Develop Bugs

Did XDA get hacked?

Hello mods and admins,
I was wondering. Did XDA get hacked? Today I saw XDA was offline and there are things missing like private messages, friends. Even some posts. I've noticed the spammer yesterday was it just a spammer or one of the persons that are responsible for f*cking up XDA like this?

There were problems we're not sure this was a hack we're still investigating, we needed to restore a backup which has caused the loss in messages.
Please see my post in the news section.
Best regards,
Flar

Flar said:
There were problems we're not sure this was a hack we're still investigating, we needed to restore a backup which has caused the loss in messages.
Please see my post in the news section.
Best regards,
Flar
Click to expand...
Click to collapse
Thanks for the quick answer. Checked the post in the news section. While reading a lot of topics have moved suddenly and some deleted it quit easy to conclude that it has to be hacked. Can't imagine there would be a lame moderator doing something like this.

It may look that way, but there could have been other reasons as well, such as maybe an automated script that went haywire, a command issued incorrectly, M$, etc. Either way, I would suggest anyone with mod access change their passwords and check their systems.

The one(s) who did this should get a Hard reset

Unable to edit wiki?

Hi there,
I've just signed up so that I could reformat http://wiki.xda-developers.com/index.php?pagename=HTC_Dream_Boot_Image , but I can't seem to login to the wiki.
I've tried with Firefox 3.5 and Safari 4, both show the board software indicating a successful login, before redirecting back to the wiki where the login box is still present and "you need to login to edit.."
I tried clearing cookies for wiki.xda-developers.com, but it didn't help.

I am not sure, but probably you need to have a certain amount of Posts before you can update the wiki

Hmm, is there perhaps some way I can get around this? Really every question I have has probably been answered 100 times over, and asking them again just to generate credit seems a bit silly. The only thing I can help contribute to is organizing the existing information..

"To be able to create or edit pages, you need to be registered as a user at xda-developers.com. If you are not registered as a user then go to http://forum.xda-developers.com and click 'register' in the menu on the top of the page. Once you're logged in to the forum, you will automatically also be logged in here. If you have an xda-developers account but aren't logged in, simply click the 'sign in' link on the bottom of this page."
You should ask the admin in this concern.

Thanks corepda, Addicted2xda.
I'll see about finding an admin to ask. There is no 'sign in' link, only the standard phpWiki login box, which seems to be wired to the forum login script. However simply clicking the login button gives me a login failure (as per the paragraph you quoted), and entering my username+pw logs me in at the forum but not at the wiki..

Just to say same for me just get looped

stylez said:
Just to say same for me just get looped
Click to expand...
Click to collapse
Hmm, and you've been a member for over a year. Looks like something is broken. Anyone know who the admins are, or how to ask the forum software to message an admin?

Ok, I found the 'message admins' link and sent them a link to this thread. Yay!

Thread repoted to the staff, I am sure they will reply at the soonest to give you an appropriate reply. Good Luck.

IvanDobsky said:
Hmm, and you've been a member for over a year. Looks like something is broken. Anyone know who the admins are, or how to ask the forum software to message an admin?
Click to expand...
Click to collapse
Yeah i have had to get other users to edit the wiki when needed, but never thought to bring it up, so i'd guess it's accounts and not a xda wiki issue?

ok peeps,
http://wiki.xda-developers.com/index.php?pagename=HTC_Dream_Boot_Image
You can see that i have been able to edit the said wiki. Can you give it another go and reply back here. If there is still a problem i will notify admin.
Greetz.
TIm.

timmymarsh said:
ok peeps,
http://wiki.xda-developers.com/index.php?pagename=HTC_Dream_Boot_Image
You can see that i have been able to edit the said wiki. Can you give it another go and reply back here. If there is still a problem i will notify admin.
Greetz.
TIm.
Click to expand...
Click to collapse
Same here:
Exactly what happens:
I'm logged into XDA i go to WIKI and choose article, click edit and the log in field pops up i enter my XDA login and it goes to the signing in pop up and loops back to the login.

