Postmortem Security Breach on October 23rd, 2025

  • 🏰 The Fediverse is up. If you know, you know.
  • Want to keep track of this thread?
    Accounts can bookmark posts, watch threads for updates, and jump back to where you stopped reading.
    Create account
Oh, that explains the downtime then. I always like reading about these attacks and the defenses put in place against them, preemptively and not. It's fascinating stuff. I just finished making another offline backup of some important data yesterday, and times like these are always a good notice to do a digital perimeter check. Maybe I should start a thread on security autism for a website like this, or see if one already exists, since this kind of topic would be fun to discuss.

I've read somewhere that user login data, such as IP addresses and the like, are regularly purged after a month or so. I've also read that images have their EXIF data scrubbed on a similar timeframe. Is that true @Null, or have I been misled?
 
> /.git/ left out in the open

Time to audit .gitignore and make fun of the common misses.
 
Have you considered contracting some skilled-Indian tech engineers to help you secure the forum, Jersh?
 
I appreciate all of you trawling the file for funny. Please continue.
 
SandyCat said:
Is that just a random file someone uploaded to the file server or is this stuffed somewhere in the sites code only someone with access to the code could put there?
Click to expand...
/cow/ would wordfilter kiwi to foxdick for reasons I forgot but it would break links. I bought the domain to act as a redirect and if you visited the forum from that domain it would use that logo.

I used to be funnier
 
Null said:
/cow/ would wordfilter kiwi to foxdick for reasons I forgot but it would break links. I bought the domain to act as a redirect and if you visited the forum from that domain it would use that logo.

I used to be funnier
Click to expand...
Who drew the foxdick?
 
Considering what the site has been through in the past when it comes to security, this is a pretty inconsequential breach all things considered. Though with the source code out there for anyone to read, one has to wonder how many vulnerabilities are in the codebase that just aren't known about yet. The transparency is appreciated nonetheless.
 
I always appreciate your transparency about site updates (good and bad), Jersh. Not something you see elsewhere
 
I doubt anybody will use the source code to try and start their own farms, but that source code will definitely find their way into the hands of the trannies that constantly DDoS the site. Could be used to find site and software vulnerabilities. Hope there is precautions going into place to deal with that when the time comes.
 
You must log in or register to reply here.
Back
Top Bottom