soh fixed again

***Ickie*** · June 30th, 2009, 05:57

it appeared we got hacked by a virgin, and i figured it out this morning. I think it/she/he came from Iran by looking at the logs

this is the redirect I found
74-33 - 0/0/174877 . 0.15 28253 699 0.0 0.00 3469.07 204.116.125.188 sim-outhouse.com GET /index.php?lloc=http://217.218.225.2:2082/index.html? HTTP/

this happened last night between 11-12:30 server time

CHANGE YOUR PASSWORD IF YOU TRIED TO LOGIN

**ananda** · June 30th, 2009, 05:59

Yep, you've been offline all morning.

Thanks for fixing it

***Chacha*** · June 30th, 2009, 06:01

I was sick worried last night, Last time i logged in was about 9pm (EST) I tried to log in again at about 3am, and was unable to... a friend told me not to use my password ever, cause they suspect it is being hacked, locked for some reason... I used my password anyway... now, i have to change password..the hacker might have gotten it somehow!!

Thank God everything's back to normal!!!!

Eli

PS...

Thanks Ickie!!

***Rami*** · June 30th, 2009, 06:06

This is really starting to become annoying. Why don't these pimple-faced hackers climb out of their parents' basement and discover women and sports like the rest of us? :angryfir:

***Ickie*** · June 30th, 2009, 06:07

yes change your password, if you have given it durning the outage trying to log in, this is what they may have been looking for.

Lionus · June 30th, 2009, 06:09

send him/her a trojan for me, will ya?

**bushpilot** · June 30th, 2009, 06:11

Glad I didn't try to login. It displayed a login popup window, but I thought It was some admin thing and didn't bother LOL.

***Rami*** · June 30th, 2009, 06:19

I changed mine, thanks.

**Snuffy** · June 30th, 2009, 06:19

Slimey bastages!! Changed.

**JimC1702** · June 30th, 2009, 06:24

I suspected it when I saw the Login window, so I didn't attempt to log in. Figured the word would come down eventually.

I wonder if it's just Flight Sim sites or if these people are just working overtime on hacking anything they can?

Jim

**idancesafetydance** · June 30th, 2009, 06:25

Originally Posted by Rami

This is really starting to become annoying. Why don't these pimple-faced hackers climb out of their parents' basement and discover women and sports like the rest of us? :angryfir:

**exc141ac** · June 30th, 2009, 06:48

I figured a new configuration -- the first time,
but my second thought was -- not good -- Poor Ickie is going to be losing sleep (again).

It did occur to me that I had used my password but by then . . . .

Changed now.

***Ickie*** · June 30th, 2009, 06:52

I and canelo are looking over files and folders, this was just too easy to find and fix. I suspect they were looking for passwords and got them too, but they made it so simple to find, makes me wonder. They ought to have known that we would tell everyone to change their passwords. ...it doesn't make sence...........

more to come.

**CodyValkyrie** · June 30th, 2009, 07:13

To be honest, it doesn't necessarily have to make sense. They know, much like a telemarketer making sales calls, that they will indeed get a small percentage of passwords that will indeed work, or that they may be able to utilize these same usernames AND passwords.

What's also to say that they didn't get the e-mail addresses based off the accounts of said users, and now that they have the passwords are not attempting to hack the e-mail addresses as well (Lord knows so many of us for our sanity use the same passwords).

Point is, as I see it, if you used your password like I myself did, then you need to make a round of password changes.

**hubbabubba** · June 30th, 2009, 07:14

Yeah Ickie... thanks for the head-up!

But, like a moron, I typed-in my password, thinking it was some glitch due to SOH's overhaul...

I'm not getting younger, and getting used to a new password (which I changed per your instructions) won't be easy.

Iran you say? If the hacker is caught - assuming that he's not working for Mahmoud junta - I hope that hand-cutting is still in fashion over there.

***Ickie*** · June 30th, 2009, 07:16

they did only get user name and password if you did indeed try to login
the rest was hidden behind the site not working.

if you want to change your email addy dont ask me to do it for you as I have too much to do.

**Cag40Navy** · June 30th, 2009, 07:19

ah man, this sucks. at least i got it changed, so im good. keep the good work up ickie!

**CodyValkyrie** · June 30th, 2009, 07:22

Yup, thanks for the hard work. These hackers can be rather annoying.

***srgalahad*** · June 30th, 2009, 07:44

I made a post here at 11:50 EST last night and was chatting on Teamspeak with another member. He went to check my post and ran into the problem so "right on Midnight" is the time frame.

First reaction was: "This isn't normal, don't do it!" so I never tried to submit name/PW -- whew!

**yank51** · June 30th, 2009, 08:13

May want to consider forcing ALL to replace theirs, so those that DID fall prey (yeah, me too...

) will be forced to make the change here...

**rpjkw** · June 30th, 2009, 09:12

Dumb question dept.: I changed my password, but I was wondering were I to change my email addy to one using Yahoo, would it work? I originally used the ISP provided mailbox because I couldn't join with Yahoo.

Bob

***Dangerousdave26*** · June 30th, 2009, 09:23

If you tried to log in also and gave them your user name and password there are some other changes you need to make.

If you use the SOH password anywhere else change that as well. Never use the password at this or anyother site as the password for you bank account or email account. They know this is what people do so thats what they are after.

If your email registered with SOH matches the email address you have with your bank (assuming you are doing online banking) change the email address you have registered with your bank to something else. This includes paypal. How many users here have the paypal email address the same as the SOH email address? Of those people somebody is using the same password for both.

Here are some does and don'ts for security reasons.

Forums, Social networking sites, and non financial sites get a unique email address it can be common for the group.
Online banking, sites where you pay your bills get a seperate unique email address. It also can be common.
Passwords for forums, social networking or other non financial sites can have a common password
Passwords for all banking activities and bill payments must be complexed and unique. Never make them the same. Not even from one banking insitution to another.

The definition of a complex password

Lower case letters
Upper case letters
numbers
special characters (some sites do not allow special characters or limit which ones you can use)

My suggestion is make all of your banking and bill pay passwords as complexed as possible.

Never make them related to anything about you. example don't use birthdays, Wedding dates or anything else that relates directly to you or your family. ie names

***jmig*** · June 30th, 2009, 09:25

Originally Posted by hubbabubba

Yeah Ickie... thanks for the head-up!

But, like a moron, I typed-in my password, thinking it was some glitch due to SOH's overhaul...

I'm not getting younger, and getting used to a new password (which I changed per your instructions) won't be easy.

Iran you say? If the hacker is caught - assuming that he's not working for Mahmoud junta - I hope that hand-cutting is still in fashion over there.

Hell with the hands. Let's cut off the thing his hands play with. I had to change my password too.