AMD Forums Hacked...

[ManagerJosh]

Yup. AMD Forums got hacked.

http://www.computerworld.com/securit...108195,00.html
http://www.pcworld.com/news/article/0,aid,124555,00.asp
http://www.sci-tech-today.com/story....story_id=41307
http://www.tgdaily.com/2006/01/30/amdforums_hacked/


Anyone else think they should just switch to vBulletin?

[bchawla]

Yup. Breaking news. AMD Forums this morning got hacked. It's all over the net atm..

http://www.computerworld.com/securit...108195,00.html
http://www.pcworld.com/news/article/0,aid,124555,00.asp
http://www.sci-tech-today.com/story....story_id=41307
http://www.tgdaily.com/2006/01/30/amdforums_hacked/


Anyone else think they should just switch to vBulletin?

What forum sofware does AMD FOrums use?

[ManagerJosh]

*cough*IPB*cough*

[Andrew111888]

Yes, but IPB was not the reason they were hacked.

[Steve Machol]

There are many possible reasons a site can be hacked that have nothing to do with the forum software.

[ManagerJosh]

Under normal circumstances I would agree Steve. However the word I got was IPB was the source of the problem and that someone stuffed some code into the templates to cause an IFRAME to open and generate it to load the trojan.

[eXaulz]

There are many possible reasons a site can be hacked that have nothing to do with the forum software.

http://forums.invisionpower.com/inde...owtopic=206790

Maybe it's just a coincidence, eh...

Well, it was a Windows exploit, so it doesn't really have to do anything with IPB. Unless it does... (i'll link it again: http://forums.invisionpower.com/inde...owtopic=206790)

Hehe.

[TheDon-VBB]

Under normal circumstances I would agree Steve. However the word I got was IPB was the source of the problem and that someone stuffed some code into the templates to cause an IFRAME to open and generate it to load the trojan.

And how do you know the specifics only kiddin', I don't touch the iFrame tag - it's only supported in IE and it's has it's many weaknesses.

[Quillz]

Under normal circumstances I would agree Steve. However the word I got was IPB was the source of the problem and that someone stuffed some code into the templates to cause an IFRAME to open and generate it to load the trojan.

Even so, it's entirely possible that the same thing could happen in vB, phpBB, etc. If IPB works for AMD, there is no reason for them to switch.

[Floris]

Big sites, known companies and fortune500 people etc are constantly the victom of weekly if not daily hack / abuse / threat / etc attacks. It is bound to happen that someone gets lucky and a web is too late with patching.

Thumbsup for the script kiddies. (up their..)

[Vtec44]

Thumbsup for the script kiddies. (up their..)

LOL

[Wayne Luke]

And how do you know the specifics only kiddin', I don't touch the iFrame tag - it's only supported in IE and it's has it's many weaknesses.

The Iframe tag is supported by more than IE and is a W3C standard tag as of HTML 4.01. Any standards compliant browser should support it.

http://www.w3.org/TR/html4/present/frames.html#h-16.5

[Dean C]

It's a lot more likely that a server-side exploit was run.

[cirisme]

It probably has less to do with IPB and more to do with the poor service their offshored corporate IT provides. I have witnessed some of their major screw-ups, so if the same outsourced IT serviced the website, this does not surprise me in the least.

I'm surprised AMD still off-shores their IT support.

[ManagerJosh]

I read over at the IPB Boards Lindy logged in to take a look what was going on. On a closed thread, it said that they upgraded the board software and the matter was resolved...