It is currently Tue May 21, 2013 1:02 pm


Latest GIMP Scripts & Plug-ins

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 41 posts ]  Go to page Previous  1, 2, 3, 4, 5  Next
Author Message
 Post subject: Re: GimpTalk Attacked Again??
PostPosted: Mon Nov 01, 2010 8:28 pm  (#11) 
Offline
GimpChat Member

Joined: Apr 12, 2010
Posts: 4957
As far i remember GT was attacked by hacker 2 times in the last 4 years

It is not getting down for hacker attack (if not you will see a hacker page as when was attacked ) but simply because the main server is down

I may agree on several critics on GT but i don't like see spreading roumors based on ..no any evidence.

as the other roumors of password and personal data as mail stolen...would be better think twice before spreading paranoia around
Where your evidence of data stolen...how you may be so sure that the security measure are weak..did you found a way to break them ?
If not aagain you should think twice before make such statement:
Even when the side years ago was REALLY attacked by malicious islamic hackers tthat even replace the content with a proclam for jihad no data or password were stolen...why shpuld happen now ?


More confuse spammers (that attack everywhere also here, and that are quickly banned ) that may be a disturbance with malicious hacker spreding malicious viruses is confuce 2 completly different reality.

Spammer are also here, as on the plugin registry (i know because i delete everyday spam from the registry as from GT ) but that is a disturbance not a treath

So if you judge the security measure from the presence of spam you really should avoid to download anything from the plugin registry since has no less spam then GT but is a much better target since there people come to download executives...no to show sig as in gt
(quite hard hide a virus in a sig, very easy do in a exe as are plugins )

(luckily nobody reported malicious file there till now...But that is a good target NOT gimptalk)

_________________
My 3D Gallery on Deviantart http://photocomix2.deviantart.com/
Main gallery http://www.flickriver.com/photos/photocomix-mandala/
Mandala and simmetry http://www.flickriver.com/photos/photocomix_mandala/

Image

Mrs Wilbress


Top
 Profile  
 

 Post subject: Re: GimpTalk Attacked Again??
PostPosted: Mon Nov 01, 2010 8:29 pm  (#12) 
Offline
GimpChat Member

Joined: Apr 12, 2010
Posts: 4957
sorry PM i see your message only now.. i was not referring to you

_________________
My 3D Gallery on Deviantart http://photocomix2.deviantart.com/
Main gallery http://www.flickriver.com/photos/photocomix-mandala/
Mandala and simmetry http://www.flickriver.com/photos/photocomix_mandala/

Image

Mrs Wilbress


Top
 Profile  
 
 Post subject: Re: GimpTalk Attacked Again??
PostPosted: Tue Nov 02, 2010 5:52 am  (#13) 
Offline
GimpChat Member
User avatar

Joined: Aug 31, 2010
Posts: 93
1) To be fair, I was conflating hacking attempts with the site being down because I don't actually know why the site goes down so much.

2) It's not a rumor. I mentioned a possible, realistic consequence of GT not encrypting user data. I never said that it happened. That's called "speculating".

3) It think it's safe to say that the security is weak. Weak is subjective, and in the context of a website, usually understood to be comparable to other websites' security strength. I feel completely safe in saying that GT doe not have security measures as strong as a banking website. And, it -has- been hacked into before, showing, if nothing else, that it's possible to break/bypass the security. I don't think a super-hacker would waste time taking down a unknown forum for no reason, so I think it's safe to assume it was a casual hacker. This is the biggest assumption, but one I feel is reasonable. So, having small website that's capable of being hacked into by casual hackers makes be think it has relatively weak security. Simple.

4) You asked me what reason I had to think the site has weak security, and I answered. So I'll ask you why you think that the hackers a few years go didn't make copies of any user data? How can you possibly know?

5) Spammers. Every site has them. I mentioned them once, in passing. What's your point?

6) I judge the security measure on the above, plus the two times (that I know of) GT actually had malware. The one time, I think was just after it came back online, and had infected icons. Every site has icons, but these had some viruses in them. My anti-virus blocked it. It's in my AV logs. If I could remember the day, I could tell you what virus was blocked.

The other time was some kind of clickjacking attempt. Someone installed software into the site that made you click on things you didn't know where there. My browser caught this, and I reported it. I made a post about it too, alerting everyone. It was a few days after that, that all of my posts got deleted, so you can't see it now, but you might remember it.

So, based on all of this, I judge the site to have security issues. It's not wise to connect to, and download files from a server (which is how it displays the webpage) with weak security, whose administrators seem to not care about it.

_________________


Last edited by Demen on Tue Nov 02, 2010 6:02 am, edited 1 time in total.

Top
 Profile  
 
 Post subject: Re: GimpTalk Attacked Again??
PostPosted: Tue Nov 02, 2010 5:57 am  (#14) 
Offline
Global Moderator
User avatar

Joined: May 16, 2010
Posts: 8990
Location: "Looking for my eraser" =P
I doubt its been hacked, i believe its just a very old and inflated server problem.They will probably end up getting a new server. Right now it's working fine.
If it was a security problem at the present Griatch (hope i spelled that correctly), would have told us i am sure. =)

_________________
Image
Gimp Rocks Blog
Simply Gimp Tutorials
"Once your in the cloud, you're in the net"
____________
OK, . . . . so what's the speed of dark?


Top
 Profile  
 
 Post subject: Re: GimpTalk Attacked Again??
PostPosted: Tue Nov 02, 2010 6:03 am  (#15) 
Offline
GimpChat Member
User avatar

Joined: Aug 31, 2010
Posts: 93
I don't mean hacked right now. I meant hacked in the past and most likely in the future.

_________________


Top
 Profile  
 
 Post subject: Re: GimpTalk Attacked Again??
PostPosted: Tue Nov 02, 2010 8:13 am  (#16) 
Offline
GimpChat Member

Joined: Apr 12, 2010
Posts: 4957
right once was hacked by muslism jihadist and once by someone just injecting a virus, that was long ago

As now seems just he problem of a old server running on selfdeveloped sw, maybe selfdeveloped long time ago

And if i remember well the server is, as Ali , in Pakistan a country that maybe not offer connections of the same stability ,power and quality of US or EU
(luckily apparently was not flooded as big part of the country )

_________________
My 3D Gallery on Deviantart http://photocomix2.deviantart.com/
Main gallery http://www.flickriver.com/photos/photocomix-mandala/
Mandala and simmetry http://www.flickriver.com/photos/photocomix_mandala/

Image

Mrs Wilbress


Top
 Profile  
 
 Post subject: Re: GimpTalk Attacked Again??
PostPosted: Tue Nov 02, 2010 12:06 pm  (#17) 
Offline
GimpChat Member
User avatar

Joined: Jul 04, 2010
Posts: 1380
Location: Slowly Returning to the Living.
What am now doing when I want to go to to GT, is to use Sandboxie. I went on last night in a Sandbox, so that if there was anything going on I would be shielded.

_________________
Artists aren't crazy! We're eccentric! ~G.M. Ross

Image

My Sigs = My Photos
Check out my work at http://www.flickr.com/photos/photomastergreg.


Top
 Profile  
 

 Post subject: Re: GimpTalk Attacked Again??
PostPosted: Tue Nov 02, 2010 3:03 pm  (#18) 
Offline
GimpChat Member
User avatar

Joined: Aug 31, 2010
Posts: 93
I'm trying to decide whether or not I'm being unfair or even overreacting. But I love your comment. Sandboxie is freaking cool. :)

_________________


Top
 Profile  
 
 Post subject: Re: GimpTalk Attacked Again??
PostPosted: Tue Nov 02, 2010 4:12 pm  (#19) 
Offline
GimpChat Member
User avatar

Joined: Sep 24, 2010
Posts: 4999
Yes; I use to be in the computer repair business. I've seen more then I should and am convinced that there is no Anti-malware that is going to 100% protect you while you are online. Only through virtualization (sandboxie as an example) of your browsing and controlling what you allow to physically get into you PC (registry and files for instance) will you be protected. Haven't seen a malware program yet that has broken Sandboxie; been using SBIE for over 2 years now. I actually double Sandbox (run Sandboxie inside my XP VM; typing this message not in that environment) and create shares between my XP VM and my Win7 OS (where I do all my edits). :)

_________________
Lyle

Psalm 109:8

Image


Top
 Profile  
 
 Post subject: Re: GimpTalk Attacked Again??
PostPosted: Tue Nov 02, 2010 5:04 pm  (#20) 
Offline
GimpChat Member
User avatar

Joined: Aug 31, 2010
Posts: 93
I'm convinced that the next major breakthrough in OS security will be complete sandboxing/virtualization of all non-system files and processes.

_________________


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 41 posts ]  Go to page Previous  1, 2, 3, 4, 5  Next

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  

* Login   * Subscribe to RSS Feed


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group