Thread Hijackings: Read this please

[cymbidia]

Watch out.

There's a problem on Lit.

Someone new here is (not deliberately, she claims) hijacking the threads of other people.

It appears that Pinklady (maybe one or two others) is doing this hijacking but actually, as i understand it, her nick is being used by this other person (again - not deliberately, it is claimed.) to do the hijacking.

Either we've got someone playing big tricks or someone has some nasty bug.


What's real and known is this:
1. Two people have reported to me that their posts on two different boards have been hijacked by Pinklady.

2. Pinklady expresses astonishment at having any part of this.

3. I just got email from another nick who claims to be the one controlling Pinklady's nick, who is then taking over other people's posts, but this third person claims that she "did not intentionally hack the system".


In any case, i've alerted Laurel and Manu to the problem.

IF this hijacking thing happens to one of your posts, please tell someone so we can continue to try to figure out what to do about it.

Thanks.


We've got some good minds here...
Any theories?
Fixes?
Questions?

 

[Dillinger]

There are at least 2 other threads on the same subject:

http://www.literotica.com/forum/showthread.php?s=&threadid=71419

http://www.literotica.com/forum/showthread.php?s=&threadid=71422

This is what I posted to both of them... and I've also alerted Laurel.

Something similarly strange has happened a couple times this week. I've clicked on the profile of a friend or two only to have someone else's profile come up. No, not pinklady's but rather the profile of another person who posted on the same thread. This made me think that perhaps the problem had do do with some mix-up in the database or the logging file system.

 

[cymbidia]

~bumping this back to the top so people can relax a little~

 

[Andreina]

thank god my posts are not interesting enough to be hijacked *phew*

Halo

 

[Calamity Jane]

Happened to me too.

I find it REALLY hard to believe it's unintentional though.

 

[Guest]

Not usually, but I think

you and your av would be. lol

 

[LukkyKnight]

Sounds like an index that got corrupted.

~hijacking LDWH's Ducati~

The server has been straining lately, particularly late at night. Lots of simulatneous access attempts can, at times, do unfortunate things to indices. However...

email from another nick who claims to be the one controlling Pinklady's nick, who is then taking over other people's posts, but this third person claims that she "did not intentionally hack the system".

...that just sounds like a person who has found an exploitable situation dancing around the term "hack" to me. If he/she/it is not helping resolve the problem that says a lot.

 

[Raskel]

As being one of the recent victims (I suspect as referred to in your post). I have reported the offending post to the Moderator and have subsequently changed my password as suggested by Midas.
Who or where to we report any problems to? Everone refers to Laurel and Manu...they are the venerable sysops, no doubt?

Watch out.

There's a problem on Lit.

Someone new here is (not deliberately, she claims) hijacking the threads of other people.

It appears that Pinklady (maybe one or two others) is doing this hijacking but actually, as i understand it, her nick is being used by this other person (again - not deliberately, it is claimed.) to do the hijacking.

Either we've got someone playing big tricks or someone has some nasty bug.


What's real and known is this:
1. Two people have reported to me that their posts on two different boards have been hijacked by Pinklady.

2. Pinklady expresses astonishment at having any part of this.

3. I just got email from another nick who claims to be the one controlling Pinklady's nick, who is then taking over other people's posts, but this third person claims that she "did not intentionally hack the system".


In any case, i've alerted Laurel and Manu to the problem.

IF this hijacking thing happens to one of your posts, please tell someone so we can continue to try to figure out what to do about it.

Thanks.


We've got some good minds here...
Any theories?
Fixes?
Questions?

 

[cymbidia]

It's looking less and less like it's unintentional.

But:
Pinklady may not be responsible.
Raskel may not be responsible, either.

Laurel and Manu are aware of all this, though, and i'm sure they're on it.

Relax.

At least the hijackings are simple switching of nicks.

Put your nick in the body of your post if you're worried about it being hijacked. At least for now.
cym


Addendum:
Raskel?
I *am* the moderator you reported this to. I'm the one who got your email on it. I'm the one who tried to email you back about it but your email was returned to me as undeliverable to that addy.
cym

 

[Pinklady]

Web Forum Account Hijacking

I know that it is possible to hijack a web forum account if the forum is on a WebX Platforms.

