Autopsy

[Freiegeister]

Do not read or click on the link in any messages from this player. Delete immediately!

It steals your sessionid and automatically sends resources from all your islands!

He has expanded his reach beyond DIGG to all members. If you have clicked on the link check your fleets and recall if necessary. Logout and relogin.

[mmupatton]

Quite annoying.

This is a cross-site scripting exploit in IK! We have messaged Sven about it but he still haven't responded to our security alert from 2005...

This time it is in the basic system behind IK and in defer.php...

EDIT: It refers to q.43i.net, owned by Vitalie Dascalescu in Moldavia. Seriously

Registered through godaddy, this is the contact info: who.godaddy.com/WhoIs.aspx?domain=43i.net&prog_id=godaddy

EDIT2: Anyone interested in the details, PM me...

[ashimar]

So, who has clicked it ? ;D

[mmupatton]

I have ;D

[eproxy]

Where abouts do the resources get sent? It could be a good shout to start raiding it if people are accidentally sending lots of resources there.

Added; apparently one of his accounts has been deleted. An isle that resources were sent to (15.8.13).

[mmupatton]

It's on the official forum. But it is also cats and stoners that are being shipped there, so the defenses are prohibitive.

[eproxy]

Good point. I'm sure someone will get round to doing the good deed eventually.

[twilight]

Muggins here clicked on it too - first thing in the morning, half asleep etc.etc. Did think my stone had gone down a bit but nothing leaving my harbour.

[SkulkrinBait]

Sven needs to work on security, it's more leaky than a seive.

[Arminius]

Interestingly enough, hinkebein of -S- sent the same link to some accounts as well, so people have talked about reporting him...

[mmupatton]

It's impossible to know which account originated this - unless you have access to the database, of course.

[Shendemiar]

ashimar said:

So, who has clicked it ? ;D

I had a hunch, but was too curious, so i pasted it to different browser and clicked on it.

[bishop]

mmupatton said:

I have ;D

Me too. I wondered why the URL needed to be so long, but it never occured to me that clicking on an image link could compromise the session id.

Ironically, I spent the next five minutes completing the 'Scemo! test' that it linked to, and missed the opportunity to recall most fleets. But I managed to stop the brunt of the damage just in time, which could have been disastrous in terms of catapults etc. So my overall losses were only 2500 gold, 75 stoners, and a bit of stone and lumber, which will hopefully teach me not to be such a plonker next time.

[Warliter]

I sent a spy as soon as I got the message look at the report
4 hours ago
Espionage of unnamed (15:8:13)
Espionage successful.
Units of Warliter
Total Losses
Small Warships 1 0
Units of autopsy
Total Losses
Buildings
Main House Level 7
Gold Mine Level 11
Stone Quarry Level 11
Lumber Mill Level 1
Laboratory Level 1
Barracks Level 3
Harbour Level 1
Storehouse Level 14
Stone Wall Level 12
Watch-Tower Level 1
Technologies
Spear Stufe 1
Shield Stufe 5
Sail Stufe 5
Resources
Gold 3971
Stone 12839
Lumber 12004

sent approx 15:00GMT

[eproxy]

Either fleets havn't arrived yet and/or he has ships transporting the goods off his isle.