DiaryMaster got hacked! Back up your OD now!

The DiaryMaster’s OD got hacked!!!

OK, just for a very short while I hope, but here’s the story: 

I received his email this morning.

Hello Lifetime Members,

I wanted to send out a quick note this afternoon, because some of you may have
heard that my diary was "hacked" this morning.  It is true that
somebody was able to post an entry in my diary, and then posted the
instructions for how to do so on another diary (which was immediately
deleted).

We spent the day upgrading our security code, adding a couple of extra layers
to the login routines to make sure that the method this person
used (and anything related to it) wouldn’t work again.  I won’t go into
details, because it would be unwise to talk about what was changed – but
please rest assured that your accounts are secure and safe.  The extra
encryption and server-side security that has been applied is a good
several steps above what we were already doing.

Security of the site is of primary importance to me (a hard-learned lesson,
some of you might say), and I am glad that we were able to react to
this problem swiftly and shut it down.

A couple of people have asked me why I haven’t posted a public explanation of
what happened this morning.  It’s not because I want to hide it in
any way – it is simply because I have found in the past that if I post publicly
about things like this, it just encourages other nitwits to try the same
thing.  Rather than giving them their moment of "glory", it is better to just
fix the problem and move on.  Talking about it adds another reason for
somebody else to try to prove something.

Anyway, just wanted you all to know what is going on.  I am trying to answer
any notes and emails from people concerned about this.  If you
wish to repost this message, or forward it to anybody you know who is
concerned, please feel free.

Thanks,

The DiaryMaster

Since it’s in my nature to probe into things, I did a little detective work and found the "evidence" on the DM’s OD:

The offending hacker, HeroinInjection, got his OD deleted immediately, according to the DM, but since he posted the method to hack into other people’s OD, there’s no knowing how many people had already read his entry.  And if some asshole decides to put his method to test, our ODs are in danger.  I believe the DM did upgrade the security measures right afterwards, but anyway this proves that similar incidents can happen again in the future.  You know, there are hundreds of thousands of diarists on OD, no doubt many are brilliant computer geeks and some of them may be sociopaths, waiting to wreak havoc on OD if you only give them the right inspiration or provocation.

So, the bottom line is

BACK UP YOUR OD NOW!!!

We should do this regularly anyway, of course. 

Here’s another thing that might interest you.

This site, http://www.odboards.com, is everything about OD and its community, yet it is completely independent of OD.  So, yes, the DiaryMaster has no control over it whatsoever.  Hundreds of OD users are using the web board, and it can be a very good source of information and gossips and rumours about OD.  I got the above screenshot from the site.

Read or use it at your own risk though, coz you’ll find that it’s not a very healthy place.  If you haven’t realized it yet, some parts of the English-speaking community are very complicated, very abusive and very ruthless.  You’ll be shocked to find all kinds of immoral things OD users are doing to one another.

I’m sharing this with all of you coz I think it’s important enough for us Hong Kong OD users to know.  There are so many OD users in HK, representing a significant fraction of OD, but most of the time we are kept in the dark.  We learn about OD news only when the DiaryMaster feels like sharing it.  But what he doesn’t say (on his OD) can also be important, so I think it’s only fair for us to at least have one more way to look at things that might concern us.

Lastly, the same old request for all of you:

Email the DiaryMaster (use the "Contact our staff" option) whenever you have questions and problems!  Speak for the Chinese community!

Log in to write a note
March 7, 2006

Woww…. i better go back up my entries NOW, ASAP!!! Thanks for letting us know!!!

March 7, 2006

§Úback up­ø¨ì ~~ ÂIºâ?

March 8, 2006

嘩~~而家 back up 先 ~~ thanks ~~~~~

March 8, 2006

……. +19

March 8, 2006

§Ú³£backup¥ý~ Thx~

March 8, 2006

re: already done…but no use

March 8, 2006

FWAH… that’s mean! Eeks… I thought the server was down or what… So it HAD been hacked. Evil DM! Now backing up hundreds of entries will be a hard thing… ARGH.

wow! thanks i just backup last night…hadn’t been doing so for half a year and last night i suddenly remember it! :p i think i’d better not to be involved in any dark side of OD, i mean, that OD board…i’d better keep a better impression of OD in my mind… sheep

Thanks for noting!

March 8, 2006

Re: party«D¥u¬°od friends¦Ó³], ¦U¤è¤Í¦n¤]µL¥ôÅwªï!

March 8, 2006

ÁÂÁ§Aªº®ø®§§r~

March 8, 2006

Thanks 4yr news!

