HACKED By SMAIL MAX

wheeliemachine said:
I asked a few people more knowledgeable than me about how to keep track of all the randomly generated strong passwords you'd use on different sites (because it's an option I'm going to start using). Three out of three people recommended http://keepass.info lol. I haven't asked about which random password generator to use but random.org has one that seems to be popular. That'll allow you to use different strong passwords on each site that you use and keep track of them easily. If you want to be able to generate random e-mail addresses for each site you use look for the "catch all" option the domain you purchased ;) I recommend NameCheap over GoDaddy, mostly for ethical reasons, not price. This link (non aff) will get you WHOIS Guard free for a year with NameCheap, $10/yr for the domain name: http://www.shivarweb.com/go/namecheap/

Be safe.
Click to expand...

I use Keepass on my thumbdrive, android tablet and phone.

You don't need a Password Generator, The keepass software comes with one.


BUT if you want REAL random passwords, check https://www.grc.com/passwords.htm . As you can see it's HTTPS so the traffic is encrypted... no snooping.
 
RockerGuy said:
Jaime is that true? Lol
Click to expand...

Just go to Skyview and ask him in person lol. The guy is a computer genius, built my PC.. but I don't think he'd waste the time to screw with this forum. He knows way to many people here.
 
Splash said:
I use Keepass on my thumbdrive, android tablet and phone.

You don't need a Password Generator, The keepass software comes with one.


BUT if you want REAL random passwords, check https://www.grc.com/passwords.htm . As you can see it's HTTPS so the traffic is encrypted... no snooping.
Click to expand...
Nice! Thanks for the info. I use GRC SheildsUp for uPnP and open port security checks so I'd for sure trust their password generator too :) I hadn't set up keepass yet, so didn't know it included a generator, that's great news.

Thanks again.
 
IMHO anyone running any web site software that is popular MUST stay on top with all security updates.
I do not know if that was done here, it will not always work.
Gamble is not to get compromised in the time before there is a fix for the exploit, released and installed.
If owner is not on top of updates it is just matter of time before site is compromised.

No matter what you install, it will get compromised if it is not maintained. Mostly by automatic scanners.
If you install server OS and put it online unpatched chances are it will be hacked before 24 hours is gone.
Good part of internet traffic is bots scanning for holes and you bet that they get latest updates...

Joomla, wordpress, forum software. It is massive source of machines to hack and next thing is spam, scam etc.
I do not envy anyone who needs to keep it running...


http://www.pcworld.com/article/2064...r-login-credentials-vbulletin-maker-says.html

Actually vbulletin maker ( forum vendor as far as I can tell ) got hacked themselves.


The company warned customers in August to delete the “install” directory from their vBulletin deployments because of a potential exploit vector.

http://krebsonsecurity.com/2013/10/thousands-of-sites-hacked-via-vbulletin-hole/

Internet Brands Inc. warned users that failing to remove the “/install” and “/core/install” directories on sites running 4.x and 5.x versions of the forum software could render them easily hackable.
 
Splash said:
I use Keepass on my thumbdrive, android tablet and phone.

You don't need a Password Generator, The keepass software comes with one.


BUT if you want REAL random passwords, check https://www.grc.com/passwords.htm . As you can see it's HTTPS so the traffic is encrypted... no snooping.
Click to expand...

I'm using STRIP for IOS. I read a lot of reviews and almost every other IOS password manager stores unencrypted (or tragically weakly encrypted) data. It will generate random passwords for you if you want (4 to 32 character,ability to limit character set etc). I haven't found any major reason to dislike it yet (I would like to edit/create the passwords using a computer, but strip only works on IOS devices and backs us the encrypted file so there is no access from a computer, this is probably a good thing, but I still prefer typing on a keyboard).
 
