boopy265420
Legendary
 Offline
Activity: 1876
Merit: 1005
|
 |
August 23, 2015, 07:21:04 PM |
|
Some feedback from the tech team:
We are not running SSH on standard ports anyway and direct root logins are also prohibited. Once again our password is very strong and cannot be brute forced, only hosting provider had access to our server for management purposes.
The results of the findings of our investigation regarding the compromised server:
It seems the reason is an ex-employee's frenzy. We learned that they had the same issue with other servers as well.
Right now we have downloaded a copy of the main database and deleted it from the server, and stopped execution of DaDice gameplay scripts completely. They have offered to either scan our server and make sure there are no Trojans or rootkits or any other threat active on the server or to build up a new matching server with a fresh install of our gameplay script / database etc. We have opted for a new server and are expecting to be up and running sometime tomorrow.
i presume that you have a hard time to fix the problem  anyway take your time to fix this issue and make sure it will not remake  good luck ! It is good to have some updates.Let's hope we will play tomorrow once again and this time it will be up for good.All the best to fix and overcome the problems you are facing. |
|
|
|
|
|
birdcat90
|
|
August 23, 2015, 08:58:28 PM |
|
How long does dadice downtime?
dev said around 2-3 days right? is that really critical error on dadice?
if what dadice said about hosting hack then they need to change the hosting company...^^
|
|
|
|
cakk
Newbie
Offline
Activity: 35
Merit: 0
|
|
August 24, 2015, 11:33:01 AM |
|
well i'm so excited about it, I'm waiting for the site come back and be playable  Take your time, safety is first. |
|
|
|
|
ndnh
Legendary
Offline
Activity: 1302
Merit: 1005
New Decentralized Nuclear Hobbit
|
|
August 24, 2015, 02:26:10 PM |
|
Yeah, safety first. How long does dadice downtime?
dev said around 2-3 days right? is that really critical error on dadice?
if what dadice said about hosting hack then they need to change the hosting company...^^
Site should be up soon.  Was there logins in the auth.log from an outsider using root or a bash_history showing someone was using the root account? It's a bad idea to have ssh access open to root accounts. You should use another account and SU. Also you should have hidden bastion server access and not allow any ssh from IP's other than two bastions (the other as a backup).
I ask because rarely does a hack happen with a root password. Typically it's poor code allow cross-site scripting, SQL injection etc. etc. If there is no proof of shell access search access logs for PUTS and POSTS to narrow it down. Or, check your database integrity to see if it was compromised.
Some feedback from the tech team: We are not running SSH on standard ports anyway and direct root logins are also prohibited. Once again our password is very strong and cannot be brute forced, only hosting provider had access to our server for management purposes. The results of the findings of our investigation regarding the compromised server: It seems the reason is an ex-employee's frenzy. We learned that they had the same issue with other servers as well. Right now we have downloaded a copy of the main database and deleted it from the server, and stopped execution of DaDice gameplay scripts completely. They have offered to either scan our server and make sure there are no Trojans or rootkits or any other threat active on the server or to build up a new matching server with a fresh install of our gameplay script / database etc. We have opted for a new server and are expecting to be up and running sometime tomorrow. |
|
|
|
|
dadice (OP)
Sr. Member
Offline
Activity: 252
Merit: 250
DaDice Administration
|
|
August 24, 2015, 03:32:00 PM |
|
We are glad to announce that dadice is finally online again.
Once again our apologies for the downtime!
|
<- My trust rating is a joke, due to the poor and worthless implementation of trust ratings at bitcointalk.org
|
|
|
dadice (OP)
Sr. Member
Offline
Activity: 252
Merit: 250
DaDice Administration
|
|
August 24, 2015, 03:42:57 PM |
|
Now lets go for our 750 millionth roll bounty !!!
|
<- My trust rating is a joke, due to the poor and worthless implementation of trust ratings at bitcointalk.org
|
|
|
ndnh
Legendary
Offline
Activity: 1302
Merit: 1005
New Decentralized Nuclear Hobbit
|
|
August 24, 2015, 03:46:03 PM |
|
We are glad to announce that dadice is finally online again.
Once again our apologies for the downtime!
