Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - Other
Author Message
Susann
Moderator


Joined: Dec 19, 2004
Posts: 3191
Location: Germany:Moderator German NukeSentinel Support

PostPosted: Tue Feb 05, 2008 6:37 am Reply with quote

I was informed today thats better to change my data like password and e-mail address because the website was attacked through brute force or something like that and they said its possible that all passwords and e-mail addresses are stolen.
No, there isn´t a new security hole in phpBB.
Just curious how do I detect when my database is also abused beneed Nuke Sentinel bans.


Last edited by Susann on Tue Feb 05, 2008 2:17 pm; edited 1 time in total 
View user's profile Send private message
evaders99
Former Moderator in Good Standing


Joined: Apr 30, 2004
Posts: 3221

PostPosted: Tue Feb 05, 2008 10:13 am Reply with quote

Hmm.. its one of those things that you say, good luck. Hopefully no one had any sensitive information in their profiles. You'd probably want to disclose the security breach and have people reauthenticate. One way would be to reset all passwords randomly to temporary passwords and distribute via email.

I'm assuming they got your password hashes, in which case they can possibly forge user and admin cookies. Hard to detect these from valid ones, which is why changing the passwords first would be necessary.

_________________
- Only registered users can see links on this board! Get registered or login! -

Need help? Only registered users can see links on this board! Get registered or login! 
View user's profile Send private message Visit poster's website
Susann
PostPosted: Tue Feb 05, 2008 3:11 pm Reply with quote

I believe such things happens often but the registered members are not always informed. Its the second time within several years that I was informed I have to change my data because of such things. Its a criminal conduct and alone with the stolen e-mail addresses they can make money.
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> Security - Other

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©