Solution - Email Hacking

[Toonshorty]

Current Status: Resolved

I believe I've found a solution for hotmail users:

Firstly, click here: Only the registered members can see the link.

Secondly, try the alternative email and recovery questions - if these don't work or you've already tried this click continue.

Next, follow the instructions given to reclaim ownership of your account.

Tell me how it goes.

Toonshorty

[Eugene]

One of the major problems here, Users have used there real password for the Email Accounts. I wish you all luck, and at the same time hope you can learn from this.

Do not use your real password for things such as your Email Account, Paypal Account, Ebay Account, Ect...

[Draxxus]

What exactly is happening Toon? Was there a leak of the database? Someone found a vulnerability?

This is only from the toplist right? All my passwords are very strong lol.

Always use a different password for everything.

[I D3stroy I]

Hope to get my Email back i forgot to change the Password of Server CP so it doesn't Match my MSN password that's all :(

[Eugene]

What exactly is happening Toon? Was there a leak of the database? Someone found a vulnerability?

This is only from the toplist right? All my passwords are very strong lol.

Always use a different password for everything.

Correct, It was a leak of the Database.

It can also be blamed on the SQL Injection.

[Avoid]

Ehm, I've been putting my password as passwordlol for the past two years and I've been fine.

Quite funny :)

50% of anyone who reads this will try getting on my account <.<

[Draxxus]

Ehm, I've been putting my password as passwordlol for the past two years and I've been fine.

Quite funny :)

50% of anyone who reads this will try getting on my account <.<

You are lucky no one has tried a brute force attack. That is like one of the first passwords it tries.. You dummy! lol jk. :P

[New Clear]

What exactly is happening Toon? Was there a leak of the database? Someone found a vulnerability?

This is only from the toplist right? All my passwords are very strong lol.

Always use a different password for everything.

Someone has SQL injected random toplist pages, which has caused all this.

[Eugene]

Well, If Ikiliki would get on. I need to talk to him ASAP! Like, On msn. I have the answer to all this now. I know who hacked it, Where the database is STILL being leaked everything.

[Toonshorty]

Well, If Ikiliki would get on. I need to talk to him ASAP! Like, On msn. I have the answer to all this now. I know who hacked it, Where the database is STILL being leaked everything.

Ikiliki already knows who hacked it.

Meanwhile, anyone who suspects they've been hacked should change their passwords immediately!

[Shishir G]

I change my pass alot on everything
example
on facebook: lol67g8s9d4g89sd4g1
on myspace: lol67g8s9d4g89sd4g2
on runelocus: lol67g8s9d4g89sd4g3

[Eugene]

Ikiliki already knows who hacked it.

Meanwhile, anyone who suspects they've been hacked should change their passwords immediately!

Well, I sent him an email anyways. But, They put the leaked database on HF. I do not wanna say too much as people will go and get the SQLed Information.

The Username of the hacker is: LilSnoop

[Eugene]

Holy shit, I thought you said he knows who the hacker is.

On HackForums the database is being leaked and downloadable to all, The user who released it. His name on HackForums is LilSnoop.

So wtf is Only the registered members can see the link.


Hes not banned or anything, I am sure this is not a regular member.

[Avoid]

Lol, maybe that's an imposter.

[Shishir G]

Holy shit, I thought you said he knows who the hacker is.

On HackForums the database is being leaked and downloadable to all, The user who released it. His name on HackForums is LilSnoop.

So wtf is Only the registered members can see the link.


Hes not banned or anything, I am sure this is not a regular member.

nvm avoid said it

[Forthelolz]

Ikiliki already knows who did it, and it's been handled to the best of his ability. The database information from last night being spread out is not important anymore, since he has reset all the Toplist passwords.

[jrune_]

The site was rushed, therefore vulnerable, that's why someone injected the site, got the database and managed to get all the emails.

[Superaust]

I know who's doing it. Any staff that wants to know can PM me.

[Ikiliki]

Holy shit, I thought you said he knows who the hacker is.

On HackForums the database is being leaked and downloadable to all, The user who released it. His name on HackForums is LilSnoop.

So wtf is Only the registered members can see the link.


Hes not banned or anything, I am sure this is not a regular member.

I knew this before you did ;)
Just change passes and don't use them on other sites. Tomorrow (well it's midnight so today) I'll have time to make em encrypted

[Aaron]

Msn is so easy to recover though, Just the fact that they can send emails to like anyone is the scary part:/

[ice_]

my pass is password123456

[Superaust]

I knew this before you did ;)
Just change passes and don't use them on other sites. Tomorrow (well it's midnight so today) I'll have time to make em encrypted
Do you not care who did it? You just ignored my post completely.

[Matt`]

Surely you at least hashed the passwords.. that's like the first rule of security.

[lilsnoop]

lol. this is quite amusing to read.

