HACKED

[Cutie Pie #2]

:thumbdown:Being Hacked sucks, at least yarisworld is still here. I really would have been mad if this site would have went for good, I really like this forum, its my favorite. Cutie Pie is now Cutie Pie #2. Hopefully no one had any important private information that could hurt them. Good thing I saved some of my pictures. I will post them in my new galley soon.

[TheRealEnth]

Yeah, I guess we just need to do it all over again.. =( But thanks to the admin and the whole team this site is back up the next day. We can rebuild It. Make it Harder, Better, Faster, Stronger! We have the membership power!

[synchronicity]

What a day to decide to come back and look for fog lights.

[TinyGiant]

Garm,

We want and appreciate your strong involvement in Yarisworld...I don't think you'll find anyone here whom wants to lose you...The loss of info sucks, but we are a community of peers here, and we will work together to bridge the gap...

Myself, and the other moderators are committed to our members - friends, members, vendors alike...You are a senior contributor to Yarisworld, and IMO your presence far exceeds your vendor status, and as such it would be a huge loss here of your knowledge, enthusiasm, and character were you to leave...

I think you will find that our member's will be more commited than ever to support you, and I hope you will continue to see support for your enterprise growing bigger each day that you are here...

Cheers

+600 (give or take)

you better stay and sell crap here garm.. i have to have somewhere to spend my xmas money this year...

[bigsky2]

Sorry to hear about the attack.

Hope things get back to normal again.

[m911gt]

Hi everyone, I'm new here...wait no I'm definitely not...damnit.

Let's not get too extremely discouraged people...time to rebuild.

[jclo3313]

I found a bug!8632

[TheRealEnth]

-smacks screen-

[jclo3313]

-smacks screen-

LOL8633

[jeremyshay]

holy crap, im back to 39 posts!

[m911gt]

hmmm

[SeansGirl0604]

Hi everyone, I'm new here...wait no I'm definitely not...damnit.

Let's not get too extremely discouraged people...time to rebuild.

HA! Matt!! I just noticed that I now have more posts than you. I found a positive to the whole hacked thing. :bellyroll:

[DMart]

its all good, YW will be back in no time!

[jclo3313]

its all good, YW will be back in no time!

Damn, I thought that I had the most posts in Ga.:biggrin:

[m911gt]

HA! Matt!! I just noticed that I now have more posts than you. I found a positive to the whole hacked thing. :bellyroll:

you just passed up your opportunity to change your user name :iono:

but yes, right now you have more posts than me, hehe

[DMart]

Damn, I thought that I had the most posts in Ga.:biggrin:

lol you will, i dont post alot, most of mine are old

[jimtevin]

Er, what happened?

[specialeducator]

looks safe to me

[jimtevin]

lol ok...hacked I guess? I might be able to help...I am an IT security guy for my job

[specialeducator]

lol ok...hacked I guess? I might be able to help...I am an IT security guy for my job

They might need your expertise

[ToddR]

Excellent time to change your password if your account did not get nuked.

[jclo3313]

Good call. Things will never be the same after the 10/18 attack.:iono:

[bikegerm]

Wow !! Just got back from being out of town. WHAT KAOS !!

First off......DON'T GO GARM !! THE ENTHUSIASTIC MEMBERS AND SERIOUS PAYING CUSTOMERS YOU HAVE HERE WOULD GREATLY MISS YOUR KNOWLEDGE AND SUPPORT!! THAT ALSO GOES FOR ALL OTHER YW VENDORS. HOW ELSE WILL I FIND YOU AND KEEP GIVING YOU MY "TITHINGS"?

Second off...stay positive, this is just a big purge. I know losing the data sucks, but live and learn. What YW member hasn't been burned with data crashes? I think we all have....

Third... I think yarisworld should establish a paypal account where members can "donate" to the yw administrators to help pay for daily backup expenses. I realize the vendors are probably paying for banner ads and other things, but I feel it's can also be part of the members responsibility.

Thanks YW for getting it back up so quickly. We can rebuild her. We have the technology !!

bikgerm
yet to be re-established....

[jclo3313]

Wow !! Just got back from being out of town. WHAT KAOS !!

First off......DON'T GO GARM !! THE ENTHUSIASTIC MEMBERS AND SERIOUS PAYING CUSTOMERS YOU HAVE HERE WOULD GREATLY MISS YOUR KNOWLEDGE AND SUPPORT!! THAT ALSO GOES FOR ALL OTHER YW VENDORS. HOW ELSE WILL I FIND YOU AND KEEP GIVING YOU MY "TITHINGS"?

