Hacking attempt on the forum
#1
I've discovered that someone is attempting to hack into people's accounts via brute force login attempts.  I.e., they are trying passwords.

If the password you use here is one you use somewhere else, I strongly suggest you change it immediately.  If they breach your account here, they will go about trying to log into other places with your same e-mail and password.

If you have anything in PM you don't want exposed, then copy it to your computer and delete it from your inbox.

In the meantime, I'll be taking some steps to help prevent this.
Reply
#2
Isn't there a way to block the hacker's IP or something?
Reply
#3
(01-11-2011, 12:38 AM)Vetus Ordo Wrote: Isn't there a way to block the hacker's IP or something?

They are using TOR which basically means they are hiding behind an anonymous network where their IP will change frequently.  I can block all of TOR, and while I would rather not, I'd also rather not have some k0dez k1dz script kiddie hacking passwords here.  So, I may do that if other things don't give him a hint.

Of course, that ruins it for everyone who has a legitimate reason to access the site via TOR, but he can answer to God for that.
Reply
#4
I don't know what TOR is. Do many fishies use it?
Reply
#5
(01-11-2011, 01:10 AM)Vetus Ordo Wrote: I don't know what TOR is. Do many fishies use it?

Very few.

https://www.torproject.org/
Reply
#6
I'm a hacker, and I resent this sort of misconception spreading.

http://www.catb.org/~esr/faqs/hacker-howto.html

..:
Reply
#7
(01-10-2011, 11:47 PM)QuisUtDeus Wrote: I've discovered that someone is attempting to hack into people's accounts via brute force login attempts.  I.e., they are trying passwords.

Is it a bot or a flesh bag?

Reply
#8
(01-11-2011, 09:41 AM)Rosarium Wrote: I'm a hacker, and I resent this sort of misconception spreading.

http://www.catb.org/~esr/faqs/hacker-howto.html

..:

True, but that cow is out of the barn.
Reply
#9
(01-11-2011, 09:42 AM)Rosarium Wrote:
(01-10-2011, 11:47 PM)QuisUtDeus Wrote: I've discovered that someone is attempting to hack into people's accounts via brute force login attempts.  I.e., they are trying passwords.

Is it a bot or a flesh bag?

Not sure.  It looks like a script that runs at semi-regular intervals.  Or someone with way too much time on their hands.
Reply
#10
(01-11-2011, 01:20 PM)QuisUtDeus Wrote:
(01-11-2011, 09:42 AM)Rosarium Wrote:
(01-10-2011, 11:47 PM)QuisUtDeus Wrote: I've discovered that someone is attempting to hack into people's accounts via brute force login attempts.  I.e., they are trying passwords.

Is it a bot or a flesh bag?

Not sure.  It looks like a script that runs at semi-regular intervals.  Or someone with way too much time on their hands.

Icecream?....    :laughing:
Reply




Users browsing this thread: 1 Guest(s)