Home | Community | Message Board


Mycotrop.com
Please support our sponsors.

Feedback and Administration >> Website Announcements and Feature Feedback

Welcome to the Shroomery Message Board! You are experiencing a small sample of what the site has to offer. Please login or register to post messages and view our exclusive members-only content. You'll gain access to additional forums, file attachments, board customizations, encrypted private messages, and much more!

Shop: Left Coast Kratom Buy Kratom Capsules, Buy Kratom Extract, Kratom Powder For Sale   Bridgetown Botanicals Bridgetown Botanicals, CBD Edibles   PhytoExtractum Kratom Powder for Sale, Maeng Da Thai Kratom Leaf Powder   Amazon Ranch Dressing, Scales

Jump to first unread post. Pages: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | Next >
OfflineYthanA
ᕕ( ᐛ )ᕗ
Male

Registered: 08/08/97
Posts: 17,814
Loc: NY/MA/VT Borderlands, USA Flag
Last seen: 3 hours, 5 minutes
Welcome back! * 53
    #26122914 - 08/05/19 05:58 PM (1 year, 9 months ago)

Hello everybody, welcome back to the Shroomery! We're so sorry for the delay!

Q: Why was the site down?

A: We got hacked. An attacker stole a copy of our e-mail server's database.

Q: How did it happen?

A: The Shroomery uses a separate server for hosting uploaded files, like images and attachments. An attacker discovered a vulnerability on that server. It allowed them to upload a specially crafted file which appears to be a valid image, but also contains executable code which could be run remotely. They were able to install a web-based file manager and retrieve an unencrypted backup of our mail server database which was stored on that machine. Once they had access to the e-mail credentials, they were able to request a password reset on the forums and vandalize the site using my own account. Pretty embarrassing, but it also got our immediate attention and limited the scope of the attack.

Q: Why did this happen?

A: It appears we were not a primary target. Our attacker originally set out to hack spore vendors, blackmail them, and exploit any opportunity to steal their website traffic, business records, and cryptocurrency. When one of our sponsors refused to give in to extortion, the attacker wanted to damage their business. One way of doing this was to gain access to the Shroomery and change all the sponsor's links to point to a sketchy competitor. Once the attacker found an exploit on our site, they also tried to blackmail us too, but I don't think this was their original goal.

Q: Are Shroomery members at risk in any way?

A: If you ever had an e-mail account hosted by us @shroomery.org or @growery.org and you re-used your e-mail password for other websites or services, you should immediately change this password anywhere else it was used. Even if your e-mail account is no longer active, a file may now be floating around which contains your old Shroomery e-mail address and the most recent password you used for that account. We sincerely regret this lapse in security and we have completely transitioned our e-mail services to a specialized professional third party to prevent anything like this from happening again.

Other than that, the risk should be minimal. Forum accounts were not affected, unless you happen to have the same password as your e-mail account. Our old mail server is no longer accessible from the internet and the only e-mail account the attacker actually logged in to was my own. All sensitive information and destructive admin functionality is locked behind additional layers of security, so even using my account, they couldn't read sensitive posts in the admin forum or access any powerful administrative tools.

Now that we're back online I expect our attacker will be closely scrutinizing our infrastructure and looking for new exploits. That's not unusual - we're constantly getting poked and prodded by people trying to find vulnerabilities - but now it may be more of an enticing challenge. We've locked things down as best we can and we'll be keeping a close eye on the situation.

Q: So if it wasn't the hack of the century, why did it take so long to bring the site back online?

A: Well, we didn't want to half-ass it. For the server that got hacked, we opted to replace it entirely which was a bit of an ordeal. We also had to carefully audit the rest of our infrastructure and make sure it wasn't vulnerable to the same class of exploit. And we had to investigate some claims made by the attacker about different vulnerabilities they'd discovered. And migrate e-mail to a separate platform. And update our scripts to work with the new setup. And address some other outdated and lapsed security practices. There were a million small but time-consuming details before we felt comfortable bringing the site back online.

Also, we just weren't really anticipating this. With planned maintenance, we always try to perform it seamlessly behind the scenes. But in an emergency, we have to bring the site offline immediately, and keep it down while we take care of all the required work and testing.

At the end of the day this is a niche site with limited revenue potential. We can't afford professional full-time administrators. None of the admins are employed by the Shroomery as their main job. We're all approaching middle age and have our own real-life obligations. Once the immediate threat was contained, we stopped working so frantically and just did the best we could in the free time we had available. We regret if this impacted anyone who was relying on the Shroomery for time-sensitive information.