GreyGhost said:
I'm using STRIP for IOS. I read a lot of reviews and almost every other IOS password manager stores unencrypted (or tragically weakly encrypted) data. It will generate random passwords for you if you want (4 to 32 character,ability to limit character set etc). I haven't found any major reason to dislike it yet (I would like to edit/create the passwords using a computer, but strip only works on IOS devices and backs us the encrypted file so there is no access from a computer, this is probably a good thing, but I still prefer typing on a keyboard).
Click to expand...

There's only 2 password managers I would trust on iOS... lastpass and Keepass.


If you care about about security listen to this
http://www.youtube.com/watch?feature=player_detailpage&v=7F_0MLKkTtU#t=3225

here's info on lastpass
http://www.youtube.com/watch?feature=player_detailpage&v=r9Q_anb7pwg#t=3164
 
Last edited:
wheeliemachine said:
I asked a few people more knowledgeable than me about how to keep track of all the randomly generated strong passwords you'd use on different sites (because it's an option I'm going to start using). Three out of three people recommended http://keepass.info lol. I haven't asked about which random password generator to use but random.org has one that seems to be popular. That'll allow you to use different strong passwords on each site that you use and keep track of them easily. If you want to be able to generate random e-mail addresses for each site you use look for the "catch all" option the domain you purchased ;) I recommend NameCheap over GoDaddy, mostly for ethical reasons, not price. This link (non aff) will get you WHOIS Guard free for a year with NameCheap, $10/yr for the domain name: http://www.shivarweb.com/go/namecheap/

Be safe.
Click to expand...
hi jamie
 
Matthew.Tremayne said:
Just go to Skyview and ask him in person lol. The guy is a computer genius, built my PC.. but I don't think he'd waste the time to screw with this forum. He knows way to many people here.
Click to expand...

I build my own pc, doesn't make me a programmer/hacker
 
Feels like the forum is still h4xX0r3d. I keep getting repeated new posts and have to type my password in, errors on posts... not good.
 
Shaman said:
Feels like the forum is still h4xX0r3d. I keep getting repeated new posts and have to type my password in, errors on posts... not good.
Click to expand...

Quick links is hidden behind the blue gtamorcycle.com background for me on IE, Firefox and Chrome. Advanced search is broken on two different computers.

I'm not complaining hear, just concurring that things are still messed up. I sure as hell wouldn't want to run a forum, so much effort with so little reward.
 
I checked the site at work today and it tripped our fireeye alerts. Looks like there is some kind of exploit scanner on the site possibly embedded in an image could not really be to sure. Something is defiantly still going on.

Make sure you are patched up and running a good virus scanner. Don't use it on a secure network for a while
 
Shaman said:
Feels like the forum is still h4xX0r3d. I keep getting repeated new posts and have to type my password in, errors on posts... not good.
Click to expand...

Can you please report the posts with errors and repeated posts so we can look into it?

Thanks
 
When uploading image attachments:

Warning: Declaration of vB_Image_Magick::fetch_image_info() should be compatible with that of vB_Image_Abstract::fetch_image_info() in ..../includes/class_image.php on line 1256

Warning: Declaration of vB_Image_GD::fetch_image_info() should be compatible with that of vB_Image_Abstract::fetch_image_info() in ..../includes/functions_log_error.php on line 2488

When clicking on the Advanced Search button:

Warning: Declaration of vBForum_Item_SocialGroupMessage::getLoadQuery() should be compatible with that of vB_Model::getLoadQuery() in ..../packages/vbforum/item/socialgroupmessage.php on line 261
 
Am I the only one seeing posts from the future? For instance Rob MacLennan's post on 3D printers from 7:02 pm today (message posted at 6:16 pm).
 
Last edited by a moderator:
GreyGhost said:
Am I the only one seeing posts from the future? For instance Rob MacLennan's post on 3D printers from 7:02 pm today (message posted at 6:16 pm).
Click to expand...

Shows as posted at 6:02 for me. Maybe your computer's time zone and DST settings are out of whack?

Also check your profile's "General Settings" for the selected time zone.
 
Last edited:
Back
Top Bottom