QB64.org Forum

Active Forums => QB64 Discussion => Topic started by: Galleon on November 22, 2019, 08:14:56 pm

Title: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: Galleon on November 22, 2019, 08:14:56 pm
This is a security warning that I do not own nor have I owned [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] for over a year.
Whatever content is hosted there is a copy of whatever someone could scrape off the old site.
If you have attempted to login to the forum at [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] since I discontinued ownership there is a possibility that your passwords have been stolen.
I have no evidence that this has occurred or that the new owner of [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] is malicious. I am merely advising that this is a possibility.
If you are a person who uses the same password everywhere (you should look to changing that btw) and you have entered your credentials into the scraped site I highly recommend you change your passwords on other sites to something else.
Please do not expect me to reply to this message.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: Real2Two on November 22, 2019, 08:25:22 pm
Ok. Good thing I didn't have QB64 when [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] exists. xD
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: FellippeHeitor on November 23, 2019, 12:16:39 am
Oh.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: STxAxTIC on November 23, 2019, 12:25:21 am
I know right? It's like running into your ex who you thought you'e gotten over.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: keybone on November 23, 2019, 01:11:43 am
I know right? It's like running into your ex who you thought you'e gotten over.

lmao!!! I got a little disappointed, I thought maybe Galleon got a little nostalgic and wanted to be part of the community.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: keybone on November 23, 2019, 01:16:09 am
This is a security warning that I do not own nor have I owned [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] for over a year.
Whatever content is hosted there is a copy of whatever someone could scrape off the old site.
If you have attempted to login to the forum at [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] since I discontinued ownership there is a possibility that your passwords have been stolen.
I have no evidence that this has occurred or that the new owner of [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] is malicious. I am merely advising that this is a possibility.
If you are a person who uses the same password everywhere (you should look to changing that btw) and you have entered your credentials into the scraped site I highly recommend you change your passwords on other sites to something else.
Please do not expect me to reply to this message.

Thanks for letting us know, we all just assumed that it was the long awaited backup and that was all that could be salvaged. I can't think of any other reason for putting the site back up like that, if it wasn't you that put it there, than phishing. So i definately am changing my passwords.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: bplus on November 23, 2019, 11:42:34 am
The Galleon? possibly Odin's Odin?
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: Dimster on November 24, 2019, 10:47:15 am
Should there not be a request by the new owner to use the old members data/personal info or even the coding generated (after all the site was only quasi public- meaning limited to lovers of Qbasic and it's iterations), should the new owner of the site not be obligated to provide info on any change to privacy policies? I'm not sure if some of these issues aren't already standard unwritten expectations by members of these various programming sites.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: Qwerkey on November 24, 2019, 11:40:29 am
Galleon enrolled as a .org member.  We are honoured.  Recognising his contribution in kicking off this community, I feel that we should award him the badge of office of Emeritus Leader.  The label "Emeritus" clearly signifies retired.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: Calloway on November 24, 2019, 10:26:22 pm
Should there not be a request by the new owner to use the old members data/personal info or even the coding generated (after all the site was only quasi public- meaning limited to lovers of Qbasic and it's iterations), should the new owner of the site not be obligated to provide info on any change to privacy policies? I'm not sure if some of these issues aren't already standard unwritten expectations by members of these various programming sites.
I mean, if they're using the site for malicious purposes then I don't think they would be too avid about announcing privacy policies and contacting the old owner...
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: maersi on March 23, 2020, 09:38:39 am
I have just seen this message. [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] is still up, and still looks genuine  enough to fool people. I can think of no legitimate reason to host a fake copy of a genuine site.
[abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] is hosted by GoDaddy.
It might be worth a QB64.org admin contacting GoDaddy to discuss.
Registrar Abuse Contact Email: abuse@godaddy.com
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: FellippeHeitor on March 23, 2020, 12:12:56 pm
It might be worth a QB64.org admin contacting GoDaddy to discuss.
Registrar Abuse Contact Email: abuse@godaddy.com

Done. Thanks!
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: davidshq on June 27, 2020, 09:57:23 pm
Does anyone have a login to [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] that works for them on the forums? I'd like to scrape the site for all of its forum posts but if I try and login it just kicks me back out to the main [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] site.

