Important: Security Breach (Please Read)

This forum is for Administrators to post news concerning the site and forums.
Post Reply
User avatar
mith
mith
Godfather
User avatar
User avatar
mith
Godfather
Godfather
Posts: 9267
Joined: March 27, 2002
Location: McKinney, TX
Happy Scumday!
Contact:

Important: Security Breach (Please Read)

Post Post #0 (ISO) » Tue Nov 01, 2016 10:26 am

Post by mith »

Yesterday at about 3am EDT, an unknown actor was able to breach the mafiascum.net database, which includes posts in both public and private forums, as well as private messages between users. We don't know the perpetrator's intentions or who they are.

For all users who have logged in since the 3.0 upgrade a while back, passwords are salted and hashed with a decent algorithm, and users prior to this point have hashed passwords. (This means if you've logged in any time recently, your password is hard to crack, but not impossible through brute force.)

You, as a user should take these steps now:

1.
Change your password on this site. In keeping with good security practices, you should not use the same password across websites.

2. If you are using the same password on this site on other websites, you should change those too, especially if you share a username or email address on those websites.
3. Notify us if you encounter any unusual access to your account.

As we learn more pertinent details, we'll let you know. We value your privacy, which is why we are releasing these details as a precautionary measure. If you have any information regarding this breach, please contact me by email.

We hope nothing worse comes from this, but we want you to be aware and able to prepare for every possibility and for you to be able to secure your data appropriately. We're implementing additional security measures to prevent recurrence of such a breach, so as to better protect you and the site. Thank you.

-mith
User avatar
chamber
chamber
Cases are scummy
User avatar
User avatar
chamber
Cases are scummy
Cases are scummy
Posts: 10703
Joined: November 20, 2005

Post Post #1 (ISO) » Tue Nov 01, 2016 10:32 am

Post by chamber »

Email addresses are stored as plain text. If you use the same password there as here~.
Taking a break from the site.
User avatar
Andrius
Andrius
The Baker
User avatar
User avatar
Andrius
The Baker
The Baker
Posts: 12806
Joined: February 16, 2010

Post Post #2 (ISO) » Tue Nov 01, 2016 10:56 am

Post by Andrius »

Thank you for informing us, and for your continued support.
"This is the true face of a man who plays paladin."
User avatar
McMenno
McMenno
they/them
One For Aren't-We-All
User avatar
User avatar
McMenno
they/them
One For Aren't-We-All
One For Aren't-We-All
Posts: 5159
Joined: February 18, 2015
Pronoun: they/them
Location: In spaaaace

Post Post #3 (ISO) » Tue Nov 01, 2016 11:03 am

Post by McMenno »

it was me

nah just kidding
User avatar
AniX
AniX
None
UCalled
User avatar
User avatar
AniX
None
UCalled
UCalled
Posts: 3137
Joined: September 14, 2003
Pronoun: None
Contact:

Post Post #4 (ISO) » Tue Nov 01, 2016 11:10 am

Post by AniX »

Shotty warned us. We didn't listen. Now every Wendy's register in the country is aimed at us.
Official Gimmick List:
INVENTOR OF UPICK!
LORD OF THE 11TH HOUR!
ASEXUAL!
KING SCAR APOLOGIST!
DREAMER OF THE NE0N DREAM (SUPP 2021 LAST PLACE WINNER)!


I have donned the
RED CROWN
User avatar
Alchemist21
Alchemist21
He/Him
Jack of All Trades
User avatar
User avatar
Alchemist21
He/Him
Jack of All Trades
Jack of All Trades
Posts: 8801
Joined: September 5, 2014
Pronoun: He/Him
Location: North Carolina

Post Post #5 (ISO) » Tue Nov 01, 2016 11:15 am

Post by Alchemist21 »

I wouldn't be surprised if it was F-16. The ban thread mentions that he somehow managed to keep opening a closed thread
(back before thread creators had the power to lock/unlock their own threads).


