Slashdot Mirror
Codemasters' Website Hacked
skybon writes "After similar attacks on Sony and Square Enix, Codemasters' website has now been hacked as well. The intrusion took place on 3 June, and is believed to have compromised members' names, usernames, screen names, email addresses, date of birth, encrypted passwords, newsletter preferences, any biographies entered by users, details of last site activity, IP addresses and Xbox Live Gamertags. In a letter sent out to CodeM subscribers, the company recommended changing passwords as soon as possible."
The Epic forums got hit too, with usernames and encrypted passwords. At least, the UDK forums did, and I assume the Gears and other game-specific ones did too. Got the email about that today. At least they encrypted passwords, hopefully with a good salt.
I am become
But what if I crack your hack when I hack your crack?
--Jack
You can't take the sky from me.
Hey, you're not allowed to hack companies who aren't flagrantly, explicitly evil! It's almost like you're hacking companies whose security is weak, rather than acting as moral crusaders. How could that be?
You know, there is a difference between trolling and pointing out the flaws in your reasoning. Just saying.
I'm going to go right ahead and say they ain't codeMASTERS if they got hacked....
Just because you're paranoid doesn't mean they aren't out to get you
That was 8 days ago! I am so glad they reported this so promptly.
Interesting thought, but this is the same public that now accepts getting groped at TSA checkpoints by 300lb, $14/hr rentacops because somebody could be a terrorist. If Anonymous or somebody else were to break into the credit bureaus or some other high-value target - I fully expect there may be a couple of nominal changes, but the anger will be focused squarely on the "terrorists" who are trying to undermine our country's economy.
Our Epic Games web sites and forums were recently hacked. After some downtime, they're back up and running now.
The hackers may have obtained the email addresses and encrypted passwords of forum users. Plaintext passwords weren't revealed, but it's possible that those passwords could be obtained by a brute-force attack on the encrypted passwords. Therefore, we have reset all passwords. Your new password at the bottom of this message.
The Unreal Developer Network (UDN) hasn't been compromised. Thankfully, none of our web sites ask for, or store, credit card information or other financial data.
We're sorry for the inconvenience, and appreciate everyone's patience as we wrestle our servers back under control.
Tim Sweeney
Founder, Epic Games Inc
Seeing as a single ATI 6990 can crack a salt with 30length at 3.8billion tries per second.
It's just as common to call "tricked" as "hacked," whenever people have obvious passwords or blatantly give them out, the most common thing they say afterwards is "I was hacked!!!"
If Valve's servers get hacked with disastrous consequences (Steam accounts get deleted/hacked/etc, credit card details, other personal info), all hell will break loose. There will also be much smugness from those who don't use Steam for this very reason.
This is one of the reasons why I will not get a credit card!
Evil enough for anyone. You don't get two products taken away from you if you don't suck to high heaven (Turbine took both DDO and Lotro back from Codemasters inept handling).
MMO Quests are like orgasms:
You may solo them, I prefer them in a group.
The "Big 3" have enough connections not to have to worry. Even if they get hacked, they'll just instruct everybody to direct blame to Anonymous or some other scapegoat. Then they'll have 3-letter agencies publish press releases for them and politicians will pass a few new laws to increase penalties.
Nothing else would change, neither security, amount of data collected or the mindset of consumers.
Actually, compared to a debit card a credit card is pretty safe. Debit cards are easier to get but you lack many of the protections (like chargeback) that credit cards offer.
Be careful all in all - not having a credit card might actually bite you in the ass if you ever decide to buy a home or get some type of loan. No credit is practically worse than bad credit.
Random Thoughts From A Diseased Mind (Not For Dummies)
Have had no problems getting loans without a credit card. Of course you can't buy anything online without one.
It's the reason I use a virtual credit card with one-time numbers online. I only use my real credit card at a limited number of places.
Yeah, I had a sig once; I got bored of it.
If it takes a cracker 0.3 seconds, as described in the article you cited, then it also takes the legit server 0.3 seconds to authenticate the user. If a lot of people submit the login form at once, this becomes a denial-of-service attack against the server.
the real lessons they should take here are that they should not even ask for things like date of birth - they could just ask for the year for example
Some web sites have legal reasons to require all users to be at least 13, 18, or 21 years old (to use examples of thresholds from U.S. federal law). Say your web site requires all users to be at least 18 years old. If the sign-up form asks for just the Gregorian year, how would the site distinguish an 18-year-old, whose birthday is before today, from a 17-year-old, whose birthday is after today?
I had no problems buying stuff online with debit card. (from Amazon; for noname shops there's Paypal; I wouldn't trust them with my CVV)
Why is there so many hacking lately? I really don't understand people's motive to hack some servers, websites. Ok one could be money (credit card info, mail databases to sell, etc.) and maybe the other challenge for someone. But hacking is never harmeless.
Awlol
I don't know about that, can you imagine if they went in and reset everyone's credit score to be "over 9000!" LOL? Even if they managed to set it back the next day just the sheer amount of chaos they could cause, especially if the group broadcast it all over the net right after (Hey got bad credit? Have fun LOL!) the amount of total pandemonium caused by everyone having wonderful credit might actually make those in power question letting everything be tied into an imaginary number held by three self appointed companies.
ACs don't waste your time replying, your posts are never seen by me.
Game companys are clueless about security, and the feeding frenzy is just starting.
At least news like this gets me very worried... why? cos all this announcements ware not made by the companies who got their servers hacked... but ware made by the hackers who did that... i wonder how many hackings are done without anyone knowing ... without anyone making those attacks public... and in theory security engineers learn from things like that.... is called Forensics right? hmmm and some ppl say " There is not such thing as ethical hacking..".... why not? i know from experience that you need a thief to catch a thief.... and another things that gets me worried is the fact that many security engineers say " hackers have small penises" and things like that... but they should see them as enemies and and do not underestimate them... some of them are kids who do this to have fun... some of them do hacking shit cos they are payed to do so... and all this attacks who took place lately... all this has on propose : to take somebody else identity.... why? that is the big answer...
I hack my my own servers daily. My security is 31337 (Pull the Plug)
All cows eat grass!
The meaning of words can change over time. Words can have multiple definitions too. One can discern the meaning from the context. Get over it you illiterate fuck.
Thanks for info, http://exercisesto-reducetummy.com/articles/exercises-to-reduce-tummy-how-i-lost-50-pounds