Slashdot Mirror
Hack On 8 Adult Websites Exposes Oodles of Intimate User Data (arstechnica.com)
An anonymous reader quotes a report from Ars Technica: A recent hack of eight poorly secured adult websites has exposed megabytes of personal data that could be damaging to the people who shared pictures and other highly intimate information on the online message boards. Included in the leaked file are (1) IP addresses that connected to the sites, (2) user passwords protected by a four-decade-old cryptographic scheme, (3) names, and (4) 1.2 million unique email addresses, although it's not clear how many of the addresses legitimately belonged to actual users.
Robert Angelini, the owner of wifelovers.com and the seven other breached sites, told Ars on Saturday morning that, in the 21 years they operated, fewer than 107,000 people posted to them. He said he didn't know how or why the almost 98-megabyte file contained more than 12 times that many email addresses, and he hasn't had time to examine a copy of the database that he received on Friday night. Still, three days after receiving notification of the hack, Angelini finally confirmed the breach and took down the sites on early Saturday morning. A notice on the just-shuttered sites warns users to change passwords on other sites, especially if they match the passwords used on the hacked sites. The affected sites "offer a variety of pictures that members say show their spouses," reports Ars. "It's not clear that all of the affected spouses gave their consent to have their intimate images made available online."
Robert Angelini, the owner of wifelovers.com and the seven other breached sites, told Ars on Saturday morning that, in the 21 years they operated, fewer than 107,000 people posted to them. He said he didn't know how or why the almost 98-megabyte file contained more than 12 times that many email addresses, and he hasn't had time to examine a copy of the database that he received on Friday night. Still, three days after receiving notification of the hack, Angelini finally confirmed the breach and took down the sites on early Saturday morning. A notice on the just-shuttered sites warns users to change passwords on other sites, especially if they match the passwords used on the hacked sites. The affected sites "offer a variety of pictures that members say show their spouses," reports Ars. "It's not clear that all of the affected spouses gave their consent to have their intimate images made available online."
"A recovered 98MB file underscores the risks of trusting personal info to strangers."
Well, perhaps.
Or maybe it should read:
"A recovered 98MB file underscores the risks of doing things that will destroy your reputation and marriage."
Check your premises.
Did he just say "MD5"? I thought we're only at 36 years...
md5 is not so good, but not that bad.
Slashdot, fix the reply notifications... You won't get away with it...
>> If you RTFA
On SlashDot? You must be new here. Summary or it didn't happen.
Only my bank login is traceable to me, for the rest I use aliases. Even my ISP thinks I'm my cat.
If you have an acocunt for one of those sites... why on earth would you use your real e-mail address?
Why do you need a user name?
This is what burner e-mail addresses were created for anyway.
"That's the way to do it" - Punch
What idiot would give their real name and their normal e-mail address on a web-site like that?
Am I the only one amused that a piece is actually talking in gasped horror at 'megabytes' of data exposed? It just isn't a scale that you hear used much in outrage much anymore.