FFR Hacked again... Yes again... 2019
 

Since the community was never notified in the last one, I'm starting another thread to do it myself.

https://imgur.com/9DvyJRY
Source: <redacted, bad link>
Source 2: https://feeds.feedburner.com/HaveIBe...LatestBreaches

Change your passwords, secure your accounts. Hopefully the admins will do the right thing this time, although I doubt it since they didn't even bother to tell people last time.

Re: FFR Hacked again... Yes again... 2019
 

Just got the email myself. Yikes.

Re: FFR Hacked again... Yes again... 2019
 

Um...pretty sure we told everybody about the last one.

Re: FFR Hacked again... Yes again... 2019
 

I remember when data breaches were scary, when I didn't have a password manager and unique passwords on every site.

Re: FFR Hacked again... Yes again... 2019
 

I linked the old thread. Breach was 01 Feb 2016. 8 months later it was brought to light and posted about. Forget the fact that mandatory password changes weren't enforced. or well... anything else for that matter. I never received an email notification (Never delete emails and nothing comes up in searches).

Your answer in the old thread was "Were looking into upgrading". Apparently that didn't happen and apparently the database is still open somewhere.

Edit: This time it's even more information too... Certainly personally identifiable information like age and locations.

Re: FFR Hacked again... Yes again... 2019
 

As it says in that thread, nothing on our end indicated a breach until literally the day that thread was posted. We posted in the thread, on the front page, and as an announcement. There are problems with the existing system for trying to force password changes.

I mean, we said at the time in 2016 The way the site is set up we can't secure your passwords, and we can't change the way the site is set up, so don't use any password you use anywhere else.

Re: FFR Hacked again... Yes again... 2019
 

wow i did not expect this how could this happen this is crazy whoa

Re: FFR Hacked again... Yes again... 2019
 

Welp, time for me to find another 29 character password

Re: FFR Hacked again... Yes again... 2019
 

I wake up and find that we've been breached. What a beautiful start to my day

Re: FFR Hacked again... Yes again... 2019
 

oh it's you again

Re: FFR Hacked again... Yes again... 2019
 

Only 2 times ? We doing good~

Re: FFR Hacked again... Yes again... 2019
 

Ah hell, here we go again.

Re: FFR Hacked again... Yes again... 2019
 

Unless God (synthlight) stepped in to make a major overhaul of the site, I don't think there's much that can be done. Just don't use the same password here as anywhere else.

Re: FFR Hacked again... Yes again... 2019
 

needed to use my brain more anyway

Re: FFR Hacked again... Yes again... 2019
 

This kinda stuff doesn't even phase me anymore. Only thing someone could do with this information is log into this specific account, which I've already solved, or see my age and a list of about 27 different general locations I may have been while logged in.

Re: FFR Hacked again... Yes again... 2019
 

Well considering that this is the second time. We can likely infer that the database credentials themselves were compromised. Considering the age of the site and the lack of updates since a 2004 build of VBulletin it's likely that every PM, post, everything is exposed.

Re: FFR Hacked again... Yes again... 2019
 

For sure it's something the admins should be worried about, namely synth, but unless hackers wanted to see how cringey I was in 2007 there's not much they could do with that info.

Re: FFR Hacked again... Yes again... 2019
 

It's almost like you've been told this before

Re: FFR Hacked again... Yes again... 2019
 

Exactly, without God's (snythlight) intervention anyone on the site is going to have to take that risk. If that bothers you, you probably shouldn't stay around. The admins don't have the ability to implement any meaningful fix.

So stop pointing fingers at admins.

Re: FFR Hacked again... Yes again... 2019
 

Anything we could do would open some number of us up to a large number of copyright lawsuits and also probably take the whole site down.

Re: FFR Hacked again... Yes again... 2019
 

shit site anyway

Re: FFR Hacked again... Yes again... 2019
 

Re: FFR Hacked again... Yes again... 2019
 

Nobody needs to tell me. Look at my join date. I have another account that's even older. I very much remember when the site actually got updates.