If you do have such a password, aren't reusing it, and are willing to share I've got WinHTTrack all spun up and ready to go.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: SMcNeill on June 27, 2020, 10:01:56 pm
Does anyone have a login to [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] that works for them on the forums? I'd like to scrape the site for all of its forum posts but if I try and login it just kicks me back out to the main [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] site.

If you do have such a password, aren't reusing it, and are willing to share I've got WinHTTrack all spun up and ready to go.

It won't help.  The site only has a few pages open in each topic.  Once you get down past the 2nd or 3rd page, the links are broken.  What's up now is nothing more than a mirror of something which was probably saved via The Internet Archive or Wayback Machine.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: davidshq on June 28, 2020, 05:29:39 pm
Bummer. :-/
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: FellippeHeitor on June 28, 2020, 05:40:03 pm
We did manage to download a copy of the contents at some point, long before .net was down for good, but then Galleon came back and we thought we were safe again. But then it was all gone for good for real this time and all we're left with is whatever the spammers decided to put up online there. You shouldn't be trying to login there either, for the reasons outline above by Galleon himself.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: davidshq on June 28, 2020, 09:52:30 pm
I'm giving a Ruby program that allows one to download snapshots from The Wayback Machine a try. Looks like it is going to return almost 11k pages from the forums. Some of this will be from the current site, but most should be from earlier editions of the site.

Is there anything else I should pull down if the forums works out well?
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: FellippeHeitor on June 28, 2020, 09:55:41 pm
We've been interested in preserving it for historical purposes. If code and attachments could be fetched, that'd be awesome - but given the way archive.org does its crawling, I have very low hopes.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: davidshq on July 02, 2020, 02:22:42 pm
Unfortunately, Fellippe, it looks like you are right. I was able to pull down some stuff from Internet Archive but not much.

One of the more curious things about the [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] site is that some links seem to work if you are referred by another site. So, if for example, you are referred to a [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] URL by Google, the page loads. But if you try to reload the same page directly at another time it won't load.

Anyone else able to verify this behavior?

If so, we could probably set our HTTP headers to manually refer to Google so it looks like we are coming from Google when we aren't and be able to crawl the pages...

If this is the case, it seems like perhaps the idea is to continue getting traffic from sites like Google but prevent individuals from actually using the site in any normal fashion.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: bplus on July 02, 2020, 02:32:36 pm
Quote
Anyone else able to verify this behavior?

Yes you come late to the party :)

Richard has all kinds of copies of stuff, he started flooding forum with posts:
https://www.qb64.org/forum/index.php?topic=2670.0

See page 4 early June of Discussion Board look for long string of numbers in topics. If there is something particular you need, he might help.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: davidshq on July 02, 2020, 02:49:31 pm
Cool, thanks. For fun I'm also checking the commoncrawl.org corpus to see what they have, it dates way back and they have petabytes of content these days.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: FellippeHeitor on July 02, 2020, 03:54:57 pm
The forum software generates pages dynamically. When crawlers do their thing, they fetch a snapshot. Some links will point to said snapshots, hence the illusion that it's working.
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: Kiara87 on July 22, 2020, 05:06:53 pm
This is a security warning that I do not own nor have I owned [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] for over a year.
Whatever content is hosted there is a copy of whatever someone could scrape off the old site.
If you have attempted to login to the forum at [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] since I discontinued ownership there is a possibility that your passwords have been stolen.
I have no evidence that this has occurred or that the new owner of [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] is malicious. I am merely advising that this is a possibility.
If you are a person who uses the same password everywhere (you should look to changing that btw) and you have entered your credentials into the scraped site I highly recommend you change your passwords on other sites to something else.
Please do not expect me to reply to this message.

because the owner of [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] is not the owner of the forum qb64.org?
or before the program was its creator another person?
the forum [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] the creator = forum qb64.org ?
as far as i know before qb64 was there  QBASIC Quick Basic 45, Basic
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t go there] (not qb64.org)
Post by: xra7en on November 28, 2020, 04:27:40 pm
thanks for the update - was having issues with *.net did not know it was NOT a part of *.org, I did manage to get a new download from *.org, so hope that was good
Title: Re: Security advice RE: [abandoned, outdated and now likely malicious qb64 dot net website - don’t g
Post by: tomxp411 on January 22, 2022, 02:41:02 am
Does anyone own a trademark on QB64? If you do, then you can get it shut down that way.

I was part of a ham radio club a few years ago who had their callsign's .com stolen by a former member, and that was the method they used to get it back.