Keskustelujen arkisto

Pages: 1
Author

Topic: DDF(r)s hompage has been hacked

(13 messages)
Sigvald
The homepage of the Danish Donaldist Society:
http://ddfr.dk/
has recently been hacked and is currently down. Anyone trying to visit the page only gets the following Message:
This site has been temporarily disabled, please try again later.
I have been told that DDF(r) takes this VERY seriously.

This is however not the first time that DDF(r) has faced trouble from outside. For a long time spam-robots have tried to access the forum. Thus questions was added to make sure that only humans could post in the forum. Some of these spam-attacks may have come form robots using DCF-mailadresses. From time to time I (and other people) also receive spam-mails from robots or people using DCF-mailadresses. These mails are often written in non-English languages. Hopefully the present DDF(r)-crisis will lead to actions from DCF in order to prevent robots and hackers from misusing DCF-mail adresses.
PhantomDuck
I am not registered but thanks for the information.
Sigvald
The page now seems to be back in business!!! Do anyone (Johannes?) know if there may be any connection between this hacking and the previous misuse of DCF-mailadresses? What is done to prevent robots, spammers and hackers to use DCF-mailadresses?
Sigvald
Today I have AGAIN received a spam-mail sent via this forum:

---------------------
offisaCiz from DCF - The Disney Comics Forum has sent you a message.
offisaCiz (Email removed) via mail.inducks.org
---------------------

The mail is based on non-English languges:

---------------------
The message reads as follows:
-----------------------------------------------------------------------
Senza parlare!
---------------------

[/removed by admin]

---------------------

I am worried about this because we now know that there are evil hackers out there! What is done to stop net-chriminals from misusing this site and threathen our web-security?
JAlbertsen
Yes, the spam mails sent out via the DCF forum are annoying, but luckily they are not a serious threat against this site.
The easy way to avoid them is to go to Profile -> Privacy and select the option "Hide your e-mail address and disallow form e-mail."
Deyanmegara
Quote from user: SigvaldToday I have AGAIN received a spam-mail sent via this forum:

...

With link-information written mostly in curillic letters:
Ð????? http://www.youtube.com/user/aeytovaresch/
[words]Ð?????,Video,video youtube, video Ð?????, Ð????? video youtube[/words]

...

I am worried about this because we now know that there are evil hackers out there! What is done to stop eastern- and southern-European net-chriminals from misusing this site and threathen our web-security?

It appears to be a random collection of videos. The featured video appears to be about massaging owl heads :)

The spammer apparently doesn't need to hack the forum, just register normally and start sending mails (though I haven't received spam from DCF yet).
Sigvald
Well, the DCF-spamming is still a huge problem. The past 25 days I have got 11 DCF-spam-mails (se list below), that's almost one every second day. After seeing what people like that did to the DCF-forum, this makes me very worried. Is it impossible to do anything about this? What about having a moderator to accept registering to DCF?

---------------------
[/spam removed by admin]
Opel Rekord1985
Wow, that's horrible. I feel sorry for you. It must be really annoying those stupid spam messages. X3
Arild
Huge problem? Huge? One, sorry - almost one - spam mail every second day.

Don't you have a spam filter?
I receive maybe one or two spam mails every day in the mail registered here. But these are either from a Nigerian princess or a lottery that I have won. None from DCF.
Deyanmegara
Strange why they picked you. I also have other spam mails, but none from DCF. You could go to your profile page and disable e-mails through the forum. If you don't need them for other purposes, though.
Sigvald
Yesterday I found 20 - twenty- DC F-spammails from a user called Timothyleme in my mail-Box. Someone here should do something about that user.
Sigvald
The spamming contunues:
[/removed by admin]
Please, someone, take action against this spammer who continues to misuse DCF to send his/her spam.
Cacou
Hi Sigvald

Sorry for the long delay answering this.

I can not take action against any spammer because there are hundreds (literally) that are created every day by robots. I modified this website so that they can not post any message before a captcha is solved. They are removed automatically after 24h. This is the reason why we don't see many posts from these accounts.

To solve the problem, I have disabled email altogether on this website. If you receive any more spam, please let me know.

If you attempt to send an email, this is what you should see:
"Sorry, email has been disabled. To contact someone in private, you'll have to give your mail address in a public post on this forum. Contact fwi -at- inducks.org for request or comments."

As a side effect, this means legitimate users can not contact each other in private easily. One would need to add to a text on a public message like "please contact me in private to ZZZ at YYY" so that he/she may be contacted.

I prefer to do this rather than allowing a spammer to create an account, solve a captcha once, and then send millions of spams without me having any clue of this.
Pages: 1