Go Back   English Forum Switzerland > Support > Support > Forum support  
Reply
 
Thread Tools Display Modes
  #221  
Old 15.06.2021, 09:42
AbFab's Avatar
Forum Legend
 
Join Date: Sep 2006
Location: Zürich
Posts: 8,226
Groaned at 347 Times in 237 Posts
Thanked 11,995 Times in 4,115 Posts
AbFab has a reputation beyond reputeAbFab has a reputation beyond reputeAbFab has a reputation beyond reputeAbFab has a reputation beyond reputeAbFab has a reputation beyond reputeAbFab has a reputation beyond repute
Re: Englishforum security breach?

Quote:
View Post
Was there another hack?

Use google to search englishforum.ch for "creep" like so:
site:englishforum.ch creep
and using the tools limit the results to the most recent year. You should get something like the screenie below.

This looks a very lot like yet another hack.
Or maybe the one from 2019 was only partially solved/removed.

I've just PM'ed EB a link to this post.

Good spot, but I notice both those links have been visited…

Last edited by AbFab; 15.06.2021 at 10:42.
Reply With Quote
The following 8 users would like to thank AbFab for this useful post:
  #222  
Old 15.06.2021, 09:46
Member
 
Join Date: Jun 2021
Location: BaselStadt
Posts: 151
Groaned at 9 Times in 5 Posts
Thanked 239 Times in 96 Posts
schoggiweggli has an excellent reputationschoggiweggli has an excellent reputationschoggiweggli has an excellent reputationschoggiweggli has an excellent reputation
Re: Englishforum security breach?

Quote:
View Post

I decided to follow the links to see if I could get to the bottom of it.
And indeed in the second link, someone was already quite rigorously getting to the bottom of it.
Reply With Quote
The following 13 users would like to thank schoggiweggli for this useful post:
  #223  
Old 15.06.2021, 09:50
Ato Ato is offline
Forum Veteran
 
Join Date: Oct 2017
Location: ZH
Posts: 1,500
Groaned at 15 Times in 15 Posts
Thanked 2,779 Times in 1,129 Posts
Ato has a reputation beyond reputeAto has a reputation beyond reputeAto has a reputation beyond reputeAto has a reputation beyond reputeAto has a reputation beyond reputeAto has a reputation beyond repute
Re: Englishforum security breach?

Quote:
View Post
I decided to follow the links to see if I could get to the bottom of it.
And indeed in the second link, someone was already quite rigorously getting to the bottom of it.
schoggiweggli? Urs dupe?
Reply With Quote
The following 3 users would like to thank Ato for this useful post:
  #224  
Old 15.06.2021, 10:13
Forum Legend
 
Join Date: Mar 2013
Location: Formerly in Neuchatel
Posts: 3,031
Groaned at 232 Times in 159 Posts
Thanked 5,842 Times in 2,145 Posts
porsch1909 has a reputation beyond reputeporsch1909 has a reputation beyond reputeporsch1909 has a reputation beyond reputeporsch1909 has a reputation beyond reputeporsch1909 has a reputation beyond reputeporsch1909 has a reputation beyond repute
Re: Englishforum security breach?

Quote:
View Post
Did you find the creep you were looking for?
I think he was recently promoted to moderator.
Reply With Quote
The following 5 users would like to thank porsch1909 for this useful post:
  #225  
Old 15.06.2021, 10:18
amogles's Avatar
Forum Legend
 
Join Date: Mar 2008
Location: Zurich
Posts: 11,608
Groaned at 284 Times in 232 Posts
Thanked 24,752 Times in 10,460 Posts
amogles has a reputation beyond reputeamogles has a reputation beyond reputeamogles has a reputation beyond reputeamogles has a reputation beyond reputeamogles has a reputation beyond reputeamogles has a reputation beyond repute
Re: Englishforum security breach?

