Topic: So my account got hacked (I assume?) and got used to vandalize tags...

Posted under General

Hi, so uh...I just logged on seeing I had a message telling me I had a warning/record update for Tag Vandalism, the thing is though- I don't edit tags at all, I don't even know how too, and its just stuff I'm not even into at all. Changed my password and everything and planing to undo it all ofc. Now I know for a fact it wasn't me because they were all done 14 days ago... I would've remembered.

Now I was wondering...what do I do now? Is there a possible way to message a Mod or something to appeal to the warning/record update on my account? or is it just not worth the trouble and should I just like, move on. I know it sounds dumb but ive honestly never done anything else but favorite posts so idk what to do or where to look for help or if i should even look. Thanks to anyone who helps and reads this. Goodnight to you all!

The record given to you was by Millcore - so that's who you'll need to appeal to.

I've actually seen this happen multiple times now and I'm pretty sure somebody isn't hacking multiple people's accounts just to revert a few tag edits. Judging how it all happened over the span of 28 seconds, I wonder if it's related to accidentally pressing the undo button a bunch of times on the post changes page.

Ratte

Former Staff

Basically all user activity will have an IP address associated with it, such as comments and logins-- and yes, also tag edits. An administrator is able to look at and compare those addresses and gauge the likelihood of it being the original account owner.

There can also be some goofiness with tag edits occurring on older pages or simultaneously with other users and that looks like something that could have happened as the same tags your account removed were tags added just ten minutes earlier. It's possible that you had the edit box open and submitted a blank update (from your perspective) after those tags had been added, but your page didn't yet have that updated information. This basically undoes that previous edit.

ratte said:
Basically all user activity will have an IP address associated with it, such as comments and logins-- and yes, also tag edits. An administrator is able to look at and compare those addresses and gauge the likelihood of it being the original account owner.

I'm guessing they deal with alot of VPN IP scrambling. Which might make it harder for them i assume.

From what I can tell the enemy is inside your house. Do you have any siblings you might have to have a word with about snooping around your things? Because there is also another account on your IP.

But I agree with Ratte it was most likely accidental, the tag edits you made were over the span of 30 seconds. Maybe you clicked the wrong hotkey and edited instead of favorited those submissions? Because none of those are in your favorites and at least some of them would fit right in there.

Ratte

Former Staff

benjiboyo said:
I'm guessing they deal with alot of VPN IP scrambling. Which might make it harder for them i assume.

Not as often as you might think.

notmenotyou said:
From what I can tell the enemy is inside your house. Do you have any siblings you might have to have a word with about snooping around your things? Because there is also another account on your IP.

But I agree with Ratte it was most likely accidental, the tag edits you made were over the span of 30 seconds. Maybe you clicked the wrong hotkey and edited instead of favorited those submissions? Because none of those are in your favorites and at least some of them would fit right in there.

Highly doubt it was a hotkey mistake, as a matter of fact I didnt know you could use that to favorite stuff, and I did look through some of them and from what i remember I never looked those up nor seen them before, but then again an accident by my hands is more likely to happen than a sibling to be on here in the first place. The IP thing is interesting though, does the account have to be created in my IP or just have to be in it to have some sorta connection?

eeveeboiuwu said:
The IP thing is interesting though, does the account have to be created in my IP or just have to be in it to have some sorta connection?

IPs are usually reused by ISPs (cf 'dhcp'). An account which has the same IP as you have may or may not be a login via your router. It could also be someone else using the same ISP.

This is the main reason that IP based banning is useful but not reliable, FWIW.

eeveeboiuwu said:
Highly doubt it was a hotkey mistake, as a matter of fact I didnt know you could use that to favorite stuff, and I did look through some of them and from what i remember I never looked those up nor seen them before, but then again an accident by my hands is more likely to happen than a sibling to be on here in the first place. The IP thing is interesting though, does the account have to be created in my IP or just have to be in it to have some sorta connection?

another possibility is accidently entering edit from thumbnail mode and not realizing it until you already messed up the tags on a handful of posts

versperus said:
another possibility is accidently entering edit from thumbnail mode and not realizing it until you already messed up the tags on a handful of posts

that seems kind of far-fetched. you'd need to click the dropdown menu to edit mode, then click on a post, and then delete some text from the middle of the big edit box that comes up and then click on submit. I don't really see how any of that could be done unintentionally much less every step, especially when it was done 23 times over the course of 28 seconds... honestly that barely even seems like it'd be possible if you were doing it intentionally.

edit: actually, looking at the edit histories, it seems like all of these were undos of other users' edits, that might explain how it was done unintentionally, but still... 23 times in 28 seconds is... hmm

Updated

darryus said:
that seems kind of far-fetched. you'd need to click the dropdown menu to edit mode, then click on a post, and then delete some text from the middle of the big edit box that comes up and then click on submit. I don't really see how any of that could be done unintentionally much less every step, especially when it was done 23 times over the course of 28 seconds... honestly that barely even seems like it'd be possible if you were doing it intentionally.

edit: actually, looking at the edit histories, it seems like all of these were undos of other users' edits, that might explain how it was done unintentionally, but still... 23 times in 28 seconds is... hmm

A bad script in common? It almost has to be a poorly-written addon.

alphamule said:
A bad script in common? It almost has to be a poorly-written addon.

I was thinking that it was maybe accidentally selecting all while in the edit history page and then clicking the "undo checked" button, but that feature dosn't work if you're a normal-level user. and I don't think you'd be able accidentally click undo on 23 links, especially since it reloads the page every time you do it.
if it is a weird script error maybe it was auto-clicking the first undo button on the page, and then when the page was done reloading it did it again? but I feel like that'd mostly just undo your own edits a bunch of times.

  • 1