Poker Tracker Site Problems?

[ptrack pat]

[ QUOTE ]
I´m not sure if I downloaded an update the last two days.
Can you tell me if the this update changes the pt version number?
And if it does can you please tell me if the version 2.16.03d is clean?

[/ QUOTE ]

2.16.03d has been out for months now, there hasn't been an official update for a while.

These download files do not appear to have been touched.

[hypermegachi]

[ QUOTE ]
I assume your server or host maintains a record of the IP addresses that connect to your site. Is it possible that the hacker gained access to server side records of these connections?

[/ QUOTE ]
if the server is down now, then no.
if the server was UP and COMPROMISED, quick and easy answer, yes your IP address could have got logged somewhere.

think about it this way:

client: "hey server, is there an update?"
server: "nope, there's no update" OR "yes, there's an update"

how is the server going to tell you if there is or is not an update without your IP address? right...it can't. so if the hacker was particularly savvy, s/he could intercept the response and log your IP address.

edit: this is assuming TCP connections...if Pat is using a connectionless protocol like UDP and broadcasts, then your IP address will not be seen.

[You're No Daisy]

Delete the file!! It's just a temporary internet file. Removing won't affect your PC.

AC

[LearnedfromTV]

Ok. I've had ptracker open for a couple days straight. When I read about this, I closed it, and I won't open it again until this is fixed. It doesn't access the website to check for updates except when you open it, right? So I should have nothing to worry about.

Someone computer savvy reply with a quick yes, please.

[blankoblanco]

right LFT, you're fine. no worries

[Logun]

you have nothing to worry about.

If you DL'ed anything from PT yesterday then there is a snowball's chance in hell that it could be corrupted.

Highly doubtful though.

Once Pat gives the go-ahead it will be business as usual.

[hed zup]

[ QUOTE ]
lol paranoyaments.. hide your monies!! quick!! teh hackers are coming!

[/ QUOTE ]

LOLZ

[yli]

[ QUOTE ]
[ QUOTE ]
I assume your server or host maintains a record of the IP addresses that connect to your site. Is it possible that the hacker gained access to server side records of these connections?

[/ QUOTE ]
if the server is down now, then no.
if the server was UP and COMPROMISED, quick and easy answer, yes your IP address could have got logged somewhere.

think about it this way:

client: "hey server, is there an update?"
server: "nope, there's no update" OR "yes, there's an update"

how is the server going to tell you if there is or is not an update without your IP address? right...it can't. so if the hacker was particularly savvy, s/he could intercept the response and log your IP address.

edit: this is assuming TCP connections...if Pat is using a connectionless protocol like UDP and broadcasts, then your IP address will not be seen.

[/ QUOTE ]

Most HTTP servers keep a log of all accesses, so it is certainly possible to get the IP addresses which have accessed the update page.

The problem is that most people have dynamic IP addresses which change once in a while. Even if we assuming someone has your current IP address it is fairly difficult to get access to an up-to-date Windows machine with a 3rd party software firewall and even harder with a hardware firewall.

The other way of getting access to a remote computer is to inject malicious code on a website or provide a modified installer of a Poker Tracker update which would install a trojan on the visitors computer. It seems that the Poker Tracker website had a one (seeing the screenshot above). Anti-virus programs generally block these kind of code from running and installing the trojan though which seems to be the case for the guy with the screenshot.

[CORed]

Most web servers store IP addresses of computers that accessed the site in log files. Even if you had that feature turned off, if your server's been hacked, the hackers could have turned it on.

I don't want to feed the paranoia too much. If your PC is properly secured (firewalled, strong passwords, etc.) knowing you IP doesn't really help that much with hacking it.

[roll]

Cash out all your money and bury it in a hole somewhere until this all blows over.