12-10-2018, 12:03 PM
|
#1
|
|
Member
|
|
Join Date: Oct 2007
Location: California
Posts: 549
|
|
|
Member
Join Date: Oct 2007
Location: California
Posts: 549
|
Site hacked?
FYI guys
Looks like it got hacked. Would definitely avoid downloading anything from this site, just to be safe. Probably change your password too if you can. Or just don't login right now. Also, site is NOT HTTPS which means no SSL certificate, so be careful here, since it looks compromised. This should be pinned at top of all forums and posting should be turned off until solved.
Software used for this forum is vBadvanced CMPS v3.2.2
Current Version: 4.3.0 (Released 05-13-2014) (hasn't been maintained in 4+ years. Ouch.)
And vBulletin used for this forum is vBulletin Version 3.8.7 (2009 holy shit man!)
Current Version: 5.4.5 (November 14, 2018)
Forum software is at least 5 years out of date. Holy shiiiiiz. Basically an accident waiting to happen. vBadvanced CMPS v3.2.2 appears to be around 2012 and I'm seeing known exploits with version 3.2.2 google search. Is site owner over his head on keeping forum software upgraded? I hope they have a db backup, otherwise they are really up a creek without a 4Runner. I hope our info wasn't compromised.
|
|
|
|
12-10-2018, 12:24 PM
|
#2
|
 |
Member
|
|
Join Date: Nov 2009
Location: Mill creek, WA
Posts: 482
|
|
|
Member
Join Date: Nov 2009
Location: Mill creek, WA
Posts: 482
|
site rehaul is needed. ASAP
__________________
2002 Dorado Gold 4runner SR5 fully loaded/leather/JDM goodies
OME 882 fronts.LC 8 wrap rears/SCS Ray10 17x9" -38 Copper/Falken 285.70.17 P-rated/1.25" Spidertrax/TBU/JDM Hilux Surf Window Visors+LED Spoiler+Power Fold Mirrors/Hilux Surf Corners+Headlights D2S 5.0 x Panamera 2.0/Jaos Mud Flaps/Viper 5901/Blackvue dr750s 2ch/quarter tank of gas
Awaiting install of TrueNorthFab plate bumper and useless cool jdm parts
|
|
|
|
|
12-10-2018, 12:30 PM
|
#3
|
|
Member
|
|
Join Date: Oct 2007
Location: California
Posts: 549
|
|
|
Member
Join Date: Oct 2007
Location: California
Posts: 549
|
Complete rebuild from scratch with new db. Old posts will have to be exported from db, scanned for malware, and imported into a new installation using latest forum software. The vBadvanced software isn't even maintained any more by the dev and hasn't been updated in since 2014. So whatever features that served up will have to be solved with another plugin or custom coded. And getting an SSL certificate is a MUST moving forward. I'll probably stop using the site if they don't get this implemented. There's just no excuse for this, especially with a site this big.
Hey
@ admin
, if you need help, let me know. Seems like you're in over your head on this. If it has been compromised, it's going to take a ton of work to get this moved to a fresh install using latest software. Probably more than a one-man show could handle.
|
|
|
|
|
12-10-2018, 12:47 PM
|
#4
|
|
Member
|
|
Join Date: Nov 2009
Location: Mill creek, WA
Posts: 482
|
|
|
Member
Join Date: Nov 2009
Location: Mill creek, WA
Posts: 482
|
its not pleasing to surf this site anymore. its slow and not secure.
been a member since 2009. don't let this site die...
__________________
2002 Dorado Gold 4runner SR5 fully loaded/leather/JDM goodies
OME 882 fronts.LC 8 wrap rears/SCS Ray10 17x9" -38 Copper/Falken 285.70.17 P-rated/1.25" Spidertrax/TBU/JDM Hilux Surf Window Visors+LED Spoiler+Power Fold Mirrors/Hilux Surf Corners+Headlights D2S 5.0 x Panamera 2.0/Jaos Mud Flaps/Viper 5901/Blackvue dr750s 2ch/quarter tank of gas
Awaiting install of TrueNorthFab plate bumper and useless cool jdm parts
|
|
|
|
|
12-10-2018, 01:00 PM
|
#5
|
|
Member
|
|
Join Date: Oct 2007
Location: California
Posts: 549
|
|
|
Member
Join Date: Oct 2007
Location: California
Posts: 549
|
I don't want to see it die either. It's been a fantastic resource and great community.
