Build Your Own Arcade Controls Forum

Main => Main Forum => Topic started by: HoopstarsGarage on June 30, 2006, 04:20:18 am

Title: WTF is up with LocalArcade???
Post by: HoopstarsGarage on June 30, 2006, 04:20:18 am
I went to Local Arcade for some vector graphic goodness today and was staggered - check it  out..


http://www.localarcade.com/
 (http://www.localarcade.com/)

Appears to have been hacked..??!!


Hoops



The sooner the Middle East is turned into a glass car park, the better life will be..  :laugh2:
Title: Re: WTF is up with LocalArcade???
Post by: NIVO on June 30, 2006, 05:13:16 am
hehe, i guess infiltrating arcades is next. Guess your lightsabers ready fellas   :P
Title: Re: WTF is up with LocalArcade???
Post by: yhw4life on June 30, 2006, 05:43:22 am
I had a site running a while ago...maybe got 100 visitors a year..and thats a stretch.

It got hacked by one of those things.  Pretty sad if you ask me.
Title: Re: WTF is up with LocalArcade???
Post by: Circo on June 30, 2006, 06:14:11 am
My site has been hacked twice.  Really sucks!
Title: Re: WTF is up with LocalArcade???
Post by: Havok on June 30, 2006, 07:16:42 am
Gotta keep up with those patches - most likely this dweeb used an existing exploit.
Title: Re: WTF is up with LocalArcade???
Post by: patrickl on June 30, 2006, 08:14:46 am
Yeah I maintained a couple of php-nuke sites (actually still do some, but less now). There are so many patches needed to keep it safe and every dumb punk can hack your site if you don't. They can often just look up the exploits on google because of the lame embedded copyright notice you almost always need for something readily available.

On of those got hacked of course and I checked up on the guy. He had hacked 3000 sites at that moment! What's the use?

It's like someone throwing a rock through your window and claiming that you should have made the glass stronger.  Amazing how asocial people become when they feel they are anonymous. Of course they can be found, but noone bothers really.

Depressing.
Title: Re: WTF is up with LocalArcade???
Post by: mahuti on June 30, 2006, 08:15:32 am
Back online.

And since it's on a shared server, there's not much I can do about patching, except keep backups of the content... which I do.
Title: Re: WTF is up with LocalArcade???
Post by: Havok on June 30, 2006, 08:19:02 am
Back online.

And since it's on a shared server, there's not much I can do about patching, except keep backups of the content... which I do.

But can you at least keep that arabic pop music running?

 ;D
Title: Re: WTF is up with LocalArcade???
Post by: MYX on June 30, 2006, 10:12:45 am
Arabic pop music??? I wanna hear it.
I dig stuff like Nusrat Fateh Ali Khan. He was under Peter Gabriels Real World label. I dig world music in general. So Bring it On.
Title: Re: WTF is up with LocalArcade???
Post by: patrickl on July 02, 2006, 06:03:21 pm
Mahuti,

It got hacked again? Or didn't you fix it yet?

thread on artwork forum about it (http://forum.arcadecontrols.com/index.php?topic=55341.0)
Title: Re: WTF is up with LocalArcade???
Post by: Havok on July 03, 2006, 07:32:20 am
Arabic pop music??? I wanna hear it.
I dig stuff like Nusrat Fateh Ali Khan. He was under Peter Gabriels Real World label. I dig world music in general. So Bring it On.

Quick! Check it out - that dork re-hacked (?) the site.

Mahuti - you should definitely complain about this, these guys can't keep their site secure, even after being hacked once?
Title: Re: WTF is up with LocalArcade???
Post by: patrickl on July 03, 2006, 07:50:17 am
Did you install a new version of the software? Otherwise the vulnerability might (will) still be present.
Title: Re: WTF is up with LocalArcade???
Post by: missioncontrol on July 03, 2006, 09:05:26 am
Arabic pop music??? I wanna hear it.
I dig stuff like Nusrat Fateh Ali Khan. He was under Peter Gabriels Real World label. I dig world music in general. So Bring it On.

Quick! Check it out - that dork re-hacked (?) the site.

