Inappropriate Spam Private Messages

[Brandon Martus]

On behalf of chiefdelphi.com, I want to apologize for the vulgar private messages that were sent out to many of you Thursday evening. The forums were attacked, and some accounts were taken advantage of, and used to send out the inappropriate spam. I was unable to get to a computer, and the moderators wouldn't have been able to handle the massive attack that was going on. (2-3 requests per second, on multiple accounts, creating literally thousands of private messages)

The attack all came from one IP address, so I have banned that IP from the whole site. This should slow things down for now. Once I get back from IRI I will go through and fix an issue that may have prevented this.

How can you prevent this from happening? Don't have your username and password set to the same value. Go change your password now. Go change it regularly. Make it secure (letters, numbers, symbols, lowercase, uppercase, etc.).

I have gone through and removed the few thousand private messages (just the text) from the system. You may still see them listed in your inbox -- the body of the message will no longer show. Unfortunately, during this process some newer (thursday evening) private messages that weren't part of this attack may have been lost. If you sent a message Thursday night via PM, you may want to re-send it, just to be sure.

Again, sorry for the inapproriate content. There are measures in place to prevent this type of thing, but some always will slip through. Unfortunately this happened at a time when it couldn't be dealt with fast enough.

Let me know if you still have any issues with private messages, and I will try to fix them asap.

[Steve W]

Thanks Brandon for fixing as quickly as you did. Unfortunately there are as many people trying to tear things down as make them better. We will always have attacks here but your great diligence has made CD the best website on the web. Thanks again for all you do.

[Tom Line]

Yep, thanks!

On another note, I now have 1 unread mail in my box from 1969 (no, that's not a typo) which I can't read or get rid of. That permanent "1 unread mail" is going to drive me batty.

[Daniel_LaFleur]

Originally Posted by Tom Line

Yep, thanks!

On another note, I now have 1 unread mail in my box from 1969 (no, that's not a typo) which I can't read or get rid of. That permanent "1 unread mail" is going to drive me batty.

Click the checkbox next to the message.

Then at the bottom of the page next to 'selected message' use the dropdown box to select 'delete' and press OK.

[artdutra04]

Thanks Brandon for clearing that up quickly.

Also, always choose very secure passwords. It would be even better to use different passwords for every service you use (computer, email, IM, Facebook, etc), so that if one account is compromised they cannot use the same password to get into every account you have.

Originally Posted by Tom Line

Yep, thanks!

On another note, I now have 1 unread mail in my box from 1969 (no, that's not a typo) which I can't read or get rid of. That permanent "1 unread mail" is going to drive me batty.

On a related note, is there anyway to reset the unread messages function back to zero if the message was deleted? Mine still shows an unread message...

[vivek16]

Originally Posted by artdutra04

Thanks Brandon for clearing that up quickly.

Also, always choose very secure passwords. It would be even better to use different passwords for every service you use (computer, email, IM, Facebook, etc), so that if one account is compromised they cannot use the same password to get into every account you have.

On a related note, is there anyway to reset the unread messages function back to zero if the message was deleted? Mine still shows an unread message...

May I recommend an alphanumeric randomizer program? There are plenty for free online. It might seem like a bit much to remember for all the accounts but you get used to it.

Yes, that 1 unread message is going to drive me mad.

-Vivek

[MrForbes]

A password isn't any use if other people can figure it out easily, but it also isn't any use if you can't remember it.

[Daniel_LaFleur]

Originally Posted by artdutra04

On a related note, is there anyway to reset the unread messages function back to zero if the message was deleted? Mine still shows an unread message...

I thought I had the same until I looked on the last page of my inbox. It was there, without a title, with a date sent sometime in 1969

I suggest people look there to see if you can delete it.

[Jay H 237]

I'm so glad I just saw this thread, I was about to contact Brandon and ask why it says in BOLD that I have 1 unread private message that once I click to access the PMs there's nothing there, not even just a heading or even a hint of a PM, just the last PM I got 2 weeks ago (that I already read and responded to).

I thought I broke something!

[DonRotolo]

D'oh, I already did post in another thread about that 1 unread message - I'll be deleting that momentarily.

Anyway, regarding passwords and security, I posted a whitepaper on the topic which I think is worth reading.

Don

[Cynette]

Originally Posted by Daniel_LaFleur

I thought I had the same until I looked on the last page of my inbox. It was there, without a title, with a date sent sometime in 1969

I suggest people look there to see if you can delete it.

This worked for me too! Go to the very end of your inbox and see if there is a message there. No subject and was dated 12/31/1969. I deleted it and the 1 unread message disappeared!

[whytheheckme]

Originally Posted by Cynette

This worked for me too! Go to the very end of your inbox and see if there is a message there. No subject and was dated 12/31/1969. I deleted it and the 1 unread message disappeared!

I, on the other hand, marked them as read, just for the nostalgic feel of having PMs from 1969. I bet that very few people will ever have this


Jacob

[Dan Zollman]

Thanks!

[Robyn Needel]

Thanks Brandon for addressing this so quickly, especially when you had so many other things going on. It is a testament to your computer prowess that the website is as secure as it is. It's just too bad that the occasional hacker makes their way in to such a great website and tries to ruin such a good thing.


Enjoy IRI!

Robyn

[Lawry Goldstein]

Impressive speed for the size of the attack. At least is all done with now.