Slashdot Mirror
Hack On 8 Adult Websites Exposes Oodles of Intimate User Data (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: A recent hack of eight poorly secured adult websites has exposed megabytes of personal data that could be damaging to the people who shared pictures and other highly intimate information on the online message boards. Included in the leaked file are (1) IP addresses that connected to the sites, (2) user passwords protected by a four-decade-old cryptographic scheme, (3) names, and (4) 1.2 million unique email addresses, although it's not clear how many of the addresses legitimately belonged to actual users.
Robert Angelini, the owner of wifelovers.com and the seven other breached sites, told Ars on Saturday morning that, in the 21 years they operated, fewer than 107,000 people posted to them. He said he didn't know how or why the almost 98-megabyte file contained more than 12 times that many email addresses, and he hasn't had time to examine a copy of the database that he received on Friday night. Still, three days after receiving notification of the hack, Angelini finally confirmed the breach and took down the sites on early Saturday morning. A notice on the just-shuttered sites warns users to change passwords on other sites, especially if they match the passwords used on the hacked sites. The affected sites "offer a variety of pictures that members say show their spouses," reports Ars. "It's not clear that all of the affected spouses gave their consent to have their intimate images made available online."
Robert Angelini, the owner of wifelovers.com and the seven other breached sites, told Ars on Saturday morning that, in the 21 years they operated, fewer than 107,000 people posted to them. He said he didn't know how or why the almost 98-megabyte file contained more than 12 times that many email addresses, and he hasn't had time to examine a copy of the database that he received on Friday night. Still, three days after receiving notification of the hack, Angelini finally confirmed the breach and took down the sites on early Saturday morning. A notice on the just-shuttered sites warns users to change passwords on other sites, especially if they match the passwords used on the hacked sites. The affected sites "offer a variety of pictures that members say show their spouses," reports Ars. "It's not clear that all of the affected spouses gave their consent to have their intimate images made available online."
>> user passwords protected by a four-decade-old cryptographic scheme
Did he just say "MD5"? I thought we're only at 36 years...
"A recovered 98MB file underscores the risks of trusting personal info to strangers."
Well, perhaps.
Or maybe it should read:
"A recovered 98MB file underscores the risks of doing things that will destroy your reputation and marriage."
Check your premises.
And you were using DES. *facepalm*
(Grabs popcorn)
Comment removed based on user account deletion
Once again we see how BIG goverment is incompetent. Despited huge regulation on how software is to be wrote, they failed AGAIN and now another hack happened and yet libtards will still constant to tell us that BIG GOVERMENT is the only way. Sad.
No useful content, skipping article.
Since it was only 98 megabytes the pluralization is the correct way to reference the unit.
BlameBillCosby.com
Use a standard measurement so everyone can understand FFS. OK, fine, how many Library of Congresses are there in an oodle?
This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
Who has the content?
Only my bank login is traceable to me, for the rest I use aliases. Even my ISP thinks I'm my cat.
If you have an acocunt for one of those sites... why on earth would you use your real e-mail address?
Why do you need a user name?
This is what burner e-mail addresses were created for anyway.
"That's the way to do it" - Punch
Yeah, Mr Fake (fake@fake.com) ought to be really worried his wife is going to find out...
Because that would be outrageous.
Signature deleted by lameness filter.
What idiot would give their real name and their normal e-mail address on a web-site like that?
I hope my secret love for Brazilian trannies will remain secret!
Well you've just revealed it here anyway. But don't worry, you are among friends.
Started doing this years ago.
Personal email and banking passwords are a phrase.
Forum, Adobe, special software sign on passwords are something simple and always different. I've had to change this password often over the past 10 years. My banking and personal email ones no so much.
Isn't the Beetle still in production down there? I could go for an exploded view GIF of a stripped down 5 speed stickshift.
Am I the only one amused that a piece is actually talking in gasped horror at 'megabytes' of data exposed? It just isn't a scale that you hear used much in outrage much anymore.
If the wife is the one whose images are posted online, then yes.
Yeah, Mr Fake (fake@fake.com) ought to be really worried his wife is going to find out...
wait until he finds out his wife has been faking it for years too!
---
I'm guessing it's so you can be contacted by like minded people.
Because it "enables better customer experience" :)
It can be difficult to use "burner" email addresses these days. Either the email site itself will require significant identifying information or if not then those email addresses will not be accepted by websites and such.
It's mostly the "fault" of spammers and scammers that are so numerous that website owners don't know what else to do. Is there a way to anonymously identify a specific real individual? (seems like a paradox)
Frankly the Slashdot model seems to be the best ever invented. Anonymous is allowed, any email is allowed, anything is allowed. However, there is trust built to specific individuals within the population that get limited moderation points.
it's just Darwin's law
I do not believe in karma. "Funny"=-6. Do good and forbid evil. Yours, Oft-Offtopic Flamebaiting Troll.
Please tell me more about how to expose one's oodles on an adult website.
It's... for... academic, yes... reasons!
That someone could use that information to blackmail their wives. But it sounds to me like they might be into that sort of thing. Or wait that's black male....my bad.
This is a textbook case of the purpose of mailinator.com