted many pinned topics along with the whole FAQ fourm.
Valug
Also, Moose thinks that whoever did it bruteforced the password.
flow
i wrote a final paper about encryption, and making your password secure to bruteforce is very easy
spinesheath
Well, nowadays even 64-char (or more) passwords are "bruteforceable". But I don't think the average hacker has access to massively parallel processing computers ;)
spinesheath
Hmm, a friend of mine runs a small private forum, and he read something about MD5 hashes. He took the hash of my password and reversed the hashing process (you can do that and with a certain percentage you get the actual password) and was sucessfull (of course he informed me and didn't do anything). It was a simple password though, it's just a small private forum.
Well, I don't have any deeper insight into password protection in the internet, but I guess if you got the hashes, you can speed up bruteforce quite a lot...?
NastyMarine
Love ya Panschk :P
Thedutchjelle
Lucky that you had a backup ^_^

lnept
cool
MuShu
Woohoo! Yay for BWMN
Listoric
phew, good to hear ^^

Because of heavy spam on the map comments, it is needed to be logged in to post. We are sorry that this has to be done because nothing else stops spam bots
random map
  (4)Abyss_Temple
Newest updates:
  (2)Dusk_0.60
  (4)Blustercrux_0.60
  (4)Daedalus_0.60
  (4)Aquamarine_0.60
  (2v6)Rich vs Lean
  (3)Ra 0.66
  (2)Dark_Swamp_0.60
  (2)Tess_Chapter_0..
  (4)Vhansoon_0.60
  (2)Arcane_Magic_R..
MOTM
  • month 6:
      (2)Butter 2.0b
  • MOTW
  • week 2021.01:
      (3) Lambda 1.0
  • Main Forum
  • New B..(Kroznade)
  • Magna..(addressee)
  • No Fo..(Pension)
  • Share..(Shade)R)
  • Feedback
  • This s..(triller1)
  • Rotati..(triller1)
  • Off Topic
  • scm dr..(addressee)
  • Real L..(Pension)
  • Vetera..(ProTosS4Ev)
  • Starcraft 2
  • announ..(triller1)
  • STARCR..(triller1)
  • Search Forum
    Articles:
     
  • How to make larvae spawn at the bottom right corner  
  • Worker pathing guide - How to debug and balance resour  
  • An elegant way of dealing with cliff asymmetry
  • Competition:
     
  • Innovative Naturals Competition  
  • Tourney Map Pack Aspirant Suggestions  
  • Maps That Need A Remake  
  • Think Quick Map Contest ($100 prize)