Might want to change passwords

[Lakota]

Chances are it's an exploit/hijack with a known vulnerability that wasn't patched by some script-kiddies. Seems to be this Team R00t's style. If so, it shouldn't be down for long.

 

[chasepom]

Why people use legit email is beyond me. Come on people....

Saw the page was hacked so naturally came here to see what was up. Interesting we haven't heard from our admins yet.

 

[Lakota]

Yeah, one time Twitter could actually be useful!

 

[Fred Zed]

@FredZed

That depends. If the passwords are simply hashed, a good GPU or rainbow tables makes cracking the hash (converting it to text) easy. If the passwords are salted, it's next to impossible. There is still the matter of some people using a known personal email to log into these sites & having the database dumped by a hacker(s).

Take a look at https://ashley.cynic.al/ It allows any person to check to see if an email address had an account on Ashley Madison. One could claim they didn't sign up but...

Still this is not of much value to hacker unless the email address/ password combination is linked to some other important information, or is being used at other important websites that the hacker can identify.

 

[sumfingwong]

Sad about the site. My pooning email just received an email from a gmail account to access the website via some links. If people get these. Please delete the email!!

So it confirmed that they have mined the email lists and started email phishing emails.

Oh look. First post and member since 2008 haha

 

[Lakota]

That email with the links was legitimate and not a phishing email. There was come changes made to the structure and it outdated some of the previous links and users were having trouble accessing the site. Mouseover the links in the email and you can see they are legit, and not pointing to an alternate, phishing URL. I heard they're working on the site and it's expected to be back in a few days once strengthened and patched.

 

[Daemon]

On twitter they seem to be posting links under the little cow site and hashtag. I have not investigated more, but I suspect it is to create panic.

 

[fun4me]

That email with the links was legitimate and not a phishing email. There was come changes made to the structure and it outdated some of the previous links and users were having trouble accessing the site. Mouseover the links in the email and you can see they are legit, and not pointing to an alternate, phishing URL. I heard they're working on the site and it's expected to be back in a few days once strengthened and patched.

Well if a hackers powned the site he would put up a fake login page and collect usernames and passwords.

Oh look its my first post and I joined 2007.

 

[Warl0ck]

@lakota

Sorry, why does it matter if Twitter is useful or not? I'd hardly call Team R00t "script kiddies". They know who & what to target when system admin's get lazy with patching (and most of them do). A script kiddie is someone that doesn't understand what a tool does. A hacker IS someone that uses a tool, even if it's simple, and attacks. And CAF has been offline for a day. Hardly "reassuring" if you're advertising there or a posting member, no?

@FredZed. All information has value to a hacker....*trust no one*.

 

[Equity Market investor]

@lakota


@FredZed. All information has value to a hacker....*trust no one*.

Not if one uses Proxy's and a generic email. You'd be insane to use your " real " email lol. For me, that method has worked for years

Wow, in 3 weeks estimates, 2 sites are gone. Cow town and BC adult one. I sure hope Perb stays put.

 

[Jamonco]

A Secure Socket Layer goes a long way. I remember there being some discussion about "Little Cow" being exposed earlier this year and low and behold it was never implemented. Oops. Wondering if IP addresses are logged and at risk?

 

[alucard007]

I guess all those lady advertisers and paid members are screwed out of their money now?

 

[andrew111]

I noticed that right before CAF was hacked, Chillman's (who is/was the site administrator) posts, threads and profile page were all removed. I'm just wondering about the timing, could be just a coincidence.

 

[Slagathor]

I noticed that right before CAF was hacked, Chillman's (who is/was the site administrator) posts, threads and profile page were all removed. I'm just wondering about the timing, could be just a coincidence.

It is one of the first things a hacker will do as it cuts off Admin access and adds to the difficulty of getting things back under control. Not showing the hacked splash page anymore, currently redirecting to adultfriendfinder.

 

[PerbMod]

Time to close this up. Chillman had stepped back on CAF quite awhile ago and one of the mods was really the admin. There's no way of knowing how the hackers did it, but the root hack page is back up as of this moment. We won't be dwelling on this here any longer. Time to move on.

It's regrettable, but all are welcome to post in our Calgary, Edmonton and Prairie forums. Ladies, if you'd like to advertise, please contact Mark Service and make note of the rules for unpaid providers.