That is Great! |
|
|
|
|
shulio
Legendary
Offline
Activity: 1540
Merit: 1016
|
|
August 24, 2015, 03:51:31 PM |
|
You sure it is live already? I cant open the site and it keeps loading here also the page for stats.dadice.com is not live as well. Anyone get this kind of error here?
|
|
|
|
|
ndnh
Legendary
Offline
Activity: 1302
Merit: 1005
New Decentralized Nuclear Hobbit
|
|
August 24, 2015, 03:57:26 PM |
|
You sure it is live already? I cant open the site and it keeps loading here also the page for stats.dadice.com is not live as well. Anyone get this kind of error here?
Stats is not up yet. DD just made sure the main site goes online as soon as possible. Working fine to me. There are other users online too.  |
|
|
|
|
|
ashfaq
|
|
August 24, 2015, 03:58:14 PM |
|
We are glad to announce that dadice is finally online again.
Once again our apologies for the downtime!
You are running a dice website and your account has a extremely high negative trust ,dont you think your trust can effect your business |
|
|
|
Lutpin
Copper Member
Legendary
Offline
Activity: 1904
Merit: 1874
Goodbye, Z.
|
|
August 24, 2015, 04:03:34 PM |
|
We are glad to announce that dadice is finally online again.
Once again our apologies for the downtime!
You are running a dice website and your account has a extremely high negative trust ,dont you think your trust can effect your business Let me quote his sig for you <- My trust rating is a joke, due to the poor and worthless implementation of trust ratings at bitcointalk.org Do you know the story behind that rating? Before you juge based on a number, maybe you should get to know how it got there. |
| | | | ███████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
███████ | | | |
▄████████████████████████████████████████████████████████████▄
██ ▄▄▄▄▄▄ ██
██ ██████ ▄██████████▄ ████████████████████▀
██ ████████ ▄████▀ ▀████▄ ████▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
██ ████ ████ ████▀ ▀██▀ ████
██ ████ ████ ▄███▀ ████
██ ████ ████ ███▀ ████▄▄▄▄▄▄▄▄▄▄
██ ████ ████ ███ ██████████████
██ ████ ████ ███▄ ████▀▀▀▀▀▀▀▀▀▀
██ ████████████████████ ▀████ ████
██ ██████████████████████ ▀████▄ ▄██▄ ████
██ ████ ████ ▀████▄ ▄████▀ ████▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██ ████ ████ ▀██████████▀ ████████████████████▄
██ ▀▀▀▀▀▀ ██
▀█████████████████████████████████████████████████████████████████████▀ | | |
|
|
|
shulio
Legendary
Offline
Activity: 1540
Merit: 1016
|
|
August 24, 2015, 04:06:27 PM |
|
You sure it is live already? I cant open the site and it keeps loading here also the page for stats.dadice.com is not live as well. Anyone get this kind of error here?
Stats is not up yet. DD just made sure the main site goes online as soon as possible. Working fine to me. There are other users online too. Okay it works for me now. I usually check the stats.dadice.com site if it dont load for me because they said that both of the site is connected. How many rolls are there now? Im still loading the page here |
|
|
|
|
Lutpin
Copper Member
Legendary
Offline
Activity: 1904
Merit: 1874
Goodbye, Z.
|
|
August 24, 2015, 04:07:48 PM |
|
Okay it works for me now. I usually check the stats.dadice.com site if it dont load for me because they said that both of the site is connected. How many rolls are there now? Im still loading the page here
748,730,000 as of just some seconds ago. |
| | | | ███████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
███████ | | | |
▄████████████████████████████████████████████████████████████▄
██ ▄▄▄▄▄▄ ██
██ ██████ ▄██████████▄ ████████████████████▀
██ ████████ ▄████▀ ▀████▄ ████▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
██ ████ ████ ████▀ ▀██▀ ████
██ ████ ████ ▄███▀ ████
██ ████ ████ ███▀ ████▄▄▄▄▄▄▄▄▄▄
██ ████ ████ ███ ██████████████
██ ████ ████ ███▄ ████▀▀▀▀▀▀▀▀▀▀
██ ████████████████████ ▀████ ████
██ ██████████████████████ ▀████▄ ▄██▄ ████
██ ████ ████ ▀████▄ ▄████▀ ████▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██ ████ ████ ▀██████████▀ ████████████████████▄
██ ▀▀▀▀▀▀ ██
▀█████████████████████████████████████████████████████████████████████▀ | | |
|
|
|
|
masterzino
|
|
August 24, 2015, 04:09:00 PM |
|
Okay it works for me now. I usually check the stats.dadice.com site if it dont load for me because they said that both of the site is connected. How many rolls are there now? Im still loading the page here