Quote:
View Post
I think he was recently promoted to moderator.
Or changed her name to sound like a stripper ?
Reply With Quote
The following 2 users would like to thank amogles for this useful post:
  #226  
Old 15.06.2021, 11:27
Elu Elu is offline
Forum Veteran
 
Join Date: May 2017
Location: Olten
Posts: 506
Groaned at 19 Times in 18 Posts
Thanked 993 Times in 423 Posts
Elu has a reputation beyond reputeElu has a reputation beyond reputeElu has a reputation beyond reputeElu has a reputation beyond reputeElu has a reputation beyond repute
Re: Englishforum security breach?

Quote:
View Post
schoggiweggli? Urs dupe?
With 0 groans in already 10 posts? Unlikely
Reply With Quote
The following 8 users would like to thank Elu for this useful post:
  #227  
Old 15.06.2021, 18:08
Forum Legend
 
Join Date: Oct 2014
Location: SG
Posts: 8,932
Groaned at 466 Times in 349 Posts
Thanked 11,866 Times in 6,172 Posts
Urs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond repute
Re: Englishforum security breach?

Quote:
View Post
Or changed her name to sound like a stripper ?
Like, Patricia?

Reply With Quote
  #228  
Old 15.06.2021, 19:58
Guest
 
Posts: n/a
Re: Englishforum security breach?

Quote:
View Post
Was there another hack?

Use google to search englishforum.ch for "creep" like so:
site:englishforum.ch creep
and using the tools limit the results to the most recent year. You should get something like the screenie below.

This looks a very lot like yet another hack.
Or maybe the one from 2019 was only partially solved/removed.

I've just PM'ed EB a link to this post.

I think it's something at the google level with cached results - other search engines don't find them. Pretty sure it wouldn't be an EF hack per se, though I guess it's possible that these redirects were embedded into posts that were (soft-)deleted as spam, but still show up on google. Don't remember any such, though. You'd need to ask a mod to search for the redirect website name, which I won't repeat here.

There's about one or two per month since the start of last year, so not a one-off attack, some sort of spam-bot my best guess.
Reply With Quote
The following 3 users would like to thank for this useful post:
  #229  
Old 17.06.2021, 13:08
Forum Legend
 
Join Date: Oct 2014
Location: SG
Posts: 8,932
Groaned at 466 Times in 349 Posts
Thanked 11,866 Times in 6,172 Posts
Urs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond reputeUrs Max has a reputation beyond repute
Re: Englishforum security breach?

Here's the reply, Ace1 is on the right track:
Quote:
Thanks.

Not a hack on our server.

Rather, an SEO attack on Google using our link redirect facility.

There's a setting in our forum software called "Redirect ALL External URLs Posted in Private Forums":



This allowed other sites to create links that look like spam content is hosted on our site but in reality the spam is elsewhere and it's only using our redirect service to point to it.

I've now switched that setting off.

I've also submitted a removal request to Google and that should be processed within 24 hours, then those search results will disappear. So check it again tomorrow.

Reply With Quote
The following 3 users would like to thank Urs Max for this useful post:
  #230  
Old 17.06.2021, 13:22
olygirl's Avatar
Forum Legend
 
Join Date: Oct 2007
Location: d' Innerschwiiz
Posts: 7,065
Groaned at 352 Times in 235 Posts
Thanked 16,635 Times in 5,095 Posts
olygirl has a reputation beyond reputeolygirl has a reputation beyond reputeolygirl has a reputation beyond reputeolygirl has a reputation beyond reputeolygirl has a reputation beyond reputeolygirl has a reputation beyond repute
Re: Englishforum security breach?

Thanks for uploading.
Reply With Quote
Reply

Tags
englishforum hack, password stolen, security breach, security password hack




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Security breach: avoid buying online and using ATMs [Heartbleed Vulnerability] olygirl TV/internet/telephone 27 07.06.2014 15:10
A security breach happened at [fill in the blank aSwissInTheUS Daily life 1 21.05.2014 18:44
Major security breach at LinkedIn Castro TV/internet/telephone 13 07.06.2012 17:17
US issued card holders take note ( security breach issue ) jrspet International affairs/politics 1 31.03.2012 14:54
Guardian Jobs in UK - Security Breach transition International affairs/politics 0 26.10.2009 13:51


All times are GMT +2. The time now is 20:14.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.1.0