• entries
    96
  • comments
    103
  • views
    71,078

vBulletin strikes again.. PC Gamer Forums

I haven't liked vBulletin for some time now and mostly put that forum software behind me except for the occasional jab about how bad their software is. I came across this interesting update from PC Gamer the other day... with a part that I emphasized:

http://www.pcgamer.com/2013/07/26/why-forums-and-comments-are-still-offline/

Quote

Why forums and comments are still offline

You may have noticed that the forums and comments have been switched off for the past few days. On Friday 19th July one of our trusted moderators reported suspicious activity within the forums. They had discovered what appeared to be a script hidden in a forum announcement post. The script had been designed to steal users’ details (including password and date of birth) when clicked.

As a precaution our IT security team took immediate steps to close the forum to block the attack and fully investigate the extent of the intrusion. At this point we became aware that a small group of admins and moderators had their accounts compromised, the first of which had been used to post the malicious script.

It’s important to note that at this point our IT security team’s investigation has revealed that no other user data has been compromised, but it’s taken a few days to precisely pinpoint the problem so we can start plugging it and get everything back up and running. Apologies for the down-time; we’re being super-careful to ensure that the issue’s totally squashed before bringing things back online. All other site functionality that required user login will also remain inaccessible for the time being including new sign-ups to Gamer Rank.

There’s good news for fans of heated debate and occasional cat jokes, though. An interim solution will go live shortly that’ll bring back comments on article posts, so discussion can return to PCGamer.com. Praise the sun. It’s been spookily quiet around here.

The forum will take a little longer to return – especially as we will be reviewing our choice of forum software – but rest assured, we have our finest site surgeons on the case. We’ll let you know as soon as everything’s clear. Thanks again for your patience. We hope to get everything ship-shape as soon as possible so that normal service can resume.

For the official corporate line read below:

On Friday July 19th we were alerted to suspicious activity on PC Gamer forums by one of our moderators. This involved the posting of a malicious script into a forum post which, if clicked, could have stolen a user’s username, password and date of birth.

We took immediate action by closing down the PC Gamer forums and disabling user login. As a preventive measure we also closed all other forums within the Future network which use the same forum software, vBulletin.

Subsequent investigations into the extent of the intrusion on PCGamer have revealed the following:

- A small number of admin and moderator level passwords have been compromised. These were immediately dealt with on Friday July 19th.

- There is no indication in our logs which suggest any other user’s data has been compromised.

In light of this we are now investigating whether any of our other forums have been compromised using a similar exploit although we must stress at this point there is nothing to suggest any of other forums beyond PCGamer were targeted.

We will also be using this investigation period to review our choice of forum software to ensure chances of future attacks are as low as is possible.

Please visit the host site of your forum for any further information on the resuming of forum service.

We apologise sincerely for any inconvenience this outage is causing.

http://mos.futurenet.com/forum/

Quote

Important security update about Future forums

PC Gamer

Last week on the 19th July 2013 we discovered that PC Gamer's vBulletin-powered forum had been the target of a malicious attack. Immediate action was taken to shut the forum which blocked the attack and we have since been thoroughly investigating the damage done and how this attack took place.

We have no evidence that any of the PC Gamer's users' details were stolen. However we feel it is safest to keep the forum closed until we are satisfied that the security vulnerability in the software is fixed. Information on the progress of this will be communicated via the PCGamer site.

Other Future Forums

If you are seeing this message it is because this vBulletin forum has been closed as a precautionary measure. We have no evidence this forum has been compromised, however we are investigating each forum in our network individually to be sure this is the case.

The website teams will be in touch with more information on the progress of this as soon as it becomes available.

We are truly sorry for any inconvenience caused, we take our user's security very seriously and we appreciate your patience.

I don't visit PC Gamer's website, so I'm not certain what version of vB they were using, but this is pretty huge. The took all of their entire network's vBulletin powered forums offline because it was exploited.

Well PC Gamer, I suggest you switch to Invision Power.

vBulletin has really gone downhill and I'm glad we stopped using their software when we did.




4 Comments


UBB 4-LIFE XD

Thats pretty shitty though. vB use to be a great product. We had some good times under that format. Heck the Station Syndicate project ran under it and SS Radio was a blast to mess with.

Share this comment


Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now


  • Recent Status Updates

    • DeathscytheX

      Well I guess I put off buying a video card for too long. All the prices have skyrocketed by 50% or higher because of some bullshit ethereum mining thing. I'm def not paying these prices. I was planning on doing it next month when I financially had a chance to do so. I guess I'll have to hope my video card last a bit longer.
       
      · 5 replies
    • DeathscytheX

      The older I get, the more I dislike the general public. I was never Mr. Popular in school because I kept to myself and felt that the upper echelon of the social order was so trivial. I can befriend just about anyone of any type of values/background. But overall my circle of friends is pretty small, and always has been.

      I say all that to say this... holy shit why are people so fucking stupid on the internet? I'm pretty new to this whole reddit/facebook groups thing. I remember running around anime forums as a 14-15 year old shooting off at the mouth like I was hot shit... but these are grown ass adults that don't have a fucking clue what they are talking about, nor do they want to learn.
      I see all these morons on the GW2 facebook group asking dumbshit questions you can easily look up yourself on wiki or youtube... The GW2 community has the best community of YT guide makers of any game... quite literally there are the most pointless guides for even the biggest imbeciles.  Taking 5 steps in a straight line from a waypoint to get to a POI? You better believe there is a YT video on how to do it! Just type in the name of the POI and at least 5-6 20 sec-1min videos will pop up. You could have tabbed out of GW2, or pulled out your phone and looked that bullshit up and got it done w/o wasting your time posting a question in a facebook group and waiting for someone to respond. I mean what the actual fuck? Then they get butthurt when someone posts the link to the wiki, and people actually coddle this fool like we shouldn't tell him to try harder to help himself? I almost left the group because of that because it was the second time in two days I saw it. Kumbaya shit pisses me off, and as a society its lead to the everything is offensive/racist/bigoted/cruel. Sometimes people have to feel like people think they're stupid to better themselves. Its called learning the hard way, and I've done a lot of it myself.
      Then you have assholes telling you about the class you main, and they have no fucking clue how the class works.... because they don't even play it. They main another class. Its obvious by what they're spewing out, by leaving out various aspects of the class while giving out vague descriptions... then a lot of times saying something that's completely false.
      But this is just a side note really, what set me off on this rant today is another facebook group. I'm a EDC nut. I own multiple guns, pocket knives, and flashlights. I recently got into a group about a particular brand of knife I enjoy. Overall its a great group that gives me good ideas about future purchases I might make. I recently ordered a knife that is an upgraded version exclusive from a certain knife retailer. It has a high tier quality blade steel, making the knife double the cost of the standard version. Even then at $80, this steel is normally only found on pocket knives that are $220-400. Its one hell of a deal. So this new guy that joined the group asks in a comment reply why would anyone pay double the price for this knife when he got it for way less. I explained to him what the deal was, because that's what the group is for... sharing knowledge and opinions. He never responded so I figured he understood and moved on.... then later down the comments I see him ask the question again... Another member tells him about the steel, and I follow up explaining that its an exclusive version of the knife only sold by that particular retailer, and I even go into why that steel is special and its characteristics. Once again no acknowledgement. He later makes his own post, posting the basic version of this knife that he owns, and someone asks him what version it is, and he states he just found out that there are more than one version of his knife and asks AGAIN why is there a one doubled in price.... this all took place in the span of 17 hours. I mean did you not fucking read mine and other peoples explanation? You read it enough to know there was more than one version! Holy shit.... Why are you so fucking ignorant? Is your mental retention that bad? How did you even manage make it back to the facebook group two days in a row?
      I'm not really raging, even though it sounds like it. It just bothers me that people act this helpless. The internet has made people even more lazy despite the fact that there is a wealth of knowledge to be had. I've learned a shit ton using it, whether it be about science, history, or my very own hobbies. I mean how do these people even pay their internet bill? Did they post on their ISP's forum to ask how to do it? Google is a powerful tool to find quick answers to everything. It requires way less clicks. Use groups and reddit for opinion discussion... not for basic questions that you need to find on your own. You just look like someone that could drown in the shower.
      · 2 replies
    • Sledgstone

      I wish amazon would indicate if something is being shipped from out of country. The last 2 items I've purchased were both prime eligible and both gave the impression there would be 2 day shipping, until I get to the checkout and 'free 2 day shipping' has a delivery date of 1 week later. Still no indication as to why until I get the UPS tracking number and find out the item is being shipped from Canada. I haven't had anything from amazon actually arrive in 2 days in over 8 months.
      · 11 replies
    • DeathscytheX

      Condi'ed out my Rev WvW style. I need 2 earrings and I'll be fully ascended. Cost me 400g to do for the armor. I already had the mace/axe/staff to stat swap. I didn't get to test it out because I spent 4 hours farming AB for Superior Runes of Durability. But it gave me a chance to learn the class more. I have 20k HP, a ton of toughness, and I can rack up 4k ticks of torment and confusion on vets. Getting rolled on by arrowheads only takes 15% of my HP. I can't wait to give this a shot tomorrow night with what I have.
      · 12 replies
    • Strider Hiryu

      So the Stormblood Early Access is fucking broke and everyone in NA trying to play the story is locked behind a mission no one can do due to SE dropping the fucking ball because of server congestion (or that's what they're saying, I've been waiting since 7 am to finish the god damn quest. Finally gave up since I can't get into the instance to do it). GG SE, I'm pretty sure if you get it fixed it's just going to break on Tuesday when SB officially launches. I forsee many angry customers and a lot of rage quitters. On a side not Samurai is fucking amazing and I think, once the story is finished on my Ninja, I'm switching jobs again. The amount of dps and damage this job can put out at 50 is enormous so I'm expecting great things from it at 70.
      On a much better note I finally got around to trying out Black Desert Online tonight. Gotta say besides being a freaking beautiful game it's actually pretty fun and addicting. Really like how the combat plays out with all of its combos. Definitely worth the $10 entry fee (that is if you're computer can run it, I'm running on high settings and not having any real issues). I think I found my new game to fuck around in when I run out of things to do in FFXIV (if I ever do x.x).
      · 12 replies
  • Topics