Miscellaneous Archived News

Quote :

Forumotion think's it's a proxy IP address.

Yes, I did ban it..........Again.

I feared that it might be a proxy IP addy, Ed. Dang it!
I wonder why banning that addy ONCE wasn't good enough, though.

Does Forumotion have anything to offer about this for future reference?
Anything more we can do?

Last I checked, no.

I'm still checking around though.

If you learn anything helpful that we can do to protect ourselves better or any other advice to help beef up security ...
Whether from Forumotion or WHOEVER, I hope you'll share it with me, Ed.

Mimisourous (sp?) from Black Pearl got hacked into also. Now, between my two attacks and her's plus you and Hunter, Sister Trout, from, Black Pearl also posted this.

It is almost impossible to spoof an IP address. It's possible for an IP to be shared by lots of users on the same server, but it's not easy to fake.

This doesn't mean the username is guilty - the 'hacker' could be logging into that username's accounts. If there are multiple IP addresses on file for the suspicious user, that could be an explanation. If that's the only IP the user posts under, that's a big red flag.

Since the only common denominator we can see is that the victims are members here, if you're a site owner that hasn't been hit do a little preventative medicine. Make sure you're running the most recent version of whatever forum or blog software you use, change your passwords (sim sites you visit, ftp, control panel and the admin account on your site) and take a gander at your site stats to know what your 'normal' looks like. Also, make regular backups.

Site owners who have been hacked - make sure your home computer is clean. If this hacker is intent on causing chaos, it's not beyond the scope of possibility your computer could have been infected with a virus or spyware. Double check all the folders on your site as well, make sure there aren't any programs hiding in there to cause mischief later.

Whoever it is, the tricks they're using are pretty amateur, and it looks like they've been really careless. There is no such thing as a criminal mastermind, and it looks like the guilty party is well on his/her way to being exposed. And knowing the sims community, earning a well deserved public shaming. The current flurry of information can do a couple of things - the 'hacker' may smartly decide to quit while he or she is ahead, realizing how close they are to being exposed; or the 'hacker' will be angry/insulted and swing his *ahem* network cable around by causing more trouble.

The smarter you are as a site/blog/forum owner, the stronger you'll be against idjits like this. Keeping something alive and healthy on the internet is a lot harder than it looks from the outside, but a few easy steps can keep your site and files protected from sillypants 'hackers.' Talking about it here gets the information out to other site owners, so good on those of you who've come forward.

One more time, cuz I just can't stress the following enough:
1. use STRONG passwords, don't use one password for everything
2. read your site logs and pay attention to your stats
3. keep your forum/blog software up-to-date including all security updates
4. Add the following to your .htaccess file, which will block that IP from ever visiting your site.

Code:
order allow,deny
deny from 74.55.11.66
allow from all

You can add as many IPs as you'd like to the deny list, with each IP or IP range on its own line.

Code:
order allow,deny
deny from 74.55.11.66
deny from *.*.*.*
deny from *.*.*.*
allow from allAnd because I like lists....

If you DO get hacked, in spite of doing the above, here's what you need to do:
1. Take your site offline ASAP. You don't want to expose any visitors to any malicious scripts that may be running on your site.
2. Log into your control panel and change all your passwords. If you have the option, terminate all ftp sessions from your control panel.
3. Check your sites folders (all of 'em) for any new files, delete as needed
4. Download your html and css files and compare line by line with your most recent clean back up
5. Download your raw access files, start by searching the doc for the IP address natalie mentioned in her post on pg 2.
6. Upload a clean back-up, including any SQL or other databases you have

If you don't know how to do any of the above, use your GoogleFu and search it out. : ) I'll happily answer any questions by PM, too, or help you find the answer if I don't know.

Thank you for posting this information, Ed. Have you done any/all of the above?
Some of it makes my head spin!

The vandalism of our sites is simply mind-boggling. Why in the world does these things happen? What is their twisted motivation? I am quite upset.

I don't know WHY this is happening, exactly, Nonni.
And all over a game that we're supposed to love and enjoy?
It's all so disturbing and despicable, really.

Why can't we all just get along and play nicely together?

From what I can understand, if you own a website and are a member of Black Pearl Sims, you're going to get hit. If I can find the thread/post that has that, I'll link to it.

That seems to be the common denominator.

For example: These are all true attacks/hacks and can be backed up.

Sugah (Sugah's Place)....Member

Hunter (Basic): Member

Me (SIMply Edward): Member (Twice)

Mimi (Name unknown/Site Owner): Member

Sister Trout (Betsy4Arts/Site Owner): Member

Sunhair (Sunhair Sim Creations/Site Owner): Member

Scott (Gay Sims Club/Site Owner): Member

Witchboy & ShawnON (Sim Central/Site Owner): Member

Site owner means, they pay for their site out of their own pocket.

