| Author |
Message |
Susann Moderator

Joined: Dec 19, 2004 Posts: 3132 Location: Germany:Moderator German NukeSentinel Support
|
Posted:
Mon Apr 26, 2010 4:21 pm |
|
Someone offered hacked MSN passwords not long time ago. I don´t have the list but I think I can still get it. I just wonder that such things are still so easy when the protection of software is always better and better.
Do you keep your passwords at different sites or do you change it often ?
It looks like its better to change it montly or maybe all 3 months. |
|
|
|
 |
slackervaara Worker


Joined: Aug 26, 2007 Posts: 234
|
Posted:
Tue Apr 27, 2010 12:13 am |
|
With PHP-Nuke and Sentinel one can see if someone else is using an account with Tracked Users and look at ip-addresses associated with it. |
|
|
|
 |
Susann Moderator

Joined: Dec 19, 2004 Posts: 3132 Location: Germany:Moderator German NukeSentinel Support
|
Posted:
Tue Apr 27, 2010 9:41 am |
|
No this has nothing to do with NukeSentinel. |
|
|
|
 |
eldorado Involved


Joined: Sep 10, 2008 Posts: 366 Location: France
|
Posted:
Fri Apr 30, 2010 7:59 am |
|
I know this is a banned practise. But of of my friend got hold of a (gaming) website 2 years ago with it's 30,000 users.
The old webmaster stored the passwords in clear-text and md5 hashes aswell. The table was immediately deleted as to respect user's privacy. However we contacted the webmaster as to ask why he had such data. He revealed that 70% of the registration emails were either hotmail's or gmail's and that sometimes he "checked" whether or not the passwords matched. (Something about a routine check and 50% match were mentionned during our conversation over skype. )
The other reason why he was storing md5 and clear-text was to submit these to Rainbow sites. Over 10k submitted hashes is some kind of huge. Enough to download back a Tb of data for personal use on certain site  |
|
|
|
 |
|
|
|
|