CFB51 College Football Fan Community
The Power Five => Big Ten => Topic started by: longhorn320 on April 29, 2022, 10:28:50 AM
-
Uncle Drew
whats up with this site?
did something break?
-
we're under attack.
the server shut down hard last night at some point around 2130~2200, and it didn't come back to life until this morning around 0730 or so.
since then i've been chasing robots from germany who are eating all the resources they can, and presumably to defeat security... i'm guessing so they can make this server a zombie for their bull shit.
they appear to be a cybercurrency miner/reseller.
why buy and maintain their own resources when they can steal ours? ..... assholes...
-
we're under attack.
the server shut down hard last night at some point around 2130~2200, and it didn't come back to life until this morning around 0730 or so.
since then i've been chasing robots from germany who are eating all the resources they can, and presumably to defeat security... i'm guessing so they can make this server a zombie for their bull shit.
they appear to be a cybercurrency miner/reseller.
why buy and maintain their own resources when they can steal ours? ..... assholes...
so whats the solution
are you making headway
or should we start learning German
-
all i can do is wait for them to start consuming mpm workers, and then restart apache... it kicks them off and they have to start over.... problem, it kicks us off too... the guys i lease the server from are aware and doing what they can do... all that really can be done is to block them by IP, but they keep proxy'n those so it's hard to nail it down... hopefully they'll give up and leave, soon.
-
I feel like Im violated
too bad we cant trace their location and kick the shit out of em
-
Gonna throw a bottle of Maalox at them? ;D
-
Gonna throw a bottle of Maalox at them? ;D
just got it
joking about my age
you should do standup
-
The worst part is the hackers don't even like college football.
-
Probably making a chili with beans too!
-
i'm holding out hope for the time being we're in the clear.
-
Today is actually the first time I could even open the site for several days.
-
i'm holding out hope for the time being we're in the clear.
Seems to be now. Thanks pal.
-
Ya the 1st time in 3-4 days where I hit the favorite icon and immediately the site comes up 👍
-
so Drew did they just give up and go home or did you help them see the light
do we now have new and improved defense stuff to avoid future problems
-
He sent in the Drones......or the trolls one or the other
-
Goes to show how much some of us like this place.
-
so Drew did they just give up and go home or did you help them see the light
do we now have new and improved defense stuff to avoid future problems
They just gave up. They don't want to waste THEIR precious resources trying to steal ours.
Hopefully they'll remember this was a hard nut to crack and not come back. There really is no defense against an attack like that- that I know of anyway.
The way the server is built is to offer resources to web traffic as needed- it "spawns" workers to do the job, and those workers have children workers. A worker does something when a user does something- i.e."clicks" on something or enters the page... It scales up and down depending on traffic or demand. When it gets hammered to a point it has to start launching/spawning multiple new workers it becomes a very suspicious server, and instead starts limiting workers available- slowing things down for users. Purposely. And that's what you guys saw.
The punch line for them (and this is for tech guys more or less) the server runs apache and mpm in an php-fpm environment- meaning if they consume the resources of the server they just just down the virtual box they're unknowingly entering, and destroy their doorway they've spent time and energy making- which is enough time for me to be alerted. The environment here is not running on the bones of the server, so to speak, it's running in a virtual environment created by the server... if a person crushes the servers resources it crushes the virtual environment without ever hitting the server- and when the server comes back it just creates a new one.
Now if "they" were to get into the database they could hurt us and hurt us bad- but there is nothing in the db that should interest them and hitting the db gains them nothing other than the thrill of destroying something. These guys were after resources- as in processing power, as most of them are- they were just doing it with a might ive not seen before here...
-
Want to contact CIA from Russia? Agency points to darknet
https://apnews.com/article/russia-ukraine-putin-business-europe-media-7f6a05c4306abe4a99b360e14366487e (https://apnews.com/article/russia-ukraine-putin-business-europe-media-7f6a05c4306abe4a99b360e14366487e)
WASHINGTON (AP) — The CIA says Russians disaffected by Vladimir Putin’s invasion of Ukraine may be trying to get in touch with U.S. intelligence — and it wants them to go to the darknet.