EDIT: I was wrong about that part.
Last edited by Alchemist21 on Tue Nov 01, 2016 11:57 am, edited 1 time in total.
User avatar
Elias_the_thief
Elias_the_thief
He/Him
Not Statistically Significant
User avatar
User avatar
Elias_the_thief
He/Him
Not Statistically Significant
Not Statistically Significant
Posts: 3194
Joined: August 15, 2006
Pronoun: He/Him
Location: Maryland.

Post Post #6 (ISO) » Tue Nov 01, 2016 11:33 am

Post by Elias_the_thief »

Well on the bright side now I know the passwords to all my alts.
I play the games rul gud.
User avatar
Firebringer
Firebringer
Trail Blazer
User avatar
User avatar
Firebringer
Trail Blazer
Trail Blazer
Posts: 52501
Joined: June 28, 2015
Location: woofbringer
Contact:

Post Post #7 (ISO) » Tue Nov 01, 2016 11:45 am

Post by Firebringer »

In post 4, AniX wrote:Shotty warned us. We didn't listen. Now every Wendy's register in the country is aimed at us.
QFT
Show
"You are the Joker of mafia players" - Oversoul
"last time I was scum with Firebringer
his first post in the scum PT was "yes I rolled scum!"
I decided to post "haha just don't post that in the main thread", but to get up to date on the main thread first.

His first post in the main thread was "yes I rolled scum!" -popsofctown
User avatar
BROseidon
BROseidon
Expert Marxman
User avatar
User avatar
BROseidon
Expert Marxman
Expert Marxman
Posts: 8242
Joined: April 18, 2013

Post Post #8 (ISO) » Tue Nov 01, 2016 12:37 pm

Post by BROseidon »

Good thing my pw for the site was my old Linkedin one that was already leaked!
User avatar
Cheery Dog
Cheery Dog
Kayak
User avatar
User avatar
Cheery Dog
Kayak
Kayak
Posts: 8035
Joined: June 30, 2012
Location: OMG BALL!

Post Post #9 (ISO) » Tue Nov 01, 2016 12:38 pm

Post by Cheery Dog »

Ah the timely reminder that I need to use my non-default password on sites I actually hang around on.

Although why I was still using it after a different site had these types of issues idk. I probably wouldn't have been had I been here back then.

So I assume I'm going to now get banned somewhere else I haven't used because I've forgotten sites I exist on Buu not sticking around long enough to care.
Holder of the Longest Continuous Weekly Mafiascum Post Record. 1 July 2012 - 16 Feb 2023
*It may be held by someone else if you discount the major downtime in 2012 and 2014, I'm not doing the research.
User avatar
Majiffy
Majiffy
Go with the Flow
User avatar
User avatar
Majiffy
Go with the Flow
Go with the Flow
Posts: 23825
Joined: November 23, 2011
Location: Memphis, TN
Contact:

Post Post #10 (ISO) » Tue Nov 01, 2016 1:05 pm

Post by Majiffy »

Thanks for letting us know, Mith.

Were they able to access information such as PayPal account information or no? I would assume not but would be good to have an official answer regarding that.
Only playing in games at personal moderator and/or 50%+ playerlist request.


How To Win Every Game At Mafiascum (The Flowchart)
||
In case anyone was unsure...
Svenskt Stål (23:38) majiffy, worst mod on ms? we talk to a surviving victim of his game
User avatar
Ircher
Ircher
He / Him / His
What A Grand Idea
User avatar
User avatar
Ircher
He / Him / His
What A Grand Idea
What A Grand Idea
Posts: 15170
Joined: November 9, 2015
Pronoun: He / Him / His
Location: CST/CDT

Post Post #11 (ISO) » Tue Nov 01, 2016 1:07 pm

Post by Ircher »

