Tuesday 25 August 2009

Whooopsie!

RWTS had to quickly disable the public access this afternoon after a Guest "Spam Attack" Luckily it was contained withing 1 section (thank goodness the whole forum was not visible to guests) But after a bit of work it was cleaned up.

Just to make clear this was nothing other than a spam attack from probably a program known as a spam bot. NO personal Details of ANY of our members would have been harvested, as all registered members are protected against Guests seeing your details.

The exploit was opened when we enabled guests the ability to post in the sections they can see, we had in mind that if any of our regular members ran into trouble and couldn't get in, they could post as a guest and ask for help. This however has now been revoked, closing the Exploit and will stop anything like this happening where we can't trace the source.

This, However dose not mean we are "Invincible, we are by no means safe, but we have security in place such as Captcha and a spam bot filter installed, but sometimes one may slip the net.

So, be vigilant on any forum you go to, sometimes it slips through the net of the staff of each forum and they need to be alerted asap.

ALL forums have a very clever feature that when used automatically sends a email to Moderators / Administrators of the forum with a link to the reported post, (normally used when abuse breaks out) but it should be used if you think a post is suspicious, especially if the person who posted it is not a regular poster.

But you should never really click any link you do not know, even if it is posted by someone who is trusted.

We thank all of our members on RWTS for the vigilance you have and continue reporting anything you feel is out of the ordinary.

Regards,
Dave.

No comments:

Post a Comment