xsvilla.blogg.se - Using tinymediamanager in a bash only evironment

#USING TINYMEDIAMANAGER IN A BASH ONLY EVIRONMENT HOW TO#
#USING TINYMEDIAMANAGER IN A BASH ONLY EVIRONMENT ARCHIVE#
#USING TINYMEDIAMANAGER IN A BASH ONLY EVIRONMENT FULL#
#USING TINYMEDIAMANAGER IN A BASH ONLY EVIRONMENT SOFTWARE#

The wiki is being moved to another server host.

#USING TINYMEDIAMANAGER IN A BASH ONLY EVIRONMENT HOW TO#

We are also investigating how to best send a notification and password reset advice email to users once the forum is online again. We are in the process of sharing exposed email address data with the breach disclosure website haveibeenpwned to increase awareness. There are no plans to make other country-level breach notifications.

The current forum server was hosted in the UK, so we have notified the UK Information Commissioner's Office of the breach and a report has been filed with the UK police. As part of the redeployment we will restrict and harden access to the MyBB admin console, revise admin roles to reduce privileges wherever possible, and improve audit logging and backup processes. This is not a simple task and the forum will remain offline until it completes: we estimate several days more work. This requires us to extract and review all differences between the latest MyBB release and the fork we maintain, which includes numerous functional changes and backported security fixes. We have chosen to redeploy the forum on the latest version of MyBB software. We have not seen any evidence of compromise or other reason to question the integrity of the existing system, but a migration was already being planned and we will bring this forwards. The admin team are in the process of commissioning a new forum server. We will post more information as it becomes available. Once the Kodi forum comes back online we will provide instructions on how to complete a reset of your Kodi forum password. If you have used the same username and password on any other site, you should follow the password reset/change procedure for that site.

Users must assume their Kodi forum credentials and any private data shared with other users through the user-to-user messaging system is compromised.

There is currently no time estimate for the forum server being online again our focus is being thorough, not being quick. This will also impact the Kodi pastebin and wiki sites. The forum server has been taken offline while this activity completes.

The admin team are investigating how best to perform a global password reset and how best to assure the integrity of the server host and associated software.

This requires actions from the team, and forum users: At the current time, we have found no evidence of unauthorised access to the underlying server that hosts the MyBB software.Īlthough MyBB stores passwords in an encrypted format we must assume all passwords are compromised.

#USING TINYMEDIAMANAGER IN A BASH ONLY EVIRONMENT FULL#

The nightly full backups that were downloaded expose all public forum posts, all team forum posts, all messages sent through the user-to-user messaging system, and user data including forum username, email address used for notifications, and an encrypted (hashed and salted) password generated by the MyBB (v1.8.27) software.

The admin team have disabled the account used in the breach and have conducted an initial review of team infrastructure the team member had access to. The account owner has confirmed they did not access the admin console to perform these actions. It also downloaded existing nightly full-backups of the database. The account was used to create database backups which were then downloaded and deleted. MyBB admin logs show the account of a trusted but currently inactive member of the forum admin team was used to access the web-based MyBB admin console twice: on 16 February and again on 21 February. This post confirms that a breach has taken place.

#USING TINYMEDIAMANAGER IN A BASH ONLY EVIRONMENT SOFTWARE#

In the last 24 hours we became aware of a dump of the Kodi user forum (MyBB) software being advertised for sale on internet forums.

#USING TINYMEDIAMANAGER IN A BASH ONLY EVIRONMENT ARCHIVE#

"WARN o.t. you need help while we recover/rebuild the systems, a March snapshot of the Wiki can be found on the Internet Archive here, and a read-only April copy of the forum here. When using "$" in the folder name, just renaming files is broken. Release, pre-release, nightly, or directly from GitLab/branch? What tinyMediaManager version are you using?