WebX is a bulletin board program. WebX uses an authentication scheme that stores the authentication information in the HTTP_REFERER environment. A remote attacker can retrieve the authentication information to hijack a user’s session if a user includes a URL link within a bulletin board message. This would allow the attacker to view and post messages, change preferences, and delete the user account.

Déjà

 

[DéjàNu]

lol..... I've been hijack.....

Déjà

 

[cymbidia]

As someone else pointed out to me in a PM, Pinklady has an interesting profile.

Biography
I am a person who is pissing off everybody at Literotica.



Hmmmm.
cym

 

[Guest]

I wonder who it can be then?

As someone else pointed out to me in a PM, Pinklady has an interesting profile.

Biography
I am a person who is pissing off everybody at Literotica.



Hmmmm.
cym

So is there any chance this is cath!/*bratcat*/Danger Girl?

 

[lovetoread]

But as noted before,anyone that has been under that nick can change it.

 

[Guest]

I find it ironic that Madame Pandora's computer was hacked, that she left because she thought it might be Patryn, then *bratcat* came back to Literotica when MP left.

 

[Ginny]

<hearing theme from Pink Panther, seeing Inspector Clouseau nosing around>

 

[Pinklady]

DéjàNu...did you log in using the post reply button??? It seems like that's when the Pinklady takes over. It'll probably happen again to me...I'm logging in using the post reply It's a pain in the butt when this happens, but doesn't seem like it's hurting anything.

This is SweetBrat73...just in case I'm impersonating(sp?) Pinklady again LoL


Brat

 

[*bratcat*]

 

[SweetBrat73]

DéjàNu...did you log in using the post reply button??? It seems like that's when the Pinklady takes over. It'll probably happen again to me...I'm logging in using the post reply It's a pain in the butt when this happens, but doesn't seem like it's hurting anything.

This is SweetBrat73...just in case I'm impersonating(sp?) Pinklady again LoL


Brat

LMAO damn it is a pain, but I'll live....hell this Pinklady person is gonna have to change her nick after all this is over for sure...

Oh yeah...bratcat...stop with the hacking will ya LoL


Brat
P.S.
I was kidding about that bc!!! If that person is a regular they should come out with their own nick and say that sorta shit...they look like an immature, sleezy, asshole, who can't...well they are just being an asshole...

 

[Angel]

I normally read the boards already logged in, but I'm going to go log out and log in when I post a reply and see what happens.

It's bugging me, and whatever is wrong I don't want it happening on my own board so... I gotta play with it.

 

[Angel]

Heh it won't let me post at all that way.

 

[Dillinger]

Till this is sorted out... just to be safe - you should all take some precautions.

If you've got a firewall - make sure you're using it!

If you've got any URL's in your profile, remove them.

Don't post any url's for the time being.

Don't log in and out of Lit under multiple identities - you could be an easier target that way.

Dill

 

[MissTaken]

Pink lady got me this morning.

Good info all!

Thanks!

 

[ShamelessFlirt]

I normally read the boards already logged in, but I'm going to go log out and log in when I post a reply and see what happens.

It's bugging me, and whatever is wrong I don't want it happening on my own board so... I gotta play with it.

Can we watch you play with it??


*snickers running from the thread*

 

[Manu]

...and I feel fine...

Hi all.

Just a quick note to let you know that we know about the pinklady problem. It's not a hack or any sinister like that.

Something apparently happened with the pinklady account when we upgraded the forum to the latest version last night. It only appears to be affecting that one account, which so far as we could tell was a dormant account. We're trying to track down what went wrong rather than just resetting everything to see if that fixes it. If we can find out what it is (corrupt entry in the session table, maybe?) then we might be able to see what can be done to prevent it in the future.

Again, this is not a hack or a phrack or even a hacky sack. There was a version upgrade last night and something got foo-ed with the pinklady account. It is being worked on. Have no fear.

Thanks!