Second off...stay positive, this is just a big purge. I know losing the data sucks, but live and learn. What YW member hasn't been burned with data crashes? I think we all have....

Third... I think yarisworld should establish a paypal account where members can "donate" to the yw administrators to help pay for daily backup expenses. I realize the vendors are probably paying for banner ads and other things, but I feel it's can also be part of the members responsibility.

Thanks YW for getting it back up so quickly. We can rebuild her. We have the technology !!

bikgerm
yet to be re-established....

Well said. Nobody will feel the same but we can't let the bastards grind us down. I wish we could go back, but it is what it is.

[Bob_VT]

yea, we have daily backups now.... sorry everyone, it should have been daily backups before but i got us a backup service that will do it for us now. setting up as we speak.

Hey crap happens. Thanks for a great forum.

Maybe the hacker's will die untimely deaths :smile:

[jambo101]

Hey it works again ,i feel like a 1 post noob.:biggrin:

[sanityassassinv2]

Whew, I'm finally able to post. For some reason I had to change my name to "v2"...I never got a confirmation email on my other name when I re-registered. It really stinks having 0 posts, but oh well--I'm glad you guys were able to keep the site up. Thanks!

BTW, can someone either activate "sanityassassin" and get rid of this account or vice-versa? It won't let me change my email address to my home email address (because it says it's already in use).

[slothman86]

How about this pissed me off so much!

[SeansGirl0604]

Excellent time to change your password if your account did not get nuked.

Yep..I just was required to change my password..but I might start over anyway.

[uncleyaris]

It reminds me of the markets right now. I just lost 1200 posts!!! Sucks but we'll bounce back!!!

[*MAD DOG*]

I feel horrible about this but what do you want me to do at this point? I didn't ask for this, I never did anything to piss anyone off. Someone very malicious and vicious came and attacked the forum and I've been working for more hours then I can count to bring things back as best as possible. Sure I wish I had daily backups. Sure I wish we had a 24 hour onsite server maintainance company to watch things for us and keep the hackers out. But the fact is that I'm one person who is trying to run the site in conjuction with an amazing moderator team and amazing site membership. This place is a homegrown effort for sure. I'm frustrated and I want to snap quite a few necks right now, but the only thing I can actually do and have an effect on is to get things back up to par. I haven't even spent that much time trying to trace the hacker as I have been in just setting things right. At this point retribution is much less important than getting the ship floating and sailing straight again. Take my word for it, its alot of work and I might be moving the server completly today as right now we are leasing the space and since i'm dropping some more money on daily backups I might as well spend some on a new server... theres alot on my plate right now and i'm doing what I can to fix things and i'm sorry I didnt do everything I probably should of but please remember this is a complete donation of my time and money; i've never asked for anything from anyone and never will. Sorry i'm rambling right now. Ok, keep the PMs with suggestions coming i'm implementing things as they come in so if you've ever wanted something, nows the time to ask :)

:thumbup:

YarisBueller,

I'm sure you feel horrible about this. I would feel the same if I was in your shoes, knowing that I was responsible for a years loss of information for not having proper back up procedures (daily, weekly at least).

I'm not accusing you of wanting this to happen, no one apart from one ex-member (captavise aka vpcorp had stated he would bring the site down within the last 2 months), all i'm saying is prevention is better than cure and if a proper back up procedure had been implemented all the heartache of administrators, moderators, vendors, members could have been avoided.

I even remember a thread about 3-6 months ago the mod team was calling for people to "hack" the site to check how secure it was. At that point in time I thought that a backup would have been made before such an offer went out just in case something bad happened.

I understand you've probably put hours into getting this forum back up, I would do the same if I was an administrator as it would be my responsibility to do so, not to mention the guilt attached of not doing proper back ups. I know it seems I’m harping on about this.

I really understand that this forum has an excellent moderator team, all of them are approachable via pm or email and most would go out of there way to help anyone. The forum also has an excellent member base who are also willing to help anyone with advice, suggestions and DIY's.

I would like to conclude by saying that I understand that no amount of bitching, whining, throwing tantrums on the floor will bring back the lost information. I also understand that it is more important that all members rebuild this great forum as we are a great community with lots of helpful information to share.

