Odex website hacked
-
Any news of the bugger that hacked Odex? Not caught yet rite?
I suspected the hacker was more complex than he was trying to show on the "webpage." Intentionally done to mislead police. -
If he/she is caught, either ODEX is not saying or the media didn't report. Why it's not reported... god knows. But I'm betting there's some sensitive info on the hacked server, which was why there's no news of anybody being caught yet.
Usually if there's sensitive info around and this happens... the most logical thing is to shut up. You notice that ST reported the hack... it's not because ODEX called up ST and said they were hacked...
If they have no sensitive info on the server... they wouldn't be quiet. Their website should have been up by now.
Unless their server was rooted. If that is so... they probably have to wipe everything...
If he/she is not caught... it's probably more than a kiddie that did that. -
Heard from some blogs, rumours have it that at least three servers' worth of data have been wiped out.
And that while the hacker may speak like a Singaporean, chances are that he's not based here. -
LOL, wipe 3 servers. Either it's rooted or it's really bad.
The attacker failed to imitate Singaporeans... high chances that he/she is not a local. Could have been triggered when ODEX sends out those letters overseas.
I simply don't agree with the timing when the hack occurred. If ODEX was to be hacked, it has to be months ago. Not few weeks ago. Coincidentally, ODEX sent out the wrong letters to the wrong people before the hack occurs... all these simply points that the attacker isn't a local.
Given that there's no news... it probably crossed international borders... requiring help from the different countries for investigation... whether granted is unknown to me. -
So you're suggesting that the hacker not only hacked the web server but somehow attacked their internal network as well?
Thats pretty deep... I'd imagine they'd put a firewall between their web server and internal network. -
I think you would agree that there could be very little trace of him/her. There are some very powerful crackers around ya..Originally posted by ndmmxiaomayi:LOL, wipe 3 servers. Either it's rooted or it's really bad.
The attacker failed to imitate Singaporeans... high chances that he/she is not a local. Could have been triggered when ODEX sends out those letters overseas.
I simply don't agree with the timing when the hack occurred. If ODEX was to be hacked, it has to be months ago. Not few weeks ago. Coincidentally, ODEX sent out the wrong letters to the wrong people before the hack occurs... all these simply points that the attacker isn't a local.
Given that there's no news... it probably crossed international borders... requiring help from the different countries for investigation... whether granted is unknown to me. -
Not suggesting that their internal network was cracked (but I wouldn't rule out that).
I'm only thinking if the dumb ODEX has put the sensitive info on a public server... but protected it (probably using Chmod and other protection).
If that was the case... then I say they are owned big time. Because once a server is rooted... chmod will not protect the documents. The whole group of Singaporeans can gang up and sue ODEX for not protecting documents...
If it's on the internal network... then all I have to say is... don't use open-source products if you don't have the know-how. Obviously, the protection is bad enough and they hire a half-pail admin. Use MS servers... at least most of the admins out there are trained in it... -
Yeah...Originally posted by LazerLordz:I think you would agree that there could be very little trace of him/her. There are some very powerful crackers around ya..
On another note... if ODEX wipes the servers before police can gather evidence... then all I can say is drop the case and come out clean. While it's possible to recover some data... modified data is not really sustainable in courts.
Good luck to ODEX then... -
i wonder if a website is hosted by a better company, will it get hacked easily?
like if i host it on yahoo web hosting, means to hack the website, the hacker must get through yahoo first? -
One thing to note - ODEX has their own servers.
Why?
Pacnet, their web hoster, uses IIS servers (aka Microsoft products)
ODEX - Apache server on a Unix OS
So obviously the attacker was gunning directly for ODEX server, not Pacnet, so he/she doesn't have to go through Pacnet at all. If he/she has done so... Pacnet would know, would have records and I tell you, ODEX would be making a lot of noise, to tell Pacnet to hurry up and release the details or they will threaten legal action. Double blow to Pacnet.
Obviously someone who likes Unix, otherwise the box wouldn't have been cracked so easily. And given that he/she promotes open-sourced products, it shows something. -
yea man. screw odex. i hope they die 100 times over.
-
Isn't it ironic that Odex is suing their own web host for the list of IP addresses? Maybe the defacement of their site was an insider job after all.Originally posted by ndmmxiaomayi:One thing to note - ODEX has their own servers.
Why?
Pacnet, their web hoster, uses IIS servers (aka Microsoft products)
ODEX - Apache server on a Unix OS
So obviously the attacker was gunning directly for ODEX server, not Pacnet, so he/she doesn't have to go through Pacnet at all. If he/she has done so... Pacnet would know, would have records and I tell you, ODEX would be making a lot of noise, to tell Pacnet to hurry up and release the details or they will threaten legal action. Double blow to Pacnet.
Obviously someone who likes Unix, otherwise the box wouldn't have been cracked so easily. And given that he/she promotes open-sourced products, it shows something.
-
Yes, it's ironic.Originally posted by LatecomerX:Isn't it ironic that Odex is suing their own web host for the list of IP addresses? Maybe the defacement of their site was an insider job after all.
But I figure it's probably two separate issues even though it's just one company.
Pacnet Business - for businesses like ODEX
Normal Pacnet - for home users
Inside job - maybe. The date is the biggest bugbear, and one could also say it's done purposely on that date to throw off investigators' logic. I side with the former though... -
Just for some ridiculous reason, would Odex hire someone to hack their own servers?
Deface their website in and "unbelievable" way, wipe "information" that might not have been there in the first place?
Their case to get the courts to release subscriber details doesn't seem to go well. For all we know, a fake intrusion to delete "incriminating" evidence they somehow had, so they can back off the case and look victimized by the Anime loving community!
MAN! I should be a author for popular fiction books! -
If that was their purpose, imo they have failed miserably. I mean, everyone is pointing fingers and laughing at them. Bad PR, as usual.Originally posted by Shotgun:Just for some ridiculous reason, would Odex hire someone to hack their own servers?
Deface their website in and "unbelievable" way, wipe "information" that might not have been there in the first place?
Their case to get the courts to release subscriber details doesn't seem to go well. For all we know, a fake intrusion to delete "incriminating" evidence they somehow had, so they can back off the case and look victimized by the Anime loving community!
MAN! I should be a author for popular fiction books! -
Detestable I say.Originally posted by Shotgun:Just for some ridiculous reason, would Odex hire someone to hack their own servers?
Deface their website in and "unbelievable" way, wipe "information" that might not have been there in the first place?
Their case to get the courts to release subscriber details doesn't seem to go well. For all we know, a fake intrusion to delete "incriminating" evidence they somehow had, so they can back off the case and look victimized by the Anime loving community!
MAN! I should be a author for popular fiction books!
Waste money and resources investigating, collecting evidence. I will take one big hammer and smash their servers. -
Well if the rumors are true, then there is really a cause for doubt.
You don't just gain access to internal network servers just like that. And they oughta be shot if they placed confidential, and critical "evidence" on their WEB server. -
If rumours are true, I hope some government officials and their kids names are in the list. ODEX will see no tomorrow from the government.
The government will be better at that than us citizens.
But if no big shots names are there... then... well... good luck to all Singaporeans. I don't know if our apathy helps. -
obi arh tio hack!