RESET ALL PASSWORDS

[Quatrerwin]

Reset all passwords on tvnihon.com! A few days ago, the developers of our blog software made it known that there is a hack available for all unpatched blogs. They stated that everyone who did not update within a few hours of the patch should assume their websites have been compromised. While doing an audit, I have not found any indications of any compromises, but it's better to be safe in this situation, since not all hacks leave a trace. Therefore, you should reset your passwords on the wiki and forums.

[Digifiend]

Surely it's only the BLOG that this would affect. The wiki and forum use completely different software and if one gets hacked, the same thing wouldn't be able to hack the other two. This action was totally unnecessary, in my opinion.

[Quatrerwin]

"Attackers may have created access points for themselves (sometimes called 'backdoors') in the database, code, files directory and other locations. Attackers could compromise other services on the server or escalate their access."

That's from the advisory. I've checked users and the services on the system, cleaned out the database, files directory, and code. While it may not be necessary to do a password reset, it's highly recommended because of the uncertainties from the security flaw and how fast the hack spread. That made it likely that the old passwords even for the forums and wiki are not entirely safe anymore.

[Kogashi]

I know you weren't asking specifically me or need me to specifically reply, but done and done.

[Eric]

Hackers are traitors to our internet. I hate being hacked.