4 ms·

The exact same thing happened to a phpBB bass guitar forum I was a member of about 15 years ago. The owner just disappeared and we knew the bills weren’t being

by bfirsh 3y ago

The exact same thing happened to a phpBB bass guitar forum I was a member of about 15 years ago. The owner just disappeared and we knew the bills weren’t being paid. Hypthetically, I found a remote code execution vulnerability in that version of phpBB, read the configuration file to get the MySQL details, and then used mysqldump to download the database. You can find exploits by just Googling or looking in Metasploit. They’re usually pretty simple query string things. We set up a clone of the forum with a similar name just in time, then emailed the user database to tell them about the new site when the old one disappeared. Sadly this caught the previous owner’s attention and he sent a cease and desist, despite his version of the site not existing any longer. So, we wiped the database, and then all the users just signed up again. It still lives on as https://www.basschat.co.uk/ https://www.basschat.co.uk/ Hypothetically.

Modified3019 3y ago
Amazing story. I hypothetically consider you a hero. >Sadly this caught the previous owner’s attention and he sent a cease and desist, despite his version of the site not existing any longer. Wow, what an ass. I just can't understand the thought process of some people.
- gexla 3y ago
  Even though I didn't keep the software maintained, I wouldn't be happy that sensitive member information (email addresses, login info) was leaked (unknown destination) by the community. I would feel some responsibility for that information getting out, and at least feel the need to reach out to past members and anyone using that data. If I wanted to be an "ass" then I would have taken harsher legal routes. I would just scrape the site. I would even consider anonymizing names, as everyone should have the right to delete old content IMO. After scraping, I would then watch the analytics. Anything which seems popular could then be given more attention. For example, I would probably create a design for the site itself, then create dedicated pages for anything popular. The pages could be curated "this is what you came for" and a link to the original pages. Forums probably don't come back. You could start out with some minimal community features such as comments to see if anyone is willing to bite. A Discord server or similar could be another option. Kind of depends on the demographic I guess. Old people like forums. ;)

by bfirsh 3y ago

Modified3019 3y ago

Amazing story. I hypothetically consider you a hero. >Sadly this caught the previous owner’s attention and he sent a cease and desist, despite his version of the site not existing any longer. Wow, what an ass. I just can't understand the thought process of some people.

gexla 3y ago
Even though I didn't keep the software maintained, I wouldn't be happy that sensitive member information (email addresses, login info) was leaked (unknown destination) by the community. I would feel some responsibility for that information getting out, and at least feel the need to reach out to past members and anyone using that data. If I wanted to be an "ass" then I would have taken harsher legal routes. I would just scrape the site. I would even consider anonymizing names, as everyone should have the right to delete old content IMO. After scraping, I would then watch the analytics. Anything which seems popular could then be given more attention. For example, I would probably create a design for the site itself, then create dedicated pages for anything popular. The pages could be curated "this is what you came for" and a link to the original pages. Forums probably don't come back. You could start out with some minimal community features such as comments to see if anyone is willing to bite. A Discord server or similar could be another option. Kind of depends on the demographic I guess. Old people like forums. ;)