And No. Nobody told me shit. Again. I found out on my own volition.

Re: FFR Hacked again... Yes again... 2019
 

Re: FFR Hacked again... Yes again... 2019
 

It's almost like you were told the first time it happened that the site is super old and is running on an also old version of vbulletin and that that won't change unless the person in charge stops being awol.

Re: FFR Hacked again... Yes again... 2019
 

Sometimes, when a website gets compromised. My butthole gets a little puckered.

Re: FFR Hacked again... Yes again... 2019
 

its almost like you almost like you almost like you almost like you almost like you almost like you

Re: FFR Hacked again... Yes again... 2019
 

oh fuck oh shit oh fuck oh fuck nooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooo

Re: FFR Hacked again... Yes again... 2019
 

Might want to go read the old posts before you post. Nobody mentioned any of this the first time.

Second, I'm aware this is on Synth. Guess what though. He's been online between the last time and this time.

Lastly. If you think it affects me... HAHAHAH. This isn't a notice for my own ego-stroking. It's to hopefully notify any amount of the other 1.9 million users to change their passwords... AGAIN.

At this point... No offense to the admin team. I have to do the right thing and report the data abuse to the hosting service, domain registrar, and ICANN. It's clear that the flaws here will not be corrected... let alone GDPR and other new legislation being adhered to.

Re: FFR Hacked again... Yes again... 2019
 

Tell me you aren't serious, lmao

Re: FFR Hacked again... Yes again... 2019
 

oh god oh fuck

Re: FFR Hacked again... Yes again... 2019
 

Get a load of this Saik0

Re: FFR Hacked again... Yes again... 2019
 

We're lucky that the site is even still up and that the admins take the time and put up with it tbh. I thought the site was gone for good when it literally caught fire.

Re: FFR Hacked again... Yes again... 2019
 

Fuck you're more unbearable than a coldplay song.

Re: FFR Hacked again... Yes again... 2019
 

I mean...in the thread you linked, I posted all of these things, and also as a site-wide announcement. So yes, yes it was mentioned the last time.

That's not Synth, that's Velocity. Synth hasn't attempted to use his account for over 5 years.

Which we did last time too.

You do you friend. But I'd like you to at least be honest enough to not suggest you are motivated by purity here. Here's your history with this website:

2019 - Showed up to tell us how bad we are about the breach
2016 - Showed up to tell us how bad we are about the breach
2009 - The last time you were actually here before that

So consider us warned, consider us threatened, and feel free to leave until the next time you want to tell us how bad we are for not fixing something we've already explained exactly why we can't fix.

Re: FFR Hacked again... Yes again... 2019
 

monkaGIGA

Re: FFR Hacked again... Yes again... 2019
 

lol

Re: FFR Hacked again... Yes again... 2019
 

On another note, PrawnSkunk and Velocity have already investigated what happened and took some measures on the dev side. I don't want to speak for them, although they did see what happened in the breach (and if they want to provide more information, I'll let them do that).

Re: FFR Hacked again... Yes again... 2019
 

On the forums sure. But go ahead and tell me all the times I've logged in in between and played the game and interacted on the multiplayer. Just because I don't come to the cesspool of a forum anymore doesn't make me any less "pure" or whatever bullshit term you want to use.



No you've explained why you don't want to fix it. And promptly ignored every possibility to actually fix it. It's been 3.5 years since the last one. Literally nothing was done. "we could be sued", "this could happen", "we'd lose rights to music", some other excuse. Literally you can take over this forum in place and maintain all the data as is. No violation of anything. When I ask who I should talk to about making this happen you tell me "synthlight" and that's it. Literally all you need is an admin account but you are not interested in a solution.

I will return EVERY time my data and information is leaked. Up until it's either secured or my data is removed. Writing this shit off as "you already know this site is insecure" is a bullshit excuse.

Re: FFR Hacked again... Yes again... 2019
 

Sounds like you got compromised beyond just FFR then.

