+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: Security Breach Notification (/showthread.php?tid=1729026)
Security Breach Notification - Omniscient - Sep 16, 2011
This is to notify members that one of our staff has been compromised today. Rusty_v had his password reset earlier today without his knowledge or consent. About an hour ago I found this out and I've begun forensics to access all the damage.
Luckily it doesn't appear much was done. Most of their actions was reputation related. They had rep fucked 3 members and removed many reps on individual members. They did spent some time reading staff section which is boring trust me.
This appears to have been a direct attack toward the user Legitti. His account was rep fucked and after reviewing some other activity I think it's someone who held a grudge against this particular user.
The access was for about 5 hours. I have full logs of actions but they did view many threads and profiles. I'm notifying everyone now and alerting you that your accounts are secured. Staff cannot see or edit your pms/password/emails but they can view your IPs in posts. Please be aware.
I have some suspects but if any members know something and wish to share please PM me. It will be confidential. You can even use the contact form as "Other" as a guest.
Thank you.
* - Laggings - Sep 16, 2011
Thank you for making this public. Whilst you could've kept it without letting anyone know, this puts more minds at ease because of it.
* - SIM-524734 - Sep 16, 2011
Oh well, Legitti, wasn't he a scammer 0.o (He sure has a shitton of scam reports) Maybe one of those who got scammed did it.
* - Chamomile Tea - Sep 16, 2011
Thanks for the sharing this with us Omni. I'm glad not a lot of damage was done.
* - ƈʏɮɛʀȶɛʀʀօʀɨֆȶ - Sep 16, 2011
I think Anyone want To Take Revenge With Leggiti Thats Why He Repfucked Him .
* - Cяιмιηαℓ - Sep 16, 2011
Thanks for the Information Omni.
O.o Legitti's Neg and Neutral reps and his given negative reps are also got deleted.
I Hope you will find that guy soon who have done this.
* - chimpy - Sep 16, 2011
If you could list the other members rep-fucked, that would be great.
* - SIM-524734 - Sep 16, 2011
(Sep 16, 2011 12:48 AM)тнєJσкєя Wrote: Thanks for the Information Omni.
O.o Legitti's Neg and Neutral reps are also got deleted.
I Hope you will find that guy soon who have done this.
Lol really? He had so much reps calling him scammer.
* - !!* Alone Vampire *!! - Sep 16, 2011
Well I guess it's done by someone whom Legitti scammed.
Bad news that Rusty's account was compromised.
* - Omniscient - Sep 16, 2011
If more obvious damage was being done it would have probably been noticed much quicker. Everyone is watching everyone around here.
* - cc100 - Sep 16, 2011
thanks for tracking down this ! this is usefull informtion !
* - Ⓡe1gn - Sep 16, 2011
I saw the ban page.
That really sucks, hope all gets well.
* - Unknown fo securi reasons - Sep 16, 2011
Well Cant we get some kind of extra security ? Like facebook has?
My idea is taken from facebook.
But here it is : Well for security reasons we could connect our telephone number to HF and get some kind of verification number to enter it. Or we could make a kind of app like wow where there is a authenticator that allows you to access HF And the authenticator generates a unique pw with 7-8 diggits that you have to enter everytime you login to hf. But the app makes a new pw each 1 min.
What do you think omni ?
* - SIM-524734 - Sep 16, 2011
(Sep 16, 2011 12:52 AM)Starhawk Wrote: Well Cant we get some kind of extra security ? Like facebook has?
My idea is taken from facebook.
But here it is : Well for security reasons we could connect our telephone number to HF and get some kind of verification number to enter it. Or we could make a kind of app like wow where there is a authenticator that allows you to access HF And the authenticator generates a unique pw with 7-8 diggits that you have to enter everytime you login to hf. But the app makes a new pw each 1 min.
What do you think omni ?
Or, there could be a formula and a number, the staff has a formula and the forum has one, when the staff enters they're account they need to enter a number, but with each login that number will increase depending on the formula.
But this is all dreamer's talk :?
* - ( ͡° ͜ʖ ͡°) - Sep 16, 2011
On future note, I suggest to make passwords have at least one uppercase character and one non-alphanumeric character, to make it more secure.