Mahuti - you should definitely complain about this, these guys can't keep their site secure, even after being hacked once?


crap and this computer doesn't have speakers......
Title: Re: WTF is up with LocalArcade???
Post by: MYX on July 03, 2006, 12:22:15 pm
Dude that is freaky. They decalired jihad on the ArcadeArt Library.
Title: Re: WTF is up with LocalArcade???
Post by: Havok on July 03, 2006, 02:03:37 pm
Dude that is freaky. They decalired jihad on the ArcadeArt Library.

Fools! The Galaxians will kick their asses!
Title: Re: WTF is up with LocalArcade???
Post by: RayB on July 03, 2006, 05:57:45 pm
"Sorry : This Is Not Game . It's My Work"

F#@^%*in JERKS!
 :angry:
Title: Re: WTF is up with LocalArcade???
Post by: IG-88 on July 03, 2006, 07:13:14 pm
The sooner the Middle East is turned into a glass car park, the better life will be..  :laugh2:

I hear that!  :cheers:
Title: Re: WTF is up with LocalArcade???
Post by: Sizzler on July 05, 2006, 03:08:44 am
hacked again
Title: Re: WTF is up with LocalArcade???
Post by: mahuti on July 05, 2006, 11:06:57 am
yeah, that's pretty lame.

I'm looking into it.
Title: Re: WTF is up with LocalArcade???
Post by: mahuti on July 05, 2006, 11:57:58 am
Alright, I did my due diligence... I upgraded everything I had, dumped old content, removed a few flaky things. we'll see if it keeps up. Please PM me if you see it hacked again. My guess is that it is a pretty low-level (read; EASY) hack the perp is doing. I find it odd that only the front page has been defaced... so either the hacker's too lazy to hack anything else, or their script is really crappy.

You know, the worst thing about "hackers" is that they're so boring. Most of them just find some site online with an exploit, and then go use it. There's no art to it, and they don't generate anything beautifully good, or beautifully destructive. Most of the script kiddies just do the online equivalent of squishing bugs, and then scream LOOK AT HOW GREAT I AM. It's so lame.
Title: Re: WTF is up with LocalArcade???
Post by: pointdablame on July 05, 2006, 01:38:25 pm
Looks to me like http://localarcade.com is working just fine, but http://www.localarcade.com is still t3h 1337 h4><0r3d
Title: Re: WTF is up with LocalArcade???
Post by: mahuti on July 05, 2006, 01:39:22 pm
my guess is you need a cache dump & refresh. they go to the same spot, and I'm seeing them fine here.
Title: Re: WTF is up with LocalArcade???
Post by: GoPodular.com on July 05, 2006, 02:53:26 pm
I don't know if this relates or not, but I've been fighting with QWEST today...

Right now if I go to "http://localarcade.com/ (http://localarcade.com/)", everything is fine.  If I go to "http://www.localarcade.com/ (http://www.localarcade.com/)" I can't even connect to the server.  I'm having the opposite issue at other sites.  "http://www.google.com (http://www.google.com)" works but "http://google.com (http://google.com)" does not.  I think something is busted somewhere on this information highway.

Of course QWEST told me to contact my computer manufacturer (I built it, so I guess that's me).   :banghead:
Title: Re: WTF is up with LocalArcade???
Post by: Angry_Radish on July 05, 2006, 09:21:20 pm
In a command prompt (start -> run --> cmd *enter*), try typing:
ipconfig /flushdns
May help your resolver cache, otherwise it's probably your ISP's DNS server
Title: Re: WTF is up with LocalArcade???
Post by: NightGod on July 06, 2006, 12:40:11 am
You can always just go to the page and do a CTRL+F5-that forces your browser to re-DL everything on the page rather than using cached files.
Title: Re: WTF is up with LocalArcade???
Post by: pointdablame on July 06, 2006, 10:47:01 am
FWIW, it wasn't a cache issue on my end.  I tried it first before I left for work, then noticed the difference while I was at work....

