Register | Sign In


Understanding through Discussion


EvC Forum active members: 60 (9209 total)
3 online now:
Newest Member: Skylink
Post Volume: Total: 919,482 Year: 6,739/9,624 Month: 79/238 Week: 79/22 Day: 20/14 Hour: 0/0


Thread  Details

Email This Thread
Newer Topic | Older Topic
  
Author Topic:   Please Change Your Passwords
Admin
Director
Posts: 13107
From: EvC Forum
Joined: 06-14-2002


Message 1 of 43 (566306)
06-24-2010 6:29 AM


The breakin compromised passwords. Please change your passwords.

Replies to this message:
 Message 2 by Huntard, posted 06-24-2010 7:22 AM Admin has seen this message but not replied
 Message 3 by cavediver, posted 06-24-2010 8:10 AM Admin has seen this message but not replied
 Message 4 by Taz, posted 06-24-2010 9:27 AM Admin has replied
 Message 5 by Hyroglyphx, posted 06-24-2010 9:30 AM Admin has replied
 Message 11 by nwr, posted 06-24-2010 1:14 PM Admin has replied
 Message 14 by CosmicChimp, posted 06-24-2010 3:28 PM Admin has replied

  
Admin
Director
Posts: 13107
From: EvC Forum
Joined: 06-14-2002


Message 6 of 43 (566334)
06-24-2010 9:51 AM
Reply to: Message 4 by Taz
06-24-2010 9:27 AM


Taz writes:
So, are you going to have their asses arrested and sent to federal prison? If they're foreigners, I say gitmo.
Yes they're foreigners. Canadians.

--Percy
EvC Forum Director

This message is a reply to:
 Message 4 by Taz, posted 06-24-2010 9:27 AM Taz has replied

Replies to this message:
 Message 8 by slevesque, posted 06-24-2010 11:22 AM Admin has seen this message but not replied
 Message 10 by Taz, posted 06-24-2010 11:46 AM Admin has seen this message but not replied

  
Admin
Director
Posts: 13107
From: EvC Forum
Joined: 06-14-2002


(1)
Message 7 of 43 (566339)
06-24-2010 10:02 AM
Reply to: Message 5 by Hyroglyphx
06-24-2010 9:30 AM


There's no way I can know the extent for sure, so I'm encouraging people to be cautious and change their passwords.
What I do know of for sure is that hackers exploited a security hole to find out the passwords of the director accounts, then proceeded to log into these accounts and hack the board. They also hacked one other account that I know of, and I've already changed the password and informed that person.
I've been in contact with the hackers, and they seem a happy bunch intent on demonstrating security holes in obnoxious ways while not causing any permanent damage, but who knows for sure. The security holes they were willing to tell me about, the ones exposing passwords, have already been fixed. I'm sure there are other security holes, and I'll fix them as I learn about them.
The board was last backed up yesterday around 6 PM.

--Percy
EvC Forum Director

This message is a reply to:
 Message 5 by Hyroglyphx, posted 06-24-2010 9:30 AM Hyroglyphx has replied

Replies to this message:
 Message 9 by Hyroglyphx, posted 06-24-2010 11:35 AM Admin has seen this message but not replied
 Message 12 by DrJones*, posted 06-24-2010 3:19 PM Admin has seen this message but not replied

  
Admin
Director
Posts: 13107
From: EvC Forum
Joined: 06-14-2002


Message 22 of 43 (566475)
06-24-2010 8:07 PM
Reply to: Message 19 by DrJones*
06-24-2010 6:45 PM


Please check your messages.

This message is a reply to:
 Message 19 by DrJones*, posted 06-24-2010 6:45 PM DrJones* has replied

Replies to this message:
 Message 23 by DrJones*, posted 06-24-2010 8:34 PM Admin has seen this message but not replied

  
Admin
Director
Posts: 13107
From: EvC Forum
Joined: 06-14-2002


(1)
Message 24 of 43 (566531)
06-25-2010 7:11 AM
Reply to: Message 11 by nwr
06-24-2010 1:14 PM


This is fixed.

--Percy
EvC Forum Director

This message is a reply to:
 Message 11 by nwr, posted 06-24-2010 1:14 PM nwr has seen this message but not replied

  
Admin
Director
Posts: 13107
From: EvC Forum
Joined: 06-14-2002


Message 25 of 43 (566721)
06-26-2010 7:49 AM
Reply to: Message 14 by CosmicChimp
06-24-2010 3:28 PM


CosmicChimp writes:
Who are these 'fine young gentlemen'?
As near as I can gather, high school students. One is in Toronto. They can be found on-line at:
URL: Mibbit.com Webchat client
Room: #clubhouse
Anyone can get in, though you can get booted. Someone gave me admin privileges for some reason.
They could be a very positive resource for us to the extent they're willing to share what they learn about our security holes.

--Percy
EvC Forum Director

This message is a reply to:
 Message 14 by CosmicChimp, posted 06-24-2010 3:28 PM CosmicChimp has not replied

Replies to this message:
 Message 26 by Huntard, posted 07-06-2010 9:24 AM Admin has seen this message but not replied

  
Admin
Director
Posts: 13107
From: EvC Forum
Joined: 06-14-2002


Message 42 of 43 (568589)
07-06-2010 11:23 PM
Reply to: Message 41 by Taz
07-06-2010 11:19 PM


I wasn't able to duplicate the problem while logged out or while logged in as a guest. Is anyone else experiencing this problem?

--Percy
EvC Forum Director

This message is a reply to:
 Message 41 by Taz, posted 07-06-2010 11:19 PM Taz has replied

Replies to this message:
 Message 43 by Taz, posted 07-06-2010 11:28 PM Admin has seen this message but not replied

  
Newer Topic | Older Topic
Jump to:


Copyright 2001-2023 by EvC Forum, All Rights Reserved

™ Version 4.2
Innovative software from Qwixotic © 2024