But most important is to learn the valuable lesson the hacker/s has taught us.
Back up daily. I'm also glad that now a proper back up procedure has been implemented and this situation would be overcome easily if it was to happen again.

YarisBueller, I would like to thank you for doing the best you can with what you've got to get this forum to where it once was and even better.

---
*MAD DOG*

[mark2908]

I can't believe someone would do this to YW. Back up, Back up, Back up.
If funds are needed to do weekly or daily backups... I'd be happy to chip in, as many other members would be too. Thanks to all the moderators for the hard work, I'm sure some hair and sleep has been lost over this.

[othater]

Just when I was about to get 25 posts for a noob, now back to 1.

[jimtevin]

Y'all keep talking about this ex member who said he would bring the site down..just curious..why?? What would make a member here want to do this??

[DFA]

Y'all keep talking about this ex member who said he would bring the site down..just curious..why?? What would make a member here want to do this??

Same reason losers and rejects at high schools decide to go in one day with a couple UZIs and a sawn-off shotgun and grafitti everyone's brain to a wall.

[jimtevin]

No, I guess what I am asking is not why he chose hacking as the way to go, but what you believe the provocation was? Did he just go crazy one day?

[03Z33]

craziness

[jimtevin]

So there is nothing at all that might have set this guy off? One day, he was Mr. Model Poster, the next day, he says he will hack the site? I am asking because I am making a tiny, tiny bit of progress following the IP trail.

[jronald]

I've made a post (again)...!

and what else could I say.. complaining will gets me nowhere but raising my posts number.. LOL

[Shroomster]

So there is nothing at all that might have set this guy off? One day, he was Mr. Model Poster, the next day, he says he will hack the site? I am asking because I am making a tiny, tiny bit of progress following the IP trail.

no he was basically just a troll from the get go...he would 'act' as if he wanted to add valuable input, then unprovoked, he would pm different members scrutinizing and belittling them, rather, attempting to belittle/beguile them. he would make irrational postings and the such just an all out troll...
good luck if you are trying...

[Shroomster]

He has been warned, banned, begged for forgiveness, allowed back, warned again, and banned again, and then keeps trying to stir things up under dummy accounts, feeling he's been persecuted unfairly, even showing up today to gloat about the hacking situation...

Cheers

are you serious? he showed up today? thread was deleted?

[JustAnotherAsian]

sucks yw was hacked, but at the same time, i almost didn't notice anything. props to the ones that take care of this site.

edit: ok nvm. now i see the damage. haha. shit.

[dlinkwit27]

Before I read the whole thread, THOSE OF YOU WHO DID NOT LOSE YOUR ACCOUNTS CHANGE YOUR PW ASAP!

[Dess]

Wow, I been gone a long time. And back to 30 posts I am >.<
But a big thanks to the mods/admins to get this back up and going!!!

Rebuild! Weeee can doooo eeeeet!

[musiclysweet18]

I never get on this site but I used to a lot when I first got my car, but im very upset about this. This was a great website for the Yaris lovers everywhere! Well I will try to help as much as I can now :cry:

[dlinkwit27]

Ok, I have read this entire thread, and I have something to say. First off:

This is like 9/11 for yarisworld... lol

Damn terrorist!

No it is not. Thousands of people lost their lives in that event. Thousands more have died in the effects of that event. What was lost here? Some threads and post counts. A few numbers on a website. For those of us who actually lost someone or knows someone who lost someone in the real 9/11 or the wars that followed (no matter whether or not you support them) this is an extremely ignorant and offensive comment.

To the admin: We need to know what all is missing. IP Logs, passwords, personal messages? The members of this board need to know what sort of personal information was compromised. I strongly advise everyone to change their password if their account was kept alive, and to use a different one if you need to re-register. The same goes with e-mail addresses.

To the vendors: The members here would appreciate it if you stay, but also please understand the administrator's point of view also. While I do not know the exact details behind the payments, the way it looks from the outside is that as a financial contributor, the vendors contributed very little to the upkeep of the site. The fact is that the admin could potentially make more money by using google ads or another service. It is his site, and he has every right to use it as he sees fit.

Likewise, it is the vendors' money and if they wish to take their business elsewhere, that is their right. I would strongly encourage them to look at the member support they receive here. While you may lose a sub forum and banner ads, the admin has not specifically stated that you cannot continue to post your products here. So, I would suggest sticking around, advertise using your sig, and when you have a new product or group buy, make a thread about it. I highly doubt that the number of customers you get drops significantly due to lack of a specific forum section.