Always assumed site owner kept it up to date as it looks like he has sponsors which means some income. But after today, seeing 5yr out of date forum software was kind of shocking. Major updates need to happen, moving forward. Going to take some late nights for sure. 
Last edited by r32; 12-10-2018 at 01:03 PM.
|
|
|
|
|
12-10-2018, 01:10 PM
|
#6
|
 |
Senior Member
|
|
Join Date: Apr 2015
Location: Anaheim
Age: 45
Posts: 3,405
Real Name: Danny
|
|
|
Senior Member
Join Date: Apr 2015
Location: Anaheim
Age: 45
Posts: 3,405
Real Name: Danny
|
Quote:
Originally Posted by r32
I don't want to see it die either. It's been a fantastic resource and great community.
Always assumed site owner kept it up to date as it looks like he has sponsors which means some income. But after today, seeing 5yr out of date forum software was kind of shocking. Major updates need to happen, moving forward. Going to take some late nights for sure. |
I run a forum and it's not that hard these days to port over to different forum software. Most of them have scripts built in to handle the transfer from database to database. I've stopped using T4R for the most part except for a couple threads because the software here blows. With the amount of money they're making off sponsers, ads, and vendor requirements there's more than enough to have this place running off better software with better security. It's far too outdated and such a hack as this (where it seems just about everything is compromised) is just ridiculous in this day and age. I've already started changing my passwords on other forums but I won't touch this password until the situation has been resolved. Otherwise I may just request my account be deleted.
|
|
|
|
|
12-10-2018, 01:19 PM
|
#7
|
|
Member
|
|
Join Date: Oct 2007
Location: California
Posts: 549
|
|
|
Member
Join Date: Oct 2007
Location: California
Posts: 549
|
Quote:
Originally Posted by Drunner97
I run a forum and it's not that hard these days to port over to different forum software. Most of them have scripts built in to handle the transfer from database to database. I've stopped using T4R for the most part except for a couple threads because the software here blows. With the amount of money they're making off sponsers, ads, and vendor requirements there's more than enough to have this place running off better software with better security. It's far too outdated and such a hack as this (where it seems just about everything is compromised) is just ridiculous in this day and age. I've already started changing my passwords on other forums but I won't touch this password until the situation has been resolved. Otherwise I may just request my account be deleted.
|
Yes, def scripts out there can handle the transfer of posts and info, but site has been compromised, so it's entirely possible you'd be moving malware to the new site.
|
|
|
|
|
12-10-2018, 01:32 PM
|
#8
|
|
Senior Member
|
|
Join Date: Apr 2015
Location: Anaheim
Age: 45
Posts: 3,405
Real Name: Danny
|
|
|
Senior Member
Join Date: Apr 2015
Location: Anaheim
Age: 45
Posts: 3,405
Real Name: Danny
|
Quote:
Originally Posted by r32
Yes, def scripts out there can handle the transfer of posts and info, but site has been compromised, so it's entirely possible you'd be moving malware to the new site.
|
Yeah, you'd have to go off an older backup before doing any transferring/updating. Just to make sure you've cleared it all.
|
|
|
|
|
12-10-2018, 01:34 PM
|
#9
|
 |
Elite Member
|
|
Join Date: Nov 2002
Location: Eastern USA
Posts: 18,770
|
|
|
Elite Member
Join Date: Nov 2002
Location: Eastern USA
Posts: 18,770
|
Heard back from Admin. Problem has been fixed.