Q: Why didn't you post more updates? People were getting worried!

A: Yeah, we didn't do a great job with communication this time around. We got some information out on Twitter and Facebook, but it wasn't a very high priority, and when we had time we were mostly focused on getting things fixed. Frequently we just didn't have anything to report except "still working on it, ETA undetermined". But I recognize that's still better than nothing. Next time we're facing prolonged downtime, we'll provide more frequent updates directly on the site's front page.

Q: When I click on an image or try to download an attachment, it doesn't work?

A: We're still transferring data to the new file server. Rather than wait any longer, we decided to bring the site back online with some uploads missing. No data was lost. The files will finish transferring over the coming week. Newly uploaded files should appear immediately.

Q: I just bought a supporter account from the new Shopify store. Did I lose all the time the site was down?

A: No, all supporter accounts have been credited for the downtime.

Q: I can't access my Shroomery e-mail account anymore?

A: For now, the Shroomery is no longer providing hosted e-mail as an extra feature for supporters. We may re-visit this in the future but we don't want to offer functionality if we can't keep it properly maintained and secured. Because the store has been offline for so long, most supporter accounts are technically expired and were on borrowed time anyway. If you are one of the few people who purchased a supporter account from our new Shopify store during the brief period it was online, you may open a support ticket and request a refund if you feel your supporter account no longer provides a good value. If you had important e-mail stored on our server, please open a support ticket and we can send you an archive of your old messages.

Q: So everything's fixed now?

A: Fuck, I sure hope so. :lol: We made some substantial changes and it's possible there are some bugs, but hopefully nothing major. If you notice a problem, please give it a minute or two and see if it's in the process of being fixed, otherwise please report it and we'll give it our immediate attention!

Q: How can I help support the site in the wake of this attack?

A: I love our community, and the fact that I anticipated this as a frequently asked question. You already gave us your patience, and that's really all we needed. Please just stick around, remain active on the site, and help us get things back to normal! :heart:


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
OfflinetwigheadS
mͯó
I'm a teapot


Registered: 08/27/08
Posts: 24,250
Loc: Glenn Gould's Fuck Windmi... Flag
Last seen: 3 hours, 16 minutes
Re: Welcome back! [Re: Ythan] * 6
    #26122918 - 08/05/19 08:56 PM (1 year, 9 months ago)

Thanks for looking out for us capt :awesome:


--------------------
¿Check out some art m8?



Post Extras: Filter  Print Post  Remind Me! Notify Moderator
OfflineGonzo the Eternal
In Sterquiliniis Invenitur


Registered: 05/09/18
Posts: 480
Last seen: 1 year, 8 months
Re: Welcome back! [Re: twighead] * 4
    #26122927 - 08/05/19 08:59 PM (1 year, 9 months ago)

Good to see everything is okay. Thanks for all your hard work guys.


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
OfflineTormato
It’s OK!! I’m a Limo Driver!! 😁
Male User Gallery


Folding@home Statistics
Registered: 07/01/17
Posts: 5,695
Last seen: 9 hours, 48 minutes
Re: Welcome back! [Re: twighead]
    #26122928 - 08/05/19 08:59 PM (1 year, 9 months ago)

Quote:

twighead said:
Thanks for looking out for us capt :awesome:



:whathesaid: Glad we're back in business!


--------------------
Helpful Threads

The Shroomery Store

Tormato's Q&A Thread Post Questions Here or PM me!

"Lately it occurs to me what a long, strange trip it's been." ~ Grateful Dead

Before you start...Do you have a Pressure Cooker and a Dehydrator? I highly recommend getting both!

Tormato's LAGM 2020

Come chat with me and other Trusted Cultivators and Trusted Identifiers on Shroomery Discord


Some cool videos I like to watch under the influence.