Re: FFR Hacked again... Yes again... 2019
 

Just write a message to the hackers in your password like the smart people have been doing all along

Re: FFR Hacked again... Yes again... 2019
 

You're acting like your credit card credentials are stolen, by the way.

Re: FFR Hacked again... Yes again... 2019
 

For some of the 1.9 million users. It very well could be bank credentials.

Re: FFR Hacked again... Yes again... 2019
 

I think someone using their credit card credentials as a password or something is highly unlikely.

Not to mention, even dumber than just puttin in "password" as a password...

Re: FFR Hacked again... Yes again... 2019
 

To be honest, it's more than an admin required here, we need access to hardware & root privileges, which only Synthlight has. I can't blame you though, you've been so out of the loop on us trying to get in contact with Synthlight for the past 3 years, that it might as well just went over your head.

Re: FFR Hacked again... Yes again... 2019
 

This version of VBulletin has several vulnerabilities that would likely yield you root access (at the very least www-data, which should theoretically be enough to make the relevant changes for the database/forum issues) on the underlying hardware. Especially from the admin console.

While hardware and root would be nice, I don't think it's required. This is why I specifically asked in PM to devonin who I could talk to about it... To finally fix this shit once and for all. All I get is vitriol and trolls.

Re: FFR Hacked again... Yes again... 2019
 

It's just the assumption that the people who have the access you think is all you would need to fix it, haven't already considered whatever advice you plan to give them.

Re: FFR Hacked again... Yes again... 2019
 

Pro tip
Make your password another members username

Re: FFR Hacked again... Yes again... 2019
 

cool

Re: FFR Hacked again... Yes again... 2019
 

maybe the hacker just want to play vrofl

Re: FFR Hacked again... Yes again... 2019
 

LOL

Re: FFR Hacked again... Yes again... 2019
 

>threatens to file a complaint about a website which quite literally cannot take practical measures to ensure complete security
>proudly displays that he's a linux user in his fucking avatar

checks out

Re: FFR Hacked again... Yes again... 2019
 

Though honestly I'm not sure I can trust the judgment of someone who recommends Malwarebytes to his family members

thanks for the free textbooks btw, it was a good collection but you really oughta gate that stuff behind... some kinda security system... to prevent legal liability

Re: FFR Hacked again... Yes again... 2019
 

Who cares. Don't put valuable info on a non secure site....everyone knows fiffer isn't secure lol

Didn't get an email but also don't have any relevant info on here lol. So you know my password? So...you can't use it anywhere else. I don't do online banking and Facebook is near impossible to hack without having my phone lmao

Re: FFR Hacked again... Yes again... 2019
 

did you just assume everyone's knowledge

Re: FFR Hacked again... Yes again... 2019
 

i do like the part where the circle jerking this time revolves around proud acceptance of flailing incompetence

Re: FFR Hacked again... Yes again... 2019
 

..

Re: FFR Hacked again... Yes again... 2019
 

When you're on ffr, it literally says "not secure" on the upper left hand side of the screen. Underneath the URL bar

Re: FFR Hacked again... Yes again... 2019
 

Well that's a mistake, you just replied to mina. You've activated their trap card.

Re: FFR Hacked again... Yes again... 2019
 

Dang it

Re: FFR Hacked again... Yes again... 2019
 

banana

Re: FFR Hacked again... Yes again... 2019
 

Wow... hacker boy gonna run a `whois` lookup

Re: FFR Hacked again... Yes again... 2019
 

Fun fact, even if you do whois via ICANN, all you get back is the contact info for the "Whois Privacy Protection Service, Inc." so yeah.

Re: FFR Hacked again... Yes again... 2019
 

Fun fact, Synth used to work at an ISP and hosted the FFR hardware in extra DC space he had available. If you complain to the ISP enough Synth may even come post how much he doesn't care!

Re: FFR Hacked again... Yes again... 2019
 

Compared to the site going down for what felt like years, yeah.

