July 9, 20241 yr 1 minute ago, Captain Ron said: Is this bad? this seems bad. This is south Austin’s mom’s pet. Nickname for me
July 9, 20241 yr Popular Post Between the spectrum outage and Surly being down, its taking far more effort than usual to fuck off today.
July 9, 20241 yr Just now, Blotto said: Between the spectrum outage and Surly being down, its taking far more effort than usual to fuck off today. I had to do actual work. FML
July 9, 20241 yr Popular Post https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest if you want to know what data could have possibly been leaked request here. The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration). I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. @Rimbo Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up.
July 9, 20241 yr Just now, Mo Horn said: I had to do actual work. FML I too found myself under the yoke of the system with no available avenue for cynical assholery.
July 9, 20241 yr 1 minute ago, immamac said: The actor was not very sophisticated and mainly just fucked with the site So....aggy.
July 9, 20241 yr 5 minutes ago, immamac said: https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest if you want to know what data could have possibly been leaked request here. The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration). I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. @Rimbo Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. Any evidence/law enforcement contact on the attacker?
July 9, 20241 yr 1 minute ago, Rimbo said: Any evidence/law enforcement contact on the attacker? no, they weren't even seeking ransom or doing anything besides fucking with the site.
July 9, 20241 yr 6 minutes ago, Herpa Derpa said: I too found myself under the yoke of the system with no available avenue for cynical assholery. I went to the pool.
July 9, 20241 yr Popular Post 5 minutes ago, Mo Horn said: I had to do actual work. FML I had to draw porno. Wasn’t great but I finished
July 9, 20241 yr Well, you had plenty of time. Edited July 9, 20241 yr by shadow_operative2.0 Damnit, to fenix.
July 9, 20241 yr Popular Post 2 minutes ago, hookemATL said: I had to draw porno. Wasn’t great but I finished That looks just like her! You son of a bitch!!!
July 9, 20241 yr 15 minutes ago, immamac said: https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest if you want to know what data could have possibly been leaked request here. The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration). I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. @Rimbo Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 7 minutes ago, immamac said: no, they weren't even seeking ransom or doing anything besides fucking with the site. It was this guy wasn't it?
July 9, 20241 yr 7 minutes ago, hookemATL said: I had to draw porno. Wasn’t great but I finished Yep, that's her. Tits as googly as her eyes.
July 9, 20241 yr 25 minutes ago, Goredho said: Yep, that's her. Tits as googly as her eyes. The fucked up thing is that I had to click the quoted post to figure out if you were talking about South Austin’s mom or Luicci. Edited July 9, 20241 yr by IDIOTsavant Sydney Carton impression
July 9, 20241 yr Popular Post I tell you, somebody would be doing me a favor stealing my identity. No respect.
July 9, 20241 yr 41 minutes ago, immamac said: https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest if you want to know what data could have possibly been leaked request here. The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration). I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. @Rimbo Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. Well that's a shitty way to have to spend an afternoon
July 9, 20241 yr Popular Post The best part about Surly being down all afternoon is that managing partners of accounting and law firms all over Texas are going to be lying awake at night wondering why their billables had such a huge spike on a day where a massive chunk of the state had no power or electricity.
July 9, 20241 yr 55 minutes ago, immamac said: https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest if you want to know what data could have possibly been leaked request here. The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration). I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. @Rimbo Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. Dude let’s be honest. You could make up just about anything here and 95% of this board, myself included, would just nod along like, “yeah fine, I mean, whatever you gotta do, I don’t know what the hell is going on here.”
July 9, 20241 yr 1 minute ago, Biff Tannen said: “yeah fine, I mean, whatever you gotta do, I don’t know what the hell is going on here.” Welcome to my whole life.
July 9, 20241 yr It was this guy wasn't it? If you want to hack into texags, it’s easy. URL: 192.168.19.39Login: AdministratorPass: Qwerty1234!
July 9, 20241 yr 58 minutes ago, immamac said: no, they weren't even seeking ransom or doing anything besides fucking with the site. Derka will have his vengeance, in this life or the next!
July 9, 20241 yr 2 minutes ago, markstanco said: If you want to hack into texags, it’s easy. URL: 192.168.19.39 Login: Administrator Pass: Qwerty1234! It was that guy, or maybe Notre Dame Dad. Long grudge and shit.
July 9, 20241 yr 4 minutes ago, Dahobbs said: Derka will have his vengeance, in this life or the next!
July 9, 20241 yr I care about you fucks way more that I should. I haven’t felt so lost in a long time
July 10, 20241 yr Look, I may have kinda sorta advocated for a rebellion against the U.S. government earlier today in CR… glad that shit got wiped… will not happen again.
July 10, 20241 yr 14 minutes ago, Zepol87 said: I care about you fucks way more that I should. I haven’t felt so lost in a long time
July 10, 20241 yr 23 minutes ago, Dahobbs said: Derka will have his vengeance, in this life or the next! Shit like this didn't happen while Derka was banned, think about that.
July 10, 20241 yr 14 minutes ago, UTGrad98 said: Time to watch for any credit cards popping up under my name i guess. Fortunately Kevin preemptively started a thread for us.
July 10, 20241 yr 2 minutes ago, shadow_operative2.0 said: Fortunately Kevin preemptively started a thread for us. Pics of Kevin's wife?
July 10, 20241 yr 1 hour ago, Gene Parmesan said: Are my butthole pics in IPIHB safe? I thought you were dead
July 10, 20241 yr 1 hour ago, Goredho said: Yep, that's her. Tits as googly as her eyes. Too perky. She has flapjacks
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.