øAslickproductions.org/forum/index.php?PHPSESSID=5f0fck550j2m4m2fpbtkj2vkm1&topic=1956.msg21282e:/My Web Sites/Slick Productions - FFIV Message Board/slickproductions.org/forum/indexde68.htmlslickproductions.org/forum/index.php?PHPSESSID=5f0fck550j2m4m2fpbtkj2vkm1&action=profile;u=6;area=showposts;start=90e:/My Web Sites/Slick Productions - FFIV Message Board/slickproductions.org/forum/indexde68.html.zx~žh^ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÈà•¤ˆíOKtext/htmlISO-8859-1gzip0|ÖˆíÿÿÿÿÿÿÿÿWed, 11 Mar 2020 08:33:27 GMT0ó°° ®0®P®€§²ð®~žh^ÿÿÿÿÿÿÿÿc#ˆí Emergency

« previous next »
Pages: 1

Author Topic: Emergency  (Read 2467 times)

Lenophis

  • Forum Overlord
  • *
  • Posts: 1,688
  • Gender: Male
  • I sad
    • View Profile
    • Slick Productions
Emergency
« on: September 24, 2014, 10:34:18 PM »
Earlier this evening, it was brought to my attention that this site, along with most sites around the internet have been exposed to a new BASH exploit. While I don't think anyone would want to infect this site, the risk is too great to just say "yeah, this won't affect us." So, that unfortunately means that this board will be in lockdown monitored until this issue gets patched. At some point this week, the site itself will be taken down so the patch can get applied. When the site comes back up, we'll have to install the board from scratch (again). Not all is lost, though. The SQL database has already been dumped, and hopefully we can just drop that in when SMF is reinstalled.

NOTE TO ALL FF4/FF5 POSTERS: GET EVERYTHING FROM THE POSTS YOU WANT NOW IN CASE THIS DUMP CANNOT BE FULLY RESTORED! YOU HAVE BEEN WARNED!

Please bear with us until this gets fixed. I know Slick has had some downtime issues lately, but believe me when I say that we're working on it!

On a side note, this kind of reinforces the idea of me throwing a wiki on the site, so all hacking info about the series can be preserved. If I can get some time, I'll weigh my wiki options and go from there.

:edit:

When the server and board are back up, everyone should change their passwords. If SMF has an option for it, I'll force it on everyone just to make sure.
« Last Edit: September 24, 2014, 10:47:23 PM by Lenophis »
Logged

119 bugs fixed and counting.

Aerdan

  • Ymir
  • *
  • Posts: 18
  • Gender: Male
  • Winter Knight
    • View Profile
    • Unforeseen Consequences
Re: Emergency
« Reply #1 on: September 24, 2014, 10:42:01 PM »
If you're going to go the wiki route, might I suggest Wikidot? Their wikitext engine is among the most versatile I'm aware of, a must when one is documenting a game's internals. It even supports tabs.
Logged

Jorgur

  • FF5 R&D Master
  • *
  • Posts: 437
  • Gender: Male
    • View Profile
Re: Emergency
« Reply #2 on: September 25, 2014, 06:01:27 AM »
This is proof that a forum is not a good place to store information. I always have every relevant bit of FF5-related information backed up in case the site goes down. A wiki would be great, btw.
Logged

Dragonsbrethren

  • Forum Overlord
  • *
  • Posts: 1,820
    • View Profile
    • Dragonsbrethren Industries
Re: Emergency
« Reply #3 on: September 25, 2014, 12:00:47 PM »
I guess the good that'll come of this is we'll finally have the board up to date (and the exploit patched, of course).
Logged

Madsiur

  • Tunnel Armor
  • *
  • Posts: 149
  • Gender: Male
  • FF6AE coder
    • View Profile
    • Madsiur's Lair
Re: Emergency
« Reply #4 on: September 25, 2014, 01:11:00 PM »
Quote from: Lenophis on September 24, 2014, 10:34:18 PM
Earlier this evening, it was brought to my attention that this site, along with most sites around the internet have been exposed to a new BASH exploit.

Do you have a relevant link with more info?

