Forum

7 views
Skip to first unread message

rbmj

unread,
Jan 23, 2012, 7:29:18 PM1/23/12
to chanti...@googlegroups.com
Hi all,

The forum is currently down. If any essential discussion needs to
happen, you can do it over the list in the interim. No, I do *not* know
how long this will be. The web team is working on it.

Any *sustained* discussion on the list should follow standard mailing
list etiquette (no top posting, inline reply, no unnecessary chatter).
If you don't know what that is, google it, don't post (see: unnecessary
chatter). Please be courteous and don't flood the group.

Remember that any half-decent modern email client should offer options
to filter all mailing list traffic to a separate folder if things get
too loud. Thunderbird and Claws both offer good filtering capability
and Gmail can do it with "filter messages like this".

Also, if someone can notify the mentors who aren't on the list (Sica,
Rothwell, Mike AFAIK), that would be cool. If you give me an email I
can give them an invite as well.

Blair

Anirudh B.

unread,
Jan 23, 2012, 7:40:18 PM1/23/12
to chanti...@googlegroups.com
I apologize on behalf of the website management team for these problems. We have been having problems with the website (it seems to have been hacked), and we are in the process of restoring the damaged parts of the website, including the forums.

As of now, the forums appear to be back online.

Weyland Chiang

unread,
Jan 23, 2012, 8:38:05 PM1/23/12
to chanti...@googlegroups.com
To have been "hacked"? Any investigation going on? I'm curious.

--
You received this message because you part of Chantilly Robotics - Team 612.
To post, send email to chanti...@googlegroups.com
To unsubscribe, send email to chantilly612...@googlegroups.com



--
Weyland Chiang

Cell Phone: (571) 839-9097

Isaac Lee

unread,
Jan 23, 2012, 10:34:44 PM1/23/12
to chanti...@googlegroups.com
I think it was my account...a week ago, the forum put up a pop-window
and asked for my username and p/w. Funny thing was, I was able to
access the forums and post by disregarding the pop-window. But I put
in my username and p/w thinking that it would go away. I don't know
how this may be relevant to the forums crashing, but this "pop-up"
doesn't usually occur.

rbmj

unread,
Jan 24, 2012, 6:52:31 AM1/24/12
to chanti...@googlegroups.com
Man in the middle JavaScript injection? Would be pretty hard to pull off well... I recommend that all active users change their password and if you see suspicious popups to use the view source option and report the incident with attached code.

I'll call my bad on this one... isaac did ask me and I assumed it was a fluke with the forum software.

Blair

Weyland Chiang

unread,
Jan 24, 2012, 12:48:42 PM1/24/12
to chanti...@googlegroups.com
I highly doubt it'd be a Man in the middle attack, that would mean it's a targeted attack against a captain and so most likely it'd have to know information about our team, therefore, one of us. It was most likely some phishing or spoofing attack.

rbmj

unread,
Jan 24, 2012, 2:55:12 PM1/24/12
to chanti...@googlegroups.com
Yes, but barring a man in the middle attack how else would they inject the code into the http stream? Mind you this is over tcp...

Blair

Weyland Chiang

unread,
Jan 24, 2012, 7:17:47 PM1/24/12
to chanti...@googlegroups.com
Maybe it was an attack on the web server in which they injected a script to run when a specific ip tried accessing the webpage or simply a spoofed linked that they tricked the google search engine or whatnot to have.
Reply all
Reply to author
Forward
0 new messages