*

Offline xasop

  • Administrator
  • *****
  • Posts: 9859
  • Professional computer somebody
    • View Profile
Re: Wiki Spam
« Reply #2 on: March 20, 2024, 03:12:07 PM »
Thanks, I've restored a database backup from before these pages were created and deleted the user account that created them. Other recent changes since 3 March will also be gone, if there are any, but we can restore those as needed.
when you try to mock anyone while also running the flat earth society. Lol

*

Offline Tom Bishop

  • Zetetic Council Member
  • **
  • Posts: 10842
  • Flat Earth Believer
    • View Profile
Re: Wiki Spam
« Reply #3 on: March 23, 2024, 06:17:09 PM »
Thank you.

Something funny seems to still be going on.

The Southern Hemisphere page from the outside looks fine: https://wiki.tfes.org/index.php?title=Southern_Hemisphere

But when I go to edit the Southern Hemisphere page I see this.

https://wiki.tfes.org/index.php?title=Southern_Hemisphere&action=edit



Cleared cache and tried it in a different browser with same result.
« Last Edit: March 23, 2024, 06:19:04 PM by Tom Bishop »

Re: Wiki Spam
« Reply #4 on: March 23, 2024, 11:41:15 PM »
Many correspondents on these pages would contend that most of the Wiki's content is a load of old nonsense, but the fact is that FEers have devoted considerable time and effort to construct, amend and develop the information therein, and that it forms the public crystalisation of your credo. 

That some faceless, mindless morons can feck-around with it to this extent is, sadly, a typical electronic example of the modern vandalism that sees Banksies defaced, objects dropped from highway bridges, and so on. 

Sincerely hope that you can sort it out. 

*

Offline xasop

  • Administrator
  • *****
  • Posts: 9859
  • Professional computer somebody
    • View Profile
Re: Wiki Spam
« Reply #5 on: March 24, 2024, 01:13:33 AM »
Something funny seems to still be going on.
Agreed. I suspect a vulnerability in MediaWiki allowing someone to impersonate users, since the page you linked was defiled by your and Pete's accounts. I don't have time to investigate properly right now, so I've disabled POST requests in the web server configuration and restored the same backup again. This means that nobody will be able to log in or edit pages until this is properly dealt with, which will probably involve upgrading to the latest version of MediaWiki.
when you try to mock anyone while also running the flat earth society. Lol

*

Offline Pete Svarrior

  • e
  • Planar Moderator
  • *****
  • Posts: 16321
  • (◕˽ ◕ ✿)
    • View Profile
Re: Wiki Spam
« Reply #6 on: March 24, 2024, 11:19:32 AM »
your and Pete's accounts
Are you certain about that? I manually reverted the vandalism, but I saw no evidence of my account making any malicious edits.

Also, it's worth keeping in mind that just reverting the database is likely not to be very effective on MediaWiki. It's at least plausible that some of the vandalism persisted in its cache, and that making an edit restored it.
« Last Edit: March 24, 2024, 01:22:42 PM by Pete Svarrior »
Read the FAQ before asking your question - chances are we already addressed it.
Follow the Flat Earth Society on Twitter and Facebook!

If we are not speculating then we must assume

*

Offline xasop

  • Administrator
  • *****
  • Posts: 9859
  • Professional computer somebody
    • View Profile
Re: Wiki Spam
« Reply #7 on: March 24, 2024, 01:24:05 PM »
Are you certain about that? I manually reverted the vandalism, but I saw no evidence of my account making any malicious edits.
When I looked at the change your account made, the diff just changed the vandalism to different vandalism. It's now gone, of course, since I restored an old backup.