I'll check if the MyBB engine has a patch for that exploit.
Logged

assassin

  • Bane of Retards
  • *
  • Posts: 1,033
  • space bears are not gentle!
    • View Profile
    • My Barren Webpage
Re: Emergency
« Reply #5 on: September 25, 2014, 02:08:36 PM »
can you dump the SQL from mnrogar's as well, and send me a backup of that?  the last one i have is a few years old.
Logged

Deathlike2

  • FF4 R&D Master
  • *
  • Posts: 3,538
  • I'm looking at you, bitch!
    • View Profile
Re: Emergency
« Reply #6 on: September 25, 2014, 05:26:08 PM »
Well ugh.
Logged
Working on the next Yet To Be Named FF4 "Hardtype" Hack Download Latest: v1.48

Video Demos: #1 #2 #3

Lenophis

  • Forum Overlord
  • *
  • Posts: 1,688
  • Gender: Male
  • I sad
    • View Profile
    • Slick Productions
Re: Emergency
« Reply #7 on: September 26, 2014, 12:34:03 AM »
Quote from: Madsiur on September 25, 2014, 01:11:00 PM
Do you have a relevant link with more info?
http://www.csoonline.com/article/2687265/application-security/remote-exploit-in-bash-cve-2014-6271.html

Quote
I'll check if the MyBB engine has a patch for that exploit.
It's not just a simple patch that can be applied, because this could literally infect any php file on a given server. That's why we're taking the approach of rebuilding the whole board from scratch. Slick's main site files will be easy enough to check, since they're still practically html. :tongue:

Quote from: assassin on September 25, 2014, 02:08:36 PM
can you dump the SQL from mnrogar's as well, and send me a backup of that?  the last one i have is a few years old.
I can try. I'll get back to you on this. See if you can get in touch with Mnrogar just in case.

Quote from: Jorgur on September 25, 2014, 06:01:27 AM
This is proof that a forum is not a good place to store information.
Indeed, this has been my personal belief for many years.

Quote
I always have every relevant bit of FF5-related information backed up in case the site goes down.
Excellent, way to stay ahead. :childish:

Quote
A wiki would be great, btw.
I've been pondering it for a while now. It really does seem like it would be great for the site in terms of ROM hacking info, although datacrystal is also a great spot for that. It could be a nice addition to the hacks pages to give more detailed summaries on what a hack may or may not do. Food for thought.
Logged

119 bugs fixed and counting.

Grimoire LD

  • FF4 Hacker
  • *
  • Posts: 1,684
    • View Profile
Re: Emergency
« Reply #8 on: September 30, 2014, 07:48:53 AM »
Yes, now that school is back in session I've been up to my neck in work, but I have backed up the vast majority of the pages with my notes and my hacks. I think a wiki sounds like a terrific idea personally! Datacrystal is rather basic whereas we can host something with a bit more meat on top of the skeleton.
Logged

vivify93

  • Liquid Flame
  • *
  • Posts: 304
  • Gender: Male
  • White Wizard
    • View Profile
Re: Emergency
« Reply #9 on: October 01, 2014, 07:00:18 PM »
I guess now would be a good time to go grab Phoenix's "To equip" text fix for FFIV.
Logged
Hacking is hard. :sad:

Lenophis

  • Forum Overlord
  • *
  • Posts: 1,688
  • Gender: Male
  • I sad
    • View Profile
    • Slick Productions
Re: Emergency
« Reply #10 on: October 01, 2014, 11:54:02 PM »
If it's a patch on the site, none of those will be affected, it's just the message content on this board that may be affected.
Logged

119 bugs fixed and counting.

vivify93

  • Liquid Flame
  • *
  • Posts: 304
  • Gender: Male
  • White Wizard
    • View Profile
Re: Emergency
« Reply #11 on: October 03, 2014, 12:53:33 AM »
Nah, it was a message on the board. Thanks for clarifying though! :)
Logged
Hacking is hard. :sad:

Lenophis

  • Forum Overlord
  • *
  • Posts: 1,688
  • Gender: Male
  • I sad
    • View Profile
    • Slick Productions
Re: Emergency
« Reply #12 on: October 22, 2014, 01:30:02 AM »
On Saturday, October 25 I intend on taking this board down to explode it and put a brand new one on top of it. If all goes well (I just jinxed myself), the new board should have everything from the September database dump.

assassin asked me if PMs would be included in this dump, and I can honestly say I do not know, and I don't know how to check. You guys better save any PMs you want to keep, because I can't guarantee they'll still be there! If this isn't enough warning for some of you, I can push it back a day or two, but this delay has gone on long enough and this needs to get done.

See you guys Saturday! :cycle:
Logged

119 bugs fixed and counting.
Pages: 1
« previous next »