RPGWatch - We Are Back

Good to see all of you guys and gals again. I've missed you! And thanks for your efforts Myrthos.

Interestingly enough, like Rune, when Watch vanished I was kinda wondering it wasn't DDoSed... Not because of SotA though but because we were nasty to No Man's Sky :)
 
Joined
Jan 10, 2008
Messages
4,721
Myrthos said:
There is no way to know for sure if we were hacked or not. All the log files are gone.
Click to expand...

From what you've told us, it sounds pretty suspicious. I think we have to proceed on the worst assumption. It'd probably be a good idea to put up a notice to inform people, in case they ever exchanged sensitive or financial stuff in PMs. Also we should change passwords.
 
Joined
Nov 8, 2014
Messages
12,085
Welcome back everyone! I missed you all!

Seems the site is on an on-off basis atm, still, better than nothing. :)
 
The interesting thing is that I just got a spam report from my e-mail provider - containing an e-mail address of mine I have *never* seen used for spam for the very first time now …

I suspect that whoever hacked this server might also have gotten e-mail addresses.

I do wonder now whether we all should change our passwords of RPGWatch again ?

Ripper said:
From what you've told us, it sounds pretty suspicious. I think we have to proceed on the worst assumption. It'd probably be a good idea to put up a notice to inform people, in case they ever exchanged sensitive or financial stuff in PMs. Also we should change passwords.
Click to expand...

I have once read of a very serious Trojan, which deletes the MBR and something more if the Trojan suspects analysis of the infected PC.

But what REALLY astonishes me is the inability to give the customer - Myrthos - the wanted back-up - and even replace everything with an new OS etc. , thus overriding everything. One could think that this was done to erase any traces of something that happened within the fim itself.
It also reminds me of the NSA and their hacking / "reworking" of routers and of other network devices ...
 
Last edited:
Joined
Nov 5, 2006
Messages
21,975
Location
Old Europe
Caddy said:
Welcome back!! How can we help? Do you need us to start pulling cached pages to restore content?
Click to expand...

This is perhaps a good idea. Or maybe googlecache will work at least to restore articles from Gamescom.
 
Joined
Apr 12, 2009
Messages
23,459
Glad to see it back. I was starting to worry that it was gone for good.

Thanks for all your work Myrthos.
 
Joined
Aug 15, 2011
Messages
33
Alrik Fassbauer said:
I have once read of a very serious Trojan, which deletes the MBR and something more if the Trojan suspects analysis of the infected PC.

But what REALLY astonishes me is the inability to give the customer - Myrthos - the wanted back-up - and even replace everything with an new OS etc. , thus overriding everything. One could think that this was done to erase any traces of something that happened within the fim itself.
It also reminds me of the NSA and their hacking / "reworking" of routers and of other network devices …
Click to expand...

I doubt the NSA are after us, but it could be the Russians. :paranoid:

If it was a hack, I very much doubt it was accomplished by Windows trojans. Most likely a vulnerability in Vbulletin, sql injection, etc. The hosting company sounds pretty crap, but the backup situation is probably not their fault. If you run backups from within your webserver, then the passwords to the backup location are available when someone hacks it. They can then destroy your backups too.
 
Joined
Nov 8, 2014
Messages
12,085
Great to have RPGWatch back. I start my day here everyday. I watched too much porn the last week because I was so damn bored :) You guys are getting a donation from me because you don't realize how much you miss something until it is gone.
 
Joined
Aug 28, 2010
Messages
2,862
Location
Wolf Light Woods
The sender e-mail address can be spoofed. What you need to look at are the header files of your mail. Depending on the email reader you use, you should check how to you can get to them. They tell you where the email originated from.
You could use a service like this: http://mxtoolbox.com/EmailHeaders.aspx
to make them a bit more readable.

In the meantime the server is absent at times. This is because PHP decides to relax and goes of doing something else. On a manual restart it recovers immediately, automatically it takes about 5 minutes or so. I have to dive into this to figure out why it is doing that.
 
Joined
Aug 30, 2006
Messages
11,223
I will echo the rest and say I am very relieved to see the Watch back up. :)
Like Hastar said, you don't know how much you miss something until it's gone.

Heh, at first I thought they finally found out how frequently I visit this website at work and decided to block it. But then I found the twitter account (which I didn't know existed) and was somewhat reassured that that wasn't the case.
But look, we're back, so let's try to keep it that way, hm? ;)
 
Joined
Oct 18, 2006
Messages
2,378
Location
Leuven, BE
Another site also went down very recently because of a vbulleting exploit, a big site, don't remember which, so probably that was the culprit.
 
Joined
Sep 23, 2008
Messages
5,645
Location
Tardis
I check my spam folders and I haven't seen a single RPGWatch email there. For whatever it is worth.

It's not something I do that often, but man spammers and scammers aren't what they used to be. I'm receiving untitled emails from them lol.
 
Joined
Oct 13, 2007
Messages
7,313
You must log in or register to reply here.
Back
Top Bottom