[firescape_team]

lold.

[Ash]

What's the point in hacking, I bet they get Excited when they hack someone there like (Woot i fucking hacked a password OMG now i own).

[McLovin]

Once we find a solution to the problem we will get you up to date in this thread! For the meantime, please be patient

aka please shutup we cant do anything to get your MSN's/other stuff back =/

[Superaust]

Ikiliki already knows who hacked it.

Meanwhile, anyone who suspects they've been hacked should change their passwords immediately!
Ikiliki obviously does NOT know who hacked it because I know who is about to fuck the site over completely. This is completely un-acceptable. I thought the new forums would be a fresh start but tbh I think that this was the consequence of laziness. Why was the toplist so vulnerable that everyones passwords were compromised?

[pedobear]

Ikiliki obviously does NOT know who hacked it because I know who is about to fuck the site over completely. This is completely un-acceptable. I thought the new forums would be a fresh start but tbh I think that this was the consequence of laziness. Why was the toplist so vulnerable that everyones passwords were compromised?

dosnt matter who did it we are just now trying to fix the hack before know who did it idiot.

[Draxxus]

Ikiliki obviously does NOT know who hacked it because I know who is about to fuck the site over completely. This is completely un-acceptable. I thought the new forums would be a fresh start but tbh I think that this was the consequence of laziness. Why was the toplist so vulnerable that everyones passwords were compromised?

Blah blah blah, calm down Superaust.. :rolleyes:

[cboy676]

My email was one of the emails that got hacked.

[Toonshorty]

Ikiliki obviously does NOT know who hacked it because I know who is about to fuck the site over completely. This is completely un-acceptable. I thought the new forums would be a fresh start but tbh I think that this was the consequence of laziness. Why was the toplist so vulnerable that everyones passwords were compromised?

The reason the toplist was unsecure was because people were making 100 threads a day asking "wen tuplist bk up!! I wn post my sevr!!!" so Ikiliki rushed to get it finished, he was to busy on getting it finished to forgot to hash the passwords and the SQL injection left the hacker with everyone's password.

McLovin - What you say is incorrect. Right now we can't do anything to get your email accounts back however I'm going to speak to MSN and see what they can do for you. We are trying as hard as we can.

[samuraiblood2]

McLovin - What you say is incorrect. Right now we can't do anything to get your email accounts back however I'm going to speak to MSN and see what they can do for you. We are trying as hard as we can.
MSN cant help you, they don't have password recovery support. Anyone who lost their password needs to get a new email (unless they know their recovery questions + answers), and that's the end of it.

[Toonshorty]

MSN cant help you, they don't have password recovery support. Anyone who lost their password needs to get a new email (unless they know their recovery questions + answers), and that's the end of it.

I'm still speaking to them to see what they can do.

[Superaust]

dosnt matter who did it we are just now trying to fix the hack before know who did it idiot.
We? Are you on the staff team now? Btw I have no fucking clue what "we are just now trying to fix the hack before know who did it idiot" means. Please speak english.

@Draxxus
It's not as funny as everyone thinks it is. People have personal information on there email and for it to be hacked due to Ikiliki not having proper security on his website is un-acceptable. I know I wouldn't be happy if my email was hacked, and to think I was going to put a server on the toplist is just scary.


The reason the toplist was unsecure was because people were making 100 threads a day asking "wen tuplist bk up!! I wn post my sevr!!!" so Ikiliki rushed to get it finished, he was to busy on getting it finished to forgot to hash the passwords and the SQL injection left the hacker with everyone's password.

McLovin - What you say is incorrect. Right now we can't do anything to get your email accounts back however I'm going to speak to MSN and see what they can do for you. We are trying as hard as we can.
Do you think that is a good excuse? Being pressured by people making threads on a forum about his toplist? That's why he has staff members, to handle those types of things. You as a staff member could have taken some initiative and made an announcement saying those types of threads are not aloud, and deleted the threads when they appeared. It is not Ikiliki's responsibility to maintain the forums.

[Draxxus]

@Draxxus
It's not as funny as everyone thinks it is. People have personal information on there email and for it to be hacked due to Ikiliki not having proper security on his website is un-acceptable. I know I wouldn't be happy if my email was hacked, and to think I was going to put a server on the toplist is just scary.

I understand that, but don't pin this on Ikiliki. Like anything newly released it will have bugs. The TOS for the toplist I believe says use at your own risk. Also it's completely these peoples faults for not using a different password. They need to learn how to be more secure on the internet, if they had used different passwords for everything they wouldn't have had this problem.

I am quite sure that Ikiliki is working very hard to fix the problem. He takes this site very seriously, and has proven that time and time again. He has driven 2 hours to the data center to fix things twice now. That's like 8 hours total in the boring car.