Just before i get a bunch of PMs or comments...i am NOT the moderator or admin...so, i have no idea about anything else.
|
|
|
|
|
12-10-2018, 01:52 PM
|
#10
|
 |
Senior Member
|
|
Join Date: Feb 2013
Location: East Bay
Posts: 4,584
Real Name: Sparky
|
|
|
Senior Member
Join Date: Feb 2013
Location: East Bay
Posts: 4,584
Real Name: Sparky
|
Quote:
Originally Posted by Thai
Heard back from Admin. Problem has been fixed.
Just before i get a bunch of PMs or comments...i am NOT the moderator or admin...so, i have no idea about anything else. |
Russia!!!1
__________________
Old and (c)rusty.
|
|
|
|
|
12-10-2018, 01:59 PM
|
#11
|
|
Elite Member
|
|
Join Date: Nov 2002
Location: Eastern USA
Posts: 18,770
|
|
|
Elite Member
Join Date: Nov 2002
Location: Eastern USA
Posts: 18,770
|
Quote:
Originally Posted by LandCruiser
Russia!!!1
|
I am almost sure that Admin prefer Russia hack over expense-paid trip sponsored by Mohammed bin Salman.
|
|
|
|
|
12-10-2018, 02:00 PM
|
#12
|
 |
Member
|
|
Join Date: Jan 2013
Location: Edmond, Oklahoma
Posts: 817
|
|
|
Member
Join Date: Jan 2013
Location: Edmond, Oklahoma
Posts: 817
|
Look at the link the the 4th gens "4th Gen T4Rssssssssssssssssssss"
__________________
I currently own 4 T4R 4th Gen
#1) 2003 Sport V8 2WD purchased new, totaled @ 175,000.
#2) 2003 SR5 V8 2WD running w/engine from #1(Son#3 is Driving)
#3) 2003 Sport V8 4WD
#4) 2004 Sport V8 Supercharged 4WD
|
|
|
|
|
12-10-2018, 02:05 PM
|
#13
|
|
Senior Member
|
|
Join Date: Apr 2015
Location: Anaheim
Age: 45
Posts: 3,405
Real Name: Danny
|
|
|
Senior Member
Join Date: Apr 2015
Location: Anaheim
Age: 45
Posts: 3,405
Real Name: Danny
|
Quote:
Originally Posted by Thai
Heard back from Admin. Problem has been fixed.
Just before i get a bunch of PMs or comments...i am NOT the moderator or admin...so, i have no idea about anything else. |
Problem may be fixed but what are they going to do make sure it doesn't happen again? As mentioned, the site is on ridiculously old software. I know they were hacked again not too long ago. Maybe last year? It happens more than it should.
|
|
|
|
|
12-10-2018, 02:35 PM
|
#14
|
 |
Moderator
|
|
Join Date: Jun 2004
Location: the Socialist State of Maryland
Posts: 11,445
Real Name: The Chosen One
|
|
|
Moderator
Join Date: Jun 2004
Location: the Socialist State of Maryland
Posts: 11,445
Real Name: The Chosen One
|
Moving to Off Topic
__________________
 - the Internet - the mother-ship of people who don't know much and aren't afraid to go public
'84 4Runner - ARBed 5.29s F&R, 4.7 & 2.28 t-cases, 2" drive train lift, BudBuilt x-member/skid, 30 spl Longs
'83 Toy P/U - Buick 231 V6, Holley 4 bbl, Weiand intake, Downey headers, TH350 w/700R4 low gearset,
'89 4Runner SR5 - stock
|
|
|
|
|
12-10-2018, 08:20 PM
|
#15
|
|
Member
|
|
Join Date: Oct 2007
Location: California
Posts: 549
|
|
|
Member
Join Date: Oct 2007
Location: California
Posts: 549
|
I get the moving to 'off topic' but users should be aware of what happened with the site, whether it was a hack or just broken code from vastly outdated software. Would hate to see someone get malware from download links or ad links, due to inadequate house cleaning.
Just my opinion. Carry on.
|
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is On
|
|
|
|
Linear Mode
