We were hacked. Several times over the past two weeks, in fact.
While all passwords are encrypted and salted, it's recommended that you change your password here when you can.
Everyone who got the e-mail should spam the **** out of GameWizard. If everyone here signed that account for one porn website, imagine how much he'd get per day!
Just a note, contrary to what MyIS wants you to believe your passwords were not compromised. They are stored on the server in an encrypted fashion, and not even the admin can decipher them.
Contrary to your knowledge, the passwords are not stored in an encrypted fashion. They are hashed strings (hashing is a method of one-way translation to make a string completely unrecognizable). This is quite different from encryption, as encryption can be decrypted while hashes aren't meant to be decrypted.
Hashes are one-way, which means you are not meant to ever figure out what they are. HOWEVER, MD5 hash algorithms are known to be flawed. SHA1 (a more formidable hashing algorithm) has been effectively tampered with as well.
Because the user data was stolen (taken without consent of TotalBF2.com), it is safe to believe that GameWizard will use that information in other ways that serves his purposes. For example, when you enter your password into a field, it gets submitted to the server. The server then hashes the password and checks it in the database. It is likely that GameWizard installed some simple code that will intercept the un-hashed password before it is checked in the database and compromise your information.
He will then have the ability to login to your accounts here and cause some more trouble. Unfortunately, there are people that use the same password for forums as they do bank accounts -- which is why this is a concern.
The proper authorities have already been informed. Now that we have proof, legal action is right around the corner.
Keep this in mind, GameWizard put his own endeavors above the right to privacy in this community. He took your data and misused for his own purposes. You never signed up that website, but it says that you have. All of your posts and thoughts are there without your consent.
Aside from the obviously blatant privacy and copyright violations, there are other boundaries that he has crossed which we will not get into here. As I said above, we do not take this lightly.
This site wouldn't even exist if it hadn't been for GameWizard. None of you would be here right now, nor part of the TotalBF2 community if it hadn't been for him, his hard work and complete dedication to making this site.
Some of you should keep that in mind while you bad-mouth him and take sides without even knowing the full story.
Contrary to your knowledge, the passwords are not stored in an encrypted fashion. They are hashed strings (hashing is a method of one-way translation to make a string completely unrecognizable). This is quite different from encryption, as encryption can be decrypted while hashes aren't meant to be decrypted.
Hashes are one-way, which means you are not meant to ever figure out what they are. HOWEVER, MD5 hash algorithms are known to be flawed. SHA1 (a more formidable hashing algorithm) has been effectively tampered with as well.
Because the user data was stolen (taken without consent of TotalBF2.com), it is safe to believe that GameWizard will use that information in other ways that serves his purposes. For example, when you enter your password into a field, it gets submitted to the server. The server then hashes the password and checks it in the database. It is likely that GameWizard installed some simple code that will intercept the un-hashed password before it is checked in the database and compromise your information.
He will then have the ability to login to your accounts here and cause some more trouble. Unfortunately, there are people that use the same password for forums as they do bank accounts -- which is why this is a concern.
The proper authorities have already been informed. Now that we have proof, legal action is right around the corner.
I feel sorry for anyone who buys your scare tactics...
This site wouldn't even exist if it hadn't been for GameWizard. None of you would be here right now, nor part of the TotalBF2 community if it hadn't been for him, his hard work and complete dedication to making this site.
Some of you should keep that in mind while you bad-mouth him and take sides without even knowing the full story.
Yeah, let's just forget the whole "stealing our passwords" thing, because being the creator of this site just absolutely trumps stealing the passwords of which we used to join, right?
Yeah, let's just forget the whole "stealing our passwords" thing, because being the creator of this site just absolutely trumps stealing the passwords of which we used to join, right?
Guys lets just stop. Let GameWizards parents and my lawyer deal with this offline.
Yeah, let's just forget the whole "stealing our passwords" thing, because being the creator of this site just absolutely trumps stealing the passwords of which we used to join, right?
He doesn't care about anybody password, and there's no way in hell he knows mine. I think right now everyone is getting angry at the wrong people. Who allowed him to walk right in? Who allowed him access after he left? Who failed to tighten security?
We process personal data about users of our site, through the use of cookies and other technologies, to deliver our services, personalize advertising, and to analyze site activity. We may share certain information about our users with our advertising and analytics partners. For additional details, refer to our Privacy Policy.
By clicking "I AGREE" below, you agree to our Privacy Policy and our personal data processing and cookie practices as described therein. You also acknowledge that this forum may be hosted outside your country and you consent to the collection, storage, and processing of your data in the country where this forum is hosted.
Comment