Jump to content

Database Breach - An Update


Dark0ne

Recommended Posts

In response to post #32176955.


  Reveal hidden contents


Nexus forums is part of NexusMods, and it is on the forums you change your password/e-mail.
Link to comment
Share on other sites

  • Replies 547
  • Created
  • Last Reply

Top Posters In This Topic

Plenty of laws on plenty of different countries, require that you inform all users with a direct e-mail message to them to inform them that their personal data has been breached. This gives them the notice to change their passwords and prevent further harm. Majority of users are stupid users and reuse their passwords elsewhere. Considering it's an old leak; the damage has already been done.

 

Posting a message on a board that only active people see is only going to autofallate you. Try telling it you 3.9 million people and see how they respond.

 

That being said. You have failed to uphold basic security stringent practice and got popped thanks to a sql injection. In cybersec terms that's basic amateur hour. Following a basic course on sql injection could have prevented it. Then again installing IPBoard doesn't take a brain.

 

 

I want the option to delete my account or you to remove me from the SQL tables. You have disabled the delete option for the user to have this ability from the IPBOARD software your running. Which says enough about your coding skills.

 

 

Using humble brags that u got 4 million members, guess what, the overwhelming majority aren't active. You are basically running a honeypot and an attractive target for scriptkiddies and are even aiding them by not allowing removal.

 

 

I can tell you that i have three 0days on IPboard. One through xml injection, one through brute forcing the an sql string to retrieve user data and a reflected cross site scripting method.

 

 

As such it is a garentee it will happen again, and you won't even notice because your to stupid to look at server logs and put your trust in a s#*! CMS.

 

Peace.

 

Link to comment
Share on other sites

In response to post #32287250.


  Reveal hidden contents


+1 internets for outstanding raginess
+1 internets for citing "laws on plenty of different countries" in a vaguely threatening manner
+1 internets for intentionally(?) misusing the the term "humblebrag"

-1 internets for misspelling auto-fellate; if there's one detail you really ought to get right, it's this one
Link to comment
Share on other sites

In response to post #31699195. #31709590, #31710865, #31717215, #31727420, #31727725, #31727755, #31735675, #31736475, #31737125, #31745975, #31747430, #31762590, #31770575, #31770655, #31770875, #31775185, #31778925, #31779245, #31780640, #31785130, #31785185, #31786765, #31806700, #31808850, #31811630, #31817170, #31846715, #31849190, #31856815, #31866030, #31877395, #31877985, #31881445, #31885980, #31893710, #31897225, #31899965, #31901575, #31906245, #31910235, #31914830, #31930150, #31951615, #31978895, #31980730, #31990045, #31998065, #32076080, #32098525, #32104420, #32105645, #32132805 are all replies on the same post.


  Reveal hidden contents


+1
I'm not what I'd call an active "member" of the Nexus communicate, but I am a very active user of the Nexus sites, and therefore greatly appreciate transparency like this.
Link to comment
Share on other sites

In response to post #31699195. #31709590, #31710865, #31717215, #31727420, #31727725, #31727755, #31735675, #31736475, #31737125, #31745975, #31747430, #31762590, #31770575, #31770655, #31770875, #31775185, #31778925, #31779245, #31780640, #31785130, #31785185, #31786765, #31806700, #31808850, #31811630, #31817170, #31846715, #31849190, #31856815, #31866030, #31877395, #31877985, #31881445, #31885980, #31893710, #31897225, #31899965, #31901575, #31906245, #31910235, #31914830, #31930150, #31951615, #31978895, #31980730, #31990045, #31998065, #32076080, #32098525, #32104420, #32105645, #32132805, #32291890 are all replies on the same post.


  Reveal hidden contents


- Edited by Guest
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.

×
×
  • Create New...