Is someone trying to hack our forum?

Please use this area for off topic conversations and banter
davidh
Posts: 3164
Joined: Wed Dec 28, 2005 10:43 am
Location: Ventor Isle of Wight

Re: Is someone trying to hack our forum?

Post by davidh » Fri Feb 18, 2011 12:19 am

Rupert

You need a stiffer section!!

D
David H

solentgal
Posts: 466
Joined: Thu Nov 11, 2010 9:01 pm
Location: twixt Chichester & Pompey

Re: Is someone trying to hack our forum?

Post by solentgal » Sun Feb 20, 2011 9:42 am

Yes this is happening to me too (only just seen this thread)..........I have now ticked the "always log me in box" and that cured it for a week or so...just logged me straight in automatically.....until today, so I have just re-set the auto and we'll see what happens. Annoying though isn't it!!
Sami.

Pat
Posts: 2472
Joined: Mon Sep 27, 2004 1:42 pm
Location: West Wiltshire (Wessex)

Re: Is someone trying to hack our forum?

Post by Pat » Sun Feb 20, 2011 7:36 pm

Auto login will get disabled if something tidies up and deletes your cookies (little file saved on PC). Then it doesn't know who you are and you need to login again. Sometimes security software gets set to delete cookies, especially at work, when it just becomes a pain to keep logging in.
(Half Cut and What a Lark Removals Ltd)

cweed
Posts: 218
Joined: Mon Jul 13, 2009 10:14 pm

Re: Is someone trying to hack our forum?

Post by cweed » Thu Feb 24, 2011 1:06 pm

Hello.
I also 'exceeded my log in' attempts on my first attempt.
As a non techy, is this situation possibly going to corrupt my PC?

User avatar
Ed
Site Admin
Posts: 3478
Joined: Wed Sep 01, 2004 10:11 pm
Location: Plymouth
Contact:

Re: Is someone trying to hack our forum?

Post by Ed » Thu Feb 24, 2011 2:14 pm

This won't in any way effect your own computer.....

however, you should always take care in any open public area on the internet. We take a lot of care to moderate this forum, but we can't take responsibility for anything that you might download from here or places you might go from a link from here.

Anyway, I am not exactly sure what is happening.....and we are certainly on 'orange alert' but this happens from time to time and isn't much out of normal.

I think for the non-techies, it could be best explained like this:

All forums are constantly attacked by 'spam-bots' and 'auto-hackers' - It is just a fact of life. These are automatic programs run by 'nasty' people who are trying to get into a 'forum' so that they can do a number of annoying things:

a) Sell us Viagra or a million other dodgy deals you don't want.
b) Provide links to Porn sites to encourage you to visit...and build up their own Google rankings
c) Provide links to just plain old boring normal sites for the same reasons as above
d) Upload a link, which leads to a virus or malware held somewhere else - encouraging you to download it.
e) Other things - I am sure - I don't want them in to find out what they can do!! :-)

Because of this continual risk, we have a range of security tools, techniques and policies that we use to prevent 'bots' or 'automatic attacks' getting in. Now, for obvious reasons, I am not going to explain what they all are. Some are simple and some are very devious bits of code put in by Dr Neil. Some you would be aware of.....and some not...

A few weeks ago, we were under attack from a bunch of spam-bots from Russian and Romania, who were trying to create new log-ins, but as we have a system where every new member has to be moderated by us....they couldn't get through.....but they tried. Dr Neil made some adjustments and we stopped that for now.

Now, we have some new attacks.

They have 'bots' which are most probably copying user-names and then trying to log-on with standard passwords. Our system only allows a small number of attempts, before locking you out for a period of time and making you sign in again next time. So as long as no-one has any stupid passwords, then this method should keep them out.

But.....it does rely on you all using sensible and secure passwords. If anyone is using something like: 'password' or 'cvrda' or 'forum' or '2010' or '123456' or your name or anything as simple as that......we could have problems - so don't!

But the point is.....this isn't evidence of anything 'failing'. The attacks happen all the time.... you are just seeing the evidence for these attacks happening and our security system doing what it is supposed to do - Keep the bots out!

So don't worry too much....

even if they did get in (and that does happen every now and again) we would remove the posts and their accounts very quickly. You just need to be sensible. If you suddenly see a post selling you Viagra or asking you to download some porn....don't do it! Just post another thread alerting us to it and we will deal with it asap.

Very few hacking attempts try to break the forum, It is not in the interest of a parasite to do that. If we were really the target of a full-on hacking attempt, rather than the continual annoyance of spam-bots....it would be a very different thing indeed! Lets hope we don't have to deal with that!

So keep cool - you shouldn't be in any danger.

It is curious to me that I have not had this happen at all. Which does make me wonder if the bots are only attacking people who use Internet Explorer rather than Firefox or Chrome.

If it happens again to anyone, please do just say what browser you are using.

keep safe

eib
Ed Bremner
CVRDA


Jollyboat J3
Firefly F2942
IC GBR314 ex S51 - 1970 Slurp
MR 638 - Please come and take it away
Phelps Scull
Bathurst Whiff - looking for someone to love it

Pat
Posts: 2472
Joined: Mon Sep 27, 2004 1:42 pm
Location: West Wiltshire (Wessex)

Re: Is someone trying to hack our forum?

Post by Pat » Thu Feb 24, 2011 6:19 pm

I only use Internet Explorer 8 and 6 (at work) for the forum and it has not happened to me at all either at home or work. I'm in and out a lot especially if I'm doing some work on the main site.

Nigel
Posts: 1238
Joined: Wed Jul 12, 2006 9:51 am
Location: Thornbury SC, Bristol

Re: Is someone trying to hack our forum?

Post by Nigel » Thu Feb 24, 2011 8:28 pm

Seems to happen to me regularly (using IE8)

Rupert
Posts: 6249
Joined: Thu Sep 16, 2004 8:40 pm
Location: Cotswold Water Park

Re: Is someone trying to hack our forum?

Post by Rupert » Thu Feb 24, 2011 8:49 pm

I'm using IE no idea what Number, and it has happened 3 times so far. Just changed to password to something very tricky (and different to what I use elsewhere) so I'll probebly shut myself out, now...
Rupert

User avatar
neil
Site Admin
Posts: 1633
Joined: Tue Aug 31, 2004 10:33 pm
Location: Plymouth

Re: Is someone trying to hack our forum?

Post by neil » Thu Feb 24, 2011 8:58 pm

I use chrome. It happens to me. As Ed says, it's a minor inconvenience compared to letting the scum in and everyone being inundated with dodgy personal messages and the forums being littered with spam.

If we stopped the search engines from searching and archiving the forum then this would help and slow things down, but then this would stop new people from finding us via google etc. The reason why this forum is attractive to spammers is that it's active. If we all stopped posting they would go away.
IC: K26
Harrier +: 2

Zenith's rebuild - www.pegasus18.com/zenith

Rupert
Posts: 6249
Joined: Thu Sep 16, 2004 8:40 pm
Location: Cotswold Water Park

Re: Is someone trying to hack our forum?

Post by Rupert » Thu Feb 24, 2011 9:11 pm

It does appear to be part and parcel of life on the internet - Ed's post was very informative - it is easy to forget how much goes on in the background to ensure we can spout nonsense about boats!
Rupert

Pat
Posts: 2472
Joined: Mon Sep 27, 2004 1:42 pm
Location: West Wiltshire (Wessex)

Re: Is someone trying to hack our forum?

Post by Pat » Fri Feb 25, 2011 2:44 pm

If it's happening to you please could you post here if it is also happening on other sites where you log in and save login details - Y&Y forum for example.

Post Reply