Staff FTP contents lost

Earlier today, the FTP used by the staff (media.smwcentral.net) to host various files, including screenshots for moderation, documents and ASM code was wiped by someone with malicious intent.

At this point, about two thirds of the files have been recovered through various means, but a lot of useful data has been lost.

I'd like to appeal to everyone: if you happen to have any files, images, archives, documents, code, etc. originally downloaded from media.smwcentral.net and listed in missing.txt (file names are not entirely correct, e.g. spaces have been replaced by underscores), please contact a staff member as soon as possible.

The IP address behind the attack is the same as Dinodude, who we assume to be MrGreenThunder, both because of the IP addresses used by the accounts, and because of his own admission on IRC:


Thank you.

I already informed Xkeeper and Gideon Zhi about this on Twitter hours ago
Asked them to spread the word about this to other romhacking sites

Currently awaiting response

I assume this happened due to Xkeeper kicking O64's irc channel off BadnikNET (and Z:lining Skelux I believe)
Skelux was being a bigot as well as trolling on #x (Jul's IRC) and #kafuka (self-explanatory)

---

Hack・Ports・ASM・"Uploader"

Wait, who has access to that FTP? Can anyone access it or only staff?

- BMM

EDIT: holy shit, that is a lot of stuff to lose. At-least it wasn't a forum wipe like a few years ago. Still, quite a cause for concern.

Only staff.

Skelux was unstaffed sometime ago and the password wasn't changed, ergo...

Should I link this on the Vinesauce forum too?
Since they commonly stream SM64 hacks there.

---

Hack・Ports・ASM・"Uploader"

Wow, Skelux is certainly an ass then. Wonder why he got that other guy to do the attack though. Did he think it wouldn't be traced back to him?

- BMM

What a kiddo

We don't know for certain if the password was leaked through Skelux, and I don't think we should be making assumtions in this regard.

Likewise, I don't encourage anyone to cause any trouble for him or the SM64 community as a result of event.

I guess considering the year and season, you could consider this our October Surprise :VVVVVVVVVVV

TO BE SERIOUS: I don't want to sound like a dick but passwords for these sorts of things should be changed weekly at the very least and should be changed every time a staff loses staff privileges, to prevent this type of revenge crap.

- BMM

Certainly, the security revolving the staff FTP has been lacking.

It was originally established to host hack moderation screenshots but has increasingly been (ab)used to host more valuable things. We'll have to look into a better solution in the near future.

You're assuming that everyone is reasonable and doesn't seek revenge. In the past the likely attacker has proven not to be reasonable and was banned for bad behaviour.

Some people have trouble moving on and can be quite vindictive.



From what I've heard others say is that there is a lack of security around IRC passwords as well. Might be worth looking into.

- BMM

The IRC thing is unrelated, someone accidentally the #staff password so we had them changed immediately, within 10 minutes.

---

Your layout has been removed.

Ah OK nevermind then.

- BMM

This situation is just too stupid to be real. I actually feel sorry for the people involved into this, getting revenge against a romhacking community on the internet is a terrible to spend your time.

That missing files list is huge. All that is just a third of what has been wiped? I'm actually glad for the two other thirds, but it'll take a bunch of efforts to recover all of them.
It's actually very brave of the staff to have taken action so quickly, same goes for you, lion! I'm gonna snoop into that list and see if I don't have anything myself.

I'm not attacking you. That's a reasonable position to assume if the person doesn't have a track record. Unfortunately said person did which is why I'm not too surprised they did this.

You shouldn't assume everyone is a dick but you also shouldn't assume they aren't capable of hurting you or others. I made this mistake once.

I will try not to do that a second time.

- BMM

Please stay on topic, people.

SMWCI is also safe, as is the 9th VLDC. Actually, anything pertaining to any site-wide collabs are okay. Seems like the majority of what was affected are old removal logs (no big deal), and a couple important documents. I am aware that Counterfeit/Sako has the majority of these backed up and I will likely be contacting her soon, so we should be fine overall.

But yes, we're definitely "even now". Making an idiot out of yourself (well, a bigger one than you already were) and tarnishing your reputation across the ROM hacking community and several other forums was worth a minor inconvenience for us. Definitely.