Also, it's worth keeping in mind that just reverting the database is likely not to be very effective on MediaWiki. It seems more likely to me that some of the vandalism persisted in its cache, and that making an edit restored it.
The Southern Hemisphere page wasn't listed in Tom's original list of vandalised pages, so it's not at all clear whether there was any original vandalism to persist in the cache. To be on the safe side, I've restarted memcached (I already restarted php when I restored the database before), so now there is no cache from before the database restore.
when you try to mock anyone while also running the flat earth society. Lol

*

Offline xasop

  • Administrator
  • *****
  • Posts: 9859
  • Professional computer somebody
    • View Profile
Re: Wiki Spam
« Reply #8 on: March 24, 2024, 02:20:15 PM »
I tried upgrading MediaWiki to 1.41.0, and after manually cleaning up a bunch of duplicate database records and upgrading some extensions, I found our theme calls deprecated functions and I don't know to what extent it's been customised. I've already given up half my afternoon that I was supposed to spend studying and I'm unlikely to have any more time to waste on this until sometime in mid-April. For now it's back on the old version with edits still disabled.
when you try to mock anyone while also running the flat earth society. Lol

*

Offline Pete Svarrior

  • e
  • Planar Moderator
  • *****
  • Posts: 16321
  • (◕˽ ◕ ✿)
    • View Profile
Re: Wiki Spam
« Reply #9 on: March 24, 2024, 03:12:23 PM »
When I looked at the change your account made, the diff just changed the vandalism to different vandalism.
Ooh, that is very interesting. It definitely didn't look that way when I made the edit, but I only checked it once while still logged in.

The Southern Hemisphere page wasn't listed in Tom's original list of vandalised pages, so it's not at all clear whether there was any original vandalism to persist in the cache.
Makes sense. If both Tom and I ended up in a similar scenario (noticed vandalism, made edits, and those edits turned into more vandalism), it almost makes me wonder if someone made changes to our MediaWiki code. I'll poke around a little this evening.

I found our theme calls deprecated functions and I don't know to what extent it's been customised.
Last time the theme broke, we "temporarily" grabbed another one from the shelf and made a few changes to the CSS to tweak it to our brand; and then it stayed like that for years. I suspect we'll want to do that again, rather than try and fix the current ancient hodgepodge.
« Last Edit: March 24, 2024, 03:15:11 PM by Pete Svarrior »
Read the FAQ before asking your question - chances are we already addressed it.
Follow the Flat Earth Society on Twitter and Facebook!

If we are not speculating then we must assume

*

Offline xasop

  • Administrator
  • *****
  • Posts: 9859
  • Professional computer somebody
    • View Profile
Re: Wiki Spam
« Reply #10 on: March 24, 2024, 03:16:00 PM »
Makes sense. If both Tom and I ended up in a similar scenario (noticed vandalism, made edits, and those edits turned into more vandalism), it almost makes me wonder if someone made changes to our MediaWiki code. I'll poke around a little this evening.
I didn't see any obviously suspicious changes when I diffed a vanilla MediaWiki with our current code, but that didn't cover all the extensions we've added, so there's a chance there's something somewhere in there.
when you try to mock anyone while also running the flat earth society. Lol

*

Offline Pete Svarrior

  • e
  • Planar Moderator
  • *****
  • Posts: 16321
  • (◕˽ ◕ ✿)
    • View Profile
Re: Wiki Spam
« Reply #11 on: March 24, 2024, 07:13:08 PM »
I didn't see any obviously suspicious changes when I diffed a vanilla MediaWiki with our current code, but that didn't cover all the extensions we've added, so there's a chance there's something somewhere in there.
Yeah, I'm not seeing anything obvious, either. I have no access to access logs for the wiki (or, well, any access logs really) - if you don't mind granting me those I'd be keen to snoop around.
Read the FAQ before asking your question - chances are we already addressed it.
Follow the Flat Earth Society on Twitter and Facebook!

If we are not speculating then we must assume

*

Offline Tom Bishop

  • Zetetic Council Member
  • **
  • Posts: 10842
  • Flat Earth Believer
    • View Profile
Re: Wiki Spam
« Reply #12 on: May 22, 2024, 11:38:50 PM »
Can we look at enabling the Wiki again for edits. I would suggest upgrading the software to the latest version and leaving it as a default theme and handing it over to Pete to fix the theme whenever he gets the time. No special coordination of work or time will be necessary.