Jump to content

Edugeek server security compromise

FN-GM

By FN-GM
in General Chat

 Share

Recommended Posts

localzuk

localzuk

Posted
Posted
Ouch Tony!! Thats a bit harsh! I see the funny side to it, but wow...harsh! (Just my opinion, I don't wanna be flamed! lol)

 

I'm just enjoying myself :) I know what its like to be on the receiving end of lots of neg rep now...

 

Even that post got some neg rep! Saying she's a nice person if I got to know her. I know she is actually, I've never held a grudge or had any negative feelings towards her. I'm sure she's lovely. I was joking... Oh, wait, does that contradict my argument on that other thread? :s

X-13

X-13

Posted
Posted
Well that was a surprise. Came back to find my account locked out and data breached. Have had to create a new account and can I find an explanation anywhere? Can I hell! But that is OK as Admins are organizing their yearly jolly to BETT. Would seem to me that their time would be better spent explaining to their “valued” members what actually happened rather than posting about getting new office desks and bits for their bike!

 

Password recovery.

X-13

X-13

Posted
Posted
You were expecting?

 

With the "designer" badge you have... something Apple. MacBook Pro perhaps.

 

Or a sweet gaming rig.

 

Basically, something not made by Dell. [i've been burned by Dell...]

  • Thanks 1
X-13

X-13

Posted
Posted
Ahh you see I've had 3 Dell over the past 8 Years and none of them missed a beat. Just ask @localzuk he's still running my previous one :D

 

I see. You've be fortunate enough to find the mystical, immortal Dells.

 

Pretty much all the techs in my area agree Dell aren't good.

localzuk

localzuk

Posted
Posted
Ahh you see I've had 3 Dell over the past 8 Years and none of them missed a beat. Just ask @localzuk he's still running my previous one :D

 

Yup, and a nice Dell it is too! :D Just wish I had a DVD drive for it ;)

 

I see. You've be fortunate enough to find the mystical, immortal Dells.

 

Pretty much all the techs in my area agree Dell aren't good.

 

We've got about 200 or so Dell E5400 laptops and they're pretty good. Warranty support is excellent, and there's only one small issue with them that breaks regularly.

X-13

X-13

Posted
Posted
erm... errrr lmao

 

With the amount of problems we've had, not just as a school, but this whole area either we're cursed or you have incredible luck.

 

[Problems include, but are not limited to: motherboards dying days after they were bought, laptop hinges shattering [literally], overheating issues [fans weren't covered], HDD failure, Dell printers becoming unable to detect legitimate toner and servers crashing with no warning then being unable to boot for more than 5 minutes.]

TechieWils

TechieWils

Posted
Posted
Well that was a surprise. Came back to find my account locked out and data breached. Have had to create a new account and can I find an explanation anywhere? Can I hell! But that is OK as Admins are organizing their yearly jolly to BETT. Would seem to me that their time would be better spent explaining to their “valued” members what actually happened rather than posting about getting new office desks and bits for their bike!

 

Same here, tried using the password reset link. Never received the email and used the contact us link. No reply and even went to the message the admin board and still got no reply. I've just resigned to the fact that I'm locked out now.

Dos_Box

Dos_Box

Posted
Posted
Same here, tried using the password reset link. Never received the email and used the contact us link. No reply and even went to the message the admin board and still got no reply. I've just resigned to the fact that I'm locked out now.

 

Given the amount of people who have used the 'Contact us' method and have not manually reset their passwords, it may take some time before Shaun can get them all done (it was a LOT), so we ask that you please bear with us.

SneakyBeaky

SneakyBeaky

Posted
Posted
Hi,

 

When the edugeek server security was compromised, was any data taken please? Was any personal data taken?

 

Thanks

 

I created a new hotmail account when I signed on here using the same password. Stupid I know but I only intended it for here. When this site went down the hotmail account was hijacked and used to send out spam so hotmail closed it down. A co-incidence? or proof?

FN-GM

FN-GM

Posted
  • Author
Posted
Given the amount of people who have used the 'Contact us' method and have not manually reset their passwords, it may take some time before Shaun can get them all done (it was a LOT), so we ask that you please bear with us.

 

Do you have anything to comment regarding the original post please?

mb2k01

mb2k01

Posted
Posted

If that is the only comment to be offered then it isn't good enough!

RoF was spot on with her comment about 'valued' community. I fail to see any recognition of value.

 

What is so difficult about saying "xx was compromised/stolen", "we think xx was compromised/stolen", or even the very honest "we haven't got a XX clue yet, sorry, bear with us!". Any is better than silence.

  • Thanks 1
robk

robk

Posted
Posted
There may be very good reasons why information is not Available, for example legal and or protecting other sites using vb. I have no more info than anyone else. I suggest "please bear with us" is a good idea.
featured_spectre

featured_spectre

Posted
Posted

Think of it like this

 

VBulletin has to be updated (every site that uses it) as its been compromised (well so I would think). If data has been compromised and your accounts have been taken or emails hacked etc, then it could be coincidence. I have no more information than anyone else but the please bare with us is a good thing, as you could well get a massive essay on what happened, how it happened and why it happened.

EduTech

EduTech

Posted
Posted

For the people who were following the downtime when this happened they will fully understand that so many hours (working through the night) were put in my ZH in order to get the forums up and running again safely. Along the way Shaun also would have had to investigate the cause etc. and also work very close with VB.

 

None of us know any more than the next person, what i can probably take a very good guess at though is that Shaun is working on a report on what has happened to provide everyone with more information.

 

We all are aware that the server was breached due to a bug in the VB software, and that as a precaution everyone was urged to change their passwords. I am sure Shaun is analysing log files in order to fill us all in... But as DosBox has had he also has to deal with users whom are still locked out of there account etc.

 

I am sure we will all here something in due time, for now let’s sit back and enjoy edugeek! :D

 

Happy Days! - EduHobNobs Anyone! :) -

 

James.

  • Thanks 1
sister_annex

sister_annex

Posted
Posted

I for one am just happy Edugeek is back, to some semblance of normality, I think people forget sometimes that it is a relatively small outfit that runs the site and they have a million and one things to do as well as keep us happy, I do agree an update to what went on would be nice but I also understand that @ZeroHour has spent many hours working to get services restored (and by now should have a very nice ass groove worked into his chair!).

 

Patience is a virtue, I am sure the details will appear in time :)

  • Thanks 1
tom_newton

tom_newton

Posted
Posted

TBH, a breach as serious as this - as WAS communicated, hashed passwords may have been compromised - you can safely assume that nothing is sacrosanct. There is no way for the admins to say for sure anything that could have been accessed was actually copied though.

Presume ANYTHING you ever sent to the site may have been read.

 

IMO the big password change is a sign that the admins are committed to security - this has obviously cost a lot of work, and has probably cost some members. A less scrupulous bunch might have pushed this under the rug.

 

On the other hand - lads, get a statemnt out, if you need any help drafting it, I am happy to help in my capacity as professional security gobshite ;)

  • Thanks 1
Guest
This topic is now closed to further replies.
 Share
Go to topic listing


×
×
  • Create New...