Slashdot Mirror
2.5 Million Xbox and PlayStation Gamers' Details Have Been Leaked From Piracy Forums (thenextweb.com)
Xbox360ISO.com and PSPISO.com have been hacked by an unknown attacker in late 2015 and the details of the 2.5 million users affected have been leaked online. The leaked information contains email addresses, IP addresses, usernames and passwords. The Next Web reports: It seems that the operator of these sites did nothing to protect the latter, as all passwords were "protected" using the MD5 hashing system, which is trivially easy to overcome. For reference, that's the same hashing system used by LinkedIn. As the names of these sites imply, they were used to share pirated copies of games for Microsoft and Sony's gaming platforms. They also both have a thriving community where people discussed a variety of tech-related topics, including gaming news and software development. If you think you might have had an account on these sites at one point, and want to check if you were affected, you can visit Troy Hunt's Have I Been Pwned. If you have, it's worth emphasizing that anyone who gained access to that site, and anyone who has since downloaded the data dump, will be able to discern your password. If you've used it on another website or platform, you should change it.
From this totally wholesome-on-the-up-and-up site. Color me surprised. This is why we use throw away email addys for this sort of thing kids.
You are being ripped off every second of every day, so that advertisers can help rip you off even more tomorrow.
Feckin-A gamrboi faggots deserve to get leaked ... like a wet shoe under an old dog.
It took me to the "Have I been Pwned?" site
NONONONONONONONONONONONONO!!!!! Do not fucking do this Slashdot! This is not funny! This is not appropriate. You want to take me to another website after clicking on white space? What the sleazy clickbit malware satan in hell are you doing?P NO! Bad Slashdot! Evil Slashdot. Stop it. This will not do. We are not amused.
Other than that, I have no strong feelings on the ,matter
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
I'm old. Started with pong/magnavox games as a teen. Today's entitled generation get all pissy when their precious online games don't work right/cost too much / are over-hyped. Who gives a damn? There are more important things to do in life than post your latest high score/achievement. You know what's an achievement? Helping another human being in real life. If you're sitting in your room bitching about an eleven year old ripping on what they did to your mom last night in order to distract you, you're an asshole of modern life. Your game details got leaked? Too fucking bad, grow up, get a job, pay your way in life, and "achieve" real things. Throw out your game system. Give it to a kid under the age of 12. If you are older than a teen and still complaining about Sony/MS/Nintendo etc..., you are stunting your growth as a man, if you ever get there. Idiots the lot of you, grow the fuck up already and do goddamned hard things, the men of history who have died before you doing man things hold you in complete disdain, and rightfully so. Gamer idiots really are children who refuse to grow up.
The number of times I have had to explain to customers how to do password storage right is staggering. Most still believe a single hash is enough (well, to be fair, for a high-entropy password it is). Some have at least heard of salting the hash. But as soon as you come to iteration, most are clueless, and if you put in things like a large-memory-property (to prevent brute-forcing by FPGAs and graphics-cards), you have lost them completely. Many people just stop learning when there is no direct need to and these are the same people that in many cases write security-critical software.
On the other hand, PBKDF2 has been available since 2000, packing hashing, iteration and salting in a nice package. And Argon2 now adds large memory and other nice properties and essentially solves the problem. People just seem to be completely unaware of this.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
Worst.
2.5 million game pirates had their information leaked from a sketchy ass website over a year ago and now are acting offended someone may steal from them
I started to type up a rant about how this headline was completely misleading... but instead I'll just same "I'm done".
/screw you guys, I'm going home.
The problem lies in not using a salt, not in using MD5.
If you can't trust a piracy forum to protect your online details then who can you trust?
Microsoft, Sony, and other companies sue over 1 million people for piracy. Here's a thought for the conspiracy theorists: Perhaps Microsoft, Sony, and other companies hired the hacker(s).