FTO hacked!

Here you'll find helpful tips regarding the operation of the Discussion Boards at First Tracks!! Online, as well as general announcements for our users.

FTO hacked!

Postby EMSC » Sun Feb 16, 2014 12:40 pm

I've been getting a front page error for about a week now with the scrolling news banner... See the image. It appears in Chrome for me both on PC and tablet. Haven't tried IE or Firefox...

Capture.JPG
User avatar
EMSC
 
Posts: 1989
Joined: Wed Apr 11, 2007 6:54 pm
Location: Front Range of Colorado

Re: FTO gets a facelift

Postby Marc_C » Mon Feb 17, 2014 12:03 pm

It happens in Firefox (latest and previous versions) on a desktop PC as well.
-marc
User avatar
Marc_C
 
Posts: 3172
Joined: Thu Mar 24, 2005 10:32 am
Location: A Sandy place south of a Great Lake

Re: FTO gets a facelift

Postby Admin » Tue Feb 18, 2014 10:32 am

Thanks, EMSC and Marc_C. I had been stumped by what was creating that, and after trying to identify the issue I put it on hold over the weekend so that I could ski. That turned out to be a mistake, for it was a hack.

Many folks noticed that FTO was taken down this morning. That's because a spammer who had implemented that hack used the exploit to upload PHP files to the server to send spam emails using our machine. At the time it was taken down around 7:30 a.m. the script had queued some 31,000 emails. In a way, though, that was a good thing because it created the hint that I needed to understand what had been done.

We're now back up and running after identifying the exploit, removing the offending files and scripts, and strengthening site security to patch that hole. You'll also notice that the featured content is now functioning normally.
Image

Image
User avatar
Admin
Site Admin
 
Posts: 9969
Joined: Wed Sep 22, 2004 9:32 am
Location: Salt Lake City, Utah

Re: FTO gets a facelift

Postby Tony Crocker » Mon Mar 03, 2014 9:54 am

The screenshot EMSC posted displays when I try to find any feature articles on FTO. I was on the phone with Big Sky's marketing director this morning and wanted to show her the feature I wrote when they hosted Patrick and me in 2006. Hopefully there is a current system bug and the features have not been broken since the site facelift in December.
http://bestsnow.net
Ski Records
Season length: 21 months, Nov. 29, 2010 - July 2, 2012
Days in one year: 80 from Nov. 29, 2010 - Nov. 17, 2011
Season vertical: 1,610K in 2016-17
Season powder: 291K in 2011-12
User avatar
Tony Crocker
 
Posts: 9790
Joined: Thu Sep 23, 2004 10:37 am
Location: Avatar: Charlotte Bay, Antarctica 2011
Location: Glendale, California

Re: FTO gets a facelift

Postby Admin » Mon Mar 03, 2014 10:06 am

These SOB hackers continue to make my life a living hell.
Image

Image
User avatar
Admin
Site Admin
 
Posts: 9969
Joined: Wed Sep 22, 2004 9:32 am
Location: Salt Lake City, Utah

Re: FTO gets a facelift

Postby Marc_C » Mon Mar 03, 2014 1:55 pm

Admin wrote:These SOB hackers continue to make my life a living hell.

Ya know, if you'd just order that Russian bride already........
-marc
User avatar
Marc_C
 
Posts: 3172
Joined: Thu Mar 24, 2005 10:32 am
Location: A Sandy place south of a Great Lake

Re: FTO gets a facelift

Postby Admin » Mon Mar 03, 2014 2:40 pm

Marc_C wrote:
Admin wrote:These SOB hackers continue to make my life a living hell.

Ya know, if you'd just order that Russian bride already........