They are both working now though, so who knows.
Title: Re: WTF is up with LocalArcade???
Post by: GoPodular.com on July 06, 2006, 11:06:31 am
In a command prompt (start -> run --> cmd *enter*), try typing:
ipconfig /flushdns
May help your resolver cache, otherwise it's probably your ISP's DNS server

I flushed the local & got a new set of DNS servers from QWEST.  Problem solved on my end.  Thanks!   ;)
Title: Re: WTF is up with LocalArcade???
Post by: gamecreature on July 06, 2006, 11:45:33 am
Maybe it was all a distraction so kolo666 could put up 150 comments with porn links all over the site.   :angry:
Title: Re: WTF is up with LocalArcade???
Post by: zorg on July 07, 2006, 06:08:53 am
Maybe it was all a distraction so kolo666 could put up 150 comments with porn links all over the site.   :angry:

I removed those insane comments some days ago. and now comments are disallowed ....

hey guys if yoou notice some incorect contents on AAL let us know
I try to check AAL twice a day, but I can't check everything on it.
Title: Re: WTF is up with LocalArcade???
Post by: SithMaster on July 07, 2006, 10:34:44 am
if the middle east was a glass parking lot 1)its bad for the tires and 2)why would anyone park there?

but i agree nothing good comes from the east.

if you have problems with loading pages just do a debug all command.

Title: Re: WTF is up with LocalArcade???
Post by: gamecreature on July 07, 2006, 10:52:11 am
That's assuming it's not some kid in Russia who happens to like that kind of music...
Title: Re: WTF is up with LocalArcade???
Post by: subcriminal on September 24, 2006, 06:03:54 pm
So whats happening with the site? :'( I need to do a new CPO for my cab and I lost my artwork. Went to download it and localarcade's still hacked. ???
Title: Re: WTF is up with LocalArcade???
Post by: Texasmame on September 24, 2006, 06:32:10 pm
h4X0R3D again currently
Title: Re: WTF is up with LocalArcade???
Post by: johnm160 on September 24, 2006, 06:46:13 pm
you need to dump your logs and go after this little bastard already.
Title: Re: WTF is up with LocalArcade???
Post by: mahuti on September 24, 2006, 11:23:19 pm
Hacked at 1:25. Fixed now. Currently going after a software update.

OH, and Johnm160....  sorry if I don't rush right out and find the IP address of this lame hacker from some crappy third-world country and fire off a nasty email to his service provider. You got so much free time... you go after this little bastard already.
Title: Re: WTF is up with LocalArcade???
Post by: mahuti on September 25, 2006, 03:12:30 am
Well, it only took 5 hours, but I upgraded the software with a new version the features a lot of security fixes. I don't know if it'll help, but at least I gave it a shot.
Title: Re: WTF is up with LocalArcade???
Post by: mahuti on September 25, 2006, 03:57:31 am
Alright, you'll be happy to know that I DID dump my logs and find what appears to be the "lil bastard." His IP happens to attach to a Turkish Internet Provider, which I've since banned. The Turkish flag not so coincidentally appeared in the hack job which makes me believe that this is indeed the smoking gun... not to mention all of the odd POST operations by that IP address to places that there shouldn't be POSTS to. At least not by anybody but me.

I also happened to fire off a nasty email to the not-so-third-world country's internet provider.

Will it help? I don't know. If any of you have an issue connecting to the site, please post here so I can take a further look.
Title: Re: WTF is up with LocalArcade???
Post by: Santoro on September 25, 2006, 07:46:08 am
Who is your provider?  Please say it's not 1&1?  :)
Title: Re: WTF is up with LocalArcade???
Post by: subcriminal on September 25, 2006, 12:57:07 pm
Glad to see the site back up again ;D I may have to update my forum since seeing this it seems weird attacking the arcade art library... maybe his Mame cab went badly  :dunno
Title: Re: WTF is up with LocalArcade???
Post by: postalp123 on September 25, 2006, 01:53:42 pm
Man I know how that feels...

Back when I had a Homepage for a Martial Arts school I was running in Michigan, some F-n' b@stard posted an advertisement to his pornsite in our guestbook, then hacked and changed the admin password to it so we couldn't erase his post.

Considering 80% of our clientel were 10 year olds, you can see the sheer wrongness of it.

Took me a while and a 2 stage hardware server firewall to calm down from that one.
Title: Re: WTF is up with LocalArcade???
Post by: Organic Jerk on September 25, 2006, 04:15:06 pm
Nice to see that bigotry is accepted on this forum, but a likely response is not.

