It's 4:36pm PST and we nearly have our server completely restored, we are waiting on our hosting provider to supply us with the last few files, mainly the Chat boards index files which we have restored temporarily but are a day old.

We re-enabled logins around 3pm. We would have had things running sooner, but focused on patching the hole first. Following are the details of what happened today.

At approximately 10am this morning, hackers from Brazil were able to locate and exploit a security flaw in an outdated web statistics generation program used on a site unrelated to ClubHombre, but on the same server. The attack was a relatively straight-forward defacement attack, where they automatically located and overwrote a number of files with their own "advertisment" of their successful hack. The attack was done completely via a web browser by typing commands into the address bar.

In other words, the hacker(s) did not gain direct access to the ClubHombre server nor any data that is not publicly available. Damage was minimized and we will have all defaced files completely restored.

We've done away with the outdated stats program and took the opportunity during the downtime to patch up and beef other potential security flaws. We should be back up to full speed a bit later tonight.

In the meantime, the only major utility that is not yet functional are the polls. It's fine to post, but please keep Chat posts to a minimum until tonight's update. Discus (this section) may be posted in freely.

Club Hombre does not have its own server?????

A dedicated server costs US$ 100 per month, with all bells and whistles and your own mainentance crew about 300 dollars per month

I like savings, but certain things are worth to do well and not save a few extra dollars.

Better yet,
Some jerk, who is in brazil right now is pissed because everyone on the boards is most likely trashing his nemorada, or bragging how good of a dick she sucks.
He's saying "nobody talks about my nemorada; I'll show them"

Good work getting it back up.
CN

We are on a dedicated server, the site is another one that I maintain that is not related to CH. With the bandwidth we use and our many options including a good backup service, our monthly fees are significantly higher than $300.

All active message boards and utilities have been fully restored with no loss of data. A few external files and administrative files that we use still need to be restored, but it's unlikely that any of you will see any of them.

As a silver lining to todays hiccup, we were able to plug the expolited security problem, eliminate a number of other potential flaws, and upgrade server software to a more secure version. The cost was less than an hour of downtime and our most recent chat posts missing for half a day, now fully restored...not too bad...

I shall sleep well...

Ceenotes, my intelligence is not high enough to understand your post and how it relates to server problems.

It seems you are from old guard Brazil Specialist bashing crew trying to squeeze in unrelated attacks wherever they can? I thought they had calmed down already??


Hombre,

I, too, sleep well now knowing that you guys have your own server. Would have surprised me if you guys were running this on a shared server account.


Keep up the good work.

BS, don't sweat it. It translates to "It was a minor hack, mainly visual, no personal data was compromised. We've fixed the problem and are more secure now." ;-)

Oh, the "jerk in Brazil" is the website defacement hacker, ceenotes?

I thought ceenotes was referring to me, Brazil Specialist, as the "jerk in Brazil". Just could not understand the logic of it.

BS,

Relax! you been picked on enough. I was just stating a joke, about the possible reasons, for whoever attacked the site.

I'm glad it took you 9hrs and 28 min to figure it out.
CN

Great job in getting the server back up so fast. I tried to log on and saw this hack....Hey guys. I posted a question in the topics/off topics post....Do beach town women taste different from inland women...please respond