3 ms·
The owner's statement: https://archive.is/SBdQH https://archive.is/SBdQH Find it quite weird how there was no database dump yet, can't see a reason to hold on
by philippejara 4y ago
The owner's statement: https://archive.is/SBdQH https://archive.is/SBdQH
Find it quite weird how there was no database dump yet, can't see a reason to hold on to it, it would be pretty funny to get access then getting blocked by php being php. Owner claims there was not much to leak due to good opsec from users after the 2019 leak so we'll see.
- hombre_fatal 4y ago> In my access logs, they attempted to download all user records at once. This caused an error and no output was returned. I shut everything off soon after. If they scraped information through some other mechanism, I cannot say with any confidence either way. Anyone with a large phpbb/vbulletin/xenforo install can tell you that the built-in GUI tools fail with even modest userbases. They just run mysql queries in a php request and hit the php.ini timeout, so you have to use CLI tools. If all the attacker had access to was the forum front-end (rather than the machine) and they weren't particularly prepared, it wouldn't be surprising if they didn't achieve anything.