fed up of hackers

[wupwup]

its not funny any more. i had an old PSN account i havnt used for 3 years and they could well have taken my credit card info. im just looking out for anything on my statement. ive had my hotmail, bioware, and now TWC account hacked. its just not funny any more.

p.s. im not blaming you TWC, i know its out of your control, i'm just pissed off that its happening all the time to everything.

[Freddie]

I wonder how these hackers are breaking and cracking the passwords? I'm guessing they must be using some sort of mass network force hack with thousands of computers dedicated to force hacking passwords. It's time we started making an example of these people and sling their hides into jail for a long, long time the sort of data that's being compromised and sold on is eye watering.

[SonOfCrusader76]

I wonder how these hackers are breaking and cracking the passwords? I'm guessing they must be using some sort of mass network force hack with thousands of computers dedicated to force hacking passwords. It's time we started making an example of these people and sling their hides into jail for a long, long time the sort of data that's being compromised and sold on is eye watering.

Amen!

[Crazyeyesreaper]

they are using brute force methods, they can buy cloud computing resources for extremely cheap then brute force with it its cheap and effective compared to other methods.

[Top-Tier-Tech]

they are using brute force methods, they can buy cloud computing resources for extremely cheap then brute force with it its cheap and effective compared to other methods.

Which is why more secure sites make you wait 15 minutes+ if you don't enter the correct password in x number of tries.

[GrnEyedDvl]

I wonder how these hackers are breaking and cracking the passwords? I'm guessing they must be using some sort of mass network force hack with thousands of computers dedicated to force hacking passwords.

It was a simple brute force on someones simple password. It probably took all of 10 seconds.

Which is why more secure sites make you wait 15 minutes+ if you don't enter the correct password in x number of tries.

TWC does this too. That has absolutely nothing to do with what happened here.

I find myself explaining this far too many times because people simply do not read threads, it was not done through the site login interface. Its what is known as an SQL Injection, which basically lets a hacker access the database as though it was the website software, and read parts of it. In some cases write to it.

So then the hacker runs a query that selects all user names and passwords, and then stores them on his local machine. Now he has all the time in the world to try and brute force the password hashes. Obviously he concentrates on accounts that have administrative access. Once he cracks one, he then uses that information to login and do whatever he wants.

Password policies and lockouts for failed logins have nothing to do with it. It was simply a hole in the code that let him read the database.

It's time we started making an example of these people and sling their hides into jail for a long, long time the sort of data that's being compromised and sold on is eye watering.

There are far too many of them to go after them all, but I agree with the sentiment.

[wupwup]

the problem is we cant crack down on them without major monitoring of the internet, and i already feel like the guys at google are watching me and laughing at my random searches. its just a matter of time before the governament controls the internet and censorship starts. from there its only a matter of time before 1984 happens

edit: thats only slightly sarcastic, by brute force you meen they jsut get a program to enter every combination?

[GrnEyedDvl]

edit: thats only slightly sarcastic, by brute force you meen they jsut get a program to enter every combination?

Basically, though they also have to run it through the same algorithm used by vBulletin to get the same hash values.

[irishron]

That's it.