@everyone

Hello, Attorney Online dwellers.  My name is Róisín Shea of
Alethian Research Institute.  As you (server owners, you in
particular) might know, I have been providing Cidolfus, Morgana,
and Mai Mai with tools to facilitate their activity.  Normally, I
work backstage, but I have such great news that I am compelled to
share it with all of you.

I inform you that I have come into possession of HDF's SQLite
database.

This database contains every AO event logged by Tsuserver on HDF.
These events include connections, bans and all chat (IC and OOC)
activity. Even commands, 'private' messages and your friends'
secret sessions in 'private' rooms.  Should I also mention? It
stores your IP addresses and hardware identifiers. You ought to
seek some reparations from your webmaster!

I credit a vulnerability in Tsuserver and EKyonKun's insecure
server infrastructure.  You are likely not surprised by this and
saw it coming.  His single-minded obsession with a web
application firewall made him completely blind to common sense
security.  At the very minimum, keeping software up-to-date and
evaluating components.  Morgana's audits were in vain, weren't
they?

@everyone

I hereby present to you the segment of this database.  It will
provide several months' worth of logs to you.  The whole
multi-gigabyte database is too massive to dump at once, and I do
not know what other kind of information may reside there.

Feel free to download the database and peruse it for yourself.
Make it your own.  Share it around.

You will inevitably question the validity of this alleged leak.
Note, every single command has been logged, including /login with
modpasses of each staff member.  HDF staff can take a look for
themselves and observe their modpasses.  I gave one of these
modpasses to Cidolfus on the 18th of August, the consequences of
which were discussed in the HDF server.  Additionally, users can
confirm their messages and IP addresses, and cross-reference
conversations with logs or external messaging platforms such as
HDF Discord server and private messages.

Links to the archive:
https://mega.nz/file/zeIHVD5A#pKW_NxcutcaBI0rcJz9TZVZ97bzDP034Zjj13z_ntVw
https://files.catbox.moe/7u0ous.zip

If you suspect malware, feel free to scan the downloads.
A database file cannot run code on your computer.

You should have received my public PGP key a while ago.  I have
signed the database snippet with that key, and I welcome you to
verify the signature you will find in the archive alongside the
database.  Should I post more snippets of the database or other
information in the future, I shall sign it with the same key.

I hope you all enjoy this to the fullest.  This segment will be
enough to make many of your evenings.  I shall see you soon!

XOXO,
---
Róisín