The agency on Monday began a new push to promote its presence on a part of the internet accessible only through specialized tools that provide more anonymity. The CIA has a darknet site that has the same features as its regular homepage but accessible only through the Tor internet browser, which has encryption features not available on most regular browsers.
Instructions in English and Russian on how to access the darknet site appeared Monday on the CIA’s social media channels. The agency hopes Russians living abroad can share the instructions with contacts inside the country.
-
How do we do the same about Pelosi and Brandon and pretty much the rest of D.C.?
-
so now when I log in it says the sites certificate is out of date
says it expired on 5/2/22
Drew Help
-
so now when I log in it says the sites certificate is out of date
says it expired on 5/2/22
Drew Help
with all the crap going on and me digging through the site chasing germans like some mad dog of the 75th regiment, you'd think i would have remembered to renew it... but no.. i'm a clown...
we should be good now, though.
-
thanks for being there Drew
you may stand down
-
When I open my chromebook it takes a moment to connect to the wifi, and when it did it redirected me from here to some executive website that I'd never heard of.
-
SHRM Executive Network, according to my history.
-
When I open my chromebook it takes a moment to connect to the wifi, and when it did it redirected me from here to some executive website that I'd never heard of.
Wait.. . Whu?
That shouldn't happen under any circumstances... that makes me wonder if I was just being misdirected by the cybercurrecy guys....
Can you recall what the website was?
-
Wait.. . Whu?
That shouldn't happen under any circumstances... that makes me wonder if I was just being misdirected by the cybercurrecy guys....
Can you recall what the website was?
Yeah, posted it right before you did.
Again, SHRM Executive Network is what it's called in my history. I don't want to go back to it to get the link.
-
Already snagged it and on the trail.
-
damn germans. first they bomb pearl harbor and now this? when will it end?
-
with all the crap going on and me digging through the site chasing germans like some mad dog of the 75th regiment, you'd think i would have remembered to renew it... but no.. i'm a clown...
we should be good now, though.
Damn Huns
-
calling all Drews
Did the Germans attack again?
whats going on
-
I'll let Drew explain it, but it's actually much more worrisome than the Germans.
-
i'm not going to get deep into this.
some of you may know what this means; some may not... i'll say it in a way either can decipher if you read between the lines.
every DNS server on the planet lost the record that binds the dedicated IP here and the domain name.. meaning, it wouldn't resolve. no other site on this dedicated server had that impact, and there are five sites total (including this one) all on dedicated IP's and all configured the same both at top level registor as well as the A record DNS nameserver.
the record propagated through every DNS server as the script deployed. it made this site unreachable in a matter of hours from any location and by any protocol. the mailserver was never impacted- and that should bring a big ol' "wtf" from yall with some working knowledge of how this works.
so...
area-51 (the board) is no more.. it is a board solely for discussing cooking and or weather. it will only be accessible by registered and logged users. robots will be blind to it, and even if they do hack in all they'll find is recipes.
i don't care what your position on politics are.... there are ten reasons why we have liberty in this nation, and the first one is arguably the most important (until teh lead starts to fly, then the second one takes over)... shutting someone up by shutting them down is bull spit of the highest order.
-
man that went right over my head
is there going to be a cfb51 or not
I just am not understanding whats going on
-
are you saying someone purposely attacked this site to do harm
-
the site isn't going anywhere. we're solid as a rock programmatically, which is why these last few weeks have been baffling. the server is solid as a rock, too... it's capacity across 16 cores has never been above 1.0%. it's usually about .25%, which is to say it's a quarter of a percentage in one of 16 cores (which means the comparison for performance isn't 100%, it's 1600%). it is like driving a Ferrari F40 in a funeral procession as it's sole purpose.
we were noticed, and I've known that a long time. i don't know if i saw it when it happened, but i saw it a long time ago and still see those folks come poking back around... they're interested in A51 almost exclusively.