I think the admins need to look into this.
I've asked Flar to get someone to look at it.
Dave

Hey Luke you are not allowed to edit WIKI because you didn't send me birthday pics.
LOL
matter is getting really hot. But I am able to edit wiki, not that much qualified to put anything that deserve change though.

corepda said:
Hey Luke you are not allowed to edit WIKI because you didn't send me birthday pics.
LOL
matter is getting really hot. But I am able to edit wiki, not that much qualified to put anything that deserve change though.
Click to expand...
Click to collapse
Pic in your PM bruv, been so buzy in the kitchen that i forgot Yep it's always my fault things don't work
Dave:
Thanks hope this get sorted as muchos to add to Dash Wiki

Hi all,
Sorry for my late reply the issue escaped my attention.
I've been able to reproduce the issue with a test account, but am unable to fix it myself. I have notified our sysadmin and wiki admins and they will take a look at the issue as soon as possible.
Best regards,
Flar

i think it is ok that new members can't edit the wiki...i am able to do it and i posted a page few days ago so everything is ok from my point of view and the wiki is still editable
remember the wiki vandalism?
and when our ftp went down?
so don't rush to deal with it...it is just fine this way

farukb said:
i think it is ok that new members can't edit the wiki...i am able to do it and i posted a page few days ago so everything is ok from my point of view and the wiki is still editable
remember the wiki vandalism?
and when our ftp went down?
so don't rush to deal with it...it is just fine this way
Click to expand...
Click to collapse
1. This issue seems to have nothing to do with being a new member or not, my test account has the same issue and that's been here just as long as I have been.
2. Wiki vandalism has nothing to do with being a new member, a new member can just as well have useful info to share.
3. FTP downtime? what has that got to do with it? The last ftp downtime I could remember had nothing to do with new members but with us not scanning for viruses.
Best regards,
Flar

Flar said:
1. This issue seems to have nothing to do with being a new member or not, my test account has the same issue and that's been here just as long as I have been.
2. Wiki vandalism has nothing to do with being a new member, a new member can just as well have useful info to share.
3. FTP downtime? what has that got to do with it? The last ftp downtime I could remember had nothing to do with new members but with us not scanning for viruses.
Best regards,
Flar
Click to expand...
Click to collapse
i know that new member doesn't stay for those who do things to wiki...but they potentially are a bigger threat than people who are here for ages...not saying that ivan will do but...there are a lot of crazy people who will sign in just to do damage
not specifically the last one...but things like the one that happened in 2005..someone bashed it..there is a whole thread about it

farukb said:
i think it is ok that new members can't edit the wiki...i am able to do it and i posted a page few days ago so everything is ok from my point of view and the wiki is still editable
remember the wiki vandalism?
and when our ftp went down?
so don't rush to deal with it...it is just fine this way
Click to expand...
Click to collapse
Not forgetting i'm no noob & have additions for WIKI.
Flar:
Thankyou for looking into this and look forward to being able to edit the WIKI

Seeking admin or moderator for the forum

Hi my name is John.
If you are not a admin or moderator for the forum do not reply !
My request/question:
I have had a user account here before thou it seems it has been erased !
Now i wonder if some admin or moderator can see the ranks of users that has been erased.
If so, Can you give my previous rank back to this user ???
Keep in mind that i really don't know why my old user account was erased, but one thing for sure is that i know it was not banned.
If some Admin/moderator have time to do this, I would be very glad for your help !!!
Have a nice day.

LilleJohn said:
Hi my name is John.
If you are not a admin or moderator for the forum do not reply !
My request/question:
I have had a user account here before thou it seems it has been erased !
Now i wonder if some admin or moderator can see the ranks of users that has been erased.
If so, Can you give my previous rank back to this user ???
Keep in mind that i really don't know why my old user account was erased, but one thing for sure is that i know it was not banned.
If some Admin/moderator have time to do this, I would be very glad for your help !!!
Have a nice day.
Click to expand...
Click to collapse
I don't know if I understood you well, but you are saying that your account was deleted? We don't delete accounts just like that, you need to ask an admin to do so. Do you remember the name of your previous account?

how do i request a username change

i was wondering if i could request a name change and how to do that for my username. i found a thread back in 2012, but the links do not work anymore. thanks

Hi, send me a PM (conversation) with the new username you'd like, and I can do it for you

the_scotsman said:
Hi, send me a PM (conversation) with the new username you'd like, and I can do it for you
Click to expand...
Click to collapse
Sire i want to change my name too

Xbumble said:
Sire i want to change my name too
Click to expand...
Click to collapse
From the XDA Contacts & Help, please use the Webmaster Contact Form.
Alternatively, contact me by PM providing your new wanted user name (plus two alternatives in case the initially wanted one is not available).