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
OfflinemndfreezeM
Shroomery Secret Service
Other User Gallery


Folding@home Statistics
Registered: 04/22/02
Posts: 19,022
Loc: PuppetMasterFlash
Last seen: 2 hours
Re: Welcome back! [Re: Tormato] * 3
    #26122936 - 08/05/19 09:02 PM (1 year, 9 months ago)

:fuckyeah:


--------------------
Nothing says love like grannies prolapsed anus!

quote]Urb said:
I know... Its fucked up... Ill fix it minyana..[/quote]


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
OfflineLearyfanS
It's the psychedelic movement!
Male User Gallery


Registered: 04/20/01
Posts: 32,494
Loc: High pride!
Last seen: 9 hours, 32 minutes
Re: Welcome back! [Re: Ythan] * 9
    #26122949 - 08/05/19 09:08 PM (1 year, 9 months ago)

So glad to see us back!  There for a bit, I thought this was the big one. 

:heartpump:









--------------------
--------------------------------


Mp3 of the month: The Ides - Psychedelic Ride



Post Extras: Filter  Print Post  Remind Me! Notify Moderator
InvisiblebodhisattaM
Smurf real estate agent
 User Gallery
Folding@home Statistics
Registered: 04/30/13
Posts: 60,942
Loc: Milky way
Re: Welcome back! [Re: twighead]
    #26122954 - 08/05/19 09:10 PM (1 year, 9 months ago)

:rockon:


--------------------
Everything you need in one spot.

My Q&A thread. Ask me questions here rather than in Private Message
Bod's chat thread
Buy Bod a beer:
BTC: 1G7roCpYmNp4VqnKySQeBkaFTc7JMzKLpL
ETH: 0x2091cE981af8129986C50AC0818e1aCA76076768
DOGE: DQNyGtUNHwYUrGECag1VRmMcf6QVeTY4V1


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
OfflineMr. Funguy
Quasi Frodo
Male User Gallery

Registered: 01/19/19
Posts: 1,077
Loc: Terra
Last seen: 1 year, 6 months
Re: Welcome back! [Re: mndfreeze] * 1
    #26122962 - 08/05/19 09:12 PM (1 year, 9 months ago)

Fuckyes...:goodday:


--------------------
:mushroom2::crazy2::rocket:


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
OfflineAsuraS
Cyantist


Registered: 08/01/11
Posts: 4,943
Loc: Texas
Last seen: 22 hours, 4 minutes
Re: Welcome back! [Re: Mr. Funguy]
    #26122964 - 08/05/19 09:14 PM (1 year, 9 months ago)

Good lord sweet Jesus!


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
Invisiblepineninja
Dream Weaver
 User Gallery


Registered: 08/18/14
Posts: 12,049
Loc: South Flag
Re: Welcome back! [Re: Mr. Funguy]
    #26122966 - 08/05/19 09:14 PM (1 year, 9 months ago)

Oh, was the shroomery down.:hahyeahwoo:


--------------------
Just a fool on the hill.


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
OfflineNosmoKing
Stranger
 User Gallery


Registered: 01/12/18
Posts: 187
Last seen: 10 months, 8 days
Re: Welcome back! [Re: Mr. Funguy]
    #26122969 - 08/05/19 09:15 PM (1 year, 9 months ago)

Hey thanks for giving us an update.


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
Offlinefluorescent
Unexpected.
 User Gallery


Registered: 06/30/17
Posts: 153
Last seen: 22 hours, 2 minutes
Re: Welcome back! [Re: Ythan]
    #26122972 - 08/05/19 09:16 PM (1 year, 9 months ago)

Whoohoo! I've been missing this community!


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
InvisibleMunchauzen
Mushroom Maharaja
 User Gallery

Registered: 06/23/11
Posts: 13,975
Re: Welcome back! [Re: fluorescent] * 3
    #26122978 - 08/05/19 09:17 PM (1 year, 9 months ago)

Now I can stop accidentally clicking the bookmark, only to close the tab


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
OfflinePumpJackTeX
livin life
Male User Gallery


Registered: 05/26/08
Posts: 3,937
Loc: California Flag
Last seen: 10 hours, 56 minutes
Re: Welcome back! [Re: Munchauzen] * 1
    #26122998 - 08/05/19 09:24 PM (1 year, 9 months ago)

Not gonna lie, I missed y'all.


