A few days ago our provider noticed some strange outbound traffic coming from our box and shut it down so that I can review. They believe the traffic was part of a outbound denial of service attack.

I'm still analyzing, but at first glance I do not see anything that would indicate a compromise. Regardless, I still recommend that you change your password if you used it anywhere else - just to error on the side of caution. I will be forcing a password reset for everyone soon.

You may notice some stuff missing and the site might seem a little slow. In light of a potential compromise, I've decided to wipe the VPS we were running on and start from scratch with updated versions. It will take a few days for me to properly configure everything -- so in the mean time I've set us up on a temporary host. I've also gone back to a clean install of the SMF forum software and applied only a handful of forum mods. Let me know if you run into any issues.

I apologize for the delay in getting things back up. It's hard to juggle getting the site back up and taking care of a 4 month old. 

Yeah sorry about that. RockstarNexus is getting absolutely hammered today because of the exclusive GTAV screenshot. I've enabled DDoS protection on both, hopefully it'll help.

Thanks everyone! How's the performance so far? It should get even better in a few hours once CloudFlare Railgun is enabled.

Wtf is wrong with this place lately... fuck's sake.

It's my fault. I was working on a PHP script that would automatically post to the Steam group when there was news updates. While doing some testing, I had to disable Steam Guard and use a temporary password.  Unfortunately I forgot to re-enable SG and change my password. As for who it was, I don't know. Every now and then I get emails where someone had attempted to reset my password so it could be the same person. Most of my accounts have been locked down to where I have to verify with a text pass-code but this temporary lapse in security bit me in the ass.

As Daffy posted earlier, we've become aware of an attack on GTAStunting accounts. While at this point we are not aware of any compromise of our own database, the database of another forum that a number of our members frequent has leaked out into the public. A malicious user has taken it upon himself to use passwords from this leak to gain access to a number of GTAStunting accounts that had the same password.

In an abundance of caution, we've decided to invalidate all GTAStunting passwords effective immediately. To gain access to your account, you will need to initiate a password reset. We ask that you use a password that is both strong and unique to GTAS to help not only protect your own GTAS account, but to also protect other members as well as other accounts at different services you may have. It's also never a bad idea to change your passwords for other accounts, especially Email, every now and then.

If you're unsure how to create a good password, feel free to use the guide below. The comic was created by the fine folks at XKCD.


Thanks everyone for your patience and understanding!

Clear your cookies.

Yeah, KS section got some problems.

Could you elaborate so I can fix them?