. We are on the high level.I took a screenshot with my cell phone.
No. We were in constant contact with various folks from core, foundation and clusteradmin. So, none of this nonsense please.
Not that I could find in our situation. I took apart their injected javascript. It didn't do much besides redirecting to a github repo that hosted the "defacement" page. That defacement page also contained some javascript, but that was nothing more than a basic http/tcp/udp connection flooder. Nothing fancy and most of it didn't even work properly.
There was a Foundation post on Facebook. Showing they knew nothing. Excuse me if I sometimes over-exagerate. I only tell my feelings. And really have no idea, the good/bad they do. So for me it is something "black".
They managed to center the div vertically. That's impressive enough
That was funny.
i guess that my proxy blocked the bg image. i simply saw a black bg.
@media (max-width: 300px) {
.haha { display: block; }
}
This is literally what happened.
Exactly. Us open source heads always brag about how both linux and freebsd are super secure, and then we have our forums pwnd like this. Its pretty embarrassing.
The security of the OS isn't going to stop a parsing bug in a web application. That's how most, if not all, hacks happen nowadays. It very rarely happens because of a bug in the OS itself.
XenForo is not open source. also, XenForo is not Linux or FreeBSD, it's a piece of third-party software.
Yeah, having a good, workable plan on how to get back up and running reasonably quickly after an incident IS one important aspect of administering a public service. Another important aspect is being able to communicate solid info about the status of the said service. But sometimes, it's faster to fix the situation than to fully analyze what happened and write an announcement. Besides, when a situation is solved, analysis stops being that incredibly urgent. Basically, it takes some level-headed thinking to realize that the priority should be on technically rectifying the problematic situation, rather than analysis and announcements. Especially given the fact that the Forums are basically a
communication platform with no real alternative method of reaching the users. Kind of like having roads washed out by a flash flood - nothing happens until the road is fixed, and fast, and full analysis of the economic and social impact of that flood can wait.If you're referring to this (the recurrence), then you're wrong.
That's strange because the cad/cura-engine port has last been updated on
2025-11-05 so if its only a change to that port the logic bomb should've blown up
in all our faces weeks ago.No need to lecture me about that. You are completely missing the point. The fact that it happened is what makes us all look bad. I mentioned both linux and freebsd in my posts, but im fully aware that it has nothing to do with either. Its a human factor as stated below.
It would be perfectly understandable if this was an agricultural or cooking forum that was run by bunch of incompetent Kares. But its not.It happens, and i understand. But you cant deny the fact that it looks bad.
Its because you are taking what im saying literally.
Note i entered bug report, after 90minutes of outage , problem was fixed only one hour later, ok needed some reminder. That was very quick/