Opticraft Community

Discussion forum => Legacy => Archives => Server News => Topic started by: optical on February 16, 2012, 05:49:44 am

Title: Server back up - LWC previously compromised
Post by: optical on February 16, 2012, 05:49:44 am
Server IP: smp.opticraft.net

There was a compromise with LWC earlier. Fortunately we noticed it early and have updated the LWC version. All protections have been restored and nothing should be missing from your protections.

That said, there are some issues. All password and public protected have been reverted back to private, and all other flags to do with protections, such as access lists etc have been reset to default. Unfortunately there was no way around this, but you will be able to set them back to normal once you login.

I urge everyone to just double check that their protections are secure when they login. You can do this by typing /cinfo and click on your doors/chests/furnaces etc. If you suspect anything is missing from your chests, make a support post and a mod or op will come check it out. Do not try scam the system - logs of all accesses were not affected by this.

Sorry for the downtime and thank you for your patience.
Title: Re: Server back up - LWC previously compromised
Post by: DeeKay on February 16, 2012, 06:38:50 am
Glad this has been sorted out. Thanks for getting to this right away!
Title: Re: Server back up - LWC previously compromised
Post by: tbpb2010 on February 16, 2012, 12:45:15 pm
Thanks for sorting this out but now I gotta reenable all my doors, pstones, and my 20+ chests again for 8 DIFFERENT PPL! D:

Is there a way to put ppl into groups and just enable that single group for all my stuff or is /cmodify username1 username2 .... the only way?
Title: Re: Server back up - LWC previously compromised
Post by: DeeKay on February 16, 2012, 01:17:06 pm
Thanks for sorting this out but now I gotta reenable all my doors, pstones, and my 20+ chests again for 8 DIFFERENT PPL! D:

Is there a way to put ppl into groups and just enable that single group for all my stuff or is /cmodify username1 username2 .... the only way?
No, there is no way to put people into a group to access your things, so /cmodify would be the only way. Although, you can set a password on a chest / door / furnace etc and tell only those 8 people the password to it, if that would make it easier for you.
Title: Re: Server back up - LWC previously compromised
Post by: Smiteme69 on February 16, 2012, 06:02:38 pm
8 people ouch , and I thought it was a pain having to renable my daughter on everything again, lol.
Title: Re: Server back up - LWC previously compromised
Post by: clawstrider on February 16, 2012, 06:51:21 pm
I guess a hotkey which typed something like:

t
/cmodify *whoever you wanted*
[Enter]


should be fine. There is no rule against that, as far as I know...
Title: Re: Server back up - LWC previously compromised
Post by: Mr_Mr_Mr on February 16, 2012, 07:26:47 pm
I would check my chests... If I could get on...
Title: Re: Server back up - LWC previously compromised
Post by: SalasCraft on February 16, 2012, 08:06:08 pm
I would check my chests... If I could get on...
No one took anything, don't worry.
Title: Re: Server back up - LWC previously compromised
Post by: tbpb2010 on February 16, 2012, 09:13:32 pm
I guess a hotkey which typed something like:

t
/cmodify *whoever you wanted*
[Enter]


should be fine. There is no rule against that, as far as I know...

Thnx for the suggestion, I might try that when i get the chance
Title: Re: Server back up - LWC previously compromised
Post by: optical on February 16, 2012, 09:55:17 pm
Really sorry that this happened, but in my defence the compromise was in a core plugin written by a 3rd party, not in nay of our code.

Hopefully it won't happen again. In response to this I have updated our backup system to include more frequent dumps of critical databases such as LWC and Protection stones. Previously these were only being done very infrequently, while all world and flatfile plugin data was being backed up every 6 hours.
Title: Re: Server back up - LWC previously compromised
Post by: Mr_Mr_Mr on February 16, 2012, 10:14:54 pm
I would check my chests... If I could get on...
No one took anything, don't worry.
I want to check if they are locked as well.
Title: Re: Server back up - LWC previously compromised
Post by: SalasCraft on February 16, 2012, 10:48:04 pm
I would check my chests... If I could get on...
No one took anything, don't worry.
I want to check if they are locked as well.
They are, don't worry.