I wanna change use name to Nasir Ali because everywhere it showing my gmail account {Mod edit: Mail account link removed}

I wanna change use name to Nasir Ali because everywhere it showing my gmail account {Mod edit: Mail account link removed}
Click to expand...
Click to collapse
I'm going to initiate the process. Please stand-by but please also be patient as it's Sunday.
Stay safe and stay healthy!
Regards
Oswald Boelcke

I wanna change use name to Nasir Ali because everywhere it showing my gmail account {Mod edit: Mail account link removed}
Click to expand...
Click to collapse
Hello, I've just checked, and the desired name seems to be already in use. Can you please provide me with three alternatives. You can also contact me via PM.
And this form brings you directly into contact with our admins for a change of user name if you prefer that way more:
Contact Us | XDA Developers
Founded in 2002, XDA is the world’s largest smartphone and electronics community. Looking for the latest tech news and reviews? Want to do more with your Android phone, Windows PC, iPhone, iPad, or MacBook? Look no further than XDA.
www.xda-developers.com

Oswald Boelcke said:
I'm going to initiate the process. Please stand-by but please also be patient as it's Sunday.
Stay safe and stay healthy!
Regards
Oswald Boelcke
Click to expand...
Click to collapse
Oswald Boelcke said:
Hello, I've just checked, and the desired name seems to be already in use. Can you please provide me with three alternatives. You can also contact me via PM.
And this form brings you directly into contact with our admins for a change of user name if you prefer that way more:
Contact Us | XDA Developers
Founded in 2002, XDA is the world’s largest smartphone and electronics community. Looking for the latest tech news and reviews? Want to do more with your Android phone, Windows PC, iPhone, iPad, or MacBook? Look no further than XDA.
www.xda-developers.com
Click to expand...
Click to collapse
The quote is still showing his email.

pl1992aw said:
The quote is still showing his email.
Click to expand...
Click to collapse
Fixed! Thank you.

pl1992aw said:
The quote is still showing his email.
Click to expand...
Click to collapse
That was on my 65th birthday. Shouldn't be an excuse but I'd probably other things in my mind. Great that you captured it; thanks very much.
@woodman Merci beaucoup for resolving the issue.

Oswald Boelcke said:
That was on my 65th birthday. Shouldn't be an excuse but I'd probably other things in my mind. Great that you captured it; thanks very much.
@woodman Merci beaucoup for resolving the issue.
Click to expand...
Click to collapse
Happy belated birthday!

I do wanna change my username from this ****ing long to just "Jatin" or "clownforlyf"

Jatin said:
I do wanna change my username from this ****ing long to just "Jatin" or "clownforlyf"
Click to expand...
Click to collapse
It is done.
Mike

MikeChannon said:
It is done.
Mike
Click to expand...
Click to collapse
Thanks a lot, I didn't saw this change coming too fast.

Hi, I want to change my username to "kleest" to streamline it with my usernames on other platforms. I tried to contact you via the form many days ago, so far no response.

Stevolk said:
Hi, I want to change my username to "kleest" to streamline it with my usernames on other platforms. I tried to contact you via the form many days ago, so far no response.
Click to expand...
Click to collapse
I have made your request known to the interested parties. Please be patient, and thank you.

I'd like to change my username from this to Hawk (account exists but guy hasn't logged in since 2005). If you don't want to remove that inactive account, then a change to Alexness.

Hadok3n said:
I'd like to change my username from this to Hawk (account exists but guy hasn't logged in since 2005). If you don't want to remove that inactive account, then a change to Alexness.
Click to expand...
Click to collapse
Please wait. You will be informed of the change.

