Serious breach of protocol/etiquette on KiwiBiker

[Mental Trousers]

Change your password and untick the box that keeps you logged in all the time. You'll have to login each time you want to post something, but it's way better than having some retard posting stuff as you.

Otherwise, SpankMe can grab the ip of who posted that message and see if it was in fact someone you work with (it will match other posts of yours from around the same time) or if someone hacked your password (ip will be completely different to yours around that time).

I'd also advise a major bout of antispyware/virus scanning. You might have a keylogger on that machine (funnily enough, I used to have 1 at my old workplace that I installed so I could find out when someone was being a wanker and using my machine for something).

Lastly, the server might have had a brain fart. Happens occassionally, but usually when it does happen, the person posting usually ends up posting as a Guest - which is impossible to do in theory. But who knows what happens when a machine brain farts.

[Zed]

...How the hell can this happen? It throws the whole security of the site into question, as well as the motives of the offender.

That sucks Geoff! If it wasn't maliciously planned then maybe vBulletin inadvertently mixed up aliases somehow?? Hopefully site admins will be able to look at logs or summat to see what happened...keep us posted.


Matthew :spudwave:

[Lias]

SM might want to upgrade to VB 3.0.9. I notice that 3.0.8 fixed some exploitable XSS stuff.

[Beemer]

I am not sure if this is related but my name appeared in a post of people who were attending a track day - the guy who posted it said he only listed people who had contacted him to say they were attending. I hadn't, didn't even know about the post until Saturday, and no one else uses my computer. WTF?

[Zed]

I am not sure if this is related but my name appeared in a post of people who were attending a track day - the guy who posted it said he only listed people who had contacted him to say they were attending. I hadn't, didn't even know about the post until Saturday, and no one else uses my computer. WTF?

Hmmm...now that you say that Beemer I recall several times when my name is somehow added to the list of those attending certain calendar events, like the last track day, and so I remove it then refresh my screen and go back to the event to find my name has been put back on! So then i delete it several times and it miraculously disappears!!! I'm probably on one or more of the other future calendar events without my consent - naughty software!

Certainly mine is a glitch though, unlike the supposed counterfeit Blackbird's post!?

[TLDV8]

I thought Admin can see the IP address for posts?

[Ms Piggy]

Change your password and untick the box that keeps you logged in all the time. You'll have to login each time you want to post something, but it's way better than having some retard posting stuff as you.

Yeah what he said, if anyone else uses your pc they just need to click on the KB web page & they're logged in under you.

I know I've had that problem when using another KBers pc and then almost posting a message under their i.d.

[Will]

I gotta notice in my e mail stating that my account at Kiwi Biker had been locked because someone had tried to log into the account with the wrong password 5 times. Then went on to say it had the following IP address 83.245.82.196

Doesn't mean much to me. I guess if it isn't a glitch, the person has worked out that my password is not bike related!

[FROSTY:Me]

I think we need to make this thread ATT Spank/wari--given it isn't just one Kber who has had this issue and also given so
meone is out there attempting to hack KB accounts.

[Mongoose]

I only just rejoined and all hell breaks loose, there is NO CONECTION, ok?

[RiderInBlack]

Feel your anger BB. I'd feel the same way. If they can hack your KB log-in, then what is stopping them from doing that with more senative log-in's?

Hope it get's sorted, and if there's a "Perp", that they get major finger burn

[Zapf]

Feel your anger BB. I'd feel the same way. If they can hack your KB log-in, then what is stopping them from doing that with more senative log-in's?

Hope it get's sorted, and if there's a "Perp", that they get major finger burn

nothing stoping them from more sensitive logins... however it could have been a hack specific to KB as a website.

And web caches at ISP's are know to do that in the past.

[John]

vbulletin cant mix sessions, its impossible php uses dynamic memory not static it was either a hack attempt or someone got your password, or maybe someone spoofed your id, your browser (EXACT VERSION) then it would happen as vbulletin builds session md5 crypts based on ip and browser.

or maybe you did post it?

[Biff]

vbulletin cant mix sessions, its impossible php uses dynamic memory not static it was either a hack attempt or someone got your password, or maybe someone spoofed your id, your browser (EXACT VERSION) then it would happen as vbulletin builds session md5 crypts based on ip and browser.

or maybe you did post it?

So -John - WHEN ARE YOU GOING TO LEARN TO SPEAKA DA INGLISH?

[Ixion]

He's speaking geek. We understand him.

The sessions can't corrupt ech other's emeory space. But if the database had a corrupt index it could screw up the user attribution. Doesn't have to be an error in memory.