Author Topic: Security advice RE: qb64.net (not qb64.org)  (Read 3063 times)

Online FellippeHeitor

  • QB64 Developer
  • Forum Resident
  • Posts: 2411
  • LET IT = BE
    • QB64.org
Re: Security advice RE: qb64.net (not qb64.org)
« Reply #15 on: June 28, 2020, 05:40:03 PM »
We did manage to download a copy of the contents at some point, long before .net was down for good, but then Galleon came back and we thought we were safe again. But then it was all gone for good for real this time and all we're left with is whatever the spammers decided to put up online there. You shouldn't be trying to login there either, for the reasons outline above by Galleon himself.

Offline davidshq

  • Newbie
  • Posts: 58
Re: Security advice RE: qb64.net (not qb64.org)
« Reply #16 on: June 28, 2020, 09:52:30 PM »
I'm giving a Ruby program that allows one to download snapshots from The Wayback Machine a try. Looks like it is going to return almost 11k pages from the forums. Some of this will be from the current site, but most should be from earlier editions of the site.

Is there anything else I should pull down if the forums works out well?

Online FellippeHeitor

  • QB64 Developer
  • Forum Resident
  • Posts: 2411
  • LET IT = BE
    • QB64.org
Re: Security advice RE: qb64.net (not qb64.org)
« Reply #17 on: June 28, 2020, 09:55:41 PM »
We've been interested in preserving it for historical purposes. If code and attachments could be fetched, that'd be awesome - but given the way archive.org does its crawling, I have very low hopes.
« Last Edit: June 28, 2020, 09:59:22 PM by FellippeHeitor »

Offline davidshq

  • Newbie
  • Posts: 58
Re: Security advice RE: qb64.net (not qb64.org)
« Reply #18 on: July 02, 2020, 02:22:42 PM »
Unfortunately, Fellippe, it looks like you are right. I was able to pull down some stuff from Internet Archive but not much.

One of the more curious things about the qb64.net site is that some links seem to work if you are referred by another site. So, if for example, you are referred to a qb64.net URL by Google, the page loads. But if you try to reload the same page directly at another time it won't load.

Anyone else able to verify this behavior?

If so, we could probably set our HTTP headers to manually refer to Google so it looks like we are coming from Google when we aren't and be able to crawl the pages...

If this is the case, it seems like perhaps the idea is to continue getting traffic from sites like Google but prevent individuals from actually using the site in any normal fashion.

Offline bplus

  • Forum Resident
  • Posts: 5300
  • B+ Knot again!
Re: Security advice RE: qb64.net (not qb64.org)
« Reply #19 on: July 02, 2020, 02:32:36 PM »
Quote
Anyone else able to verify this behavior?

Yes you come late to the party :)

Richard has all kinds of copies of stuff, he started flooding forum with posts:
https://www.qb64.org/forum/index.php?topic=2670.0

See page 4 early June of Discussion Board look for long string of numbers in topics. If there is something particular you need, he might help.

Offline davidshq

  • Newbie
  • Posts: 58
Re: Security advice RE: qb64.net (not qb64.org)
« Reply #20 on: July 02, 2020, 02:49:31 PM »
Cool, thanks. For fun I'm also checking the commoncrawl.org corpus to see what they have, it dates way back and they have petabytes of content these days.

Online FellippeHeitor

  • QB64 Developer
  • Forum Resident
  • Posts: 2411
  • LET IT = BE
    • QB64.org
Re: Security advice RE: qb64.net (not qb64.org)
« Reply #21 on: July 02, 2020, 03:54:57 PM »
The forum software generates pages dynamically. When crawlers do their thing, they fetch a snapshot. Some links will point to said snapshots, hence the illusion that it's working.

Offline Kiara87

  • Newbie
  • Posts: 91
Re: Security advice RE: qb64.net (not qb64.org)
« Reply #22 on: July 22, 2020, 05:06:53 PM »
This is a security warning that I do not own nor have I owned qb64.net for over a year.
Whatever content is hosted there is a copy of whatever someone could scrape off the old site.
If you have attempted to login to the forum at qb64.net since I discontinued ownership there is a possibility that your passwords have been stolen.
I have no evidence that this has occurred or that the new owner of qb64.net is malicious. I am merely advising that this is a possibility.
If you are a person who uses the same password everywhere (you should look to changing that btw) and you have entered your credentials into the scraped site I highly recommend you change your passwords on other sites to something else.
Please do not expect me to reply to this message.

because the owner of qb64.net is not the owner of the forum qb64.org?
or before the program was its creator another person?
the forum qb64.net the creator = forum qb64.org ?
as far as i know before qb64 was there  QBASIC Quick Basic 45, Basic
se avessi solo un'ora per salvare il mondo, passerei 55 minuti per definire bene il problema e 5 a trovare la soluzione