mattata's Channel

17 Jul 2017 17:30

New feature! View skill information about a RuneScape player using /runescape!

mattata's Channel

12 Jul 2017 20:56

A future update will see support for plugin help string translations. However, due to the complexity of the feature's implementation, this is a low priority change.

mattata's Channel

12 Jul 2017 20:40

At the current time of writing, mattata has information stored for over 277,000 users and over 20,000 chats!

mattata's Channel

12 Jul 2017 20:38

That is, update objects from the Telegram API.

mattata's Channel

12 Jul 2017 19:32

Small new feature! If you say you're feeling sexy then mattata will set the mood!

mattata's Channel

09 Jul 2017 14:03

This will reduce spam and also increase code efficiency.

mattata's Channel

08 Jul 2017 11:06

https://github.com/wrxck/mattata/commit/aed6d23d87a226c13e9a159719ba9c84684e5100

mattata's Channel

07 Jul 2017 19:57

Redis:
• Config File: /etc/redis/redis.conf
• Mode: standalone
• TCP Port: 6379
• Version: 3.0.6
• Uptime: 0 days
• Process ID: 4183
• Expired Keys: 0

• User Count: 237,551
• Group Count: 16,900

System:
• OS: Linux wrxck 4.4.0-81-generic #104-Ubuntu SMP Wed Jun 14 08:17:06 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux

mattata's Channel

07 Jul 2017 19:33

mattata is now offline, as I am importing what I was able to recover from the old database!

mattata's Channel

07 Jul 2017 18:29

You can help mattata out by forwarding messages from users who might be sleeping, since it will only begin recognising users when it sees a message from them.

mattata's Channel

07 Jul 2017 18:12

1 second, just going to fix something with redis.

mattata's Channel

07 Jul 2017 16:20

How to revoke access from mattata

Spotify: https://www.spotify.com/us/account/apps/
Twitter: https://twitter.com/settings/applications

In both cases, look for "mattata" and click "revoke access" next to it.

mattata's Channel

07 Jul 2017 16:15

It seems they've been cracking the password for months, this log has an entry for their IPs every couple of seconds since a few months ago.

mattata's Channel

07 Jul 2017 16:14

I will shortly be leaking the IP of the attacker.

mattata's Channel

07 Jul 2017 16:10

To anybody who set up their Spotify or Twitter with mattata, since the attacker will have access to the database, it is important you revoke mattata's access to your account. If you need assistance with doing this then please join @mattataDev. If you ARE the attacker and would like to share how you achieved this, I'd love to hear - I'm not even mad, you literally wasted your time to hack an open-source rat.

mattata's Channel

15 Jul 2017 22:05

Chat with me live @ https://curiouscat.me/chat/wrxck

mattata's Channel

12 Jul 2017 20:40

Including previously purged databases, the total amount of users mattata has seen in the past year is about 2,000,000!

mattata's Channel

12 Jul 2017 20:39

Also, the database is over 3 times larger than it was this time 3 months ago! That's such an awesome growth rate!

mattata's Channel

12 Jul 2017 20:38

In the next few days we should hit the 100,000,000 updates milestone!

mattata's Channel

09 Jul 2017 14:05

I think I'll make it a setting which is turned off by default.

mattata's Channel

09 Jul 2017 14:03

Since Telegram clients now have a more detailed event log, should mattata stop sending the action messages after commands like /ban have been used?

mattata's Channel

07 Jul 2017 20:07

I'm just upgrading the server, it's going to have double the specs so we should see less disk-persisting issues with redis!

mattata's Channel

07 Jul 2017 19:33

I need to make a few more changes, it should be no more than 10 minutes.

mattata's Channel

07 Jul 2017 18:35

I have found a backup file from early June, so a heap of data can be recovered!

mattata's Channel

07 Jul 2017 18:27

Plus, if this does happen again, I now have DigitalOcean backups on, so it will take mere minutes to restore everything.

mattata's Channel

07 Jul 2017 18:11

The database was completely erased, everything will need re-configuring - that includes your location, Twitter/Spotify and plugin/administration setup. I've put about a dozen new security measures in place, it is extremely unlikely this kind of attack will happen again. From the bottom of my heart, I'm sorry for the inconvenience this may have caused as I know there are some users who utilise mattata for business-related groups.

mattata's Channel

07 Jul 2017 16:16

Who the fuck even goes through this much effort, you could have just asked me for the files and I would have sent you the link on GitHub 🙄

mattata's Channel

07 Jul 2017 16:15

It appears this was a distributed attack, as a mass amount of requests came from 3 IPs.

mattata's Channel

07 Jul 2017 16:13

After checking log files, it has become clear this wasn't an injection through mattata, somebody had bruteforced it. They must have just gotten lucky, since my password was like 64 characters long.

mattata's Channel

07 Jul 2017 16:04

Meanwhile, I'm now setting up a new droplet so mattata will be back online shortly.