camrynekai Posted December 31, 2007 Report Share Posted December 31, 2007 I clicked on the link to his web site and it said that it was hacked by Dr.Root... any idea if he knows about it? Thanks Just looking to buy some molds. Quote Link to comment Share on other sites More sharing options...
SwampBaits Posted December 31, 2007 Report Share Posted December 31, 2007 If he doesn't know, he will shortly! That's a bummer! Quote Link to comment Share on other sites More sharing options...
dampeoples Posted December 31, 2007 Report Share Posted December 31, 2007 That is a bummer Quote Link to comment Share on other sites More sharing options...
bhorlings Posted December 31, 2007 Report Share Posted December 31, 2007 I noticed it this morning too. I could not remember his email address so I looked him up on here but it said he does not have his email listed. Quote Link to comment Share on other sites More sharing options...
earthworm77 Posted December 31, 2007 Report Share Posted December 31, 2007 People suck!! Quote Link to comment Share on other sites More sharing options...
kelly Posted December 31, 2007 Report Share Posted December 31, 2007 I am lost on this I just joined his site. What would they find maybe credit card no. I hate some peoples kids!!!!!!!! Quote Link to comment Share on other sites More sharing options...
dampeoples Posted December 31, 2007 Report Share Posted December 31, 2007 More than likely they just found a loophole in his cart software that allowed them to add their banner image. If the intent was to steal credit card numbers, they'd have to be a whole lot smarter than finding what is probably a published loophole, and taking advantage of software not updated yet, then they more than likely wouldn't have left a message. I may be wrong on this, but I think Del uses Paypal to run CC's, so at best they could find your address from his site. Quote Link to comment Share on other sites More sharing options...
Delw Posted December 31, 2007 Report Share Posted December 31, 2007 I know about it. Its the forum software only VBulletin NOT THE STORE. The STORE is on a secured Server. so don't worry about the credit cards and personal info. my server guys are working on it now. Anyone with Vbulletin better upgrade these sites immediatly. Now I have to match whits with some 14 year old Hacker.... Thats going to be a tough one LOL. Quote Link to comment Share on other sites More sharing options...
Spike-A-Pike Posted December 31, 2007 Report Share Posted December 31, 2007 I used to live in the crazy world of DoD cyberspace and we would hit periods where a movie would air or a story would be printed and then every DoD site world wide was a target. That's why a lot of folks still use a non-Windows operating system for their servers. As dad used to say, “If brains were dynamite, some folks wouldn’t have enough to blow their nose, let alone break wind!” Hope he, his net admin, or ISP can get him up and running soon. Quote Link to comment Share on other sites More sharing options...
Delw Posted December 31, 2007 Report Share Posted December 31, 2007 just blows my mind people are that smart. I wish I was half as smart as some of these pc geeks. the support guys said it was just a index page hack from what they can see now. This does bring up an issue for guys running stores with out a secured server. LIKE OS COMERCE and other shopping carts. GET A SECURED SERVER or use paypal only and DONT take any CC cards unless you have a secured server. Quote Link to comment Share on other sites More sharing options...
JDBaits Posted December 31, 2007 Report Share Posted December 31, 2007 I dont think it takes smarts, it was probably just a pimply faced 14 year old kid using a program he downloaded........ Quote Link to comment Share on other sites More sharing options...
Spike-A-Pike Posted December 31, 2007 Report Share Posted December 31, 2007 Del. Sounds like your site is back. Now, lets hunt hackers. I know the DoD does. Quote Link to comment Share on other sites More sharing options...
Laydog Posted December 31, 2007 Report Share Posted December 31, 2007 I know one of the sites I used to run got hacked by some moron... He contacted me and said to get the site back I would have to pay him $250. He said after I paid he would replace it and secure ti for me. I told him where to stick it, rebuilt the site and had a friend hook it up for me. I hate when people take advantage of others like that. There is literally no reason for it. Quote Link to comment Share on other sites More sharing options...
earthworm77 Posted December 31, 2007 Report Share Posted December 31, 2007 Laydog, that sounds like what that guy was doing was criminal. Quote Link to comment Share on other sites More sharing options...
alsworms Posted January 1, 2008 Report Share Posted January 1, 2008 This happened to me once after my site had been up a year or so. Fortunately, it was just the message board portion of the site. I didn't even know about it until one of my customers said something. The funny thing is I had dudes from India talking about everything BUT soft plastics on MY message board. Sorry to hear about that Del. These idiots really do deserve the harshest of penalties. They are messing with peoples livelihoods. I hope everything gets back up and running as usual. Quote Link to comment Share on other sites More sharing options...
Richard Prager Posted January 1, 2008 Report Share Posted January 1, 2008 Someone send the little extortionist a mold and some plastic. He'll never have time to hack another site! Quote Link to comment Share on other sites More sharing options...
