**WARNING** Somepage.com compromised **UPDATED 5/27**

[Izzy]

when I go home i'll give you more info, like 1hour or so.

Thanks <3. After I added BG to my Whitelist, the <SCRIPT>: 3 changed to <SCRIPT>: 4 lol.

Here you go

Yea, I see that. But, like right now I see 9 scripts are being blocked. How do I know what exactly it's blocking, or is there no way to know?

Huge image for Wafik in spoiler below.
[spoiler:1yr8zkru]http://img144.imageshack.us/img144/9248/wafik1ph1.jpg[/spoiler:1yr8zkru]

[aurik]

Click on it. It should show you.
Might be right-click.

[Lordwafik]

Pressing the options button shows me what's blocked / blocking :

[attachment=0:neoe19by]HUUUUUUUUUURL.jpg[/attachment:neoe19by]

As you can see, it shows I've got 4 scripts allowed on this page.

1 of them is untrusted, I've blocked it already, so it has put it in an untrusted panel, the rest of them it has placed in there asking if I would like to allow the script to be in use. Once it is allowed by me permanently (bold) rather than temporarily, next time it will pop up like the google one with just the option to Forbid it.

[Izzy]

Got it!

Thanks Wafik <3

[litos]

Solution: http://store.apple.com/

[_chuchu]

Thanks for the info, I also recommend people link these topics, including this one, in their respective linkshell forums as global announcements and spread the word because some people still don't heed the warning or miss them completely:

http://bluegartr.com/forum/viewtopic. ... cbb5472508
http://forums.windower.net/index.php?showtopic=11323
viewtopic.php?f=2&t=34098
http://www.shadowserver.org/wiki/pmwiki ... r.20080313

[Enpsi]

Okay, I was spacing out, and wanted to check the skill chart, and I normally always have Script blocker on, and I went to Somepage, and a message popped up saying restart FireFox since the webpage was doing illegal stuff, and I was like "fuck" so, is it different than the other Iframe from somepage? / I mean, how can I tell if I let it in.

[Lordwafik]

Solution: http://store.apple.com/

Do they sell garbage cans for the overpriced garbage?

[Shuemue]

Edit: Also, since this playon1ine.com thing seems to be consistent, would it be safe to assume we could tweak our HOSTs file to redirect to a null address in the event of being compromised? Hell, I'd go as far as to create null strings for all possible obvious, but easily overlooked to the eye variations of playonline like pIayonline, p1ayonline, etc.

Yes, adding it to your host file will prevent any data being sent to it. Of course, that's not 100% secure, but it can't hurt.

[The Blackrose]

Solution: http://store.apple.com/

Counter-solution: GTFO

Security through obscurity is never a good practice.

[Ichthyos]

I got in touch with the somepage admins and the page has been cleaned. They fixed the SQL injection vulnerability that was used to exploit the site in Dec (or was it Jan?) after it happened, but apparently there is another hole somewhere.

[arus2001]

I got in touch with the somepage admins and the page has been cleaned. They fixed the SQL injection vulnerability that was used to exploit the site in Dec (or was it Jan?) after it happened, but apparently there is another hole somewhere.

It's not clean yet if you mean they did it like today. Either that, or whatever vulnerability that's been used is now persistently fixing wipe attempts.

[Not Kuno]

This sucks. :/ I like the mob level listing they have.

[ronin sparthos]

This sucks. :/ I like the mob level listing they have.

Ha, thats what screwed me out back in December.

Lesson: Dont look up level ranges for DNC solo.

Anyways, everyone should just avoid somepage and atlas indefinitely - both great sites but being attacked twice and SEs abysmal account recovery process is just not worth the trouble.

[Epical]

2005 called, they want their FFXI resource back.

There are way better sites to get your information from, so meh.

[Bitesized]

hmmm

[Kitsumi]

2005 called, they want their FFXI resource back.

There are way better sites to get your information from, so meh.

There might be, but some of us prefer the setup of searches in somepage over the other crap out there.

[ronin sparthos]

2005 called, they want their FFXI resource back.

There are way better sites to get your information from, so meh.

Since 2005 which sites have surpassed Somepages defining factors?

-The 'cursed' Wikia Wiki
-FFXIAH

Two sites, one of which was sneak attacked during the original hacking epidemic so i dont really see a point.

The only site thats head and shoulders above somepage atm is wikia, other sites have their niche uses but overall somepage was a major player in terms of getting data.

[Ichthyos]

hmmm

Oops. I only told them about the iframe that was on the Easter news item. I didn't notice there was a remote script being loaded from play0nline in the Greeting Card news item. I'll forward that info along now.

[Pikko]

The difference with us is that we have a team of devs that take customer compromise extremely seriously. Despite what people may think, we have never been hacked.