I apologize for the outburst, and I wholeheartedly advocate punishing the bastard who demolished a resource we all know and love.

It's just really messed up that I have (rather recently) joined up to a hobby that accepts bigots who will talk of of their rear about an entire region of people of which they "figured" a member of did the deed, when their assumption is wrong in the first place.

Yeah... a glass parking lot indeed.

Sad.
Title: Re: WTF is up with LocalArcade???
Post by: Santoro on September 25, 2006, 04:31:16 pm
I think most of us were were ignoring the rude comments so as to keep the politics out of the main forum per the rules.  I don't think there are many bigots here. Definitely some , not a lot.
Title: Re: WTF is up with LocalArcade???
Post by: johnm160 on September 25, 2006, 04:58:52 pm
Hacked at 1:25. Fixed now. Currently going after a software update.

OH, and Johnm160....  sorry if I don't rush right out and find the IP address of this lame hacker from some crappy third-world country and fire off a nasty email to his service provider. You got so much free time... you go after this little bastard already.

Edited because I missed a post.....

Nevermind, I see you are ahead of me and banned him already....LOL
Title: Re: WTF is up with LocalArcade???
Post by: horseboy on September 25, 2006, 05:27:36 pm
Nice to see that bigotry is accepted on this forum, but a likely response is not.

I apologize for the outburst, and I wholeheartedly advocate punishing the bastard who demolished a resource we all know and love.

It's just really messed up that I have (rather recently) joined up to a hobby that accepts bigots who will talk of of their rear about an entire region of people of which they "figured" a member of did the deed, when their assumption is wrong in the first place.

Yeah... a glass parking lot indeed.

Sad.

I don't see how saying that it was probably someone from a third-world country is bigotry. The fact is that many if not most hackers operate out of third world countries because those countries do not have internet laws or do not enforce them. I think he was just using common sense and other people jumped to a conclusion.
Title: Re: WTF is up with LocalArcade???
Post by: Santoro on September 25, 2006, 05:42:16 pm
He was probably taking exception to the 'crappy' part.
Title: Re: WTF is up with LocalArcade???
Post by: horseboy on September 25, 2006, 05:48:30 pm
That makes sense.  :laugh:
Title: Re: WTF is up with LocalArcade???
Post by: mahuti on September 25, 2006, 06:32:34 pm
I believe he was referring to the previous post about making the east a parking lot, nothing good coming from the east, etc. My personal comments were tongue-in-cheek, not directed at any specific country or group. Please don't lump me in with bigots & racists. 

Just to clarify my earlier comments... they referred to the fact that many countries have ISPs that wouldn't care about a security violation, therefore it was pointless to try to "go after' the violator. If an ISP doesn't care about the violation, I lump them & their entire country into the pile of CRAPPY and THIRD-WORLD-COUNTRY categories. I don't think that's racism... I think that's nationalism... which is sometimes considered extreme, but not usually immoral.
Title: Re: WTF is up with LocalArcade???
Post by: ahofle on September 25, 2006, 06:57:31 pm
It's just really messed up that I have (rather recently) joined up to a hobby that accepts bigots who will talk of of their rear about an entire region of people...

This is just as ridiculous a statement as the one that presumably has you all charged up in the first place.   ::)
Title: Re: WTF is up with LocalArcade???
Post by: saint on September 25, 2006, 08:43:18 pm
From the posted forum rules:

6. Don't take it personally if you get edited by an admin or moderator. Things aren't always black and white and sometimes what is or isn't in line with the rules here is simply a judgement call. If your post gets edited but no other comment is made to you, don't stress about it. No one's mad at you or trying to censor your point of view. Just trying to keep it family friendly.

Nice to see that bigotry is accepted on this forum, but a likely response is not.
Title: Re: WTF is up with LocalArcade???
Post by: torez on September 26, 2006, 12:26:27 am
Even if he's flying the Turkish flag and his ip address is from Turkey, it does not mean that he's really in Turkey.  If he's a script kiddie, then more likely so, but even a lame hacker should know to use a chain of free proxies.  Banning the ip should not help too much, as switching to another proxy in another country takes just few seconds.  I can write from US, next I could be writing from China or Australia.  The only way to get rid of him is to have up to date software, so he will get tired of looking for new hacks and will move on to an easier target.  Even if he's gone for a few months, you have no choice but to keep your website up to date.  He may be back one day with his new shiny hack and try to use it on you again.  Anyway, take a look at your logs once in a while to see anything suspicious.

