should the gentoox site be doing this?

Talk about anything related to Gentoox or Gentoo.
Post Reply
Lilmuckers
Linux User
Posts: 11
Joined: Sun May 23, 2004 8:44 pm
Location: Leicester, UK
Contact:

should the gentoox site be doing this?

Post by Lilmuckers »

for some reason when i load a page on the gentoox website it attempts to forward me to http://www.byo.ro a few seconds after the page has loaded

i'm getting concerned mainly because it is using phpnuke and i had a hellish time with hackers on nuke making it forward to some virus infested website.
soepkip
Newbie
Posts: 9
Joined: Sun Apr 18, 2004 7:15 pm

Re: should the gentoox site be doing this?

Post by soepkip »

Lilmuckers wrote:for some reason when i load a page on the gentoox website it attempts to forward me to http://www.byo.ro a few seconds after the page has loaded

i'm getting concerned mainly because it is using phpnuke and i had a hellish time with hackers on nuke making it forward to some virus infested website.
This doens't occur on my pc, so it seems you have some sort of spyware on your computer which redirects you to that website.
Lilmuckers
Linux User
Posts: 11
Joined: Sun May 23, 2004 8:44 pm
Location: Leicester, UK
Contact:

Post by Lilmuckers »

well i scan my hard drive regularly for spyware.

and considering it happens on my linux box too

and also i use opera

i find it unlikely..

it doesn't work, and i only noticed because i got a popup error saying host byo.ro unreachable.
ShALLaX
Site Admin
Posts: 1973
Joined: Sun Aug 10, 2003 9:25 pm
Location: England
Contact:

Post by ShALLaX »

Definitely sounds like spyware, I've never heard of that site at all. Nothing I've done at all.

Hangon... youre right.. it is. Something fishy is going on here...
The original Xbox adaptation of Gentoo
ShALLaX
Site Admin
Posts: 1973
Joined: Sun Aug 10, 2003 9:25 pm
Location: England
Contact:

Post by ShALLaX »

Yeah, some faggot has defaced my site. Fixing it now.
The original Xbox adaptation of Gentoo
ShALLaX
Site Admin
Posts: 1973
Joined: Sun Aug 10, 2003 9:25 pm
Location: England
Contact:

Post by ShALLaX »

Should be fixed now. Thanks for the headsup... It must have been recent since its only just started doing it :\
The original Xbox adaptation of Gentoo
ShALLaX
Site Admin
Posts: 1973
Joined: Sun Aug 10, 2003 9:25 pm
Location: England
Contact:

Post by ShALLaX »

If anyones interested *hint hint, wink wink* 194.102.224.231 << thats the guy that hacked it.

81.196.232.54 Then that guy...
80.58.9.111 Then him...
194.102.224.226 Then him...
The original Xbox adaptation of Gentoo
Trogdor
Gentoox Guru!
Posts: 553
Joined: Tue Oct 07, 2003 9:57 pm
Location: MOUNT TAPE U1439 ON B3, NO RING

Post by Trogdor »

ShALLaX wrote:If anyones interested *hint hint, wink wink* 194.102.224.231 << thats the guy that hacked it.

81.196.232.54 Then that guy...
80.58.9.111 Then him...
194.102.224.226 Then him...
s/hack/crack . . . I don't think that ESR and RMS "hacked" your page . . . :wink:
MOUNT TAPE U1439 ON B3, NO RING

Q: HOW DO I RUN MAGIC ??
A: You run magic by not typing in capital letters.
ShALLaX
Site Admin
Posts: 1973
Joined: Sun Aug 10, 2003 9:25 pm
Location: England
Contact:

Post by ShALLaX »

ESR? RMS? I consider any SQL injection a "hack".

Anyway, fixed the phpnuke code so shouldnt see that method of entry being used again.

What I dont get is why they made it forward to a non-existant site... *shrugs*.
The original Xbox adaptation of Gentoo
Lilmuckers
Linux User
Posts: 11
Joined: Sun May 23, 2004 8:44 pm
Location: Leicester, UK
Contact:

Post by Lilmuckers »

woo, glad to see i wasn't cracking up

yeah, i got hacked 5 times in a month, i tried the nuke-cops security fix thingy, but someone still managed to hack it, so until i find the time to program my own site engine (after all these blasted A Levels) i deleted the admin panel

secure to the max ^^

*goes to hit some scriptkiddies with a very large stick*
Last edited by Lilmuckers on Wed May 26, 2004 7:08 am, edited 1 time in total.
nobspangle
Gentoox Guru!
Posts: 1681
Joined: Sun Sep 28, 2003 11:59 am
Location: Manchester, UK

Post by nobspangle »

whois wrote:person: Ioan Badita
address: str. Neagoe Voda Nr. 3
address: Bl.3 Sc. B, Ap. 2
address: Bacau
address: RO
address: Postal Code: 5500
address: [...]
address: Fiscal Code:
phone: +40-722-398810
e-mail: byo78@yahoo.com
If you keep an open mind, will your brain fall out?
ShALLaX
Site Admin
Posts: 1973
Joined: Sun Aug 10, 2003 9:25 pm
Location: England
Contact:

Post by ShALLaX »

Bwahahaa.

I've deleted all of the modules I dont use, including stuff like the adduser module. I guess maybe I should add an intermediate password page or something. Double security.
The original Xbox adaptation of Gentoo
Drunkn_Munky
Novice
Posts: 37
Joined: Wed Jun 02, 2004 2:45 pm
Location: Norwich
Contact:

Post by Drunkn_Munky »

nobspangle wrote:
whois wrote:person: Ioan Badita
address: str. Neagoe Voda Nr. 3
address: Bl.3 Sc. B, Ap. 2
address: Bacau
address: RO
address: Postal Code: 5500
address: [...]
address: Fiscal Code:
phone: +40-722-398810
e-mail: byo78@yahoo.com
how did you find that info? I can find out the street but not the house number and the person.
nobspangle
Gentoox Guru!
Posts: 1681
Joined: Sun Sep 28, 2003 11:59 am
Location: Manchester, UK

Post by nobspangle »

Code: Select all

emerge whois
whois domain.name
If you keep an open mind, will your brain fall out?
Lilmuckers
Linux User
Posts: 11
Joined: Sun May 23, 2004 8:44 pm
Location: Leicester, UK
Contact:

Post by Lilmuckers »

me, being a boring sod, having needed to use Whois a lot wrote an excruciatingly simple php front end for whois

http://thefridge.me.uk/whois.php

oh the joy of running off of my xbox sitting beside me here
it's not my fault it exploded!
what?
oh THIS match..
uhm, it's his.
Post Reply