Slashdot Mirror
Hack On 8 Adult Websites Exposes Oodles of Intimate User Data (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: A recent hack of eight poorly secured adult websites has exposed megabytes of personal data that could be damaging to the people who shared pictures and other highly intimate information on the online message boards. Included in the leaked file are (1) IP addresses that connected to the sites, (2) user passwords protected by a four-decade-old cryptographic scheme, (3) names, and (4) 1.2 million unique email addresses, although it's not clear how many of the addresses legitimately belonged to actual users.
Robert Angelini, the owner of wifelovers.com and the seven other breached sites, told Ars on Saturday morning that, in the 21 years they operated, fewer than 107,000 people posted to them. He said he didn't know how or why the almost 98-megabyte file contained more than 12 times that many email addresses, and he hasn't had time to examine a copy of the database that he received on Friday night. Still, three days after receiving notification of the hack, Angelini finally confirmed the breach and took down the sites on early Saturday morning. A notice on the just-shuttered sites warns users to change passwords on other sites, especially if they match the passwords used on the hacked sites. The affected sites "offer a variety of pictures that members say show their spouses," reports Ars. "It's not clear that all of the affected spouses gave their consent to have their intimate images made available online."
Robert Angelini, the owner of wifelovers.com and the seven other breached sites, told Ars on Saturday morning that, in the 21 years they operated, fewer than 107,000 people posted to them. He said he didn't know how or why the almost 98-megabyte file contained more than 12 times that many email addresses, and he hasn't had time to examine a copy of the database that he received on Friday night. Still, three days after receiving notification of the hack, Angelini finally confirmed the breach and took down the sites on early Saturday morning. A notice on the just-shuttered sites warns users to change passwords on other sites, especially if they match the passwords used on the hacked sites. The affected sites "offer a variety of pictures that members say show their spouses," reports Ars. "It's not clear that all of the affected spouses gave their consent to have their intimate images made available online."
>> user passwords protected by a four-decade-old cryptographic scheme
Did he just say "MD5"? I thought we're only at 36 years...
"A recovered 98MB file underscores the risks of trusting personal info to strangers."
Well, perhaps.
Or maybe it should read:
"A recovered 98MB file underscores the risks of doing things that will destroy your reputation and marriage."
Check your premises.
And you were using DES. *facepalm*
(Grabs popcorn)
No useful content, skipping article.
Since it was only 98 megabytes the pluralization is the correct way to reference the unit.
BlameBillCosby.com
Use a standard measurement so everyone can understand FFS. OK, fine, how many Library of Congresses are there in an oodle?
This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
Many people are talking about how SJW's are really responsible. They destroyewd the linux kernel with there fascist "codes of conduct" which destroyed the meritiocratic process they had used before and this made linux less secure and now all these amazing web sites are to be hacked.
Who has the content?
Only my bank login is traceable to me, for the rest I use aliases. Even my ISP thinks I'm my cat.
If you have an acocunt for one of those sites... why on earth would you use your real e-mail address?
Why do you need a user name?
This is what burner e-mail addresses were created for anyway.
"That's the way to do it" - Punch
Yeah, Mr Fake (fake@fake.com) ought to be really worried his wife is going to find out...
Because that would be outrageous.
Signature deleted by lameness filter.
WTF has this got to do with "big government"? Do you try to raise this bee-in-your-bonnet in every thread?
What idiot would give their real name and their normal e-mail address on a web-site like that?
I hope my secret love for Brazilian trannies will remain secret!
Well you've just revealed it here anyway. But don't worry, you are among friends.
Started doing this years ago.
Personal email and banking passwords are a phrase.
Forum, Adobe, special software sign on passwords are something simple and always different. I've had to change this password often over the past 10 years. My banking and personal email ones no so much.
/. is a great venue to learn and mature.
The Internet doesn't work the way you think it does.
It little behooves the best of us to comment on the rest of us.
Isn't the Beetle still in production down there? I could go for an exploded view GIF of a stripped down 5 speed stickshift.
big goverment regulation and taxes were put in SPECIFICALY to stop hacks and yet here it is all again with another hack of personal data as directly is the fault of that same goverment incompetence. and then libtards like you say we need to raise taxes and put in MORE of the regulation to "fix" it again.
Am I the only one amused that a piece is actually talking in gasped horror at 'megabytes' of data exposed? It just isn't a scale that you hear used much in outrage much anymore.
If the wife is the one whose images are posted online, then yes.
Yeah, Mr Fake (fake@fake.com) ought to be really worried his wife is going to find out...
wait until he finds out his wife has been faking it for years too!
---
I'm guessing it's so you can be contacted by like minded people.
Because it "enables better customer experience" :)
It can be difficult to use "burner" email addresses these days. Either the email site itself will require significant identifying information or if not then those email addresses will not be accepted by websites and such.
It's mostly the "fault" of spammers and scammers that are so numerous that website owners don't know what else to do. Is there a way to anonymously identify a specific real individual? (seems like a paradox)
Frankly the Slashdot model seems to be the best ever invented. Anonymous is allowed, any email is allowed, anything is allowed. However, there is trust built to specific individuals within the population that get limited moderation points.
it's just Darwin's law
I do not believe in karma. "Funny"=-6. Do good and forbid evil. Yours, Oft-Offtopic Flamebaiting Troll.
wtf?
Please tell me more about how to expose one's oodles on an adult website.
It's... for... academic, yes... reasons!
That someone could use that information to blackmail their wives. But it sounds to me like they might be into that sort of thing. Or wait that's black male....my bad.
This is a textbook case of the purpose of mailinator.com
I'd like some of whatever you're taking, but in a smaller dose.
Just cruising through this digital world at 33 1/3 rpm...