March 8, 2006

re: DM yes, vanished ar !! and always can’t login…

March 8, 2006

Shocking news…thanks for telling. btw, your fonts are unreadable!! ryn: thatz the way to let the rest of my life to keep working hard 😛

March 8, 2006

thanks for sharing this info 🙂 sometimes just don’t understand why some people would do this kinda thing – how do they benefit from hacking someone else’d diary??

March 8, 2006

ryn: thatz much better now~ thanks yeah, but only 20 hrs/wk during term time, and unlimited time during term break

­øÃÑÂIback_up=_=

March 8, 2006

ohmigod… why on earth that somebody would want to HACK a diary website? SHAME on the hacker! and thanks heroic KKBB! ^^

March 8, 2006

thanks so much~~~ just did it~

March 8, 2006

I did the back-up but it is unfair to tell the news to life-time od members only. I also paid for the site.

thx for noting us!! I have just backed up mine 🙂

March 8, 2006

Thanks for your information!

March 8, 2006

­ø¸Ó«{§r….. ¯u«Y¦nÅå§r, ¼g¥ªËÝ­@, ­ø·Q¤@¤U¤l´NÉN¥ª… really thanks for your info

March 8, 2006

Thank you! §Ú¤@¦V³£¦³ save od ªº²ßºD. And yeah, we are only simple people!

March 8, 2006

thanks for letting me know!!!!

March 8, 2006

re: back­ø¨ì2¤ë05¦~ar~~~

March 8, 2006

Thanks mate!

March 8, 2006

No kidding! Thanks for the info. Will backup my OD now.

March 8, 2006

horrible

March 8, 2006

ÁÂÁ§i¶D§Ú­Ì©O.

March 8, 2006

Thanks. I do have the habbit of backing up my ODs. And this saved my entries even after OD was hacked in 2004!

March 9, 2006

ryn:¥L­Ì¬O¶V«n¤H,¶Rµf¥h½æ¹À~~ ^.^

March 9, 2006

thank you for sharing this! Sunshine sent me here to see your message.

March 9, 2006

thanks for the caution~ re: no, it seems I don’t have one really…

March 9, 2006

re: §Ú¦³¥[, ¥[¦L¶H¤À§r.

Thanks for your reminder. I’ll back up my OD right now.

the above note is left by me, day.

March 10, 2006

Alright… replying to your note. (u don’t have to privatise it actually) firstly, he has been disturbing me a lot. Even when I don’t reply, he continues with his ‘hello meow meow’ or ‘you are so chio, can i date you’. Try getting someone to message u this time and again. soon, u’d want to GET rid of this person once and for all. i can only STEP forward, face it and tell him off.

March 10, 2006

well, there isn’t much i could do other than being extra harsh. if he still won’t buy my harsh remarks, there isn’t much i can do. he knows my od address too. he better reads the entry well and know what is going on. i can be really mean when i feel offended by pricks like him. and no, i wasn’t offended by your note at all. 🙂

March 10, 2006

RE: ¾³¾³, ÂI¸Ñ§A¤Sª¾¥L­^¤å¦n©O? ¥L³£¨S¦³¦b³ood¯d¹L¨¥.

March 10, 2006

save od…§Ú¤ÓÃi¤F… re:§Ú³ßÅw¤p«Ä¤l,·íµM¯à¥O¨ì§Ú¶}¤ß¡C¦ý®a®a¦³¥»Ãø°áªº¸g,§Ú¤£À´«ç»ò¥i¥H¸ò§A¸ÑÄÀ§Ú®aªº¨Æ…¦Ó¥B,§Ú±o­n·Q·Q¨ä¥L­n­±¹ïªº¨Æ¡C·íµM,§Ú¥i¥H¦p§A©Ò»¡,¥u©¹¦n³B¬Ý,¦ý­nµø¥G­n­±¹ïªº¬O¬Æ»ò¨Æ,­±¹ï³o¥ó¨Æ­Y§Ú³o¼Ë°µ,¨Ã¤£¬O¼Ö¤Ñ,¦Ó¬O§Úª¾¹D°ÝÃD¦Ó¤£¥h³B²z

March 10, 2006

«u§r~~¦n¦MÀI§r! OD Master¤ÏÀ³³£ºâ¦n§Öo¤Uo¬[°Õ~~~«l! re: ¨S¿ù¨S¿ù, ¾Ô°«¤O¥X©_¦a¦n! ¤Q¦~Ãø±o¤@¨£~

March 11, 2006

ÂIback§r.­ü¬O¦ý°Õ,ËÝ°­·Ð,±o­ø¶¢¤S·d¤@÷i,¯u«Y­ø±o¶¢²z