Not only that, but look at your cost benefit analysis. How many purchases need to be made to make up for your payment to the board? Again, I am not claiming to know the details of the agreement, but if your website is configured properly, you can easily track what visits originated from this site, and what they bought. Also, not to be cynical, but how many boards are there really for advertising for a Yaris?

While the hacking was unfortunate, it was only that. This is a board. Life goes on. Nobody's car was actually stolen, nobody but the admin was harmed (yet), so life goes on. Quit worrying about your post counts, the admin can restore them if he really needs to. Go on about your life and move on.

[jambo101]

Is there some reason a lot of members changed user names?

[jambo101]

Before I read the whole thread, THOSE OF YOU WHO DID NOT LOSE YOUR ACCOUNTS CHANGE YOUR PW ASAP!

Why would i need to change my password? and why have a lot of members changed their user names?

[DFA]

Is there some reason a lot of members changed user names?

Prolly just people bored with their old usernames...

[YarisBueller]

Just catching up on the nights posts and well said everyone! Its great to see the vast majority of ppl ready to rebuild. Theres no sense in trying to beat each other up over this as the only people that loose is our community and the people who win are the people who like to see harm to the community. We are where we are and have to live with it. Again to the people who want me to fry over this, I have a tremendous amount of pain and guilt over this and a few black and blue marks on my fists from pounding the walls. But at this point, being angry isnt what helps the site get back online and running, being focused on the task at hand is.

On the vendors issue, I can say for sure its during times of trouble like this that the people with integrity stand up and offer help (some with big monetary donations) and others just act selfish and whine. Only 1 vendor has asked for his money back and got it back; the rest have all said they want to stay and its notable that some really stood up for the community!

The issue of what was compromised. I don't think the hacker took a copy of the forum database for himself since it was nearly 3GB in size and to transfer something that large would require SSH and or FTP. And neither SSH or FTP was used to get in. So it would seem nothing was taken in terms of email addresses or PMs. What was probably done was a MySQL attack where he was able to wipe out the databases using the server against itself basicly.

What we have planned/done. So far all the software has been upgraded and/or downgraded to more secure versions and i'm lining up an entirely new server for us to use which adds not only computing power but also a higher grade of service provider who can give us additional secuity features. This move to a new computer will take some time since I want to let the dust settle on this issue before attempting a move of the entire forum to a new computer. We also have outsourced daily backups to offsite locations so our data is secure from this point forward.

Thanks again to everyone who has stood up, been vocal, united and have begun to recreate alot of the lost information. This kind of effort is something i've only seen on YW and really will benefit everyone on this forum. :bow::bow:

[ToddR]

Hurray backups! Boooo hackers!

Sucks now, but it'll get better.

[Klink10]

May I ask which vendor decided to leave. Also, I noted that kargoboy reposted but his business was YarisUniverse if I'm not mistaken. What a shame....felt like 9-11 all over again.

Okay upon further review delete about Kargoboy guess he decided to change to this instead of YarisUniverse.....My bad

[dlinkwit27]

Why would i need to change my password? and why have a lot of members changed their user names?

Because depending on what was taken they could have had a list of member names and passwords, which would mean they could take your account at a later date, or if you use the same password for multiple accounts with that name, they could use that to break into your e-mail, AIM, other boards, etc.

[hatchbackkid82]

This really blows. My post count dropped. So damn frustrating

[tk-421]

Just catching up on the nights posts and well said everyone!

Thanks for the update, YB!
I for one congratulate you on taking the right steps to preventing this issue from ever happening again. I'm sure that the forums will be stronger in every aspect from now on.

Long live YW! :drinking:

[PreciousPups4U]

Agreed. Relatively new here (May 08), but have really appreciated all the help and info with the Yaris. Everyone has been great to deal with and very patient with what to some I am sure are stupid questions, but if you don't know then you don't know, right? Never done ANYTHING to a car before, so this whole modding thing is new to me. Without YW I would never have known NEEDED springs or a sway bar.

[sanityassassinv2]

YW is a great site...it has helped me out quite a bit and it makes me feel good that I have helped others as well. Fortuantely, there aren't a lot of people like this asshole on YW (see: http://www.bobistheoilguy.com/forums/ubbthreads.php?ubb=showflat&Number=1260316).

[Shroomster]

yeah....

[Shroomster]

no idea I don't remeber him being a douche either...but meh whatever....

