Sumpage is back!

[Lordwafik]

http://ffxi.somepage.com/

And it's safe, I think you can take it off word filter now, the front page got updated and it looks like they're adding the new items and searches etc.

3 cheers for one of the best pages for FFXI undying.

[Sonomaa]

done

[Lordwafik]

hooray :D

[Suiram]

As someone who doesn't really understand what happened beyond basic stuff like trojans and account theft, can anyone explain what exactly is different now with somepage that makes it safe? I don't mean "it doesn't try to install a keylogger on your PC, duh", but more like if I start using it today, what assurances do I have that the same thing won't happen tomorrow? For instance, did the owner of the site add extra security to prevent this sort of thing from occurring, and why did it even occur in the first place?

I'm not asking this to be contrary btw, I'm asking as someone who grew to rely on somepage quite a bit, especially after it became unconscionable to use the other wiki, and would really like to feel comfortable using it again, but I don't want to be a schmuck to whom several months down the road people say "it's your own fault for having gone back there" if something like this happens again.

[Delekii]

As someone who doesn't really understand what happened beyond basic stuff like trojans and account theft, can anyone explain what exactly is different now with somepage that makes it safe? I don't mean "it doesn't try to install a keylogger on your PC, duh", but more like if I start using it today, what assurances do I have that the same thing won't happen tomorrow? For instance, did the owner of the site add extra security to prevent this sort of thing from occurring, and why did it even occur in the first place?

I'm not asking this to be contrary btw, I'm asking as someone who grew to rely on somepage quite a bit, especially after it became unconscionable to use the other wiki, and would really like to feel comfortable using it again, but I don't want to be a schmuck to whom several months down the road people say "it's your own fault for having gone back there" if something like this happens again.

Nothing will ever guarantee you are safe forever more, short of never browsing the internet. That said, you were totally safe from the last one if you didn't use internet explorer, so switching to another browser is a start.

[Yuri-G]

Their search systems for both mobs and equipment are invaluable, I'm glad to hear it.

[ringthree]

Why should we believe that Somepage couldn't just do it again? It appeared that the trojan was placed within the content on that page, so at some point, there is a risk that it was placed there by the owner of the page. And what of the reports that the domain was suspiciously owned by people located in China?

I loved using it, but I will never use it again.

[Ferien]

Why should we believe that Somepage couldn't just do it again? It appeared that the trojan was placed within the content on that page, so at some point, there is a risk that it was placed there by the owner of the page. And what of the reports that the domain was suspiciously owned by people located in China?

I loved using it, but I will never use it again.

I think the fact that the same trojan was popping up on other sites is a fairly good indication that it wasn't the owners' doing. Likely, the hacker found a vulnerability in somepage's code and used it to insert the iframe into the page's content. The site that was registered to people in China wasn't somepage.com (~), it was the phony site referenced within the iframe (~). It can happen to any system under the right circumstances. Hell, even BG isn't perfectly safe (though it is made safer by the fact that the admins are on top of their phpBB updates and are active in the maintenance of the site).

The only real fault of the somepage admins in this situation was their absence. A poorly maintained site, or even simply one with an outdated back end, is one of the easiest things for a malicious hacker to take advantage of.

[Krenna]

/nod it could of been placed by someone who found the weak spot in that website. Like my LS forum > http://www.vitalstatistics-ffxi.com This dude randomly looked through google for PHPnuke websites and nailed us. :/

[Bakthi]

Why should we believe that Somepage couldn't just do it again? It appeared that the trojan was placed within the content on that page, so at some point, there is a risk that it was placed there by the owner of the page. And what of the reports that the domain was suspiciously owned by people located in China?

I loved using it, but I will never use it again.

Well, why should you believe any site on the Internet might not have this happen? The answer is that you shouldn't. Sometimes bad things happen, to good people/sites and otherwise. I don't trust anyone else's security to be perfect (nor mine). If you don't protect yourself by updating your software and learning at least a bit about how to not leave your system wide open (by running certain software, not running certain other software, and configuring some things in certain ways), something like this will hit you from somewhere eventually. Too many people want your computer to leave this to chance.

The annoying thing is that Windows, the system that needs it most, doesn't seem to have any sort of unified interface for updating 3rd party applications*. So yes, unfortunately, if that is your platform of choice (which is likely), staying protected takes some effort.

You can limit yourself by never using Somepage again if you wish, but that doesn't make you significantly less likely to get owned in the future.

* I could be wrong, and there is such an interface, but either little to no software made use of it before, or it was added with Vista (and if that's the case, does anything use it now?)

[Obilisk]

/nod it could of been placed by someone who found the weak spot in that website. Like my LS forum > http://www.vitalstatistics-ffxi.com This dude randomly looked through google for PHPnuke websites and nailed us. :/

dude WTF i went to that !!!!! he doesnt really hack you does he.....!?

[BRP]

/nod it could of been placed by someone who found the weak spot in that website. Like my LS forum > http://www.vitalstatistics-ffxi.com This dude randomly looked through google for PHPnuke websites and nailed us. :/

dude WTF i went to that !!!!! he doesnt really hack you does he.....!?

I'm sorry to say this, but you are going to die .

[Fiofio]

That said, you were totally safe from the last one if you didn't use internet explorer, so switching to another browser is a start.

If I understand it correctly... Internet Explorer uses something called ActiveX, which gives it greater control over your computer, right? So... all one had to do was visit somepage and it would install the keylogger or whatever on your computer without your knowledge?

[Frenzy]

That said, you were totally safe from the last one if you didn't use internet explorer, so switching to another browser is a start.

If I understand it correctly... Internet Explorer uses something called ActiveX, which gives it greater control over your computer, right? So... all one had to do was visit somepage and it would install the keylogger or whatever on your computer without your knowledge?

Ony if you don't know your browser. IE gives you several options on how and which ActiveX elements are excuted. Same goes for JavaScript (among other things responsible for pop-ups). Unfortunately too few people ever nose around in the options and security settings.

[Tsuji]

didn't use it then... won't use it now... somepage... meh... bleh.... :3

~tsuji

[Arkanna]

Has there been any explanation for Somepage's decay over the last several months, from the admins there? I'm personally still waiting to hear how this happened, why it happened, and why we should feel safe that it won't happen again. Do tell, Somepage...

[Howard Roark]

As someone who doesn't really understand what happened beyond basic stuff like trojans and account theft, can anyone explain what exactly is different now with somepage that makes it safe? I don't mean "it doesn't try to install a keylogger on your PC, duh", but more like if I start using it today, what assurances do I have that the same thing won't happen tomorrow? For instance, did the owner of the site add extra security to prevent this sort of thing from occurring, and why did it even occur in the first place?

I'm not asking this to be contrary btw, I'm asking as someone who grew to rely on somepage quite a bit, especially after it became unconscionable to use the other wiki, and would really like to feel comfortable using it again, but I don't want to be a schmuck to whom several months down the road people say "it's your own fault for having gone back there" if something like this happens again.

20% less interweb AIDS

[Charla]

Easy solution: use Firefox.
Less easy solution: use Opera.