Hawk said:
I'd like to change my username from this to Hawk (account exists but guy hasn't logged in since 2005). If you don't want to remove that inactive account, then a change to Alexness.
Click to expand...
Click to collapse
You should have received confirmation of the name change to Hawk. Congratulations!

Thanks a lot

Password Reset Spoofing

Hey,
Ive just used the pw reset feature today,
and heck,
I was shocked when I entered my email adress into the input form and it prompted a message that my password reset was send to my email.
A password reset request has been emailed to you. Please follow the instructions in that email.
Click to expand...
Click to collapse
The prompted message should NOT give any detail if the entered email is used in the db, or not!
That needs to be adressed imho asap!
Simply by:
If true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
If not true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
Ty

@MikeChannon @the_scotsman
Gentlemen, for your attention please.

GuestNoOne said:
Hey,
Ive just used the pw reset feature today,
and heck,
I was shocked when I entered my email adress into the input form and it prompted a message that my password reset was send to my email.
The prompted message should NOT give any detail if the entered email is used in the db, or not!
That needs to be adressed imho asap!
Simply by:
If true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
If not true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
Ty
Click to expand...
Click to collapse
Contact Us | XDA Developers
Founded in 2002, XDA is the world’s largest smartphone and electronics community. Looking for the latest tech news and reviews? Want to do more with your Android phone, Windows PC, iPhone, iPad, or MacBook? Look no further than XDA.
www.xda-developers.com
Requests to Moderators and Recommendations for XDA improvements
[All XDA Members] Requests to Moderators and Admins [All XDA Members] Feedback/Recommendations for XDA
forum.xda-developers.com

sd_shadow said:
Contact Us | XDA Developers
Founded in 2002, XDA is the world’s largest smartphone and electronics community. Looking for the latest tech news and reviews? Want to do more with your Android phone, Windows PC, iPhone, iPad, or MacBook? Look no further than XDA.
www.xda-developers.com
Requests to Moderators and Recommendations for XDA improvements
[All XDA Members] Requests to Moderators and Admins [All XDA Members] Feedback/Recommendations for XDA
forum.xda-developers.com
Click to expand...
Click to collapse
What a mess in here... Instead of deleting this thread the mod decided to delete the post I made, after checking your reply, in:
https://forum.xda-developers.com/t/...recommendations-for-xda-improvements.4300729/
... but hey, its actually not a recommendation, its a security flaw and therefor bug report. So maybe the mod was right to leave this thread. Still confused

GuestNoOne said:
Hey,
Ive just used the pw reset feature today,
and heck,
I was shocked when I entered my email adress into the input form and it prompted a message that my password reset was send to my email.
The prompted message should NOT give any detail if the entered email is used in the db, or not!
That needs to be adressed imho asap!
Simply by:
If true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
If not true:
If this email is associated with an account, the password reset request has been emailed to it. Please follow the instructions in that email.
Ty
Click to expand...
Click to collapse
This matter has been referred to those who can officially review and potentially change the way the process works.
Mike

I just fixed this by standardizing verbiage across both situations. Thank you for bringing it to our attention @GuestNoOne !

Lol. Mods thanking each other to gain more likes - while the one who brought it up doesnt get any.
That phenomen got a name and aint healthy...

GuestNoOne said:
Lol. Mods thanking each other to gain more likes - while the one who brought it up doesnt get any.
That phenomen got a name and aint healthy...
Click to expand...
Click to collapse
Do you really expect an answer? Certainly not from me.

GuestNoOne said:
Lol. Mods thanking each other to gain more likes
Click to expand...
Click to collapse
We don't care about likes anymore, this is no longer significant at this point, for moderators at least. We are not chasing them.
GuestNoOne said:
while the one who brought it up doesnt get any.
Click to expand...
Click to collapse
Fixed! You got likes now, thanks!
Yeah that happens, I've seen moderators (myself included) affected by this situation as well, don't worry, e.g. a moderator posts a smart question or an interesting issue and only the other mod who answered got likes! This is not specific to non-moderators, trust me.
GuestNoOne said:
That phenomen got a name and aint healthy...
Click to expand...
Click to collapse
I know for sure there is nothing malicious here. Trust me here too