Konnichiwa,

Sametto Chan · Feb 26, 2017

Hi, anyone dear!

How and when did you first find out about Centmin Mod ?

Just google search, Type: CentOS 7 kernel latest / upgrade. I think it's 3 month ago. I just enabled for notifcation on your site ;3

If i enabled for notifcation, That why. I would like to see alert up for latest the security issue. I woudn't risk of my server. I will need to upgrade on server and another server friend everyday not much aswell.

Thanks for report notifcation daily!
Aye!

eva2000 · Feb 26, 2017

welcome @Sametto Chan to Centmin Mod Community

Ah yes security update notifications I send to Centmin Mod users is very useful

You might want to try the 123.09beta01 build as it will be next stable release and well has alot of improvements if you check 2nd post change log at Beta Branch - Centmin Mod .09 beta branch Testing. And you can share your initial install times here.

Threads you might want to participate in

What are you using Centmin Mod for ?

How did you find out about Centmin Mod ?

What PHP Version do you use ?

How much memory installed on server running Centmin Mod ?

Fill out Centmin Mod 2016 Survey

Attention Future Centmin Mod Experts !

Threads & Info To Bookmark

Threads to read, pages to bookmark and threads to watch/subscribe to get to know Centmin Mod would include:

Getting Started Guide, FAQ, Config Files and What's New and centmin.sh guide.

How to Install Centmin Mod 1.2.3-eva2000.08 Stable - you'd want to bookmark or subscribe to this thread for updates to the code, bug fixes, security updates etc.

How to upgrade Centmin Mod 1.2.3-eva2000.08+ stable

How to troubleshoot initial installs (as well as find the log files for all software for troubleshooting).

Centmin Mod Configuration Files Overview

Centmin Mod + Youtube Resources - recently created to illustrate visually what Centmin Mod can do. Alot of the vidoes are to showcase Centmin Mod .08 betas features which eventually will become the next stable release.

All things SSL https related at SSL - HTTPS as a Google ranking signal

Centmin Mod Insights forum - delve deeper into Centmin Mod code if you want to tweak it or extend it yourself. Find out how PHP Opcode cachers like APC Cache, Zend Opcache and Xcache are configured and installed and how Memcached server is setup etc.

Several ways to follow Centmin Mod code development and changes/commits via Github Commit forum or directly on Centmin Mod Github repository - 123.08stable branche

For forums, also check threads in dedicated Forum Software Usage forums. Some Xenforo users including myself have posted out Nginx vhost configs at Xenforo - My Xenforo Nginx vhost configuration

For Nginx Pagespeed check out the official site page for Centmin Mod's integration of ngx_pagespeed module. Also check out the prefix linked forum url Nginx, PHP-FPM & MariaDB MySQL | Centmin Mod Community easy way to jump into all threads and info related to ngx_pagespeed. In particular bookmark the Nginx PageSpeed Troubleshooting sticky thread as there is high chance you need to tweak your Nginx pagespeed.conf config file for your web apps and styles used. You can see an example of this forum's pagespeed.conf tweaked for Xenforo and my particular used Xenforo style/theme and some discussion of troubleshooting advertising and ngx_pagespeed.

Nginx example configuration listing at centminmod.com/nginx_configure.html

Centmin Mod Insights Forum

The Centmin Mod Insights forums digs deeper into the inner workings of Centmin Mod so some useful threads in this forum include:

Centmin Mod Command Shortcuts

Upgrade - How to upgrade Centmin Mod + backing up customisations

Nginx - Developer Overview: How Nginx is installed on Centmin Mod LEMP stack

[Guide] Save time creating Nginx vhost & MySQL users and databases

Nginx - How to properly password protect a directory or file?

Redis - How to install Redis server on Centmin Mod LEMP stack

Premium Membership

Centmin Mod Premium Membership Benefits - including access to custom tailored dbbackup.sh mysql database backup script and updates/improvements.

RB1 · Feb 26, 2017

Welcome to the forum Sametto!

Sametto Chan · Feb 26, 2017

Thanks two boy!

Aye!

Sunka · Mar 1, 2017

Hi @Sametto Chan
Do you have twitter account?

Sametto Chan · Mar 1, 2017

@Sunka ,

Yes, Why do you want ask me?

It's fine, My twitter account was hacked. Because people skidder using my twitter account was leaks password aswell and replied also troll, i saw alert my email. I've resetted password and enabled Two-Factor, And i removed a replied troll and skidder for link. I have to contacted twitter.

There is,
https://twitter.com/SamettoChan

Sunka · Mar 1, 2017

Ah, so until few minutes twitter (old one) exist, and now it was deleted.
https://twitter.com/sametxchan

Please go away from here.
You hacked some xenforo forums, have an account on xenforo site, some xenforo mods sites, and now here.
I do not belive you, I do not like and you are also put this centmin site into shadow waters.

