MyBB Hacké

[spyto]

Lis bien ici, ils ont changé de serveur et reconstruisent tout sur un autre serveur avec sécurité renforcée (authentification à deux niveaux, sécurité des applis web).

De plus, le Blog est désormais hébergé hors serveur (sur wordpress.com) et il en sera de même pour le Wiki, ce qui assurera un accès à des infos même si le serveur est down.
Le développement sera upgradé vers GitHub à 1,8.

Le script du forum n'est absolument pas en cause, c'est le compte Apple personnel (iCloud entre autres) de Chris Boulton qui a été piraté ce qui leur a permis de réinitialiser les mots de passe serveur et les comptes domaine.
Cependant les hackers n'ont pas pour autant pu se connecter au serveur et récupérer la BD entre autres, SoftLayer (leur hôte) les ayant prévenus dès la réinitialisations des mots de passe.

Tim B. a écrit :There are still a few missing pieces, but at this stage we have a pretty clear understanding of what happened. Contrary to what has been posted elsewhere, we do not believe social engineering was the culprit, although the hackers did try unsuccessfully to gain access to several of our accounts via this method.

The main incident that lead to the breach was a compromise of Chris’ personal Apple ID (iCloud, etc) account. From there, the hackers were able to reset passwords to our hosting and domain accounts. It’s still not clear how they got access to this account, however they also had numerous personal details about Chris, including contact details and knowledge of at least the last four numbers of his primary credit card.

Fortunately SoftLayer (our host) called Chris when his password was reset which alerted us to the situation unfolding and all public access to the server was shut off soon thereafter. As far we can tell they were not able to log into our server and do not have copies of our databases. We have been very pleased by the response we received from SoftLayer and without their vigilance the situation could have been far worse.