Save file dialog when on main forum view page

penguinslayer

penguinslayer

A few brief minutes ago I had a save file dialog box pop up from the main page wanting to save a file which was 0 bytes. That's a first for me on forum software as a user, never seen it before. Maybe it's nothing, but in the wake of the compromise, I thought I'd post about it.

Please feel free to delete this if it was nothing.
 
scottro said:
Could you have just accidentally hit a key combo, perhaps while trying to close a page or something? (though I don't know what combo would do that).
Click to expand...
I thought about other possibilities prior to posting, but the browser was resting on the front page while still logged in. I'll post if I see it again.
 
penguinslayer said:
A few brief minutes ago I had a save file dialog box pop up from the main page wanting to save a file which was 0 bytes. That's a first for me on forum software as a user, never seen it before. Maybe it's nothing, but in the wake of the compromise, I thought I'd post about it.

Please feel free to delete this if it was nothing.
Click to expand...
If you had other tabs open, it could come from another tab. Also, I guess the dialog box didn't say the name of the file, did it? What kind of dialog was it? Not the typical dialog that appears when you are saving a file yourself, I guess. What browser are you using? If it happens again, take a screenshot if you can.
 
AlfredoLlaquet said:
If you had other tabs open, it could come from another tab. Also, I guess the dialog box didn't say the name of the file, did it? What kind of dialog was it? Not the typical dialog that appears when you are saving a file yourself, I guess. What browser are you using? If it happens again, take a screenshot if you can.
Click to expand...
It's impossible for the save file dialog which popped up to have been real, because my file save dialog looks completely different. How amusing. It was a direct popup which appeared on the screen, it wanted to save a 0 byte file called freebsd. I clicked cancel and it went away. It was smooth and quick, which felt more like a popup coming from the board software rather than a browser initiated download. It looked like a typical Mozilla/Firefox download dialog.

I'll refrain from saying what browser and OS I am using in case there's some type of user based targeting going on. As a possible precaution, I reluctantly disabled DMs for the board and a few other features such as viewing my status online, my profile, etc.
 
SirDice said:
Nothing was actually compromised. They managed to grab my session token (cookie) and used it to insert widgets through the forum's admin page. Those widgets have all been removed.
Click to expand...
Thanks! I didn't actually follow the thread(s) and the details since I'm just an end user who signed up after the incident(s). I tend to shy away from controversy.
 
You must log in or register to reply here.
Back
Top