this
end post-top -->
Viewing: Roofers Coffee Shop Forum is Down

Roofers Coffee Shop Forum is Down

4 comments

Posted by Roof Info Staff on May 10, 2008 in Contractor Info

Roofers Coffee ShopAccording to a message at the Roofers Coffee Shop they are having issues with a worm attack and have had to close down the forums. Worm attacks frequently scan the Internet for vulnerabilities in server software and it appears they have found one here.

We are not sure what the problem is. The webmaster, Steve Miller, had been testing for a bug in the forum software yesterday. A test post that Steve submitted reveals javascript code had been injected into both the subject and message body. The script originates from a Chinese website. That website appears to have been hacked into also.

Another problem I have noticed is that Yahoo Search has red-flagged the RCS website as potentially harmful. The warning states that RCS has been issuing unsolicited emails. Unclear if this problem is related to the worm attack or not, but it is clear that Steve has his hands full and we wish him luck in resolving this.

UPDATE May 13th, 2008: The forum came back online today. Source of the problem was a Chinese worm attack which caused the RCS to dump all of their forum threads and replies. Other areas of the site are gone as well, classifieds, manufacturer information, forum profiles, etc.

The worm found its way into the system through a security hole in the forum software which allowed users to actually post javascript code. This is never a good thing. Most forum software only allows for minimal Html to be posted (links or image tags) and the rest are safely filtered. It appears that their fix is not to allow any Html at all — no more smilies.

No related posts.

4 Responses to “Roofers Coffee Shop Forum is Down”

  1. Mike says:
    May 10, 2008 at 8:32 pm

    I sure hope they find the source of the worm.

  2. Roof Info Staff says:
    May 11, 2008 at 5:35 am

    Me too, Mike.

    Finding the hole in security may be the easier of the two problems however. If the site gets onto any of the various spam lists, it can be quite hard to get off of them.

  3. darvenginzks says:
    August 3, 2008 at 4:13 am

    I’ve recently joined and wanted to introduce myself :)

  4. Vierineoche says:
    December 17, 2008 at 4:03 am

    Greetings I’m new here
    And it looks like a great forum, so just wanted to say hello! :) :):)
    And looking forward to participating.
    Going on vacation for a few days, so i’ll be back