Spike-A-Pike Posted January 1, 2008 Report Share Posted January 1, 2008 Al. This may seem slightly paranoid, but in the post 9/11 years, since the folks abusing your site were foreigners, you probably should have notified the FBI. In the years of investigation into events leading to the attack, the discussions about how different cells communicate back and forth, any hacker has to be given at least a minimum investigation. The worst that can happen is they say thanks, we’ll look into it, you never hear from them, they put your name on a NSA watch list, the IRS secretly audits your returns 6 times a year, prototype designs for your next years lures disappear from your computer and show up in latest edition of the Bass Pro Shop catalog. Okay, I piled it up about the NSA, IRS, and BPS for the entertainment value, but the fact is you can just put blinders on any more. Quote Link to comment Share on other sites More sharing options...
alsworms Posted January 1, 2008 Report Share Posted January 1, 2008 Good point Bruce. Hate to be the consumate stereotype, but you just never know. Makes a person think. Quote Link to comment Share on other sites More sharing options...
kendo Posted January 1, 2008 Report Share Posted January 1, 2008 This does bring up an issue for guys running stores with out a secured server. LIKE OS COMERCE and other shopping carts. GET A SECURED SERVER or use paypal only and DONT take any CC cards unless you have a secured server. OS Commerce can be setup securely. I have used it for many years for different clients and no one has ever had a problem with security. Del I hope your ISP finds the person that did this and reports them. It is their duty! If your site gets hacked, that means the ISP server has been hacked. Quote Link to comment Share on other sites More sharing options...
GB GONE Posted January 1, 2008 Report Share Posted January 1, 2008 Kendo is correct. The ISP should not have that diffucult of a time finding out who (in IP terms) hacked their servers. They should have solid policies in place for such an event and also have tracking tools available. Hacking is a crime!!! Jim Quote Link to comment Share on other sites More sharing options...
Delw Posted January 1, 2008 Report Share Posted January 1, 2008 OS Commerce can be setup securely. I have used it for many years for different clients and no one has ever had a problem with security. Del I hope your ISP finds the person that did this and reports them. It is their duty! If your site gets hacked, that means the ISP server has been hacked. Kendo is correct. The ISP should not have that diffucult of a time finding out who (in IP terms) hacked their servers. They should have solid policies in place for such an event and also have tracking tools available.Hacking is a crime!!! Jim proxy Ips are a dime a dozen and its very hard to do anything about it. My host don't mess aorund and I am sure it was taken care of. I used OS for 3 years and so have alot of my buddies they get hacked alot due to the the open source. but like any software if you don't keep it updated everytime a new security release comes out its open to hacking. they came through one of the security problems that I didnt update with VB combined with the gallery software. My host is on my butt all the time about me updating my software, I was just busy and lazy and I paid for it this time. its updated now that for sure. There is groups of hackers that do nothing but hack sites leaving there mark like they did mine. in a way its a good thing as it shows that you are open to hacking if you don't update. so after someone gets hack they usually keep on top of there updates. one thing that always kept me from updating the new stuff was the hacks I have in the software, the way vb is doing it now it doesnt take hours and hours to upgrade anymore. it took me 20 mins last night to upgrade and I had no problems with the add on hacks like in the past. when I did my 3rd site last night it took all but 5 mins, software updates come a long way in the last year and alot easier too. Quote Link to comment Share on other sites More sharing options...
GB GONE Posted January 2, 2008 Report Share Posted January 2, 2008 Unless the attack is sophisticated (which most are NOT), the ISP can easily find the culprit. Proxy IP's are easy to get but there is a trail to where they come from believe me. They could be tracked down and are when the crime is serious enough. Problem is that these kind of hacks are not taken serious by the ISP and others so they go unpunished. I give up the hassles of keeping things up-to-date by hosting with a third party. It's on them to keep things up to speed, not me. Jim Quote Link to comment Share on other sites More sharing options...
Spike-A-Pike Posted January 2, 2008 Report Share Posted January 2, 2008 Jim sort'a said it... It's a matter of time and money. How much time you put into keeping your site up to snuff or how much money you pay to have somebody eles do it? It just torques my bolts to know that there are punks with nothing better in the world to do than hack on other folks income. Quote Link to comment Share on other sites More sharing options...
Delw Posted January 2, 2008 Report Share Posted January 2, 2008 Unless the attack is sophisticated (which most are NOT), the ISP can easily find the culprit. Proxy IP's are easy to get but there is a trail to where they come from believe me. They could be tracked down and are when the crime is serious enough. Problem is that these kind of hacks are not taken serious by the ISP and others so they go unpunished.I give up the hassles of keeping things up-to-date by hosting with a third party. It's on them to keep things up to speed, not me. Jim jim these guys(hackers) are pros, they know what they are doing. They know the system and how to get around it and through it. Also a host doesn't update shopping cart software and forum software nor the html page software that is up to the customer. they do update my dedicated server and my secured server with all the php and other stuff to do with the server. Quote Link to comment Share on other sites More sharing options...
GB GONE Posted January 2, 2008 Report Share Posted January 2, 2008 I have friends that can hack the airlines to see flight times coming and going. I know guys that hack sites all the time and they are far from professionals!! Google "Hack shopping cart software"...You can find the hacks to everything if you dig long enough. Point is...if you want to hack into webs sites, forums etc you can with little or no knowledge. If these were pros of any sort, they would not have taken your site down. The non-pros do that. Also, the non-pros are the ones that steal info etc and cause harm. Real hackers just expose vulnerabilities then go to the software company and alert them. Jim Quote Link to comment Share on other sites More sharing options...