then, a script was deployed which spoofed the DNS record- broadcast it... it's like a trader shouting on the floor of the exchange- when something changes, they start shouting and eventually everyone notices. when you type the domain name in your browser a computer doesn't know what that means- it speaks numbers and not the thousands of languages out there- so... it looks in a table to see what the domain name equals. that number is your IP address... it's called 'resolving'.. in effort to make this as fast as possible, there are servers staged at various locations across the planet that do the translation... its done that way so not one place gets bottlenecked with traffic, and if that one place gets broken the entire world doesn't crash.
so a script was launched that destroyed the IP-to-domain name configuration. after a while all the DNS servers heard it.
not only are there official DNS servers staged, ISP's and other major outlets store them too- they want to be quick as possible to serve a page to someone, so instead of doing the honorable thing they just check in with the official DNS servers to see if anything has changed.. they do it at intervals only they know.
so... every official DNS server lost our record. many ISP's and other major services followed their lead.
attached to the DNS record is something called TTL... stands for TIME TO LIVE. this is basically an offering that tells the DNS servers "hey, you don't need to check back to see if it's changed for X number of seconds"... most folks set these to 24 hours, some a week, and some a year. setting it longer than 24 hours means if there is a change in your IP address that YOU made, it'll be at least 24 hours before the DNS servers 'listen' to you again.
our TTL was changed to some massive number i didn't even take time to divide by 60 (seconds) and divide that by 60 (minutes) and then 24 hours to see how long it would be before the DNS servers would 'listen' to us again... this was part of the script. i'll tell you with confidence it was over 10 years. it was a big ol number. THAT is how long they wanted us to wait until we'd be able to correct the problem.
this wasn't a kid hacking.. this wasn't organized crime trying to overtake resources.. this was done to deny people access to the site in a way that would make the domain name and IP useless for however long that TTL was. i don't think they're much worried about how michigan is recruiting or is Iowa will compete next season... they're interested in communications taking place in that board well south of this one. and they just took a shot to remove it by removing the whole shebang.
and i'm pissed.
-
thats amazing
so we should all feel violated here
I didnt think anyone not a registered member would care about what goes on here
its all MDot's fault
just kidding
-
It's Putin's fault. He hates college football.
-
So someone got so big mad in the politics board, they tried to burn down the site?
As a person who is too online, even I think that's TOO online.
-
So someone got so big mad in the politics board, they tried to burn down the site?
As a person who is too online, even I think that's TOO online.
Had to be a Californian.
-
So someone got so big mad in the politics board, they tried to burn down the site?
As a person who is too online, even I think that's TOO online.
It was an external attack, not by a member.
Think big (brother) here.
-
Funny we hadn't been picking on the Brandon's lately
-
unfortunately, I understand DNS and TTL
trying to forget
-
It was an external attack, not by a member.
Think big (brother) here.
Oh lort
-
It was an external attack, not by a member.
Think big (brother) here.
man if this site gets their attention their priorities are way out of wac
this board is like 10 guys sitting around on the front porch with not really much to offer the world but BS
how in hell do we get the honor of their attention
its amazing
-
They were not after us. They were after the board down South. But, they are crawling through the B10 board now, looking through old threads and what not.
This one has their attention:
Misfits Thread (cfb51.com) (https://www.cfb51.com/big-ten/2020-offseason-stream-of-unconciousness/)
Among others. Probably 2-300 of them online now.
(https://i.imgur.com/wC6b1jy.png)
-
what does that list indicate
-
Resistance is futile.
You will assimilate.
-
what does that list indicate
It indicates "guests" lurking on this site and what they are reading in it.
-
I'm sure it didn't help when terps took to Twitter calling us right wing white supremicist terrorists...
This climate we're in defies logic and certainly accountability. It's too easy to eavesdrop wholesale, so, they do.
It's absurd.
-
man if this site gets their attention their priorities are way out of wac 👍
this board is like 10 guys sitting around on the front porch with not really much to offer the world but BS
Hey there are other boards here ya know,there is no doubt we have a collective IQ higher than that gaggle of squawking twats in Brandon's Admn.
-
I'm sure it didn't help when terps took to Twitter calling us right wing white supremicist terrorists...
