Important: Security Breach (Please Read)

This forum is for Administrators to post news concerning the site and forums.
mith
Godfather
 
User avatar
Joined: March 27, 2002
Location: Plano, TX
Pronoun: He

Post Post #0  (ISO)  » Tue Nov 01, 2016 4:26 pm

Yesterday at about 3am EDT, an unknown actor was able to breach the mafiascum.net database, which includes posts in both public and private forums, as well as private messages between users. We don't know the perpetrator's intentions or who they are.

For all users who have logged in since the 3.0 upgrade a while back, passwords are salted and hashed with a decent algorithm, and users prior to this point have hashed passwords. (This means if you've logged in any time recently, your password is hard to crack, but not impossible through brute force.)

You, as a user should take these steps now:
1. Change your password on this site. In keeping with good security practices, you should not use the same password across websites.
2. If you are using the same password on this site on other websites, you should change those too, especially if you share a username or email address on those websites.
3. Notify us if you encounter any unusual access to your account.

As we learn more pertinent details, we'll let you know. We value your privacy, which is why we are releasing these details as a precautionary measure. If you have any information regarding this breach, please contact me by email.

We hope nothing worse comes from this, but we want you to be aware and able to prepare for every possibility and for you to be able to secure your data appropriately. We're implementing additional security measures to prevent recurrence of such a breach, so as to better protect you and the site. Thank you.

-mith

chamber
Cases are scummy
 
User avatar
Joined: November 20, 2005
Pronoun: He

Post Post #1  (ISO)  » Tue Nov 01, 2016 4:32 pm

Email addresses are stored as plain text. If you use the same password there as here~.
Taking a break from the site.

Andrius
The Baker
 
User avatar
Joined: February 16, 2010
Pronoun: He

Post Post #2  (ISO)  » Tue Nov 01, 2016 4:56 pm

Thank you for informing us, and for your continued support.

McMenno
Mafia Scum
 
User avatar
Joined: February 18, 2015
Location: In spaaaace
Pronoun: He

Post Post #3  (ISO)  » Tue Nov 01, 2016 5:03 pm

it was me

nah just kidding

AniX
Goon
 
User avatar
Joined: September 14, 2003
Location: Revolution Square...WE DID IT, FRIENDS!

Post Post #4  (ISO)  » Tue Nov 01, 2016 5:10 pm

Shotty warned us. We didn't listen. Now every Wendy's register in the country is aimed at us.
Official Gimmick List:
INVENTOR OF UPICK! PLAYS BY SENSE OF SMELL! ONE TRUE ADMIN OF MAFIASCUM! LORD OF THE 11TH HOUR! RADICAL SEX-NEGATIVE ASEXUAL!
The Announcement of Your Freedom

Alchemist21
Mafia Scum
 
User avatar
Joined: September 05, 2014
Location: North Carolina
Pronoun: He

Post Post #5  (ISO)  » Tue Nov 01, 2016 5:15 pm

I wouldn't be surprised if it was F-16. The ban thread mentions that he somehow managed to keep opening a closed thread (back before thread creators had the power to lock/unlock their own threads).

EDIT: I was wrong about that part.
Last edited by Alchemist21 on Tue Nov 01, 2016 5:57 pm, edited 1 time in total.
Beware of pretty faces that you find. A pretty face can hide an evil mind.
Oh, be careful what you say or you'll give yourself away.
Odds are you won't live to see tomorrow.


Elias_the_thief
Not Statistically Significant
 
User avatar
Joined: August 15, 2006
Location: Undisclosed.
Pronoun: He

Post Post #6  (ISO)  » Tue Nov 01, 2016 5:33 pm

Well on the bright side now I know the passwords to all my alts.
I play the games rul gud.

Firebringer
Survivor
 
User avatar
Joined: June 29, 2015
Location: Searching for Meaning

Post Post #7  (ISO)  » Tue Nov 01, 2016 5:45 pm

In post 4, AniX wrote:Shotty warned us. We didn't listen. Now every Wendy's register in the country is aimed at us.

QFT
What would growlithe do? Be nice so he gets a treat!
My style can best be described as tone reading combined with shit posting.

