Meadville Space Center

Meadville Space Center => Site News => Topic started by: robertsconley65 on August 16, 2006, 06:19:04 PM



Title: Hacked
Post by: robertsconley65 on August 16, 2006, 06:19:04 PM
I got it too, apparently they got through the personal message system.

I did the following steps

I re-ordered the rank system so that a newbie only gets one personal message, a jr members needs 2 posts and gets 2 personal messages, a full member gets unlimited personal message but needs 10 posts to qualify.

Plus I turned on email notification of new members. So if any of us admin see a baloney new user we can be pro-active and turn it off.

Rob Conley



Title: Re: Hacked
Post by: BigDAS on August 16, 2006, 07:10:11 PM
Any idea on how they got in?


Title: Re: Hacked
Post by: robertsconley65 on August 17, 2006, 08:15:19 AM
somehow registered as Bill Clinton through a yahoo account and sending a PM to everyone.



Title: Re: Hacked
Post by: clive bradbury on August 17, 2006, 11:47:30 AM
I received it,too. However might be worth passing on a program called 'mailwasher'. Free download (except for the network version). It lets you take a look at all your e-mails on your provider server and delete them there without downloading them to your pc. It has the added feature that you can 'bounce' e-mails back to their source, giving the sender a 'mail undeliverable' message. Quite satisfying, knowing that they are then receiving unwanted mail themselves!

Try it out.


Title: Re: Hacked
Post by: BigDAS on August 17, 2006, 12:28:36 PM
I don't quite understand. If the Personal Message system is internal, then what's to prevent anyone from sending objectional messages?


Title: Re: Hacked
Post by: clive bradbury on August 17, 2006, 02:20:03 PM
The principal advantage is that if there any mails with viruses/adware and the like attached they never get to your computer as you are able to delete from your ISP server. Because in this particular case the message was sent as an e-mail, not a pm. Or at least it was in my case.


Title: Re: Hacked
Post by: BigDAS on August 17, 2006, 08:43:06 PM
Okay, I understand. Get that Email scanner working, Dude.


Title: Re: Hacked
Post by: dseagrav on August 18, 2006, 10:25:07 AM
Quite satisfying, knowing that they are then receiving unwanted mail themselves!

Please don't do that!

The vast majority of spam sending operations use falsified return addresses. You're not mailing the spammer, you're mailing some poor innocent whose email was used as the return address. Usually the fake addresses come from stolen address books - Spammers will get a worm onto a computer, send spam to everyone in that computer's address book, and use a random address FROM the address book as the sending address. So if Fred has me in his address book, and he downloads a worm, it sends spam to everyone in his address book (me included) using me as the sender's address. It looks like I sent the spam but in reality I was never involved.

Spammers do this for two reasons: People are more likely to open mail from someone they know, and it makes block-this-sender type spam protection useless.

I've had this happen to me more than once, including legal threats. People just don't understand that sender addresses are easily (and usually) forged.



Title: Re: Hacked
Post by: movieman on August 19, 2006, 08:54:37 AM
Indeed. When I was running my own domain I'd often see asshole spammers spam half of AOL with my domain as the return address: it's extremely rare that they use a real one.


Title: Re: Hacked
Post by: movieman on August 19, 2006, 08:58:38 AM
BTW, is there some way to stop people sending embedded images (or, for that matter, embedded _anything_) in private messages? It would also be useful to be able to disable the preview of messages so I don't see any I don't click on.


Title: Re: Hacked
Post by: BigDAS on August 19, 2006, 12:10:25 PM
Since the forum is accessed by browser, any good pop-up bloker should work with the PM's.


Title: Re: Hacked
Post by: aftercolumbia on September 12, 2006, 04:21:25 PM
I have not identified any PMs from this site (ever) so I'm guessing that either gmail does a good job of filtering them (I only take a cursory look at the spam folder to make sure there aren't any genuine emails in there; it is very rare that there are...gmail also shows the first line of text on the list overview pages, so a legitimate looking subject line is not enough to get me to click on it.  Gmail won't resolve any external links unless I tell it too, and also doesn't run macros or attachments, means that clicking on it is harmless.)  If this site sends mail in the name of an account holder, gmail checks the header to see if the originator address according to the header is the same as the originating IP domain according to SMTP...if they don't match, off to the spam folder it goes.  That would explain if anyone has tried to send me a legitimate PM from this site and never had any indication it was received.  If a genuine illegitimate spam was sent to me through this site, I would never recognize that it came from here because I don't check all my spam headers (only so many minutes in the hour a day I spend doing email...only so many seconds in the minute I spend looking at spam...)

Terry Wilson
After Columbia Project

P.S: where did the smileys go?


Title: Re: Hacked
Post by: Christophe on September 13, 2006, 02:54:18 AM
Quote
P.S: where did the smileys go?

So I'm not the only who have lost it?
I thought it was an issue with my PC...


Title: Re: Hacked
Post by: Redburne on September 13, 2006, 06:34:53 AM
P.S: where did the smileys go?

You guys, too? Well, your post gave me an idea.

I checked my user profile, and in the section "Look and Layout Preferences", there's an option "Current Smiley Set" which was set to "No Smileys".
I've changed it to "Default", and see Smileys, again. :)

Looks like the profile setting was (accidentally ?) changed, perhaps when the smiley set was changed.


Title: Re: Hacked
Post by: Zachstar on September 13, 2006, 07:12:33 PM
I did a change hopefully the smilies will be fixed soon.

Edit: Another Fix Let me know if this helps.


Title: Re: Hacked
Post by: aftercolumbia on November 05, 2006, 02:53:18 PM
Smilies don't work?  Dang :awwcrap4253: :Duh!39835: :gloomy3353: :no45: :sigh43: :sorry345: :Stop22: :worried34534: :yuck4543: :ziplip543: :what343: :shock: :( :cry: :| :oops: