OFFICIAL FURILEAKS THREAD

[Fiz]

Got this from verix's journal before the site cocked up again.

(19:43:39) anokorok: I got banned today telling users of various exploits in the site when the admins were saying it was secure
(19:44:03) dracoverix: hahahaha
(19:44:13) dracoverix: that figures
(19:45:02) anokorok: Other people were banned too, and the notice there use to be when an admin hid a comment is now gone
(19:45:22) dracoverix: ahahaha
(19:45:52) dracoverix: this is pretty much par for the course
(19:46:28) dracoverix: what did you show people? a bunch of xss?
(19:46:36) dracoverix: cause if you got banned for showing people xss I'm gonna lol harder
(19:46:43) anokorok: Yes
(19:46:46) dracoverix: aaaaaahahaha
(19:47:28) anokorok: When Dragoneer posted The Event journal saying it was safe, I posted XSS on it using the URL tag in the comments
(19:47:51) dracoverix: haha nice
(19:47:52) anokorok: 5 minutes later they disabled bbcode and deleted the journal
(19:51:26) dracoverix: that's just amazing

[UncreativeUsername]

In the last half hour or so, I've noticed a rash of journals starting to appear now on FA, which are relating various variations on the subject of private notes having been leaked and people deleting their own notes. There is some confusion it seems since the admins have all gone to ground and not made any official announcements. Allegedly Dragoneer is in hiding (as it were) at the moment. Only one FA admin has posted anything about this, chase: http://www.furaffinity.net/journal/1949852/ and he says nothing of substance there. Just boilerplate "we'll get things working again soon honest!"

That one's deleted, too. Is there ANY staff there who isn't a total and deceitful loser? No one say Damaratus, because he quit a week after the AlertPay debacle. Actually, this must be getting InkBunny or SoFurry a huge influx of new people. Sure, the cub porn people would have left for those places, or at least have dual membership, but now this. The security issues that have been laid so bare to us, AND the questionable correspondences Dragoneer and staff, are going to drive away a lot of non-cub people. I'm watching all this unfold with great eagerness and amusement.

[nrr]

That one's deleted, too. Is there ANY staff there who isn't a total and deceitful loser? No one say Damaratus, because he quit a week after the AlertPay debacle.

Forgive me, but who the fuck are you?

[Fiz]

That one's deleted, too. Is there ANY staff there who isn't a total and deceitful loser? No one say Damaratus, because he quit a week after the AlertPay debacle. Actually, this must be getting InkBunny or SoFurry a huge influx of new people. Sure, the cub porn people would have left for those places, or at least have dual membership, but now this. The security issues that have been laid so bare to us, AND the questionable correspondences Dragoneer and staff, are going to drive away a lot of non-cub people. I'm watching all this unfold with great eagerness and amusement.

Surgat is a fine admin from my experience but I wouldn't say that for the rest of their staff team. I've also never seen Damaratus be an outright prick or idiot so theres really no reason to shame someone for quitting (especially this site). And Inkbunny is currently down fyi because of hardware problems.

I think most people are just heading to deviantART.

[ProvincialTwit]

Forgive me, but who the fuck are you?

The worst username to show up here since 'KimcheeScentedAirFreshener' is who he is.

I think most people are just heading to deviantART.

Didn't DA have some big anti-furry-art crackdown?  I thought that was half the reason people flocked to FA in the first place.

[UncreativeUsername]

Forgive me, but who the fuck are you?

I'm someone with a very uncreative name  who wanted to inject myself into the drama. Nice to meet you, I guess.

Surgat is a fine admin from my experience but I wouldn't say that for the rest of their staff team. I've also never seen Damaratus be an outright prick or idiot so theres really no reason to shame someone for quitting (especially this site). And Inkbunny is currently down fyi because of hardware problems.

I think most people are just heading to deviantART.

They don't allow porn. How many non-porn furries could there be?

[Fiz]

Didn't DA have some big anti-furry-art crackdown?  I thought that was half the reason people flocked to FA in the first place.

Honestly, I've heard about that but I never saw it. I think the reason people started spouting that bullshit is because the only "anti-furry" thing I recall them ever doing was not allowing the anthro category to show up in the "Today's Popular" section, which has long since changed.

From what I understand (correct me if I'm wrong, as I didn't join FA until early 2007) is that a lot of the people that flocked to FA were from SheezyArt when they stopped allowing smut and then a lot of folk flocked from Y!Gallery when they did ban furry art from there, which again has long since changed.

They don't allow porn. How many non-porn furries could there be?

A lot.

[Conan]

This calls for the quote from the FALeaks archive page:

Hi, FBI? Someone hacked into my porn website and is harassing pedophiles and rapists by leaking their notes!

[UncreativeUsername]

How many notes thereabouts were taken from the site and posted? Were ones that were trashed and deleted from the trashed folder retrievable, or are those gone for good? I would have started looking for more goodies myself in the files, but there's just so much data.

[Fiz]

TO-DO LIST

✔ Post on Dragoneer's shoutbox

✔ Post on Dragoneer's journal

✔ Troll

✔ Get administrator to comment my shoutbox

✔ Sleep

It was fun. You can ban me for good now.

P.S. I suggest having numeric values for artist types and moods and such, so users can't inject whatever they want into them.

Welp.

[UncreativeUsername]

Gotten from dramawhore SilverAutomatic's journal, which is: http://www.furaffinity.net/journal/1957744/  The sentence of note is:

As someone who had their information leaked due to the FA hack, I just also want to say that I don't blame FA, nor it's staff for this incident. Shit happens, and it's my own fault for putting that information online in the first place. Though, truth be told - that information was also readily available to anyone who just simply /asked/ for it.

Am I the only one who really, really hopes someone breaks in again and makes his life miserable for another few days? I mean, is he blind, or a propagandist? I wonder if he's under Dragoneer's desk right now... It's frightening he's a cop in RL.

[Fiz]

AFAIK the hack never went quite that deep.

One of our tech admins was *watching* him in real time as he was hacking the site one of the nights, and I didn't see anything in there regarding the root or MYSQL. I'll go ahead and talk with yak again, but I'm 99.9999% sure that that's not a problem.

what

why would you

AAAAAAAAARGH

[UncreativeUsername]

AFAIK the hack never went quite that deep.

One of our tech admins was *watching* him in real time as he was hacking the site one of the nights, and I didn't see anything in there regarding the root or MYSQL. I'll go ahead and talk with yak again, but I'm 99.9999% sure that that's not a problem.

what

why would you

AAAAAAAAARGH

Whaaaaaa? Screenshot before deletion, please.

[Conan]

AFAIK the hack never went quite that deep.

One of our tech admins was *watching* him in real time as he was hacking the site one of the nights, and I didn't see anything in there regarding the root or MYSQL. I'll go ahead and talk with yak again, but I'm 99.9999% sure that that's not a problem.

what

why would you

AAAAAAAAARGH

...

...

thereisnoimage.jpg

[Fiz]

Whaaaaaa? Screenshot before deletion, please.

[UncreativeUsername]

No image for my reaction when reading Witchie's comment.

I couldn't care less about your reaction. I just want evidence preserved. And, thank you, Fiz. I'd like to see her squirm out of her admission now. I mean, I'm pretty un-tech savvy, but, is it usual and accepted protocol to 'watch' a hacker do stuff like this AS HE DOES IT? This is, like... Well, what Conan said.

[Pi]

What the FUCK is it with people who have no idea what they're talking about, admit that they don't know what's going on, then proceed to act authoritative on the subject?

[bridgeportcat]

Whaaaaaa? Screenshot before deletion, please.

You know, I know jack shit about site security but even I know that this is not how you do things

Utterly. Fucking. Flabbergasted.

[Fiz]

I couldn't care less about your reaction. I just want evidence preserved. And, thank you, Fiz. I'd like to see her squirm out of her admission now. I mean, I'm pretty un-tech savvy, but, is it usual and accepted protocol to 'watch' a hacker do stuff like this AS HE DOES IT? This is, like... Well, what Conan said.

I don't feel like screencapping this shit so forgive me.

I can't explain why our admins made the decisions they did regarding whether or not to shut down the site, except to say that they did what they felt was in the best interests of FA to stop the hack and secure it, and as I'm NOT a tech admin I don't feel exactly qualified to question their judgment or decisions, and I discourage anyone else who isn't qualified from doing so as well.

I'm posting here as a courtesy, not as our official announcement, trying to address what I can. Please do not confuse my comments here for any type of official FA response.

This wasn't like we watched the initial hack happen and did nothing, this was after we realized that we hadn't gotten all the holes. AFAIK, the reason why he was being watched was so that his methods could be discovered and the holes patched based on where he went and how he got in. When he started going beyond admin accounts, (i.e into the general users accouts) the tech admin began to take action to block his access and the attack stopped very quickly thereafter.

Also, the forums are handled by a different admin, who made the decision to pull the forums on his own, and as he hosts them we didn't question it.

Again, I'm not making any kind of official response, and tbh this is the first time I've spoken up/made myself visible since this happened BECAUSE I didn't want to be mistaken for any kind of official response. Our official response IS still coming. All I'm really here to do is to speak up regarding the fact that we HAVE made changes, security wise, and to handle issues that have otherwise fallen through the cracks.

Fair enough?

[...] As to the tech/coding aspect of things, and why they did what they did again, I'm not a tech admin, and not qualified to judge, so I don't. [...]

[Conan]

When he started going beyond admin accounts, (i.e into the general users accouts) the tech admin began to take action to block his access and the attack stopped very quickly thereafter.

I suppose that's why we have the notes from
Allan
Arcturus
AuroraBorelia
Betawolf
Clayton
Fisk
Sciggles
Seux
Silverautomatic
Synwolf
TORA
Zaush

and apparently more that are so far unreleased.

Yeah okay Witchie.