TPK Breach & Downtime

B0sh 06/17/19 12:12am

TPK Breach & Downtime
Late on June 15th I became aware of a malicious breach into the TPK server. I had no choice but to shut off TPK and investigate the situation. I am not a server administrator by trade, so in attempting to pursue a hobby of web development and running linux servers I was not entirely successful in shutting down some back doors. Despite that fact though, something that can be grabbed is not stolen until it is taken.

As far as I am aware there are sources with malicious intent that have access to the full TPK database which notably includes your hashed passwords, emails, IP addresses, and your private messages sent through TPK.

I hope that you, as well as I, take precautions to ensure that you change your TPK passwords and other locations where you may be using the same password. I would be happy to personally give you advice about improving your personal security if you are unsure about what steps you need to take.

During the downtime of the last 30 hours the TPK staff has banded together and worked to improve the security of the server and the robustness of the website. I am extremely thankful of the support that especially Altios, Jess, and Zoopa showed me while I worked through this. I don't know if I would have survived this incredible catastrophe without them.


New Server, Same Contents
With the new server, I decided to not let this all be for naught and went ahead and made several upgrades throughout the ecosystem. Notably, the upgrade from PHP 7 to PHP 7.2 caused some issues. As a result of this, there could be some problems with outdated code as this version of PHP addresses some of the "bad" code choices that worked in previous versions. We made an effort to sweep through the common places to look for issues around the site, but please message an admin directly if you encounter any bugs, issues-- really anything that seems out of place-- on the site.
    
    
Restoration and Compensation
Your daily gift streak should not be affected. Everyones daily gift streak has been increased by 2 to account for the downtime.

Very minimal progress should have been lost, if any at all. Our backup restored everything to the daily reset that rolled over from June 14th into June 15th, so about 48 hours from the time of this news post. We do not intend to revert anything specific that was obtained during this time.

To compensate for the downtime, we will have a global EXP. boost tomorrow (June 18th). On top of this, we will be giving away a decent chunk of stuff from Scyther over the next couple of days. No entry needed, all you have to do is be logged in. Being active on the game can result in higher odds of getting a prize.


Lastly, we would like to once again apologize for the downtime. Stay safe, everyone.

~B0sh

<<< | News | >>>