Jump to content
View in the app

A better way to browse. Learn more.

Surly Horns

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.
Football ... Basketball ... Baseball ... Other Sports ... Futbol ... 🤫995🤫 ... Gambling ... Movies & TV ... Music ... Hobbies ... Lulz ... Food & Travel ... Daily Texan ... Business & Markets ... Cloak Room ... Help ... For Sale ... Board Discussion ... Advertise... Tailgate Donations

Featured Replies

  • Replies 7.1k
  • Views 469.6k
  • Created
  • Last Reply

Top Posters In This Topic

Most Popular Posts

  • Tornado hit data center. Sorry for downtime. Going to have more downtime to fix later Please report weird shit here but I'm with my family and mobile only. I just spent about an hour on a bench o

  • hookemATL
    hookemATL

    I had to draw porno. Wasn’t great but I finished

  • https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest if you want to know what data could have possibly been leaked request here.  The passwords are encrypted at rest in

Posted Images

  • Popular Post
#5753

Between the spectrum outage and Surly being down, its taking far more effort than usual to fuck off today. 

#5754
Just now, Blotto said:

Between the spectrum outage and Surly being down, its taking far more effort than usual to fuck off today. 

I had to do actual work. FML 

  • Popular Post
#5756

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest

if you want to know what data could have possibly been leaked request here. 

The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. 

The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. 

An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. 

Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration).

I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. 

 

@Rimbo

 

Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 

#5758
Just now, Mo Horn said:

I had to do actual work. FML 

I too found myself under the yoke of the system with no available avenue for cynical assholery.

#5761
5 minutes ago, immamac said:

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest

if you want to know what data could have possibly been leaked request here. 

The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. 

The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. 

An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. 

Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration).

I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. 

 

@Rimbo

 

Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 

Any evidence/law enforcement contact on the attacker?

#5763
6 minutes ago, Herpa Derpa said:

I too found myself under the yoke of the system with no available avenue for cynical assholery.

I went to the pool. 

  • Popular Post
#5766
5 minutes ago, Mo Horn said:

I had to do actual work. FML 

I had to draw porno. Wasn’t great but I finished

image.jpg

  • Popular Post
#5768
2 minutes ago, hookemATL said:

I had to draw porno. Wasn’t great but I finished

image.jpg

That looks just like her! You son of a bitch!!!

#5771
15 minutes ago, immamac said:

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest

if you want to know what data could have possibly been leaked request here. 

The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. 

The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. 

An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. 

Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration).

I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. 

 

@Rimbo

 

Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 

 

7 minutes ago, immamac said:

no, they weren't even seeking ransom or doing anything besides fucking with the site.

It was this guy wasn't it?

image.png.74f857b3fdee4461f8110d75506b995d.png

#5772
7 minutes ago, hookemATL said:

I had to draw porno. Wasn’t great but I finished

image.jpg

Yep, that's her.  Tits as googly as her eyes.

#5780
25 minutes ago, Goredho said:

Yep, that's her.  Tits as googly as her eyes.

The fucked up thing is that I had to click the quoted post to figure out if you were talking about South Austin’s mom or Luicci.

Edited by IDIOTsavant
Sydney Carton impression

  • Popular Post
#5781

I tell you, somebody would be doing me a favor stealing my identity.  No respect.

#5782
41 minutes ago, immamac said:

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest

if you want to know what data could have possibly been leaked request here. 

The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. 

The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. 

An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. 

Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration).

I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. 

 

@Rimbo

 

Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 

Well that's a shitty way to have to spend an afternoon

  • Popular Post
#5783

The best part about Surly being down all afternoon is that managing partners of accounting and law firms all over Texas are going to be lying awake at night wondering why their billables had such a huge spike on a day where a massive chunk of the state had no power or electricity. 

#5785
55 minutes ago, immamac said:

https://www.surlyhorns.com/board/settings/account-security/#piiDataRequest

if you want to know what data could have possibly been leaked request here. 

The passwords are encrypted at rest in the database so there is no leaks there and there are no leaks related to any payment information that could have happened. 

The actor was not very sophisticated and mainly just fucked with the site - I have extensive audit logging on the database and query monitoring. There was no unusual database activity in the form of dumps or unusual queries leading up to the hijack and subsequent dropping of the database tables. 

An example of the data that could have been leaked is your IP addresses, your name, your email, and your birthdate and your address. Nothing else is available in unencrypted formats at rest in the database other than already public information such as posts etc. 

Again I have no reason to suspect there was a database dump and there was no access gained to the underlying server or direct access to the database (although the credentials were leveraged in a side vector attack using the php configuration).

I suspect this happened because of a leftover artifact from an upgrade some time ago and a brute force attack on spoofing admin credentials on a largely unused admin account. Both of those attack vectors have been addressed and I will be monitoring the situation closely. 

 

@Rimbo

 

Also there were 3 duplicate transactions for payments that I have already refunded, this was due to me testing the site before doing a point in time recovery to a safe point right before the attacker dropped the entire database. That coupled with closing any and all attack vectors that I suspected took the additional time from the first site bring up to the second site bring up. 

Dude let’s be honest. You could make up just about anything here and 95% of this board, myself included, would just nod along like, “yeah fine, I mean, whatever you gotta do, I don’t know what the hell is going on here.”

#5786
1 minute ago, Biff Tannen said:

 “yeah fine, I mean, whatever you gotta do, I don’t know what the hell is going on here.”

Welcome to my whole life. 

#5788
58 minutes ago, immamac said:

no, they weren't even seeking ransom or doing anything besides fucking with the site.

Derka will have his vengeance, in this life or the next!

#5789
2 minutes ago, markstanco said:


If you want to hack into texags, it’s easy.

URL: 192.168.19.39
Login: Administrator
Pass: Qwerty1234!

It was that guy, or maybe Notre Dame Dad.  Long grudge and shit.

#5790
4 minutes ago, Dahobbs said:

Derka will have his vengeance, in this life or the next!

 

Spocks_death_1.webp

#5793

Look, I may have kinda sorta advocated for a rebellion against the U.S. government earlier today in CR… glad that shit got wiped… will not happen again. 

#5795
23 minutes ago, Dahobbs said:

Derka will have his vengeance, in this life or the next!

 Shit like this didn't happen while Derka was banned, think about that. 

#5797
2 minutes ago, shadow_operative2.0 said:

Fortunately Kevin preemptively started a thread for us. 

Pics of Kevin's wife?

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...
Football ... Basketball ... Baseball ... Other Sports ... Futbol ... 🤫995🤫 ... Gambling ... Movies & TV ... Music ... Hobbies ... Lulz ... Food & Travel ... Daily Texan ... Business & Markets ... Cloak Room ... Help ... For Sale ... Board Discussion ... Advertise... Tailgate Donations

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.