RIP me.....
Links: User Page | GTKAS | Ratings
Do you have questions, ideas, or feedback for the Scummies? Please pm me!
Hosting: The Grand Neighborhood [In Signups: 6/9]
User avatar
Wake1
Wake1
Jack of All Trades
User avatar
User avatar
Wake1
Jack of All Trades
Jack of All Trades
Posts: 8684
Joined: August 3, 2013

Post Post #12 (ISO) » Tue Nov 01, 2016 1:08 pm

Post by Wake1 »

Are there any indications on who this person is?
"It's wise to be... cautious... with Wake."
— House*
"What Wake lacks in charisma, he makes up for it in pure analytic power."
— Nosferatu*
User avatar
Realeo
Realeo
Jack of All Trades
User avatar
User avatar
Realeo
Jack of All Trades
Jack of All Trades
Posts: 5238
Joined: February 11, 2016
Location: Indonesia

Post Post #13 (ISO) » Tue Nov 01, 2016 1:37 pm

Post by Realeo »

In post 0, mith wrote:decent algorithm
And that algorithm is... (Please don't tell me it's MD5)
"The debate on whether short multi postings or a long wall of post is good or not is like a debate on gun control--we would never understand each other and we have to make peace with it." -Realeo

I'm mabye a serious player, but I'm capable of joke. Ok?
User avatar
Majiffy
Majiffy
Go with the Flow
User avatar
User avatar
Majiffy
Go with the Flow
Go with the Flow
Posts: 23825
Joined: November 23, 2011
Location: Memphis, TN
Contact:

Post Post #14 (ISO) » Tue Nov 01, 2016 1:39 pm

Post by Majiffy »

I think we should just start using onion routing for everyone to access MS. Obviously we would not be allowed to have login names.

Imagine how much fun trying to play a game would be!
Only playing in games at personal moderator and/or 50%+ playerlist request.


How To Win Every Game At Mafiascum (The Flowchart)
||
In case anyone was unsure...
Svenskt Stål (23:38) majiffy, worst mod on ms? we talk to a surviving victim of his game
User avatar
Realeo
Realeo
Jack of All Trades
User avatar
User avatar
Realeo
Jack of All Trades
Jack of All Trades
Posts: 5238
Joined: February 11, 2016
Location: Indonesia

Post Post #15 (ISO) » Tue Nov 01, 2016 1:41 pm

Post by Realeo »

"The debate on whether short multi postings or a long wall of post is good or not is like a debate on gun control--we would never understand each other and we have to make peace with it." -Realeo

I'm mabye a serious player, but I'm capable of joke. Ok?
User avatar
Zulfy
Zulfy
Mafia Scum
User avatar
User avatar
Zulfy
Mafia Scum
Mafia Scum
Posts: 3899
Joined: October 3, 2015

Post Post #16 (ISO) » Tue Nov 01, 2016 2:36 pm

Post by Zulfy »

I am so happy about this.
no investigation no right to speak
User avatar
Zachrulez
Zachrulez
Jack of All Trades
User avatar
User avatar
Zachrulez
Jack of All Trades
Jack of All Trades
Posts: 8550
Joined: December 5, 2008
Location: Minnesota

Post Post #17 (ISO) » Tue Nov 01, 2016 3:35 pm

Post by Zachrulez »

If you have the IP address of the perpetrator, you can probably match it or at least greatly narrow down who it might be by going through the list of users. (Or if you want to assume it's someone who's been banned that would probably be a lot faster.)
User avatar
Majiffy
Majiffy
Go with the Flow
User avatar
User avatar
Majiffy
Go with the Flow
Go with the Flow
Posts: 23825
Joined: November 23, 2011
Location: Memphis, TN
Contact:

Post Post #18 (ISO) » Tue Nov 01, 2016 3:37 pm

Post by Majiffy »

I feel like anyone invasively attacking the site would probably be keen enough to take a number of precautions masking their IP.
Only playing in games at personal moderator and/or 50%+ playerlist request.