One old trick was to have a dummy website/ftp on your server, so all the hackers would go in to that part like cows on a slaughter.  They would pick some files thinking it's something valuable, but it was just garbage or fake data.  Once they are there, admin would get a notice that someone is in the "room" where nobody was supposed to go to.  They could alter the "fake" website, leave and then call the friends only to find out that nothing got really hacked at all. :blah:  :laugh2:
Title: Re: WTF is up with LocalArcade???
Post by: Organic Jerk on September 26, 2006, 01:20:49 am
This is just as ridiculous a statement as the one that presumably has you all charged up in the first place.   ::)

out of*..... it's a typo.   Must be a pretty bad typo if it invalidated the meaning of the entire sentence.  Didn't realize.  Did that help?

From the posted forum rules:

6. Don't take it personally if you get edited by an admin or moderator. Things aren't always black and white and sometimes what is or isn't in line with the rules here is simply a judgement call. If your post gets edited but no other comment is made to you, don't stress about it. No one's mad at you or trying to censor your point of view. Just trying to keep it family friendly.

I understand.  And I agree that the outburst wasn't particularly family friendly, but I don't think having children come to a forum about custom arcades and seeing racial bigotry is family friendly (or appropriate), either.  To say "don't take it personally" when you are the only one edited among a string of ignorance, only because you responded to it, doesn't really allow one's mind much room to "not take it personally."


But whatever.  I'm done.  Sorry I bothered to hold people accountable for what they say/type.  I'm gonna go back to my glass parking lot and lay my sheet on the floor. k?
Title: Re: WTF is up with LocalArcade???
Post by: patrickl on September 26, 2006, 03:33:10 am
I agree that keeping your software up to date is really the only way to keep hackers out. These prefab websites are usually full of bugs. When they get hacked it will be fixed, but if you then don't install that fix you are open for attacks.

One thing that also helps is to remove all mentionings of the version or even of the name of the software you're using. When one of my sites got hacked (php-nuke) I saw that the perp simply found me with a search on google. I tried the search string he used (was in the log files too) and and thousands of others sites came up which he also hacked. For instance, search for "powered by 4images 1.7.1" (with quotes) on google and you'll find a whole list of sites which use this older version that has several reports of sql injection bugs.
Title: Re: WTF is up with LocalArcade???
Post by: mahuti on September 26, 2006, 09:35:53 am
Quote
Even if he's flying the Turkish flag and his ip address is from Turkey, it does not mean that he's really in Turkey.  If he's a script kiddie, then more likely so, but even a lame hacker should know to use a chain of free proxies.

Which is why I implied it was pointless to try... but I figured I might as well do my due diligence on keeping him out
.
Well, at any rate, it's updated now. There's normally not too  much I can do about keeping the software up to date... sans staying up late overnight or putting in time on the weekend, which isn't so fun, you can imagine. Lately I've had so much work that I didn't get more than a few hours  sleep a night so the AAL has been somewhat low on my priorities list. I LIKE to keep it updated, but I only have so much time for that.

Title: Re: WTF is up with LocalArcade???
Post by: Stingray on September 26, 2006, 10:51:04 am


It's just really messed up that I have (rather recently) joined up to a hobby that accepts bigots who will talk of of their rear about an entire region of people of which they "figured" a member of did the deed, when their assumption is wrong in the first place.



According to your profile you've been registered here since December 2003. If you've been here that long you should know very well that BYOAC is not the hotbed of racism that you want to make it out to be. Who's talking out of their rear now?

-S
Title: Re: WTF is up with LocalArcade???
Post by: ahofle on September 26, 2006, 11:03:48 am
This is just as ridiculous a statement as the one that presumably has you all charged up in the first place.   ::)

out of*..... it's a typo.   Must be a pretty bad typo if it invalidated the meaning of the entire sentence.  Didn't realize.  Did that help?