This climate we're in defies logic and certainly accountability. It's too easy to eavesdrop wholesale, so, they do.
It's absurd.
He could have stayed and said that- like our other resident moron often does.
-
Some of ya'll might need to lawyer up. :67:
-
this board is like 10 guys sitting around on the front porch with not really much to offer the world but BS
Don't forget the drinking and the farting and the brain farting and the fist-fighting.
.
But yeah....color me unsurprised that the echo chamber is what gets us in trouble here. DUH!
-
Don't forget the drinking and the farting and the brain farting and the fist-fighting.
.
But yeah....color me unsurprised that the echo chamber is what gets us in trouble here. DUH!
The echo chamber that is spying on us, for sure.
-
The echo chamber that is spying on us, for sure.
Non conformity ya know. 😂😂😂😂
-
I'm sure it didn't help when terps took to Twitter calling us right wing white supremicist terrorists...
This climate we're in defies logic and certainly accountability. It's too easy to eavesdrop wholesale, so, they do.
It's absurd.
What did what now?
-
what???
-
What did what now?
A former poster was banned and then posted in social media how A51 was a den of whities etc.
He had been a fairly long time poster, Maryland fan, took some abuse over football at times way back in the day.
-
Don't forget the drinking and the farting and the brain farting and the fist-fighting.
.
But yeah....color me unsurprised that the echo chamber is what gets us in trouble here. DUH!
Spoken like a true chickenshit conformist.
So what, in your estimation, should be the punishment for thinking unapproved thoughts?
(https://cdn.cnn.com/cnnnext/dam/assets/161231205229-new-years-eve-anderson-cooper-kathy-griffin-puppets-sot-00003908.jpg)
-
A former poster was banned and then posted in social media how A51 was a den of whities etc.
He had been a fairly long time poster, Maryland fan, took some abuse over football at times way back in the day.
Self-inflicted in most cases.
-
A former poster was banned and then posted in social media how A51 was a den of whities etc.
He had been a fairly long time poster, Maryland fan, took some abuse over football at times way back in the day.
Ahhh, that guy.
I didn't realize he got banned. Assumed he just got bored with his thing not being taken well here and moved on. I wasn't totally sure we banned folks at all, TBH.
That's weird. I probably have some jokes, but they won't lead us down a good path.
-
Ahhh, that guy.
I didn't realize he got banned. Assumed he just got bored with his thing not being taken well here and moved on. I wasn't totally sure we banned folks at all, TBH.
That's weird. I probably have some jokes, but they won't lead us down a good path.
We don't, but there had to be an exception for that one. Nothing he did on this board, but down South.
-
So you guys think this guy is connected to our recent problem?
-
So you guys think this guy is connected to our recent problem?
no i don't, but it could have.... he was posting all over twitter about how we were this and how we were that... it wasn't a good look for us, but.... i don't' think it caused any legit trouble.
plain and simple, there are organizations that do nothing but search+scan websites... like, google... the things said here are indexed in their databases and coughed up when someone searches something that matches it. finding commentary about political stuff is the same. we likely were found by a robot doing just that- and they've known about us here a long time.. it's been literally years since i saw the first alphabet agency indexing us... but understand, that's pretty much standard stuff and not anything to be alarmed by. it happens to all sites.
i don't know if it is the climate we live in (politically) that somehow makes it okay to cancel people, or if it is the development of this ministry of truth thing that makes targeting okay, but... we were sure poked. poked hard... and i don't even know what the specific offending element was.
-
We don't, but there had to be an exception for that one. Nothing he did on this board, but down South.
Exactly. I figured that would be the hardest place to get banned. But I suppose politics will do that to people.
-
Spoken like a true chickenshit conformist.
So what, in your estimation, should be the punishment for thinking unapproved thoughts?
[img width=500 height=280.99]https://cdn.cnn.com/cnnnext/dam/assets/161231205229-new-years-eve-anderson-cooper-kathy-griffin-puppets-sot-00003908.jpg[/img]
You should be mocked unmercilessly and made fun of. Not sought out by gubmint-issued randomware algorithm.