The French Canadian one I already purchased is enough already.
Image

Image
User avatar
Admin
Site Admin
 
Posts: 9969
Joined: Wed Sep 22, 2004 9:32 am
Location: Salt Lake City, Utah

Re: FTO gets a facelift

Postby EMSC » Wed Mar 12, 2014 3:22 pm

It's back like a bad habit....
Attachments
Capture.JPG
User avatar
EMSC
 
Posts: 1989
Joined: Wed Apr 11, 2007 6:54 pm
Location: Front Range of Colorado

Re: FTO gets a facelift

Postby Admin » Wed Mar 12, 2014 5:13 pm

I'm at the end of my rope. ..
Image

Image
User avatar
Admin
Site Admin
 
Posts: 9969
Joined: Wed Sep 22, 2004 9:32 am
Location: Salt Lake City, Utah

Re: FTO gets a facelift

Postby flyover » Thu Mar 13, 2014 6:55 pm

Admin,

I'm sure you and your crack team of highly-paid codemonkeys know this already, but this site is buggier than Angela Merkel's cell phone.

For 2 weeks now, I've been getting this message at work (we don't block anything based on content):

photo 2.JPG


Against my better judgment, over the last couple weeks I've visited the site a few times and logged on once (well, twice now) from home. On the Mac at home (Safari), intermittently, the formatting has been extremely weird and/or garbled.

Best of luck.
flyover
 
Posts: 299
Joined: Thu Jan 15, 2009 6:17 pm
Location: Minneapolis, MN

Re: FTO gets a facelift

Postby Admin » Thu Mar 13, 2014 7:27 pm

I unfortunately am all too aware. Beginning February 14th, a group of hackers gained entry to the website and begin sending spam messages via our server by the tens of thousands. I've been working diligently to try to plug the hole, but thus far have been unsuccessful. I think that perhaps today I finally found a solution, and with fingers crossed if things look good in a day or two I will begin publishing news again.
Image

Image
User avatar
Admin
Site Admin
 
Posts: 9969
Joined: Wed Sep 22, 2004 9:32 am
Location: Salt Lake City, Utah

Re: FTO gets a facelift

Postby EMSC » Thu Mar 13, 2014 7:39 pm

flyover wrote:I'm sure you and your crack team of highly-paid codemonkeys know this already, but this site is buggier than Angela Merkel's cell phone.


For me, less buggy, but the past week or two it's been VERY slow to load compared to other websites or 'normal' times... Certainly related to the hackers I'm sure, but thought you should be aware.
User avatar
EMSC
 
Posts: 1989
Joined: Wed Apr 11, 2007 6:54 pm
Location: Front Range of Colorado

Re: FTO gets a facelift

Postby Admin » Thu Mar 13, 2014 8:15 pm

Thanks. It is indeed related to the hackers. When they stack up the mail queue with 30,000 or 40,000 spam messages, it drags the server to a crawl.
Image

Image
User avatar
Admin
Site Admin
 
Posts: 9969
Joined: Wed Sep 22, 2004 9:32 am
Location: Salt Lake City, Utah

Re: FTO hacked!

Postby Admin » Thu Mar 13, 2014 8:31 pm

I split this off into its own topic -- it seemed like the right thing to do.
Image

Image
User avatar
Admin
Site Admin
 
Posts: 9969
Joined: Wed Sep 22, 2004 9:32 am
Location: Salt Lake City, Utah

Re: FTO hacked!

Postby Admin » Fri Mar 14, 2014 6:34 pm

So far my efforts seem to be working. Fingers are crossed. Yahoo mail users should be aware, however, that they've apparently blacklisted mail coming from our servers due to the overwhelming quantities of spam, so if you're registered with us (forums, news, etc. ) with a Yahoo address you're not going to be receiving those emails.
Image

Image
User avatar
Admin
Site Admin
 
Posts: 9969
Joined: Wed Sep 22, 2004 9:32 am
Location: Salt Lake City, Utah

Next

Return to F.Y.I.

Who is online

Users browsing this forum: No registered users and 1 guest


All content herein copyright © 1999-2017 First Tracks!! Online Media

Forums Terms & Conditions of Use