[darthbauer]

no idea I don't remeber him being a douche either...but meh whatever....



Apparently he is though. Oh well.

[sqcomp]

*grumble*

Let's go find a FIT and turn it over on it's top!

Where'd I put my pitchfork?

J/K

[advocate]

they can't keep us down, we're already on the bottom since we drive the shortest car on the market =)

way too many cool people and way too much good information for one hack to keep YW down. Although I had to re-register, the only thing I'm distraught over is the wealth of DIY and helpful posts lost, not that I lost my postcount or anything like that!

edit: hooray for 2nd time 1st post =)

[KCALB SIRAY]

they can't keep us down, we're already on the bottom since we drive the shortest car on the market =)

way too many cool people and way too much good information for one hack to keep YW down. Although I had to re-register, the only thing I'm distraught over is the wealth of DIY and helpful posts lost, not that I lost my postcount or anything like that!

edit: hooray for 2nd time 1st post =)

I agree, I lost some really good threads on DIY and tips.

[Saggio]

Im back as well. Time to rebuild.

[pinky]

Wow, I go away for a week and....Armageddon!

I have to say, it's extremely suspicious that the resident troll got banned again and then this happens...

Anywho, I'll start posting pics of my car today (I know you all want to see my new antenna mod :wink:) and do my part in adding back to this forum.

Take care all!

[Red Horse]

No comment

[Treyz]

Same thing happened to another Forum I was on a year or two ago. Unfortunately there was no back up so we lost 3 years worth of great times and info (site started back in winter of 2002).

Really sucks that that happened and people can't find other ways to quench their boredom(sp).

[RagnaCaT]

Uff! this is just bad but glad to see more and more people are coming back to help!

[marcus]

we should start with all the DIY!!!!post!

[TinyGiant]

we should start with all the DIY!!!!post!

i just made a diy request thread.. so we can get back on track.. i forget what was there .. so that might help jog our memories so we can get back to stockpiling information :)

[Bandit Bill]

Very nice.

Oh well, first (re-) post i guess.

[sanityassassinv2]

so what the hell is his problem , i dont remember him getting kicked out

I keep seeing the same guy (XCELERATIONRULES) posting on other boards about how great it was that YW got hacked: http://www.toyotanation.com/forum/showthread.php?p=2525580

[TinyGiant]

http://www.bimmerfest.com/forums/showthread.php?t=319759

the last guy on the page says he did it...

[cali yaris]

XCELERATIONRULES --> I would like his email address.

"That's what happens when chicken-ass ex-members bash Y/W from afar."

[TinyGiant]

sign up on the forum :) prolly can get it through there

[TinyGiant]

http://www.resellerratings.com/forum/members/mtpockets.html

has his aim and yahoo

[TinyGiant]

http://www.bobistheoilguy.com/forums/ubbthreads.php?ubb=showflat&Number=1249799

[TinyGiant]

Cleveland,Ohio,USA his name is Denis.. figures its one letter from penis

[sstupid]

It sucks that this site was hacked. I wish they would hack a site that was deserving of it, like www.8thcivic.com. I hate that damn site. All hail the Yaris! :bow:

[sanityassassinv2]

http://www.bimmerfest.com/forums/showthread.php?t=319759

the last guy on the page says he did it...

I think that was sarcasm, TG.

[Shroomster]

It sucks that this site was hacked. I wish they would hack a site that was deserving of it, like www.8thcivic.com. I hate that damn site. All hail the Yaris! :bow:

hey with all due respect 8th civic was brought about by the guy who originally created 2k1civic.com----> which in turn got named 7thgencivic.com , which i was a member of and still am (don't visit or log in as it got turned into civicforums)

which unfortunately got bought out (sold) to civicforums.com

and I would see 8thcivic.com getting sold here soon too.....

[TinyGiant]

I think that was sarcasm, TG.

yeah.. beat him up anyways lol...

[*MAD DOG*]

http://i208.photobucket.com/albums/bb65/MADDOGZONER/BamboUSMC012-1.jpg

for more info click here (http://www.yarisworld.com/forums/showpost.php?p=153724&postcount=18)

[b1ah]

i left the site alone for a bit when i realized i couldn't log on, was pretty frustrated. haven't read all this, so what's the deal? everything is gone? i didn't even try recreating my previous ID, just changed the "l" to a "1". can i have my old one back?

bah...stupid crap

[marcus]

yah some lost their log in.. some including me happend to keep it..