are any accounts protected by gauth in any danger?
Or is this some exploit that allows the person to gain access regardless
Or is this some exploit that allows the person to gain access regardless
Firewall Security |
  (May 6, 2016 10:34 PM)johnathontaylor Wrote: are any accounts protected by gauth in any danger? The database was dumped as far as I know - anyone feel free to correct me if they have better info. That means the IP addresses, usernames, emails, and passwords (albeit hashed & salted) are available at the hacker's whim. No, GAuth account are not vulnerable, as there's not method for him to bypass that level of auth, password-only accounts are the only ones that they're able to get in. Omniscient Wrote: In my logs I found that nearly 40 accounts had attempts to login and it became obvious these were not sold accounts. Indeed these appear stolen. I conclude that because out of the 40 accounts only the ones without 2FA were actually logged into and stolen. And more than a few members of these stolen accounts closed have contacting me to claim they were not sold and their computers are not infected.  
Eh it started fucking up again. :c
Can't perform any actions without waiting a minute or two, or seeing 503 page.. It was fine before 8 hours but again hard to browse.
follow me for nfts
https://twitter.com/DheerajShah_ (May 7, 2016 12:12 AM)Mr Kewl Wrote: Eh it started fucking up again. :c Same, but its been that way for me nonstop for about 48 hr now lol Quote:are any accounts protected by gauth in any danger? They seem protected with Gauth. Quote:The database was dumped as far as I know I still have no confirmation of that and the more time passes the more I think it's not actually dumped. Lots and lots of talk yet not one honest shred of proof. I'm starting to believe it's something simple being exploited. (May 7, 2016 12:42 AM)Omniscient Wrote: They seem protected with Gauth. Since you say only a small number of accounts have been stolen is it possible that another forum has been dumped with a small number of HF users using the same passes and them being brute forced on here? To find the working ones? (May 7, 2016 12:51 AM)#Merky Wrote: Since you say only a small number of accounts have been stolen is it possible that another forum has been dumped with a small number of HF users using the same passes and them being brute forced on here? To find the working ones? The problem is that it's all Ub3r accounts with a few l33t accounts. And way too many for all of these to be sold accounts. I don't know yet, still wrapping my head around this thing. Making me lose sleep. I'm dreaming of reading server logs now. (May 7, 2016 12:53 AM)Omniscient Wrote: The problem is that it's all Ub3r accounts with a few l33t accounts. And way too many for all of these to be sold accounts. Maybe the bruteforcing config could have a capture which tells them if they are ub3r/l33t or maybe I am talking utter nonsense you should get some sleep though you'll find the problem!  (May 6, 2016 01:58 AM)Irish™ Wrote: I've noticed a severe speed decrease today; taking as long as 20 seconds to load a page. You may already be aware of this, but I didn't see any posts and thought that I'd point it out. Apologizes if I'm repeating what others have said. I have been experiencing this since yesterday and regrettably there is no improvement as of this writing. Is the site loading normally for you now?  (May 7, 2016 05:32 AM)Paradoxum Wrote: I have been experiencing this since yesterday and regrettably there is no improvement as of this writing. Is the site loading normally for you now? There's currently a server network issue. https://hackforums.net/showthread.php?ti...id50823887 (May 6, 2016 02:03 AM)Omniscient Wrote: No, that's a network issue being worked on. Slowing the site down for some people at random times for the past 12 or so hours. I've experienced it myself. (May 7, 2016 05:39 AM)ra1d Wrote: There's currently a server network issue. Oh, I am aware. Omniscient has made a newer statement regarding the matter. I am inquiring just to make sure the issue still stands as of late for someone else other than myself. 😝 (May 7, 2016 05:49 AM)Paradoxum Wrote: Oh, I am aware. Omniscient has made a newer statement regarding the matter. I am inquiring just to make sure the issue still stands as of late for someone else other than myself. 😝 Pretty sure it's still the same issue. I feel bad for Omni, having to wrap his head around both these two things at the same time. However, the security is more important than to be able to load the site normally, at least for now. |
|
|
