Susmit said: I am beginning to doubt MAl security. The ban really freaked me out. It's MAL security.... what do you expect lol. |
 |
| We will persevere!! |
Crips said: It's not like the guy's doing much though, normally he just baits and spams shit only when he's lucky enough to get his hands on a mod account, then he gets to have fun.Susmit said: I am beginning to doubt MAl security. The ban really freaked me out. It's MAL security.... what do you expect lol. |
 |
| I just recently got banned for real while this happens lol ??? banned by mal and the hacker I think im the chosen one |
 Hi |
| I almost had a mini heart attack. :(( |
 |
GosuGian said: I almost had a mini heart attack. :(( |
| I'm safe. :v |
 To-Do List:
|
| Everytime I'm on an anime MAL page it won't let me scroll down and it keeps centering the screen on the ad :/ Profile, Panel, & List don't have this problem. |
 |
 |
| Xinil or the new devs stop fucking around and fix the site security already |
 |
| It's happening! |
| My my I hope at the very least one of the moderators wasn't hacked to make this occur. Because if that's the cause, hot damn yall need to pick personnel wisely... happens every 6 months. Anywho, GL and GJ so far. |
 |
| Welp, good thing I have Adblock. Good luck MAL staff, I hope you follow everyone's advice and do what is necessary to stop this. |
 |
| The Producers info is compromised now, what's going on lol. From what i read this is some kind of hacker trying to mess with Xinil and MAL. Anyways, i hope they fix this, right now it's an annoyance to filter Animes by studios/Producers. xD |
| A true man never dies. |
femto999 said: Happened to me! So should I change password? Probably. You should also be using noscript and adblock if you use firefox (or their equivalent addons if you are on a different browser), otherwise browsing the internet may cause irritable bowel syndrome, ulcers, high blood pressure, anxiety, insomnia, restless leg syndrome, weight loss, weight gain, nausea, incontinence, constipation, dizziness, shortness of breath, skin rash, hives, or seizures. Stop browsing and see your doctor immediately if you experience any of these symptoms. |
| SSJMaster vs. Xinil - A story of epic battles! |
 |
| one day MAL will switch to SSL. i just hope it is before an epic collapse of the site. 4 people hold the power to this site and if one of their accounts gets hacked because the login server isn't on a secure server then it is the end of MAL as we know it. |
 |
Kuma-Kuma said: SSL is already outdated, in Case you've never heard of POODLE: http://arstechnica.com/security/2014/10/ssl-broken-again-in-poodle-attack/one day MAL will switch to SSLTLS. i just hope it is before an epic collapse of the site. 4 people hold the power to this site and if one of their accounts gets hacked because the login server isn't on a secure server then it is the end of MAL as we know it. As for the Scenario with the Accounts of those 4 Persons being hacked, I personally hope that there is at least some Safeguard Measurement like confirming critical Actions with a secondary Password and/or with the Approval of another (DB) Administrator. |
NoboruMay 24, 2015 5:51 AM
MisakaTheRailgun said: SSJMaster vs. Xinil - A story of epic battles! It never gets old! |
| I'm learning English so maybe I make mistakes :) |
Jeanathan said: adblock doesn't stop the popups or gore, u 0 ssjmaster 1Welp, good thing I have Adblock. Good luck MAL staff, I hope you follow everyone's advice and do what is necessary to stop this. |
Noboru said: i only mentioned SSL because MAL seems too cheap to pay for TLS or whatever the most secure server is nowadays but it would be great if they used one for the login page or do like some websites and have separate pages for your login name and password. but at the end of the day if someone wants to hack MAL i guess they will find a way to do so.Kuma-Kuma said: SSL is already outdated, in Case you've never heard of POODLE: http://arstechnica.com/security/2014/10/ssl-broken-again-in-poodle-attack/one day MAL will switch to SSLTLS. i just hope it is before an epic collapse of the site. 4 people hold the power to this site and if one of their accounts gets hacked because the login server isn't on a secure server then it is the end of MAL as we know it. As for the Scenario with the Accounts of those 4 Persons being hacked, I personally hope that there is at least some Safeguard Measurement like confirming critical Actions with a secondary Password and/or with the Approval of another (DB) Administrator. |
|
| SSL would be useless to implement, as the three big Browsers (Internet Explorer, Firefox and Chrome) already disabled Support for SSL (3.0) after a respective Update. So if Users had to change their Settings to allow SSL 3.0 just for MAL, it would be counter-productive. What do you mean with "separate page"? There is already one if you click on login (http://myanimelist.net/login.php?from=%2F). |
Noboru said: one page for your login name and a separate page for your password.SSL would be useless to implement, as the three big Browsers (Internet Explorer, Firefox and Chrome) already disabled Support for SSL (3.0) after a respective Update. So if Users had to change their Settings to allow SSL 3.0 just for MAL, it would be counter-productive. What do you mean with "separate page"? There is already one if you click on login (http://myanimelist.net/login.php?from=%2F). a lot of sites that hold personal info have that kind of set up for logging in. i know MAL doesn't have hold any personal info but having a 2 page log in system on a secure server wouldn't hurt |
|
| I have never seen the Login Name and Password being on two separate Pages, in which you enter your ID/Account Name on the one and the Password on the other. Or did you mean they should be stored on two different Locations on the Database Servers? That Passwords (if possible: at least salted/hashed and not in plain Text) shouldn't be saved in the same File in which the respective Username/ID is stored as well? If it's the former, I'd like to see an Example. If it's the latter, I'm all for it (if it isn't already done like that). |
