EvC Forum: Please Change Your Passwords

Ridicule is the only weapon which can be used against unintelligible propositions. Ideas must be distinct before reason can act upon them; and no man ever had a distinct idea of the trinity. It is the mere Abracadabra of the mountebanks calling themselves the priests of Jesus. -- Thomas Jefferson

For we know that our patchwork heritage is a strength, not a weakness. We are a nation of Christians and Muslims, Jews and Hindus -- and non-believers. -- Barack Obama

We see monsters where science shows us windmills. -- Phat

It has always struck me as odd that fundies devote so much time and effort into trying to find a naturalistic explanation for their mythical flood, while looking for magical explanations for things that actually happened. -- Dr. Adequate

This message is a reply to:
	Message 15 by Dr Adequate, posted 06-24-2010 4:14 PM		Dr Adequate has not yet responded

Replies to this message:
	Message 17 by DrJones*, posted 06-24-2010 6:31 PM		subbie has acknowledged this reply

DrJones*

Member

Posts: 1801

From: Edmonton, Alberta, Canada

Joined: 08-19-2004

Member Rating: 6.5

DrJones* Posts Only

Message 17 of 43 (566458)
06-24-2010 6:31 PM

Reply to: Message 16 by subbie
06-24-2010 4:46 PM

You might not store password in plain-text anymore, however your cookie should be implemented the same way.

Comparing md5_dbpass to md5_hashpass. Or better yet learn how to use sessions. I don't know why you code in perl and cgi. I would transition to php and code plugins and add-ons for punbb (fluxbb).

-nade

This message is a reply to:
	Message 16 by subbie, posted 06-24-2010 4:46 PM		subbie has acknowledged this reply

Replies to this message:
	Message 18 by Dr Adequate, posted 06-24-2010 6:34 PM		DrJones* has not yet responded

Dr Adequate

Member

Posts: 16083

Joined: 07-20-2006

Member Rating: 10.0

Dr Adequate Posts Only

Message 18 of 43 (566459)
06-24-2010 6:34 PM

Reply to: Message 17 by DrJones*
06-24-2010 6:31 PM

Or better yet learn how to use sessions. I don't know why you code in perl and cgi.

Because it's cheaper than hiring a dominatrix?

This message is a reply to:
	Message 17 by DrJones*, posted 06-24-2010 6:31 PM		DrJones* has not yet responded

DrJones*

Member

Posts: 1801

From: Edmonton, Alberta, Canada

Joined: 08-19-2004

Member Rating: 6.5

DrJones* Posts Only

Message 19 of 43 (566464)
06-24-2010 6:45 PM

So it appears by "my" post #17 that I am the person whose ID got hacked.

-The Real DrJones*

Replies to this message:
	Message 20 by DrJones*, posted 06-24-2010 7:04 PM	DrJones* has not yet responded
	Message 22 by Admin, posted 06-24-2010 8:07 PM	DrJones* has responded

DrJones*

Member

Posts: 1801

From: Edmonton, Alberta, Canada

Joined: 08-19-2004

Member Rating: 6.5

DrJones* Posts Only

Message 20 of 43 (566468)
06-24-2010 7:04 PM

Reply to: Message 19 by DrJones*
06-24-2010 6:45 PM

Member Name

rJones*
Password:a9s#2P3#

Change your e-mail so I don't get bullshit notifications anymore

This message is a reply to:
	Message 19 by DrJones*, posted 06-24-2010 6:45 PM		DrJones* has not yet responded

Replies to this message:
	Message 21 by CosmicChimp, posted 06-24-2010 7:06 PM		DrJones* has not yet responded

CosmicChimp

Member

Posts: 306

From: Muenchen Bayern Deutschland

Joined: 06-15-2007

CosmicChimp Posts Only

Message 21 of 43 (566470)
06-24-2010 7:06 PM

Reply to: Message 20 by DrJones*
06-24-2010 7:04 PM

Did you hack into anyone else's?

This message is a reply to:
	Message 20 by DrJones*, posted 06-24-2010 7:04 PM		DrJones* has not yet responded

Admin

Director

Posts: 12578

From: EvC Forum

Joined: 06-14-2002

Member Rating: 4.6

Admin Posts Only

Message 22 of 43 (566475)
06-24-2010 8:07 PM

Reply to: Message 19 by DrJones*
06-24-2010 6:45 PM

Please check your messages.