I realize it was a typo, but you just generalized/smeared the entire arcade hobby as being racists/bigots based on one or two peoples' posts/actions.  If you are going to be a member of the political correctness police you may want to practice what you preach.
Title: Re: WTF is up with LocalArcade???
Post by: jimmy_bored on September 26, 2006, 11:10:30 am
BTW: I love you guys!   :cheers:
Title: Re: WTF is up with LocalArcade???
Post by: mahuti on September 26, 2006, 11:41:51 am
At least somebody does.
Title: Re: WTF is up with LocalArcade???
Post by: Organic Jerk on September 27, 2006, 03:27:53 am
Well it looks like I can't be done... here we go!

According to your profile you've been registered here since December 2003. If you've been here that long you should know very well that BYOAC is not the hotbed of racism that you want to make it out to be. Who's talking out of their rear now?
-S

I originally registered while in college and was looking for advice on the "Pelican Ultimate Arcade Joystick"...  I wanted to build a cab, but it was way out of my reach.  After that issue, school and work took my time and I never came back until August 2006, when I decided to finally step up and get a cab.

Talking out of my rear?  I dare say my rear is quite clean (at least on that).  Check my posts, kind sir.

I realize it was a typo, but you just generalized/smeared the entire arcade hobby as being racists/bigots based on one or two peoples' posts/actions.  If you are going to be a member of the political correctness police you may want to practice what you preach.

Not true.  Understand the language, please.  To say it's accepted doesn't mean everyone partakes in it.  For example:  Theres this guy we call "Tex" who hangs out with some guys I also hang out with.  Upon finding out he was a horrible racist, I brought this to the attention of my peers, to which they said something along the lines of: "Yeah but he's just racist... he doesnt really do anything."  I don't consider my friends racist at all, but they accept it of him because this particular group has no members besides me who would get offended by the things he says.  Kinda sad, but whatever.

I didn't call everyone racist, and I don't particularly know if the people with the stupid comments are, either. 

But I did take offense at the comments themselves, and due to the actions taken/not taken, the logical conclusion is:  Since the stupidly ignorant comments were not destroyed, they were obviously "accepted."  My response WAS destroyed, because of an "implied" curse... (Which is it's own question, because I DIDNT try to get around the curse filter, and I ACTUALLY just used a smiley in the manner that it seems to be meant for.  ":censored:"  Why is this wrong?  I've seen it done here many times.  But alas, everything is objective, no?) 

I'm not a member of the PC Police.  I'm of eastern descent, and I was genuinely offended.  Understand the difference.


And BTW, I do have nothing but love for everyone here.  Yeah sure I'll get worked up about issues, but I come to this great forum for a reason.  There's great people here doing great things, and I don't lose sight of that because of stupid issues.  I'm really not as much of a stiff that everyone may think from my "first impression" on this thread, but this stuff is important to me by the very nature of my birth, and I never have and never will be an "Uncle Tom".

I've already said that I'm pretty much done with this issue, but if people want to continue to argue semantics and technicalities with me, go on ahead.    I'm not the kind of person to deny when I am obviously wrong, but what I feel here is solid, and if possibly finding a complicated hole in my language will make any of you feel better, you're more than welcome to dig in.
Title: Re: WTF is up with LocalArcade???
Post by: saint on September 27, 2006, 10:26:01 am
(Actually, if it had been in the Politics and Religion forum it wouldn't have been removed, I just felt the implied statement was a bit strong for the main forum -- the post I made with the rules was meant to say (but didn't very well) that if sometimes moderation seems random or biased, it's not due to a particular agenda but rather the sheer volume of messages here means I don't catch everything and it really is random at times. Another day I might have moderated it entirely differently.)

Well it looks like I can't be done... here we go!

But I did take offense at the comments themselves, and due to the actions taken/not taken, the logical conclusion is:  Since the stupidly ignorant comments were not destroyed, they were obviously "accepted."  My response WAS destroyed, because of an "implied" curse... (Which is it's own question, because I DIDNT try to get around the curse filter, and I ACTUALLY just used a smiley in the manner that it seems to be meant for.  ":censored:"  Why is this wrong?  I've seen it done here many times.  But alas, everything is objective, no?)