748,730,000 as of just some seconds ago. Bounty for 750,000,000 roll is still valid? When do you expect it to happen site works fine for me now...  |
|
|
|
shulio
Legendary
Offline
Activity: 1540
Merit: 1016
|
|
August 24, 2015, 04:13:19 PM |
|
Okay it works for me now. I usually check the stats.dadice.com site if it dont load for me because they said that both of the site is connected. How many rolls are there now? Im still loading the page here
748,730,000 as of just some seconds ago. Nice we are close, I will be rolling in a some minute to try to get the bounty. It is good that the site is just live so still small number of people to hit the bounty so chance for we should be bigger but today is 24 already, so the bounty will be 1.05 if today |
|
|
|
|
dadice (OP)
Sr. Member
Offline
Activity: 252
Merit: 250
DaDice Administration
|
|
August 24, 2015, 04:20:11 PM |
|
Okay it works for me now. I usually check the stats.dadice.com site if it dont load for me because they said that both of the site is connected. How many rolls are there now? Im still loading the page here
748,730,000 as of just some seconds ago. Nice we are close, I will be rolling in a some minute to try to get the bounty. It is good that the site is just live so still small number of people to hit the bounty so chance for we should be bigger but today is 24 already, so the bounty will be 1.05 if today No the bounty will be 1.3 btc, as mentioned earlier. We deduct the downtime. |
<- My trust rating is a joke, due to the poor and worthless implementation of trust ratings at bitcointalk.org
|
|
|
dadice (OP)
Sr. Member
Offline
Activity: 252
Merit: 250
DaDice Administration
|
|
August 24, 2015, 04:25:49 PM |
|
You sure it is live already? I cant open the site and it keeps loading here also the page for stats.dadice.com is not live as well. Anyone get this kind of error here?
Yes true, we thought it is more important to bring the main site up. Give us a few hours for the stats server. |
<- My trust rating is a joke, due to the poor and worthless implementation of trust ratings at bitcointalk.org
|
|
|
|
ashfaq
|
|
August 24, 2015, 04:34:36 PM |
|
We are glad to announce that dadice is finally online again.
Once again our apologies for the downtime!
You are running a dice website and your account has a extremely high negative trust ,dont you think your trust can effect your business Let me quote his sig for you <- My trust rating is a joke, due to the poor and worthless implementation of trust ratings at bitcointalk.org Do you know the story behind that rating? Before you juge based on a number, maybe you should get to know how it got there. I am sorry i didnt judged anyone ... if i am right i just explained what people are seeing and what its effect can be .. |
|
|
|
amiryaqot
Legendary
Offline
Activity: 1050
Merit: 1000
|
|
August 24, 2015, 04:47:29 PM |
|
That is great news to see dadice is back up now after suffering from some serious issue, dadice team handled it with care and make it back to online i hope will get luck to hit the 750 millionth bounty.
|
|
|
|
|
Lutpin
Copper Member
Legendary
Offline
Activity: 1904
Merit: 1874
Goodbye, Z.
|
|
August 24, 2015, 04:52:14 PM |
|
I am sorry i didnt judged anyone ... if i am right i just explained what people are seeing and what its effect can be ..
that might have been a bit more direct than intended. I wasn't addressing you direct, I just think people should read about how trust came together before judging based on a number, no matter if its positive or negative. |
| | | | ███████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
██████████
███████ | | | |
▄████████████████████████████████████████████████████████████▄
██ ▄▄▄▄▄▄ ██
██ ██████ ▄██████████▄ ████████████████████▀
██ ████████ ▄████▀ ▀████▄ ████▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
██ ████ ████ ████▀ ▀██▀ ████
██ ████ ████ ▄███▀ ████
██ ████ ████ ███▀ ████▄▄▄▄▄▄▄▄▄▄
██ ████ ████ ███ ██████████████
██ ████ ████ ███▄ ████▀▀▀▀▀▀▀▀▀▀
██ ████████████████████ ▀████ ████
██ ██████████████████████ ▀████▄ ▄██▄ ████
██ ████ ████ ▀████▄ ▄████▀ ████▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
██ ████ ████ ▀██████████▀ ████████████████████▄
██ ▀▀▀▀▀▀ ██
▀█████████████████████████████████████████████████████████████████████▀ | | |
|
|
|
|
