LOL NO WAY THEY WERE USING THAT
Hot Summer Deals are Here!
Celebrate with up to 99% off on 18,000 resources
00
Days
01
Hours
57
Mins
14
Secs
Thoughts on competing forums database being breached
- Thread starter Glove
- Start date
- Status
yurp staff member tried to extort me for 1k for unban but now me unban
I downloaded this within 2 hours of it becoming public and looked through it a lot and I showed a friend who did as well and here are all of the interesting parts I remember:
1. The important data the user table includes: Hash+Salt, Email, Date of Birth. I couldn't find any IPs in the main database file as was claimed.
2. In \Source Code\inc\functions_user.php you can see that the hashing algorithm they use is
which is the default MyBB hashtype (salted md5).
3. There is a folder with a .png of every user's avatar, not surprisingly, the vast majority of them are rappers, drugs, hood stuff, anime and women
4. Private messages are included, but only seem to be from November-December and are in an odd formatting making them hard to parse.
I've also seen a lot of people getting too scared about this leak. Unless you reused this password elsewhere or used an email that contains personal info, you'll be fine. If the password is your main concern, change it everywhere and you'll be good.
1. The important data the user table includes: Hash+Salt, Email, Date of Birth. I couldn't find any IPs in the main database file as was claimed.
2. In \Source Code\inc\functions_user.php you can see that the hashing algorithm they use is
Code:
md5(md5($salt).md5($password)3. There is a folder with a .png of every user's avatar, not surprisingly, the vast majority of them are rappers, drugs, hood stuff, anime and women
4. Private messages are included, but only seem to be from November-December and are in an odd formatting making them hard to parse.
I've also seen a lot of people getting too scared about this leak. Unless you reused this password elsewhere or used an email that contains personal info, you'll be fine. If the password is your main concern, change it everywhere and you'll be good.
LMFAOO
Everyone look here: https://www.mc-market.org/account/manage-security
Check if you have people trying to log into your account LOL
I have a New York VPN IP that tried to log into my MCM and email:
http://i.doge.bz/ufGAnraqDp-234730364.png
http://i.doge.bz/LQ9B8raWp8-134051322.png
Imagine thinking that I reuse passwords facepalm
And go to the banlist: https://www.mc-market.org/members/banned
CTRL + F "Compromi" to see all compromised account bans. There are 34 bans since this leak was publicized. I can't believe this many people failed to use such basic security practices.
Check if you have people trying to log into your account LOL
I have a New York VPN IP that tried to log into my MCM and email:
http://i.doge.bz/ufGAnraqDp-234730364.png
http://i.doge.bz/LQ9B8raWp8-134051322.png
Imagine thinking that I reuse passwords facepalm
And go to the banlist: https://www.mc-market.org/members/banned
CTRL + F "Compromi" to see all compromised account bans. There are 34 bans since this leak was publicized. I can't believe this many people failed to use such basic security practices.
Last edited:
sum1 tried logging into mine from santa clara LMFAO imagine that
Last edited by a moderator:
lmfaooo, they thought Glove would reuse passwords!
also aliensushi you edited out my screenshot of someone trying to log into my email with a VPN, guess they need more privacy so they can log into everyone's mcm accounts
You underestimate the intelligence of children who set their passwords to be “Fortnite123” across all platforms.
- Status
