Progarchives.com Under Intensive Attacks

Dean wrote: Tony R wrote: So who might have a grudge against Progarchives and ProgNosis, a disgruntled ex-member?? Keep up the good work Max and Graphix I sure the attack was purely in the interests of monetary gain (SQL Injection is used to get information out of the database) - but like many of these attacks - it failed in its original purpose because it broke the site.

That's one possibility ... but sql injection can also be used to add to or modify the database. For example, hackers might try to add javascript calls to all the reviews stored in the database ... then when visitors view PA pages which contain reviews, that javascript might look for vulnerabilies in their browsers and try to install spyware or make the computer part of a bot net.

MikeEnRegalia wrote: Dean wrote: Tony R wrote: So who might have a grudge against Progarchives and ProgNosis, a disgruntled ex-member?? Keep up the good work Max and Graphix I sure the attack was purely in the interests of monetary gain (SQL Injection is used to get information out of the database) - but like many of these attacks - it failed in its original purpose because it broke the site. That's one possibility ... but sql injection can also be used to add to or modify the database. For example, hackers might try to add javascript calls to all the reviews stored in the database ... then when visitors view PA pages which contain reviews, that javascript might look for vulnerabilies in their browsers and try to install spyware or make the computer part of a bot net.

Two things:

First of all, why the hell would anyone want to attack this site in the first place? It's just an innocent place where proggers unite and share interests, review albums etc etc... it's not like we're hurting or insulting anyone is it?

Second of all, the people that are attacking us really need to get some friends, some action and maybe even a better hobby than using the internet for bad.

Thanks again to our guardian angel admins also for keeping this site running smoothly, very much appreciated over here

Also, the admins on PA are way smarter than these cheesedick internet terrorists. i doubt anything will happen to PA.

Keep up the good work M@x and company.

Keep up it.  I was able to log in today which is more than I could last night...so we're seeing improvements.  Mucho kudos to M@x for protecting the site even while on his travels

npjnpj wrote: kibble_alex wrote: Two things: First of all, why the hell would anyone want to attack this site in the first place? It's just an innocent place where proggers unite and share interests, review albums etc etc... it's not like we're hurting or insulting anyone is it?   Perhaps Brittney Spears, Justin Timberlake, and Simon Cowell have invested some of their cash in a shady IT consultancy company?

Pah! They're just jealous because we found good music before they did

I knew you guys were on it and that you'd defeat the evil sprites responsible.  Great job!

MisterProg2112 wrote: Thanks m@x and everyone else helping keep the site up

I'll second that  and would like to add: and not only in times under attack! Thanks a million, guys, be assured that your work is appreciated!

At least that explains why the site has been sooo slow.
What an a**hole.......

Hi guys,

thanks for the support, really needed in theses days because , I am starting to loose my patience.

It's the same old attackers from the Christmas Attack when we loose 500 albums in the wave.

To answer MikeEnReglia, it's a HEX-Encoded sql query send in the URL that update or insert junk html/javascript in the data columns. I installed in the past a URLScan tool to prevent long URL execution.

Now , I need to warn everybody of a coming downtime to install a FIREWALL on the server ( another hit on the cash machine  )

So it is suppose to be between 7PM EST to 11PM EST Wedsneday, July 3.

Server may be down some time.

Thanks again for the support. We do our best ...

We will survive....!!!

Prog On !

NP: Dream Theater - A Change of Seasons