Go away...

Sametto Chan · Mar 1, 2017

@Sunka ,

You don't believe me. I'm not talking hacking and illegal,

Shadow Realm is true known for ZionHD. Owner was revisedsecurity site.

I don't believe that "Samet Chan" coped of my username to hacked, because a troll. I'm just not happy. My friend told me, This is troll cause well-known name is ZionHD, trying to kept tease me, and keep defacing add to samet chan.

ZionHD is aren't kind person. ZionHD did created account from corruptsecurity coped of my username against. ZionHD is inactive using account for Samet Chan on CorruptSecurity.

Please read this: XF 1.4 - Hacking Issues today

Shadow Realm is ZionHD inactive to Samet Chan, ZionHD is picking on me, and bullying me. I didn't hack xenforo sites and, I am being bullied.

I can tell you, I believed you. If you can understand.

ZionHD is inactive, Are actived against it's brother,

TeOzMoDz said:

When Zion got raided, Shadow was left with all of Zion's stuff and had to tell me what was going on. Later I found out Shadow was the one who got Zion vanned, arrested and charged (Yes! Shadow is the reason Zion is in jail right now). Shadow is very close to some very smart people but he himself can't do a thing. He's also involved in Lizard Squad. These people" have a method of infecting people's browsers (patched recently) through a tri-polyglot payload which basically is a file that contains a mixture of languages, in this case; a PNG Header (so it loads as an image), Java (for hooking) and PHP (for browser interpretation). Because the file contains a PNG header it's designated as a valid image type and will as such load a valid image while executing both java and PHP simultaneously. The technique was originally used to bypass protections put in place while trying to upload files with specific types that scripts will check contents for. They later realized it wouldn't work because as soon as you specified an extension (since only valid image extensions could be loaded anyway and as such only valid extensions were interpreted meaning no commented code was executed. However they found a way instead to poison people's browsers by making a file with no extension and setting that file as a the DocumentIndex. The browser will interpret it as a valid image and as such will load the file. When it loads the file, it also executes the java payload and PHP payload simultaneously. Your browsers sandbox is bypassed completely because as far as it's concerned it's loading a perfectly safe image. Now here comes the best part and what I've been warning you all for months. Since any embedded image link gets automatically parsed and loaded when it's set between <img> tags and since the browser interprets it as an image and loads the image as a perfect image the payload is practically silent and uncaught. Xenforo like many other software has this thing called "bbcode" and the interesting one is the img bb code. When used, a link is automatically embedded between image tags (if you're using image proxy it checks it's a valid image first, but like I said this is technically a valid image). This put with the fact you can embed silent java payloads into bbcode and you can see why and how the technique was effective at hooking people and poisoning their cache. Here's how you fix it ...Clear your cache! Polyglot method was reported and patched to all browser vendors recently. So update your browser if you haven't already. Do an AV scan in your /tmp directory/folder just to be safe.
Click to expand...

Sunka · Mar 1, 2017

I will report everything to トップページ｜警察庁
let they decide

Sametto Chan · Mar 1, 2017

Sunka said: ↑

I will report everything to トップページ｜警察庁
let they decide
Click to expand...

Sorry, I'm afriad, You don't understand in seen my answer question. What i am saying, ZionHD is keep ongoing me "being bullied".

I'll never forgive you, You just ignored my question. You reported to police, You aren't kind person.

eva2000 · Mar 1, 2017

Unfortunately, this is a tricky situation as any hacker can use anyone's commonly known name or handle for themselves and any forum member can use any handle/username that is available to them. Identifying one's true identity online is alot harder to do.

I am closing this thread for now and will contact @Sametto Chan privately to discuss.

Log in / Register

Forums

Join the community today

Konnichiwa,

Sametto Chan Member

eva2000 Administrator Staff Member

Threads & Info To Bookmark

Centmin Mod Insights Forum

Premium Membership

RB1 Active Member

Sametto Chan Member

Sunka Well-Known Member

Sametto Chan Member

Sunka Well-Known Member

Sametto Chan Member

Sunka Well-Known Member

Sametto Chan Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Join the community today

Konnichiwa,

Sametto Chan Member

eva2000 Administrator Staff Member

Threads & Info To Bookmark

Centmin Mod Insights Forum

Premium Membership

RB1 Active Member

Sametto Chan Member

Sunka Well-Known Member

Sametto Chan Member

Sunka Well-Known Member

Sametto Chan Member

Sunka Well-Known Member

Sametto Chan Member

eva2000 Administrator Staff Member

.