WARNING: QB sites hijacked! forums under attack!

angros47 · Post by **angros47** » Oct 08, 2008 8:19

http://forum.qbasicnews.com/index.php?P ... ic=13264.0

http://qbasicstation.com/index.php?c=f_ ... ageid=3938

http://www.petesqbsite.com/forum/viewtopic.php?t=2779

The historical QB forum on Network54 has been hacked: yesterday all post have been deleted (although now they've been restored) and forum name has been changed to Zip's forum.

Zip has also attacked qbasicstation, and maybe petesqbsite.

Please, if you have an account on a QB forum, change your password (and don't use the same password here).

notthecheatr · Post by **notthecheatr** » Oct 08, 2008 12:54

Wow. That has to be one of the saddest things I've ever read. Hope Zip gets his just desserts.

cha0s · Post by **cha0s** » Oct 09, 2008 0:14

I just want to point out that if the site was run by anyone with a misdge of security knowledge, the passwords will be virtually uncrackable. A one-way hash is generally used (usually with salt which raises the possibility of brute-forcing it to almost nil), so they can't simply be reversed into plaintext.

vdecampo · Post by **vdecampo** » Oct 09, 2008 0:17

cha0s wrote:I just want to point out that if the site was run by anyone with a misdge of security knowledge, the passwords will be virtually uncrackable. A one-way hash is generally used (usually with salt which raises the possibility of brute-forcing it to almost nil), so they can't simply be reversed into plaintext.

That would still not legitimize hacking a site.

-Vince

Hexadecimal Dude! · Post by **Hexadecimal Dude!** » Oct 09, 2008 17:18

I don't think cha0s' point was that that made it legitimate to crack the site, just that visitors to most other sites shouldn't be too worried of encountering the same problems.

notthecheatr · Post by **notthecheatr** » Oct 09, 2008 17:53

Right. The point is that people's passwords are safe, even if their accounts aren't. So he can steal their accounts and post stuff as if it's from them, but he can't figure out what their passwords are to use them (in case they use the same password elsewhere... not that that's a particularly wise idea, but most of us are too lazy to think up new passwords for everything).

rolliebollocks · Post by **rolliebollocks** » Oct 17, 2008 1:16

Odd world.

Somebody with a repressed hatred of QuickBasic, go figure.