HACKED - Toyota Yaris Forums

*YarisBueller* · 10-20-2008, 08:00 AM

Just catching up on the nights posts and well said everyone! Its great to see the vast majority of ppl ready to rebuild. Theres no sense in trying to beat each other up over this as the only people that loose is our community and the people who win are the people who like to see harm to the community. We are where we are and have to live with it. Again to the people who want me to fry over this, I have a tremendous amount of pain and guilt over this and a few black and blue marks on my fists from pounding the walls. But at this point, being angry isnt what helps the site get back online and running, being focused on the task at hand is.

On the vendors issue, I can say for sure its during times of trouble like this that the people with integrity stand up and offer help (some with big monetary donations) and others just act selfish and whine. Only 1 vendor has asked for his money back and got it back; the rest have all said they want to stay and its notable that some really stood up for the community!

The issue of what was compromised. I don't think the hacker took a copy of the forum database for himself since it was nearly 3GB in size and to transfer something that large would require SSH and or FTP. And neither SSH or FTP was used to get in. So it would seem nothing was taken in terms of email addresses or PMs. What was probably done was a MySQL attack where he was able to wipe out the databases using the server against itself basicly.

What we have planned/done. So far all the software has been upgraded and/or downgraded to more secure versions and i'm lining up an entirely new server for us to use which adds not only computing power but also a higher grade of service provider who can give us additional secuity features. This move to a new computer will take some time since I want to let the dust settle on this issue before attempting a move of the entire forum to a new computer. We also have outsourced daily backups to offsite locations so our data is secure from this point forward.

Thanks again to everyone who has stood up, been vocal, united and have begun to recreate alot of the lost information. This kind of effort is something i've only seen on YW and really will benefit everyone on this forum.

10-20-2008, 08:00 AM	#11
YarisBueller Administrator View User's Garage Join Date: Jan 2006 Posts: 178	Just catching up on the nights posts and well said everyone! Its great to see the vast majority of ppl ready to rebuild. Theres no sense in trying to beat each other up over this as the only people that loose is our community and the people who win are the people who like to see harm to the community. We are where we are and have to live with it. Again to the people who want me to fry over this, I have a tremendous amount of pain and guilt over this and a few black and blue marks on my fists from pounding the walls. But at this point, being angry isnt what helps the site get back online and running, being focused on the task at hand is. On the vendors issue, I can say for sure its during times of trouble like this that the people with integrity stand up and offer help (some with big monetary donations) and others just act selfish and whine. Only 1 vendor has asked for his money back and got it back; the rest have all said they want to stay and its notable that some really stood up for the community! The issue of what was compromised. I don't think the hacker took a copy of the forum database for himself since it was nearly 3GB in size and to transfer something that large would require SSH and or FTP. And neither SSH or FTP was used to get in. So it would seem nothing was taken in terms of email addresses or PMs. What was probably done was a MySQL attack where he was able to wipe out the databases using the server against itself basicly. What we have planned/done. So far all the software has been upgraded and/or downgraded to more secure versions and i'm lining up an entirely new server for us to use which adds not only computing power but also a higher grade of service provider who can give us additional secuity features. This move to a new computer will take some time since I want to let the dust settle on this issue before attempting a move of the entire forum to a new computer. We also have outsourced daily backups to offsite locations so our data is secure from this point forward. Thanks again to everyone who has stood up, been vocal, united and have begun to recreate alot of the lost information. This kind of effort is something i've only seen on YW and really will benefit everyone on this forum.