Sugah, I haven't done any of that stuff yet. That's for if you own your own site. We do not have FTP access. Site owners do.

Oh, dear. How dismal. I hope just being a plain old member of Black Pearl's site does not put one in jeopardy for an attack. That's not what you mean is it, Edward? I recently went through a struggle with my game crashing and getting announcements that I had a Trojan virus. That's different right?

Basically, that's just a theory that someone posted. If you were looking for a common denominator, that was one of them.

Then again, there could be no rhyme or reason behind it. It's all random. Nobody really knows.

Black Pearl Sims has thousands of members, many who run their own Sims sites.
I love BPS, but can rarely, if ever visit (due to blue screen/driver/puter issues).
Currently, I am not and can not be involved there (re: above tech probs).
I'm a member, as I said, but not an active one. So, why? Does this make sense?

Hmmm... This could just be a coincidence, Ed.
Like you said, it's just a theory.

I figured much of the info you provided had to do with regular sites, not those who run forums.
Thank you for posting this, btw.

I just thought of this, if that theroy is correct, and you update your site there, then you are a member.

So, if someone goes through the site updates they just start picking them off, one by one. Believe me, I cannot even begin to phantom the how's or why's.

I just think they do it because they can. And, they can get away with it.

But why attack BPS members who own small sites like ours?
Why not go for the big boys if you're on a mission to bring down the Sims 2 community?
NO SIMS SITES of ANY size should be compromised, of course.
It's simply not right!

Who knows WHY this is happening or WHO it will happen to next, but the hackings seem to be getting worse.
I just want to create goodies for my fellow Simmers & have some fun here with my friends.
Who is that hurting?

SIMply Edward wrote:

I just thought of this, if that theroy is correct, and you update your site there, then you are a member.

So, if someone goes through the site updates they just start picking them off, one by one. Believe me, I cannot even begin to phantom the how's or why's.

I just think they do it because they can. And, they can get away with it.

So, are you saying we shouldnt post updates at BPS?
Because I have noticed that the same people tend to belong to the same sites around the community. i am willing to bet the members you listed are almost all connected on other sites as well.

Of course, you can post your updates there.

That was something someone pointed out as being a common denominator. We are all members of Black Pearl. I'm a member at alot of other different places. I'm also a member of places they aren't. And, visa-versa.

I agree with Martha that many of us travel in the same circles.
It's no wonder we're members of a bunch of the same Sims sites.
Black Pearl Sims is just one common demonimator of many, I'd venture to guess.

I'm guessing that's probably not the reason we've all been hacked of late.

While that is a Common Denominator, I sincerely doubt that's the reason.
I'm a daily-poster and Newsletter worker at BlackPearlSims, I update my site there, and Thank god, Have not been hacked. Just praying I haven't now jinxed myself.

I've started taking daily backups of my website via my FTP, and keeping logs etc.

Hello, my friends.

As promised, I thought I'd answer some of your questions regarding this weekend's big update.

First of all, thank you to all who have offered gift donations for the event. I am so grateful for your generousity and kindness.
I have tentatively set the update for Saturday morning, March 6th, if all goes as planned.

I will need screenshots of your submissions ASAP.
I am going to put together an animated image showcasing everyone's creations/recolors for the event, but must have the screenshots no later than Thursday.

* If you have PMed me a sneak preview prior to this past week, you will have to resend the screenshot, as Forumotion's older PMs are automatically deleted frequently. *

The usual guidelines apply when submitting to Sugah's Place.
If you are unfamiliar with them, you may find them here.

I ask that you do not post your gift donations until Friday, March 5th ...as close to the big celebration event as possible.
That way, we'll be able to maintain the element of surprise til I can announce all of our goodies on the big day!

* I have started a new thread exclusively for our 1000 Members Celebration here. *
If you have any questions, please PM me at Sugah's Place, as it is the quickest way for me to see your query in order to get back with you in a timely fashion...
OR you may respond to this post with any queries.

Again, I remain most appreciative of my wonderful members' generous offerings, as always.

I'd love it if you'd stop in and say "hello" soon.

Most Sincerely,
Sugah

I second that emotion!

I can not wait to see all of the offerings!

Thank you, LC and Hunter.

LC, I've got your offering hidden in The Bunker and will move it to the 1000 Members Celebration Gifts thread on Friday!

It's great you are able to celebrate this very special occasion sugah!

I look forward to seeing what everyone has come up with i just wish i had been able to contribute something!

Again congrats sugah you and your little forum really do deserve it!

Thank you so much, Cally.
I appreciate all of your kind words, as always.

I missed this too........

Well done and well deserved!

YAY!!

Thank you, Ed! I so appreciate it when you can come hang out with us.
Thank you for being a part of this forum, my friend.