--------------------
Life. 2008

Ascension Energy | UFOs | 2021


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
Invisibleconnectedcosmos
Horizon-bound meteorite
Male User Gallery


Registered: 02/07/15
Posts: 5,806
Loc: Franklin's Tower
Re: Welcome back! [Re: Munchauzen]
    #26123000 - 08/05/19 09:24 PM (1 year, 9 months ago)

:bb:yay:awehigh:


--------------------


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
Offlineverum subsequentis
seeker of truth
I'm a teapot User Gallery


Registered: 03/22/16
Posts: 8,131
Last seen: 2 hours, 15 minutes
Re: Welcome back! [Re: connectedcosmos] * 1
    #26123008 - 08/05/19 09:27 PM (1 year, 9 months ago)

Thanks to all who put in the unseen work that keeps this community rolling. I really appreciate you all. AND, that made me a little nervous. On a scale of 1 to 10, how safe are you mods feeling like we all really are?


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
InvisibleJohn Nada
Toujours Frais
 User Gallery
Registered: 03/03/03
Posts: 97,735
Loc: Hotwings; race car
Re: Welcome back! [Re: Ythan] * 1
    #26123010 - 08/05/19 09:29 PM (1 year, 9 months ago)

I could just be imagining shit, but the site seems a lot faster and more responsive now.


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
OnlineMoria841
Male


Registered: 07/02/18
Posts: 2,982
Loc: NJ Flag
Last seen: 2 minutes, 47 seconds
Re: Welcome back! [Re: John Nada]
    #26123013 - 08/05/19 09:30 PM (1 year, 9 months ago)

Woo!!:hereyougo:


--------------------


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
InvisibleMunchauzen
Mushroom Maharaja
 User Gallery

Registered: 06/23/11
Posts: 13,975
Re: Welcome back! [Re: Moria841] * 1
    #26123018 - 08/05/19 09:31 PM (1 year, 9 months ago)

anyone else have issues with their old pics? most of mine say deleted when I click


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
InvisiblebodhisattaM
Smurf real estate agent
 User Gallery
Folding@home Statistics
Registered: 04/30/13
Posts: 60,942
Loc: Milky way
Re: Welcome back! [Re: Munchauzen] * 3
    #26123021 - 08/05/19 09:31 PM (1 year, 9 months ago)

Read the OP. :lol:


--------------------
Everything you need in one spot.

My Q&A thread. Ask me questions here rather than in Private Message
Bod's chat thread
Buy Bod a beer:
BTC: 1G7roCpYmNp4VqnKySQeBkaFTc7JMzKLpL
ETH: 0x2091cE981af8129986C50AC0818e1aCA76076768
DOGE: DQNyGtUNHwYUrGECag1VRmMcf6QVeTY4V1


Post Extras: Filter  Print Post  Remind Me! Notify Moderator
Jump to top. Pages: 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | Next >

Shop: Left Coast Kratom Buy Kratom Capsules, Buy Kratom Extract, Kratom Powder For Sale   Bridgetown Botanicals Bridgetown Botanicals, CBD Edibles   PhytoExtractum Kratom Powder for Sale, Maeng Da Thai Kratom Leaf Powder   Amazon Ranch Dressing, Scales

Feedback and Administration >> Website Announcements and Feature Feedback

Similar ThreadsPosterViewsRepliesLast post
* Why is it that idiotic MOD's can delete your post without even .. Gomp 1,751 19 02/10/07 09:59 PM
by Asante
* Deleting pictures that you've uploaded
( 1 2 3 all )
Oscuro_lobo 6,426 51 05/19/04 02:06 PM
by MetaShroom
* !deleting uploaded pics!
( 1 2 all )
spud 5,525 27 03/09/03 08:03 PM
by eric_the_red
* Delete all function in PM inbox
( 1 2 all )
ZippoZM 2,702 24 01/10/07 10:58 AM
by SaturnGlass
* Can't delete shroomery ratings and repost?
Irishdrunk
1,678 18 05/24/05 12:13 AM
by Irishdrunk
* Account deletion *DELETED* gotbeer 1,069 6 10/28/05 12:24 PM
by afoaf
* Why can't we delete our pictures any more. *DELETED* PJDIDDLE 769 5 05/07/04 01:27 PM
by Anno
* picture deleted by poster elsig 775 4 11/04/06 06:35 AM
by Gomp

Extra information
You cannot start new topics / You cannot reply to topics
HTML is disabled / BBCode is enabled
Moderator: Ythan, Thor, Seuss, geokills
13,854 topic views. 0 members, 0 guests and 2 web crawlers are browsing this forum.
[ Print Topic ]
Search this thread:
Shroom Supply
Please support our sponsors.

Copyright 1997-2021 Mind Media. Some rights reserved.

Generated in 0.046 seconds spending 0.016 seconds on 18 queries.