BROseidon
Expert Marxman
 
User avatar
Joined: April 18, 2013
Pronoun: He

Post Post #8  (ISO)  » Tue Nov 01, 2016 6:37 pm

Good thing my pw for the site was my old Linkedin one that was already leaked!

Cheery Dog
Kayak
 
User avatar
Joined: July 01, 2012
Location: OMG BALL!
Pronoun: They

Post Post #9  (ISO)  » Tue Nov 01, 2016 6:38 pm

Ah the timely reminder that I need to use my non-default password on sites I actually hang around on.

Although why I was still using it after a different site had these types of issues idk. I probably wouldn't have been had I been here back then.

So I assume I'm going to now get banned somewhere else I haven't used because I've forgotten sites I exist on Buu not sticking around long enough to care.
Life is always what it seems.

Majiffy
Go with the Flow
 
User avatar
Joined: November 23, 2011
Location: Buffalo, NY
Pronoun: He

Post Post #10  (ISO)  » Tue Nov 01, 2016 7:05 pm

Thanks for letting us know, Mith.

Were they able to access information such as PayPal account information or no? I would assume not but would be good to have an official answer regarding that.
Only playing in games at personal moderator and/or 50%+ playerlist request.

GTKAS Jiffy! (Part 1) || GTKAS Jerfy (The Sequel!) || How To Win Every Game At Mafiascum (The Flowchart) || In case anyone was unsure...
Svenskt Stål (23:38) majiffy, worst mod on ms? we talk to a surviving victim of his game

Ircher
Jack of All Trades
 
User avatar
Joined: November 09, 2015
Pronoun: He

Post Post #11  (ISO)  » Tue Nov 01, 2016 7:07 pm

RIP me.....
Ttyll Mafia - Concluded!
Voting Mafia - Night 1, 0 replacements
Nomic - Currently hosted by me

Wake88
Jack of All Trades
 
User avatar
Joined: August 03, 2013
Pronoun: He

Post Post #12  (ISO)  » Tue Nov 01, 2016 7:08 pm

Are there any indications on who this person is?
"It's wise to be... cautious... with Wake." — House*
"What Wake lacks in charisma, he makes up for it in pure analytic power." — Nosferatu*
Regarding ika & Silverwolf: A Respectful Complaint — Wake*

Realeo
Mafia Scum
 
User avatar
Joined: February 11, 2016
Location: Indonesia
Pronoun: He

Post Post #13  (ISO)  » Tue Nov 01, 2016 7:37 pm

In post 0, mith wrote:decent algorithm


And that algorithm is... (Please don't tell me it's MD5)
Blog about Mafia
holy fuck did realeo play me like a fiddle
PEDIT: HOW DOES "I WANT GUACAMOLE?" IS TOWN VIBE?

Majiffy
Go with the Flow
 
User avatar
Joined: November 23, 2011
Location: Buffalo, NY
Pronoun: He

Post Post #14  (ISO)  » Tue Nov 01, 2016 7:39 pm

I think we should just start using onion routing for everyone to access MS. Obviously we would not be allowed to have login names.

Imagine how much fun trying to play a game would be!
Only playing in games at personal moderator and/or 50%+ playerlist request.

GTKAS Jiffy! (Part 1) || GTKAS Jerfy (The Sequel!) || How To Win Every Game At Mafiascum (The Flowchart) || In case anyone was unsure...
Svenskt Stål (23:38) majiffy, worst mod on ms? we talk to a surviving victim of his game

Realeo
Mafia Scum
 
User avatar
Joined: February 11, 2016
Location: Indonesia
Pronoun: He

Post Post #15  (ISO)  » Tue Nov 01, 2016 7:41 pm

Blog about Mafia
holy fuck did realeo play me like a fiddle
PEDIT: HOW DOES "I WANT GUACAMOLE?" IS TOWN VIBE?