Noboru said: that's because right now on the login page you enter both your login ID & password on the same page.I have never seen the Login Name and Password being on two separate Pages, in which you enter your ID/Account Name on the one and the Password on the other. Or did you mean they should be stored on two different Locations on the Database Servers? That Passwords (if possible: at least salted/hashed and not in plain Text) shouldn't be saved in the same File in which the respective Username/ID is stored as well? If it's the former, I'd like to see an Example. If it's the latter, I'm all for it (if it isn't already done like that). Passwords should be on a different server at least for Forum Mods & DB admins & DB mods. so far, only an Anime DB Mod's account has been compromised and we all saw what chaos that wreaked but image if Kineta's or Xinil's account got compromised. it would be the end of MAL as we know it |
|
| I want my money back. |
 |
Roth said: Awe man! (fixed the tags on my list)Getting access to an admin's MAL account isn't very useful. About all they can do is ban everyone and mess up the anime DB. The real concern is if someone figures out the FTP account to the webserver... security measures don't matter if that happens. (I'm not downplaying the need for SSL) |
  |
BurntJelly said: ftp account? Don't you mean the database, I'd be really concerned if they were storing everything in ftp folders.Roth said: Awe man! (fixed the tags on my list)Getting access to an admin's MAL account isn't very useful. About all they can do is ban everyone and mess up the anime DB. The real concern is if someone figures out the FTP account to the webserver... security measures don't matter if that happens. (I'm not downplaying the need for SSL) Besides, you'd have to find the ftp port and well firstly hope it's not disabled. |
|
BurntJelly said: you must not realize how much power Xinil's or Kineta's account has on MAL. they can delete your account if they want to. if a hacker gets control of one of their accounts then they can start deleting active users' accounts.Roth said: Awe man! (fixed the tags on my list)Getting access to an admin's MAL account isn't very useful. About all they can do is ban everyone and mess up the anime DB. The real concern is if someone figures out the FTP account to the webserver... security measures don't matter if that happens. (I'm not downplaying the need for SSL) |
|
Kuma-Kuma said: They can and has happened before, but there is worse.BurntJelly said: you must not realize how much power Xinil's or Kineta's account has on MAL. they can delete your account if they want to. if a hacker gets control of one of their accounts then they can start deleting active users' accounts.Awe man! (fixed the tags on my list) Getting access to an admin's MAL account isn't very useful. About all they can do is ban everyone and mess up the anime DB. The real concern is if someone figures out the FTP account to the webserver... security measures don't matter if that happens. (I'm not downplaying the need for SSL) |
|
| I didn't read it completely but I don't understand why anyone would do this ... But thanks for the heads up ;)  |
 |
Kazilik said: AnimeHonor said: adblock doesn't stop the popups or gore, u 0 ssjmaster 1 I never heard about these pop-ups until now or even seen them. And I use AdBlock, if it is not that, then my computer has some special power or something. I did a test myself about this what you call a "theory". During the winter holiday SSJMaster escapades, I was moderating a club and out of no where some freak posts a giant anime girl w/ some ugly pantsu. I'm like "Too large a pic, please dont post." Like 30 min later back again and does it. I'm told people are getting some sort of pop-up, and others then linked it to this picture that is being posted. I never had a pop-up, why didn't I get it? I was told that Adblocker could be preventing these pop-ups and that's why I wasn't getting it. I mean, makes sense right? Adblocker preventing Ads and what's a pop-up, but another Ad? Anyways, I disabled the adblocker and discovered I was getting these pop-ups. Enabled it, and they stopped. Did the cycle once more to be sure. Anywho, tl;dr It's a fact that adblocker will block these pop-ups. |
|
| This is retarded. What is it about hackers and this site. Oh my god, you have access to my anime account, I'm scared? If you want control of MAL, try to take the Admins account and be done with it. Trying to ruin an anime website is already lame enough. |
 |
| It often happens lately on my mobile. Sometimes, it says I was banned or access denied. I reloaded it, then I should type verification numbers and not rarely I was directed to appstore. The struggle is real. What's wrong? |
ImpalaJul 26, 2015 7:10 PM
Impala said: It often happens lately on my mobile. Sometimes, it says I was banned or access denied. I reloaded it, then I should type verification numbers and not rarely I was directed to appstore. The struggle is real. What's wrong? Different case from him. I never had to type any verification number. Sometimes reloading few times helps, sometimes I reloaded so many times I gave up and tried later after few hours and it finally worked. Happened few times to me already.  |
| ok so off we go |
 |
| Does this still happen (ban messages)? I got one and I didn't change my IP. Removed my cookies twice then I was able to see the site. |
 |
More topics from this board
» Try MAL's New Mobile Site! ( 1 2 3 4 5 ... Last Page )Xinil - Feb 15, 2015 |
421 |
by Seiidou
»»
2 hours ago |
|
» Planned 5hr Maintenance, Thursday April 25 @ 1am-6am PTKineta - 4 hours ago |
0 |
by Kineta
»»
4 hours ago |
|
» [Challenge] You Should Read This Manga 2024 ( 1 2 3 4 5 )Kineta - Feb 23 |
204 |
by Dekom
»»
Yesterday, 10:52 AM |
|
» New Site Update: Peak Anime 🗻 ( 1 2 3 4 5 )Kineta - Mar 31 |
213 |
by Lancelot73
»»
Apr 21, 4:28 AM |
|
» Heavenly Easter Delusion: Devil and Dolce ( 1 2 3 4 5 ... Last Page )Kineta - Mar 27 |
3332 |
by Terra_strong
»»
Apr 17, 8:26 PM |