forums.disco2.com

[thermidorthelobster]

I notice the DiscoII Forums site has been hacked.  It's now un-hacked but offline.

This is interesting to me as I also run phpBB in a couple of places.  But I notice they're using Apache web server - I use IIS.  I'd be interested to know whether the hacking was a weakness in Apache, or in phpBB...?

[muddyweb]

There are a number of vulnerabilities in all of the aforementioned software.

phpBB based sites have been hit heavily just of late, you need to keep them up to date to try and keep ahead of the hackers.

Sadly, they usually find a way if they are determined enough.

Apache is generally pretty secure, depending on the version, IIS needs to be kept bang up to date for patches else you *will* be hit sooner or later.

[thermidorthelobster]

I can't remember the message that was there, but it appeared to be a bot / script, rather than a determined individual hacker.  That's why I feel particularly vulnerable!

[Thrasher]

http://news.zdnet.com/2100-1009_22-5499725.html?tag=nl.e589

That gives the details ;-)