ubuntuforums.org timing out as of now but are we sure this is a malicious attack and not simply downtime?
If it is an attack, it just means a time bandit for the admins I suppose...
If it is an attack, it just means a time bandit for the admins I suppose...
HTML source: http://pastebin.com/raw.php?i=7JXk5s1F
Then I remembered how much work this kind of prank generates for the system administrators.
The top was a splash image that linked to this twitter account: https://twitter.com/Sputn1k_
Below was some text (scraped from Chrome's history database):
Shoutout to @rootinabox.
None of this "y3w g0t haxd by albani4 c3bir 4rmy" stuff.
Straight up, you dun goofed. It's as simple as that.
---
@Sputn1k_ @CubeWorldForum It's a fairly easy "hack". You set your forum avatar to a remote site that actually serves up a meta redirect.
---
That's... interesting. Like a php-generated image containing a redirect header, or a referrer check set up in .htaccess? I didn't know images were hackable like that, beyond just sending an alternative image for nonexistent referrers?
If anyone needed a good argument against blindly hotlinking to other sites' content I guess this would be it.