Zulfy
Mafia Scum
 
User avatar
Joined: October 03, 2015
Location: Central Time
Pronoun: He

Post Post #16  (ISO)  » Tue Nov 01, 2016 8:36 pm

I am so happy about this.
2 A 2 B B
2 B 2 B A

Zachrulez
Jack of All Trades
 
User avatar
Joined: December 05, 2008
Location: Minnesota
Pronoun: He

Post Post #17  (ISO)  » Tue Nov 01, 2016 9:35 pm

If you have the IP address of the perpetrator, you can probably match it or at least greatly narrow down who it might be by going through the list of users. (Or if you want to assume it's someone who's been banned that would probably be a lot faster.)

Majiffy
Go with the Flow
 
User avatar
Joined: November 23, 2011
Location: Buffalo, NY
Pronoun: He

Post Post #18  (ISO)  » Tue Nov 01, 2016 9:37 pm

I feel like anyone invasively attacking the site would probably be keen enough to take a number of precautions masking their IP.
Only playing in games at personal moderator and/or 50%+ playerlist request.

GTKAS Jiffy! (Part 1) || GTKAS Jerfy (The Sequel!) || How To Win Every Game At Mafiascum (The Flowchart) || In case anyone was unsure...
Svenskt Stål (23:38) majiffy, worst mod on ms? we talk to a surviving victim of his game

Zachrulez
Jack of All Trades
 
User avatar
Joined: December 05, 2008
Location: Minnesota
Pronoun: He

Post Post #19  (ISO)  » Tue Nov 01, 2016 9:43 pm

You'd be surprised how often people forget to do the simple things.

InflatablePie
Accept When He Does
 
User avatar
Joined: December 23, 2009
Location: NC Commune
Pronoun: He

Post Post #20  (ISO)  » Tue Nov 01, 2016 9:44 pm

idk if you can mask your IP while using a Wendy's POS
If you don't know how to lie, then how do you know when you're being lied to?

I always thought I might be bad, now I'm sure that it's true; 'cause, I think you're so good, and I'm nothing like you.
Look at you go, I just adore you, I wish that I knew... what makes you think I'm so special?

Sudo_Nym
Pseudo Newbie
 
User avatar
Joined: March 13, 2007
Location: Washington
Pronoun: They

Post Post #21  (ISO)  » Tue Nov 01, 2016 9:56 pm

In post 20, InflatablePie wrote:idk if you can mask your IP while using a Wendy's POS


He's spoofed his location to trick us into thinking the attack came from McDonald's.
One time, back in 'nam, Sudo was set upon by an entire squadron of charlies. He challenged them all to a game of Pictionary, which he won resoundingly. The charlies were forced to not only surrender the skirmish, but also their world-famous chili recipe, which Sudo sold to Texas for a hefty profit. Sudo is a master of diplomacy.

Majiffy
Go with the Flow
 
User avatar
Joined: November 23, 2011
Location: Buffalo, NY
Pronoun: He

Post Post #22  (ISO)  » Tue Nov 01, 2016 10:07 pm

In post 19, Zachrulez wrote:You'd be surprised how often people forget to do the simple things.

Yeah but...

That's like a recording engineer going to track a band and forgetting to plug in the microphone.

Some things you just do out of habit.
Only playing in games at personal moderator and/or 50%+ playerlist request.

GTKAS Jiffy! (Part 1) || GTKAS Jerfy (The Sequel!) || How To Win Every Game At Mafiascum (The Flowchart) || In case anyone was unsure...
Svenskt Stål (23:38) majiffy, worst mod on ms? we talk to a surviving victim of his game

SirCakez
Survivor
 
User avatar
Joined: June 18, 2015
Pronoun: He

Post Post #23  (ISO)  » Tue Nov 01, 2016 10:10 pm

Thankfully I have an absurdly long and nonsensical email password
Get rekt hacker(s?)
Get to know a Cakez!

RachMarie
HUGS ♥
 
User avatar
Joined: January 09, 2012
Location: Theocracy of Tennessee
Pronoun: She

Post Post #24  (ISO)  » Tue Nov 01, 2016 10:15 pm

Thanks for letting us know mith
BRAND NEW Get to know me viewtopic.php?f=61&t=69243
Like the phoenix I am rising from the ashes
chilledtea: We played bad on day 2 when we lynched rach.
YT Channel https://www.youtube.com/channel/UC0psF_ZJMb5lkrYvBMYrJpw/videos

Next
[ + ]

Return to News