Libretro Been Hacked and Tried to be Taken Down

1 Like

https://www.libretro.com/index.php/hacker-vandalised-our-buildbot-and-github-organization/

I have been trying to work out why I couldn’t get retroarch to work. Take care all, hopefully you get this sorted so we can all enjoy using retroarch again.

2 Likes

Was it Hyperkin? Revenge?

Going by Article on Main Website they think they know who it is as they Tries before.

Who and Why? I don’t know

Oh man. That is so … dont know why people do that. Hope everything can be restored.

1 Like

I’m not sure whether this is the best place to post this, but the damage is pretty easy to revert, since github keeps all commits ever pushed, even if they don’t exist on any branch (eg. because the branch got force-pushed). This means as long as you know the commit ids, you can recover the branches. Luckily for us, gharchive.org keeps a list of all github activity on public repos, including pushes, and that includes what was the previous commit id was.

You can run this to get the relevant logs:

curl https://data.gharchive.org/2020-08-16-4.json.gz | zcat | grep 'type":"PushEvent' | grep '/libretro/'

Each line contains a json object. The keys we’re interested in are:

"url": "https://api.github.com/repos/libretro/opera-libretro"

"before": "e58f63f745ab7be581493d16438c4ae0ddf3c98c",

The url indicates which repo the push was for, and before indicates what the commit is prior to the push was. With that information we can go to https://github.com/libretro/opera-libretro/tree/e58f63f745ab7be581493d16438c4ae0ddf3c98c, and see that all the code is still there. To recover that commit to master, simply delete the existing master branch, and create it from that commit (on that page, type in “master”, and click on the option to create branch).

5 Likes

How does the Github Effect the Buildbot?

As Github won’t help:

It’s not a big deal that they can’t help us. We should be able to restore them ourselves, thankfully.

3 Likes

That good to hear.

Sounds like you guys got things under Control.

Still Sucks and You have to do work that should not need to be done.

Feel sorry for you guys about the Hack

1 Like

Thanks for the kind words. And yeah, it’s thankfully not as damaging as it certainly could have been and we should be able to get out with mostly just hassle and unnecessary labor. It’ll take some time to get the online updater active again, but we’re taking the opportunity to do some long-delayed improvements at the same time, which is good.

4 Likes

Good to see you trying to get a Positive out of it.

So with the Online Updater being down for awhile - Will there be another way that Updates of Cores will be able Download like a Temporary Download/Buildbot?

Hi guys, just heard the news as I fought with retroarch to download the cores. Poor guys that are trying to get you down, they could do something productive of their life! just push back a repo that you kept in localdev compute and here you are (shame to Github not to be able to restore a branch, this is the purpose of the thing…) Good restoring :slight_smile:

1 Like

Maybe. We’re not sure yet.

2 Likes

Some Good News:

3 Likes

Update on Buildbot:

On my S8 Phone can Connect to Buildbot.

Got into Buildbot Site but no new Core’s at the Moment

I cannot even begin to image why people would do this. The work libretro does for retro gaming is gold.

To bad you only have a aws ip. Would love to help hunting those people down

1 Like

What I have seen the Temporary Buildbot is back online…

I cannot even begin to image why people would do this. The work libretro does for retro gaming is gold.

To bad you only have a aws ip. Would love to help hunting those people down

Lot of People want to know Who and Why?