Jump to content
View in the app

A better way to browse. Learn more.

Surly Horns

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Featured Replies

  • Replies 6.9k
  • Views 451k
  • Created
  • Last Reply

Top Posters In This Topic

Most Popular Posts

  • Tornado hit data center. Sorry for downtime. Going to have more downtime to fix later Please report weird shit here but I'm with my family and mobile only. I just spent about an hour on a bench o

  • hookemATL
    hookemATL

    I had to draw porno. Wasn’t great but I finished

  • https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest if you want to know what data could have possibly been leaked request here.  The passwords are encrypted at rest in

Posted Images

  • Popular Post

Between the spectrum outage and Surly being down, its taking far more effort than usual to fuck off today. 

Just now, Blotto said:

Between the spectrum outage and Surly being down, its taking far more effort than usual to fuck off today. 

I had to do actual work. FML 

  • Popular Post

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest

if you want to know what data could have possibly been leaked request here. 

The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. 

The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. 

An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. 

Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration).

I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. 

 

@Rimbo

 

Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 

Just now, Mo Horn said:

I had to do actual work. FML 

I too found myself under the yoke of the system with no available avenue for cynical assholery.

1 minute ago, immamac said:

The actor was not very sophisticated and mainly just fucked with the site

So....aggy.

  • Popular Post

Guess I won't post that Sydney Sweeney sex tape link again. 

5 minutes ago, immamac said:

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest

if you want to know what data could have possibly been leaked request here. 

The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. 

The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. 

An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. 

Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration).

I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. 

 

@Rimbo

 

Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 

Any evidence/law enforcement contact on the attacker?

6 minutes ago, Herpa Derpa said:

I too found myself under the yoke of the system with no available avenue for cynical assholery.

I went to the pool. 

I decided to drink while we were down

 

PXL_20240709_225533607.thumb.jpg.5e3d9678819989f5abf8b0ac66841322.jpg

  • Popular Post
5 minutes ago, Mo Horn said:

I had to do actual work. FML 

I had to draw porno. Wasn’t great but I finished

image.jpg

  • Popular Post
2 minutes ago, hookemATL said:

I had to draw porno. Wasn’t great but I finished

image.jpg

That looks just like her! You son of a bitch!!!

She get a boob job? Look different from what I remember. 

How many new threads are Gil and Derka gonna have to repost? 

15 minutes ago, immamac said:

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest

if you want to know what data could have possibly been leaked request here. 

The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. 

The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. 

An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. 

Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration).

I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. 

 

@Rimbo

 

Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 

 

7 minutes ago, immamac said:

no, they weren't even seeking ransom or doing anything besides fucking with the site.

It was this guy wasn't it?

image.png.74f857b3fdee4461f8110d75506b995d.png

7 minutes ago, hookemATL said:

I had to draw porno. Wasn’t great but I finished

image.jpg

Yep, that's her.  Tits as googly as her eyes.

My ex said she was fine sharing her nudes at the time. Bitches be crazy though

25 minutes ago, Goredho said:

Yep, that's her.  Tits as googly as her eyes.

The fucked up thing is that I had to click the quoted post to figure out if you were talking about South Austin’s mom or Luicci.

Edited by IDIOTsavant
Sydney Carton impression

  • Popular Post

I tell you, somebody would be doing me a favor stealing my identity.  No respect.

41 minutes ago, immamac said:

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest

if you want to know what data could have possibly been leaked request here. 

The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. 

The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. 

An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. 

Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration).

I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. 

 

@Rimbo

 

Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 

Well that's a shitty way to have to spend an afternoon

  • Popular Post

The best part about Surly being down all afternoon is that managing partners of accounting and law firms all over Texas are going to be lying awake at night wondering why their billables had such a huge spike on a day where a massive chunk of the state had no power or electricity. 

55 minutes ago, immamac said:

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest

if you want to know what data could have possibly been leaked request here. 

The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. 

The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. 

An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. 

Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration).

I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. 

 

@Rimbo

 

Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 

Dude let’s be honest. You could make up just about anything here and 95% of this board, myself included, would just nod along like, “yeah fine, I mean, whatever you gotta do, I don’t know what the hell is going on here.”

1 minute ago, Biff Tannen said:

 “yeah fine, I mean, whatever you gotta do, I don’t know what the hell is going on here.”

Welcome to my whole life. 

It was this guy wasn't it?
image.png.74f857b3fdee4461f8110d75506b995d.png

If you want to hack into texags, it’s easy.

URL: 192.168.19.39
Login: Administrator
Pass: Qwerty1234!
58 minutes ago, immamac said:

no, they weren't even seeking ransom or doing anything besides fucking with the site.

Derka will have his vengeance, in this life or the next!

2 minutes ago, markstanco said:


If you want to hack into texags, it’s easy.

URL: 192.168.19.39
Login: Administrator
Pass: Qwerty1234!

It was that guy, or maybe Notre Dame Dad.  Long grudge and shit.

4 minutes ago, Dahobbs said:

Derka will have his vengeance, in this life or the next!

 

Spocks_death_1.webp

I care about you fucks way more that I should. I haven’t felt so lost in a long time 

Time to watch for any credit cards popping up under my name i guess.

Look, I may have kinda sorta advocated for a rebellion against the U.S. government earlier today in CR… glad that shit got wiped… will not happen again. 

14 minutes ago, Zepol87 said:

I care about you fucks way more that I should. I haven’t felt so lost in a long time 

 

 

591c77eb-8f94-4190-beba-f08dfed21e22_text.gif

23 minutes ago, Dahobbs said:

Derka will have his vengeance, in this life or the next!

 Shit like this didn't happen while Derka was banned, think about that. 

14 minutes ago, UTGrad98 said:

Time to watch for any credit cards popping up under my name i guess. 

Fortunately Kevin preemptively started a thread for us. 

2 minutes ago, shadow_operative2.0 said:

Fortunately Kevin preemptively started a thread for us. 

Pics of Kevin's wife?

1 hour ago, Gene Parmesan said:

Are my butthole pics in IPIHB safe?

I thought you were dead

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.