The password I use on here is old af and I don't even know if my AOL email exists anymore so I think I'm probably good. Sucks it happened

(Please note if I start trying to sell lotto tickets or Russian Whores then that means I was not good)

Re: FFR Hacked again... Yes again... 2019
 

Yeah this account is still linked to my hotmail which I've been locked out of for at least 5 years, if not even longer. And already tried to recover and they told me no so it's just a goner anyway

If any of the hackers successfully got back into my hotmail wanna help a girl out and send some of those old cringey emails I wanna take a trip down memory lane

Re: FFR Hacked again... Yes again... 2019
 

i just changed my e-mail 'cause i didn't have access to my old one either

bless

tempted to do a funnyfact @@@@shadowgod but that ain't forum appropriate

Re: FFR Hacked again... Yes again... 2019
 

the hackers should pull a me in twg 187 and change the forum rules one word at a time

Re: FFR Hacked again... Yes again... 2019
 

Finally read all of the thread and ho boy this is a treat.

I will play devil's advocate and say I get the anger that OP is feeling---I actually kind of have a bone to pick with Synth for ghosting on the site so long despite us being cool the last we messaged (like years and years ago)...

...but man, you gotta give it to Synth because it's clear he would just rather delete the site and never look back. Instead he got it running, tossed the keys to Velocity and told us to have fun for as long as the ship holds. It would be awesome if when members signed up it explicit said that nothing here is secured so there wasn't any illusions to the contrary but even then you're browser probably says it above this page right now.

So yeah, I feel ya OP but FFR never asks my banking/credit card info and chances are all of our emails and usernames have been sold and sold again before now anyway.

仕方がない

Re: FFR Hacked again... Yes again... 2019
 

ik what that means i feel smart

Re: FFR Hacked again... Yes again... 2019
 

he has produced reasonable complaints but has been behaving in a negative, condescending way towards site admin that arent at fault

hence the dunking

Re: FFR Hacked again... Yes again... 2019
 

Pretty much if you see that in your browser and can't put two and two together, you're kinda asking for it

Edit: Also for clarification my earlier coldplay joke is directed at the OP and not the mods in case someone can't figure that out.

Re: FFR Hacked again... Yes again... 2019
 

Oh thank god, I totally thought it was directed at me, the reader.

Re: FFR Hacked again... Yes again... 2019
 

This pretty much. Certain data-sensitive services will give you a user agreement about data use/security but most websites make no guarantees, implied or otherwise, about data safety

use at your own risk

Re: FFR Hacked again... Yes again... 2019
 

In some sense aren't we all the OP?

Re: FFR Hacked again... Yes again... 2019
 

Re: FFR Hacked again... Yes again... 2019
 

Yeah this is pretty much the issue. I mean, he contacted me privately, I gave him very clear and truthful answers about the issues at hand, and he decided to cherry pick some portions of the messages as "excuses" we were giving to just not fix things he was sure were trivial to fix.

There's ways to handle this kind of thing. And I think one thing people should think about when leveling criticism or offering random solutions to the problem, is that a bunch of us have been here for a very long time. I was here when Synth was actually active. I've been in skype calls with him. I've been here through what, four now? instances of him coming back, promising to be active and then vanishing again?

There's nothing you're going to suggest to "fix the site" that hasn't come up in our staff discussions at least a half dozen times, both from the internal "What can we do on the backend" front and the external "Could we actually just hijack the website" front.

And not just random suggestions that we could do stuff like that, serious discussions involving conversations with lawyers, analysis of potential server costs in multiple countries, methods of addressing music rights issues. This is not something we're just NOT thinking about.

Re: FFR Hacked again... Yes again... 2019
 

o rip me but I gotta say I feel uh phased by this - but hey I'll see how far this guy wants to take things. I don't have "really" that much to hide tbh

Re: FFR Hacked again... Yes again... 2019
 

On snap well, this got interesting

On you side my dude hope that asshat falls down and cracks his teeth

Re: FFR Hacked again... Yes again... 2019
 

I got that same email in my junk folder, word for word lol.