Slashdot Mirror
Android Forums Hacked: 1 Million User Credentials Stolen
An anonymous reader writes "Phandroid's AndroidForums.com has been hacked. The database that powers the site was compromised and more than one million user account details were stolen. If you use the forum, make sure to change your password ASAP. From the article: 'Phandroid has revealed that its Android Forums website was hacked this week using a known exploit. The data that was accessed includes usernames, e-mail addresses, hashed passwords, registration IP addresses, and other less-critical forum-related information. At the time of writing, the forum listed 1,034,235 members.'"
Was it run on... Linux? BWAHAHAHAHAHAH!
Linux = FAIL.
Windows or OS X are the only secure solutions.
Androids forums had a million users!!!!! Take that Apple!
It's the third major hack in two days. Summer break boosts hacking?
My knee-jerk reaction was that there's a new, unknown exploit out there but from the summary I see there's a "known exploit".
At least I don't have an account there and now I am sure I never will...
...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
What's sad is that I'm quite surprised that they had a million members, but not at all surprised that they were hacked via a known (and most likely trivial) exploit.
I really have low expectations when it comes to online security... especially when it comes to forums.
I use a unique email address and randomly generated password for every single website to which I register. I don't know if I am a member on this forum but even if I am, I'm not going to bother with changing credentials because frankly, if somebody wants to impersonate me on a forum I may have joined simply for advice on a particular product I say go for it.
Like this comment? I accept Bitcoin! - 153sc8UUBXyp12ofQqfAWDmJrzyiKCYC1x
this Is a Nice and excellent post.. I like this post.. I have some post like this .. go to www.djapna.com
According to the Brookings Institute, if you follow 3 simple (stupid simple) rules you will have a 98% chance of never living in poverty.
The rules are:
1. Complete at least a high school education. No-charge public schooling means you CAN do this, no excuses.
2. After your education, get a job, any job. Stay at the job until a better one comes along. Harder to do these days but easier when you're not too proud to do service work or manual labor. If it comes down to it, you won't be the first to take a job you didn't like to put food on the table.
3. Don't get pregnant or become a father until you are married and at least 21 years old. No excuses there. We all know how babies happen. You can choose not to have them or not to have them yet. Ladies, get a bungee cord and put it around you knees if you just can't control yourself. Or take some goddamned responsibility, find one of the 14 forms of non-surgical birth control available to women that you like, and USE IT. Gentlemen, they're called rubbers, USE THEM. Or abstain if you think you can but have a fucking back-up plan if this is your main plan because shit happens and this is important. Not being in a shitty situation wondering what the fuck you're going to do is MUCH BETTER than having a million excuses trying to convince yourself (because nobody else is buying it) that it's not your fault.
People who do these things are adults, proper adults in every sense of the word. They're doing it the right way. The 2% of them who wind up in poverty anyway are what you call "down on your luck". Sometimes you do everything right and things still don't work out for you due to circumstances that are truly beyond your control. It makes perfect sense to have a safety net for those. It is the right and compassionate thing to do for our fellow man.
There are more than 2% of people in poverty and that's because they make terrible decisions. Why is it so "offensive" to say so? You gotta grow up, get over that and face a few unpleasant realities if you want to actually get more people out of poverty. If you can't do that you are part of the problem. They should also receive a safety net, mostly because the alternative is getting mugged by them. What we should not do is pretend like they're innocent victims. We should not try to make them feel better. We should tell them how and why they failed and uphold them as an example of mistakes that should not be made. Young people should have both postiive role models and negative examples of what happens when you are irresponsible. If you want them to grow up into responsible adults that is. If never offending anyone is more important then it is the youth who will pay the price for your squeemishness.
See if something really is your own fault and you don't want to accept that it is your fault, you will never change anything. You'll waste your time solving problems you don't have while neglecting problems you do have. It's a nation of crybabies that so many people think not "being offended" is more important for adult people than being able to deal with reality. That's why this nation is rotting and collapsing, because we no longer deserve the prosperity it once had. The people who built that prosperity weren't whiners, they didn't cry about how offensive reality was, and they understood the concept of making your bed and lying in it. We can do that too. Adults who have the emotional maturity of the average 2-year-old is not desirable, hate to break it to ya.
Link to forums... (Thanks for making me add more than just the link, /.)
Most websites are "NOT SECURE" enough, so pretending that they are is simply dangerous. Wanna know how secure that website is? The Login is not on a SSL connection. Nuff Said!
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
If a website requires you to sign up to post a comment... Don't post there. Just don't go there. Seriously.
Some low budget Android site gets hacked and we feel the need to talk about it? It's a fucking PHP based site. I'm surprised not being hacked in between each restart to recover from memory leaks.
androidforums.com runs on a cluster of old phones. A simple android root program injected into the php was all that was needed :P
Silence is a state of mime.
It appears that the change password page is Slashdotted - I can't get more than one character into the form before it freezes up.
Good thing it's still using the old password that I used for forums before the great LinkedIn password crisis!
Three Squirrels
Hacking sites to leak 100 thousands of passwords? This is the fourth recent case I know of.
That is all.
AccountKiller
Here is the original source, with more information and less sensationalism. They aren't sure if any user information was downloaded, but are treating this as a full breach. To their credit, they at least hashed the passwords, and chose to inform their userbase rather than sit on it until they figured out if any user data was actually stolen or not.
What kind of idiot uses anything but an easy-to-remember throw-away password for an internet forum? Shouldn't you always assume they're insecure hobby sites?
If it's not critical data, don't waste a good password on it.
I mean... Oh noes! Someone stole my android forums password. Now they can use it to make me look stupid on the forums for other products I own!
Lets just make everything public.
http://cryptome.org/2012/07/gent-forum-spies.htm
http://pastebin.com/irj4Fyd5
Sections Overview:
1. COINTELPRO Techniques for dilution, misdirection and control of a internet forum
2. Twenty-Five Rules of Disinformation
3. Eight Traits of the Disinformationalist
4. How to Spot a Spy (Cointelpro Agent)
5. Seventeen Techniques for Truth Suppression
... would log in to change passwords on that site. Why do they register IPs for example? The only reason to log in there would be to remove all personal data and erase the account just in case they are going to sell the data once more. Lucky for them the world is full of idiots.
They open sourced the passwords? :-P
Paranoid Androids?
The headline should have read AndroidForums.com hacked, the way it reads now one would think an official forum by Google for Android was hacked.