April 25, 2024, 06:34:03 am

Author Topic: Server back up - LWC previously compromised  (Read 5877 times)

0 Members and 1 Guest are viewing this topic.

optical

  • Administrator
  • Champion Member
  • *****
  • Posts: 1844
    • View Profile
Server back up - LWC previously compromised
« on: February 16, 2012, 05:49:44 am »
Server IP: smp.opticraft.net

There was a compromise with LWC earlier. Fortunately we noticed it early and have updated the LWC version. All protections have been restored and nothing should be missing from your protections.

That said, there are some issues. All password and public protected have been reverted back to private, and all other flags to do with protections, such as access lists etc have been reset to default. Unfortunately there was no way around this, but you will be able to set them back to normal once you login.

I urge everyone to just double check that their protections are secure when they login. You can do this by typing /cinfo and click on your doors/chests/furnaces etc. If you suspect anything is missing from your chests, make a support post and a mod or op will come check it out. Do not try scam the system - logs of all accesses were not affected by this.

Sorry for the downtime and thank you for your patience.

DeeKay

  • Owner
  • Champion Member
  • *****
  • Posts: 2162
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #1 on: February 16, 2012, 06:38:50 am »
Glad this has been sorted out. Thanks for getting to this right away!

tbpb2010

  • Sr. Member
  • **
  • Posts: 335
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #2 on: February 16, 2012, 12:45:15 pm »
Thanks for sorting this out but now I gotta reenable all my doors, pstones, and my 20+ chests again for 8 DIFFERENT PPL! D:

Is there a way to put ppl into groups and just enable that single group for all my stuff or is /cmodify username1 username2 .... the only way?

DeeKay

  • Owner
  • Champion Member
  • *****
  • Posts: 2162
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #3 on: February 16, 2012, 01:17:06 pm »
Thanks for sorting this out but now I gotta reenable all my doors, pstones, and my 20+ chests again for 8 DIFFERENT PPL! D:

Is there a way to put ppl into groups and just enable that single group for all my stuff or is /cmodify username1 username2 .... the only way?
No, there is no way to put people into a group to access your things, so /cmodify would be the only way. Although, you can set a password on a chest / door / furnace etc and tell only those 8 people the password to it, if that would make it easier for you.
« Last Edit: February 16, 2012, 01:19:15 pm by xDeeKay »

Smiteme69

  • Full Member
  • *
  • Posts: 207
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #4 on: February 16, 2012, 06:02:38 pm »
8 people ouch , and I thought it was a pain having to renable my daughter on everything again, lol.

clawstrider

  • The Clawsome One
  • Champion Member
  • ***
  • Posts: 2927
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #5 on: February 16, 2012, 06:51:21 pm »
I guess a hotkey which typed something like:

t
/cmodify *whoever you wanted*
[Enter]


should be fine. There is no rule against that, as far as I know...

Mr_Mr_Mr

  • Veteran
  • Champion Member
  • ***
  • Posts: 3079
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #6 on: February 16, 2012, 07:26:47 pm »
I would check my chests... If I could get on...

---><--- Click the monkey

SalasCraft

  • a.k.a. SaladCraft
  • Hero Member
  • **
  • Posts: 716
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #7 on: February 16, 2012, 08:06:08 pm »
I would check my chests... If I could get on...
No one took anything, don't worry.

tbpb2010

  • Sr. Member
  • **
  • Posts: 335
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #8 on: February 16, 2012, 09:13:32 pm »
I guess a hotkey which typed something like:

t
/cmodify *whoever you wanted*
[Enter]


should be fine. There is no rule against that, as far as I know...

Thnx for the suggestion, I might try that when i get the chance

optical

  • Administrator
  • Champion Member
  • *****
  • Posts: 1844
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #9 on: February 16, 2012, 09:55:17 pm »
Really sorry that this happened, but in my defence the compromise was in a core plugin written by a 3rd party, not in nay of our code.

Hopefully it won't happen again. In response to this I have updated our backup system to include more frequent dumps of critical databases such as LWC and Protection stones. Previously these were only being done very infrequently, while all world and flatfile plugin data was being backed up every 6 hours.

Mr_Mr_Mr

  • Veteran
  • Champion Member
  • ***
  • Posts: 3079
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #10 on: February 16, 2012, 10:14:54 pm »
I would check my chests... If I could get on...
No one took anything, don't worry.
I want to check if they are locked as well.

---><--- Click the monkey

SalasCraft

  • a.k.a. SaladCraft
  • Hero Member
  • **
  • Posts: 716
    • View Profile
Re: Server back up - LWC previously compromised
« Reply #11 on: February 16, 2012, 10:48:04 pm »
I would check my chests... If I could get on...
No one took anything, don't worry.
I want to check if they are locked as well.
They are, don't worry.