This message is a reply to:
	Message 19 by DrJones*, posted 06-24-2010 6:45 PM		DrJones* has responded

Replies to this message:
	Message 23 by DrJones*, posted 06-24-2010 8:34 PM		Admin has acknowledged this reply

DrJones*

Member

Posts: 1801

From: Edmonton, Alberta, Canada

Joined: 08-19-2004

Member Rating: 6.5

DrJones* Posts Only

Message 23 of 43 (566478)
06-24-2010 8:34 PM

Reply to: Message 22 by Admin
06-24-2010 8:07 PM

Thnaks for the restoration Percy

This message is a reply to:
	Message 22 by Admin, posted 06-24-2010 8:07 PM		Admin has acknowledged this reply

Admin

Director

Posts: 12578

From: EvC Forum

Joined: 06-14-2002

Member Rating: 4.6

Admin Posts Only

(1)

Message 24 of 43 (566531)
06-25-2010 7:11 AM

Reply to: Message 11 by nwr
06-24-2010 1:14 PM

This is fixed.

--	Percy
	EvC Forum Director

This message is a reply to:
	Message 11 by nwr, posted 06-24-2010 1:14 PM		nwr has acknowledged this reply

Admin

Director

Posts: 12578

From: EvC Forum

Joined: 06-14-2002

Member Rating: 4.6

Admin Posts Only

Message 25 of 43 (566721)
06-26-2010 7:49 AM

Reply to: Message 14 by CosmicChimp
06-24-2010 3:28 PM

CosmicChimp writes:

Who are these 'fine young gentlemen'?

As near as I can gather, high school students. One is in Toronto. They can be found on-line at:

URL: http://chat.mibbit.com/
Room: #clubhouse

Anyone can get in, though you can get booted. Someone gave me admin privileges for some reason.

They could be a very positive resource for us to the extent they're willing to share what they learn about our security holes.

--	Percy
	EvC Forum Director

This message is a reply to:
	Message 14 by CosmicChimp, posted 06-24-2010 3:28 PM		CosmicChimp has not yet responded

Replies to this message:
	Message 26 by Huntard, posted 07-06-2010 9:24 AM		Admin has acknowledged this reply

Huntard

Member (Idle past 341 days)

Posts: 2870

From: Limburg, The Netherlands

Joined: 09-02-2008

Huntard Posts Only

Message 26 of 43 (568489)
07-06-2010 9:24 AM

Reply to: Message 25 by Admin
06-26-2010 7:49 AM

Should we change our passwords again?

Also, I see you only suspended the asshole for 24 hours. Might want to change that.

This message is a reply to:
	Message 25 by Admin, posted 06-26-2010 7:49 AM		Admin has acknowledged this reply

nwr

Member

Posts: 5584

From: Geneva, Illinois

Joined: 08-08-2005

nwr Posts Only

Message 27 of 43 (568506)
07-06-2010 11:14 AM

In looking at Message 402, Did Mod cause the collapse of evcforum?, I see that Adminnemooseus is suspended indefinitely - probably the work of the hacker. And the color of his avatar looks wrong.

Replies to this message:
	Message 28 by Theodoric, posted 07-06-2010 11:19 AM		nwr has responded

Theodoric

Member

Posts: 5925

From: Northwest, WI, USA

Joined: 08-15-2005

Member Rating: 4.3

Theodoric Posts Only

Message 28 of 43 (568509)
07-06-2010 11:19 AM

Reply to: Message 27 by nwr
07-06-2010 11:14 AM

So is adminmod

This message is a reply to:
	Message 27 by nwr, posted 07-06-2010 11:14 AM		nwr has responded

Replies to this message:
	Message 29 by nwr, posted 07-06-2010 11:32 AM		Theodoric has not yet responded

nwr

Member

Posts: 5584

From: Geneva, Illinois

Joined: 08-08-2005

nwr Posts Only

Message 29 of 43 (568518)
07-06-2010 11:32 AM

Reply to: Message 28 by Theodoric
07-06-2010 11:19 AM

Checking the member list, I see AdminPD, AdminNosy and AdminSlev in the same condition.

This message is a reply to:
	Message 28 by Theodoric, posted 07-06-2010 11:19 AM		Theodoric has not yet responded

Replies to this message:
	Message 30 by AdminPD, posted 07-06-2010 12:17 PM		nwr has acknowledged this reply

AdminPD

Inactive Administrator

AdminPD Posts Only

Message 30 of 43 (568531)
07-06-2010 12:17 PM

Reply to: Message 29 by nwr
07-06-2010 11:32 AM

We're Back

We have been resurrected. So behave!

This message is a reply to:
	Message 29 by nwr, posted 07-06-2010 11:32 AM		nwr has acknowledged this reply

Replies to this message:
	Message 31 by cavediver, posted 07-06-2010 12:20 PM	AdminPD has not yet responded
	Message 40 by Dr Adequate, posted 07-06-2010 9:04 PM	AdminPD has not yet responded

Date format: mm-dd-yyyy

Timezone: ET (US)

Newer Topic | Older Topic

Do Nothing Button