Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Security Breach Notification

This is to notify members that one of our staff has been compromised today. Rusty_v had his password reset earlier today without his knowledge or consent. About an hour ago I found this out and I've begun forensics to access all the damage.

Luckily it doesn't appear much was done. Most of their actions was reputation related. They had rep fucked 3 members and removed many reps on individual members. They did spent some time reading staff section which is boring trust me.

This appears to have been a direct attack toward the user Legitti. His account was rep fucked and after reviewing some other activity I think it's someone who held a grudge against this particular user.

The access was for about 5 hours. I have full logs of actions but they did view many threads and profiles. I'm notifying everyone now and alerting you that your accounts are secured. Staff cannot see or edit your pms/password/emails but they can view your IPs in posts. Please be aware.

I have some suspects but if any members know something and wish to share please PM me. It will be confidential. You can even use the contact form as "Other" as a guest.

Thank you.
Thank you for making this public. Whilst you could've kept it without letting anyone know, this puts more minds at ease because of it.
Oh well, Legitti, wasn't he a scammer 0.o (He sure has a shitton of scam reports) Maybe one of those who got scammed did it.
Thanks for the sharing this with us Omni. I'm glad not a lot of damage was done.
[Image: Ywxix0l.png]
I think Anyone want To Take Revenge With Leggiti Thats Why He Repfucked Him .
[Image: 2GFgkg5.png]
Thanks for the Information Omni.
O.o Legitti's Neg and Neutral reps and his given negative reps are also got deleted.
I Hope you will find that guy soon who have done this.
If you could list the other members rep-fucked, that would be great.
(Sep 16, 2011 12:48 AM)Cяιмιηαℓ Wrote:  Thanks for the Information Omni.
O.o Legitti's Neg and Neutral reps are also got deleted.
I Hope you will find that guy soon who have done this.

Lol really? He had so much reps calling him scammer.
Well I guess it's done by someone whom Legitti scammed.
Bad news that Rusty's account was compromised.
[Image: pV8jKWs.jpg]


-Red Lions leader.
"Winners never quit, and quitters never win."
If more obvious damage was being done it would have probably been noticed much quicker. Everyone is watching everyone around here.
thanks for tracking down this ! this is usefull informtion !
I saw the ban page.

That really sucks, hope all gets well.
Well Cant we get some kind of extra security ? Like facebook has?

My idea is taken from facebook.

But here it is : Well for security reasons we could connect our telephone number to HF and get some kind of verification number to enter it. Or we could make a kind of app like wow where there is a authenticator that allows you to access HF And the authenticator generates a unique pw with 7-8 diggits that you have to enter everytime you login to hf. But the app makes a new pw each 1 min.

What do you think omni ?
(Sep 16, 2011 12:52 AM)Unknown fo securi reasons Wrote:  Well Cant we get some kind of extra security ? Like facebook has?

My idea is taken from facebook.

But here it is : Well for security reasons we could connect our telephone number to HF and get some kind of verification number to enter it. Or we could make a kind of app like wow where there is a authenticator that allows you to access HF And the authenticator generates a unique pw with 7-8 diggits that you have to enter everytime you login to hf. But the app makes a new pw each 1 min.

What do you think omni ?

Or, there could be a formula and a number, the staff has a formula and the forum has one, when the staff enters they're account they need to enter a number, but with each login that number will increase depending on the formula.

But this is all dreamer's talk :?
On future note, I suggest to make passwords have at least one uppercase character and one non-alphanumeric character, to make it more secure.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by OmniscientJun 16, 2021 09:29 AM 77 3,264 Jun 16, 2021 09:29 AM
Last Post: Omniscient
by OmniscientMay 8, 2016 02:32 PM 384 22,648 May 8, 2016 02:32 PM
Last Post: Omniscient
[News] by OmniscientMay 8, 2016 02:31 PM 1 1,601 May 8, 2016 02:31 PM
Last Post: Omniscient