Wednesday, December 28, 2016
MacRumors Forum Accounts Hacked! Change your password ASAP
MacRumors Forum Accounts Hacked! Change your password ASAP
--
There are two dangers when website accounts are hacked:
1) The hackers will mess over your account at the source website. They can pretend to be you, say anything and do anything as you. They can change your password and lock you out.
2) If you were as dopey as I used to be and used the same ID and password at different websites, the hackers can get into and mess over those accounts as well!
Here are some articles relevant to the MacRumors.com hyper-hack:
MacRumors Forums: Security Leak
Tuesday November 12, 2013 2:48 pm PST by Arnold Kim
Yesterday, the MacRumors Forums were targeted and hacked in a similar manner to the Ubuntu forums in July. We sincerely apologize for the intrusion, and are still investigating the attack with the help of a 3rd party security researcher. We believe that at least some user information was obtained during the attack.
In situations like this, its best to assume that your MacRumors Forum username, email address and (hashed) password is now known. What this means for you, if you have a MacRumors Forums account, is the following:
1. Change your password on our forums. If you have any problems, please contact us.
2. If you used the same password on any other site, change it there also. . .Hack of MacRumors forums exposes password data for 860,000 users
Assume your password is known, sites top brass tells account holders.
by Dan Goodin - Nov 12 2013, 11:05pm EST
Readers who had MacRumors accounts would do well to follow Kims advice and immediately change login credentials that use the same or similar password. They should also be vigilant of phishing attempts, since their user names and e-mail addresses have also been exposed.MacRumors hacker who took 860,000 passwords speaks: “We’re not terrorists”
No plans to mass compromise accounts on other sites, post says.
by Dan Goodin - Nov 13 2013, 3:30pm EST
"Were not logging in to your gmails, apple accounts, or even your yahoo accounts (unless we target you specifically for some unrelated reason)," the user known simply as Lol wrote. "Were not terrorists. Stop worrying, and stop blaming it on Macrumors when it was your own fault for reusing passwords in the first place."
He continued: "Consider the malicious attack friendly. The situation could have been catastrophically worse if some fame-driven idiot was the culprit and the database were to be leaked to the public."
In subsequent posts here and here, Lol expanded on the thinking behind the hack. "Outside of this hobby, *cough*, I do partake in whitehat activities and try to contribute to some open source projects etc. It builds quite the resumé." The MacRumors breach, Lol added, was taken on "to test myself. I never defaced the site, I never bragged about it anywhere, I just got in and got out."Are hackers usually arrogant and superior in tone like this? Oh yes. But setting aside the overcompensation-for-personal-insecurity-issues, hackers are a good thing. This hacker is a self-proclaimed white hat, meaning that his aim is to test via hacking then reveal the security flaw to the creators of the source software or website.
Here is one description of a white hat hacker:
http://en.wikipedia.org/wiki/White_hat_hacker
The term "white hat" in Internet slang refers to an ethical computer hacker, or a computer security expert, who specializes in penetration testing and in other testing methodologies to ensure the security of an organizations information systems. Ethical hacking is a term coined by IBM meant to imply a broader category than just penetration testing. White-hat hackers may also work in teams called "sneakers", red teams, or tiger teams.Despite what this guy says, Id get busy changing your password at MacRumors.com, and anywhere else you used the same password. Heres where to change your MacRumors password:
http://forums.macrumors.com/profile.php?do=editpassword
White Hat ? Hacker
Black Hat ? Cracker
I recently heard Leo Laporte of TWiT and Steve Gibson of Gibson Research Corporation (GRC) speculate that the terms Hacker and Cracker were dead, essentially replaced by White Hat and Black Hat. Ive seen no evidence of this assertion. Within the computer community, all four words retain significant descriptive meaning. Despite drawbacks using either set of terms, I dont expect any of them will disappear from the technology vocabulary.
:-Derek
Available link for download
