HB under DDoS attack - should be up again 9-10th of february

[KuRIoS]

"www.thebuddyforum.com is being under a DDoS attack since early January 2013 - we tried to keep the forum up as long as we can, but as you see, it is failing the last couple of days.

We are informing you, that we ordered new hardware, to be able to handle all that bogus traffic, that forces our MySQL server to run on 100 % CPU load and fail to serve the information to the user.

We expect the new hardware to be delivered and configured, and then set live around Saturday or Sunday ( 9th - 10th February )"

**UPDATE**

Source: http://www.thebuddyforum.com/buddy-b...om-server.html

From Bossland:

Sorry to inform you all that...

we where victim of an SQL Injection on our old Shop System Agilebill. Someone managed to exploit his way into the server and take a mirror of the following:

* Old Shop that was functional until August 2011, the shop system stored the Username, pass with md5, IP Address of the last visit, and invoice numbers that where paid or not

* Buddyauth.com usernames and passes ( salted md5(md5) ) and the email address until May 2012

* Keys for the Bots until 2th October 2012

* Very old forum data until November 2010

This intruder zipped the whole database and put it on the only running domain on that server buddymaster.com, where he deleted the dummy index.hml so the structure of the folder would be clear to see.

We got informed by an online ticket 90 minutes ago, and we took down the link 60 minutes ago.

Please be informed that sharing this zip is agains the law, intruding in an system by a SQL Injection is also against the law. We have no idea how many times the zip was downloaded, if anyone of you downloaded it, please delete it asap.

As it is already midnight, we will proceed with repairing the damage tomorrow:

* We will deliver a new key for each created key until 02 Oct 2012

* Your buddyauth password is very secure as its md5(md5) & salt, but if you feel unsecure, please change it now ( Accounts created until 14 May 2012 )

* If you have not changed your Forum password since 04 November 2010, please do it now. Forum data that was taken is as old as 4th Nov 2010.

* We will go through all logfiles to try to get any idea of who was the intruder and how he managed to exploit the old open source shop system ( which is completely shut down now ).

We are very sorry for the incident, and also very angry, as we can not do anything to get that data back. If you have any information about the intruder please send us an ticket on support.thebuddyforum.com

**edit by Jaerin

[Wilbo007]

Thanks for pointing that out, we're gonna get that fixed

[gippy]

Thanks for the update, glad i've got all the profiles i need to keep me going.

[moor2]

thanks for the heads up, i was wondering what´s causing that..

[buzzerbeater]

I can finally stop pressing F5 for the next days, thanks for the heads up.

[Razor33]

Thanks for info also. I hope they will fix that soon and they will have less problems couse i rly care HB team :P Made a lot thanks to the bots i brought from them hehe ^^

[evr08]

F%#$ just got paid, i was gunna finally get it this morning.

[Psypher93]

there are cracks for honorbuddy.

I hope i don't sound like a broken record, but it would be wiser to not point out or give people ideas about downloading a ''cracked'' Honorbuddy. Instead support honorbuddy developers and buy it.

[Razor33]

I hope i don't sound like a broken record, but it would be wiser to not point out or give people ideas about downloading a ''cracked'' Honorbuddy. Instead support honorbuddy developers and buy it.

Totaly agree with you man, i believe they rly deserve the money they ask for their product. Aniways got 8 keys atm but i wold still use the "hacked versions" in case their login servers are down ^^ But still with a "clean conscience" knowing i payed

[phantom325]

@bearkin, we don't support cracked Honorbuddy here. The developers deserve every penny.

[Giwin]

they should have down this 1-2 weeks ago, can't **** with proper DDoS protection hardware... since they are in a grey area for business then this should be been accounted for.

i wonder how much money they lost out of ignorance.

[wolfeater2010]

I gotta say honorbuddy is so good and the price is hardly anything....If they continue with what they are doing...I would be more than happy to continue paying

[apepi]

*snip* quote above

/sigh, I was wondering what was going on.

**mod edit Just cleaning up redundancy

[MyNewName]

I'm just going to laugh and move on. Good info on OP

[CreativeXtent]

funny thing... i told them about this... to bad.