edit: I do not think people, especially rv2, understand the severity. I am not attacking you just because, I am calling you out for not understanding the problem here.
You are trying to cover up a massive vulnerability that was in the Boomblox site that allowed the attacker to log passwords. This shouldn't be a "player-only" announcement, this should be addressed publicly especially if the poster of this announcement may plan on keeping Boomblox up.
People on the outside, like those who were or still are looking forward to join this project should know about this too instead of sweeping it under the rug like nothing.
edit 2: In case you weren't aware, this is not my announcement, this was sent by Marsoc in the player announcements.
so ultimately boomblox is on the verge of shutting down, and it may or it may not; but it is looking closer to that it likely will
an on-site vulnerability was abused which led to the ability of an attacker to actually steal the source code, files above that, etc, and ultimately gather all the files involved with boomblox on the server end. this attacker was the marsoc impersonator who gained the site key & domain through the discord or members of the discord
this attacker rehosted the website on a linux machine running caddy to host it, and likely implanted some loggers here and there
**how does this affect the user?**
if you entered your boomblox username & password on the website to log in between august 28th and august 31st, there is a slight likelihood your password was logged to a discord webhook by said attacker and then later associated with your name
this could also mean that they implanted ip loggers on their version of the boomblox website here and there, but the only thing i can show more of a likelihood than others is the password thing; but there is all the possibility that never even happened, but please continue to stay safe
**how will boomblox move from this?**
if anyone wants to own this and is seriously interested in looking at the code to improve it, or even take the name and continue with a fresh source; you are welcome to dm me for it if i have the personal consideration of letting you own this under my financial advisory of hosting the servers (or you can host them out of pocket too, sure)
the discord server will continue to live on as it has not been affected
tldr: marsoc impersonator find site vulnerability and scrape all the files in the server and rehost boomblox not fun 😬
nothing has happened yet tho