How To Win Every Game At Mafiascum (The Flowchart)
||
In case anyone was unsure...
Svenskt Stål (23:38) majiffy, worst mod on ms? we talk to a surviving victim of his game
User avatar
Zachrulez
Zachrulez
Jack of All Trades
User avatar
User avatar
Zachrulez
Jack of All Trades
Jack of All Trades
Posts: 8550
Joined: December 5, 2008
Location: Minnesota

Post Post #19 (ISO) » Tue Nov 01, 2016 3:43 pm

Post by Zachrulez »

You'd be surprised how often people forget to do the simple things.
User avatar
InflatablePie
InflatablePie
they / them
Accept When They Do
User avatar
User avatar
InflatablePie
they / them
Accept When They Do
Accept When They Do
Posts: 3442
Joined: December 23, 2009
Pronoun: they / them
Location: Shrug City, West Covina; Ottawa CA

Post Post #20 (ISO) » Tue Nov 01, 2016 3:44 pm

Post by InflatablePie »

idk if you can mask your IP while using a Wendy's POS
If you don't know how to lie, then how do you know when you're being lied to?

No snowflake in an avalanche ever feels responsible.
User avatar
Sudo_Nym
Sudo_Nym
Pseudo Newbie
User avatar
User avatar
Sudo_Nym
Pseudo Newbie
Pseudo Newbie
Posts: 1144
Joined: March 12, 2007
Location: Washington

Post Post #21 (ISO) » Tue Nov 01, 2016 3:56 pm

Post by Sudo_Nym »

In post 20, InflatablePie wrote:idk if you can mask your IP while using a Wendy's POS
He's spoofed his location to trick us into thinking the attack came from McDonald's.
One time, back in 'nam, Sudo was set upon by an entire squadron of charlies. He challenged them all to a game of Pictionary, which he won resoundingly. The charlies were forced to not only surrender the skirmish, but also their world-famous chili recipe, which Sudo sold to Texas for a hefty profit. Sudo is a master of diplomacy.
User avatar
Majiffy
Majiffy
Go with the Flow
User avatar
User avatar
Majiffy
Go with the Flow
Go with the Flow
Posts: 23825
Joined: November 23, 2011
Location: Memphis, TN
Contact:

Post Post #22 (ISO) » Tue Nov 01, 2016 4:07 pm

Post by Majiffy »

In post 19, Zachrulez wrote:You'd be surprised how often people forget to do the simple things.
Yeah but...

That's like a recording engineer going to track a band and forgetting to plug in the microphone.

Some things you just do out of habit.
Only playing in games at personal moderator and/or 50%+ playerlist request.


How To Win Every Game At Mafiascum (The Flowchart)
||
In case anyone was unsure...
Svenskt Stål (23:38) majiffy, worst mod on ms? we talk to a surviving victim of his game
User avatar
SirCakez
SirCakez
he/him
Is A Lie
User avatar
User avatar
SirCakez
he/him
Is A Lie
Is A Lie
Posts: 27851
Joined: June 18, 2015
Pronoun: he/him

Post Post #23 (ISO) » Tue Nov 01, 2016 4:10 pm

Post by SirCakez »

Thankfully I have an absurdly long and nonsensical email password
Get rekt hacker(s?)
Brian Skies - "
I just wanna say Cakez is an evil mod and this is an evil setup.
"

--------------------
Get to know a Cakez!
User avatar
RachMarie
RachMarie
HUGS ♥
User avatar
User avatar
RachMarie
HUGS ♥
HUGS ♥
Posts: 13911
Joined: January 9, 2012
Location: Buffalo, NY
Contact:

Post Post #24 (ISO) » Tue Nov 01, 2016 4:15 pm

Post by RachMarie »

Thanks for letting us know mith
BRAND NEW Get to know me http://forum.mafiascum.net/viewtopic.php?f=61&t=69243
Like the phoenix I am rising from the ashes
chilledtea: We played bad on day 2 when we lynched rach.

YT Channel https://www.youtube.com/channel/UC0psF_ ... Jpw/videos
Post Reply

Return to “News”