So please don't blame this on Ikiliki. Ikiliki is not in fault here. The only thing Ikiliki is in fault of is working to hard for this website. He rebuilt everything very fast. We all know that anything new has bugs. That's why people stay away from Microsoft OS's for a few months or weeks after the release. This is nothing new.

[Superaust]

I understand that, but don't pin this on Ikiliki. Like anything newly released it will have bugs. The TOS for the toplist I believe says use at your own risk. Also it's completely these peoples faults for not using a different password. They need to learn how to be more secure on the internet, if they had used different passwords for everything they wouldn't have had this problem.

I am quite sure that Ikiliki is working very hard to fix the problem. He takes this site very seriously, and has proven that time and time again. He has driven 2 hours to the data center to fix things twice now. That's like 8 hours total in the boring car.

So please don't blame this on Ikiliki. Ikiliki is not in fault here. The only thing Ikiliki is in fault of is working to hard for this website. He rebuilt everything very fast. We all know that anything new has bugs. That's why people stay away from Microsoft OS's for a few months or weeks after the release. This is nothing new.
This is my last post on this thread. But just to let you know. Ikiliki will tell you himself, that this is his fault.

[Shishir G]

This is my last post on this thread. But just to let you know. Ikiliki will tell you himself, that this is his fault.

yeah he will say that, but he'll give a reason, which will most likely be that he hurried up on making the toplist leaving flaws on it. and that comes to the conclusion that he was pressured by users because they kept making threads.

[Toonshorty]

yeah he will say that, but he'll give a reason, which will most likely be that he hurried up on making the toplist leaving flaws on it. and that comes to the conclusion that he was pressured by users because they kept making threads.

Which is exactly what I said a few posts up from this.

[Shishir G]

Which is exactly what I said a few posts up from this.

Yeah, i got that idea from you actually. Superaust just didn't read it or something, so i had to resay it in my own words.

[Malik]

Now people can finally pay for it and learn the consequences if you don't set recovery questions...

[Shishir G]

Now people can finally pay for it and learn the consequences if you don't set recovery questions...

They can literally PAY for it.

[Degraded]

Only way for someone to literally 'pay' for not setting recovery questions is if they had a paypal involving the same password/email.
Regardless, you can refund all money anyways, so oh well.

[Travesty]

So is this why most of the servers were removed from toplist...

[nmanpure]

Lol now you have to go threw and chane the password of two-years back......

Sma ething happened to my hotmail but not from the data leak......

So i forze my email......

[nmanpure]

Whover hacked it -Must of had no live, Just goes to show security ishus. And can hash be hacked if decomnpiled right?

[MonsterNuke]

Only the registered members can see the link.

To get your e-mails back.

[Shishir G]

Whover hacked it -Must of had no live, Just goes to show security ishus. And can hash be hacked if decomnpiled right?

You don't have to be a no-lifer to inject something into a vulnerable spot? You just need the brains.

[~ fail coder ~]

Hahahaha, ages ago i\I forgot my pass... then runelocus sent me the new pass, and scince my acc never logged out, i never changed it :P:P::PP

[Eugene]

Lol at above. What, I kinda didn't understand was. Sending a new password that was random generated for the servers to there emails which most of them were hacked or changed. Lol

[Rog3r]

Why not just contact your mail provider and reset your password...?

[Gavo]

Not gonna compromise anything though, pitiful paypal.

Just change your pass and stay off that LocusScape, or whatever. Got access to all of their accounts.

PayPal balance: €0.08 EUR = :(

browser Serbia (79.101.245.41) 28 Jun (1 day ago)
Browser United Kingdom (82.4.167.33) 27 Jun (2 days ago)
Browser United States (71.164.204.22) 27 Jun (2 days ago)
Browser United States (76.6.250.98) 27 Jun (2 days ago)
Browser United Kingdom (82.4.167.33) 26 Jun (3 days ago)

I guess he was using proxys

[Toonshorty]

Everybody read the OP for a possible solution.

[pedobear]

Thank you very much i love you thank you now i can finally get back all my hacked emails like when i got keylogged my veriferld paypal account i love you i just want to kiss you omfg i can be gay with you please! <3333333333333333

[Shishir G]

Thank you very much i love you thank you now i can finally get back all my hacked emails like when i got keylogged my veriferld paypal account i love you i just want to kiss you omfg i can be gay with you please! <3333333333333333

...and thats when you know you have a internet long distance relationship.
also toonie's gay so you can live happily ever after.

[Faab234]

Nice job on the Solution, Thanks toon, Cookie for you.

[Glen]

Idiots these days. Ikiliki ain't at fault here...the community(some people) were the ones rushing him to finish it so they can get more people.

[Shishir G]

Idiots these days. Ikiliki ain't at fault here...the community(some people) were the ones rushing him to finish it so they can get more people.

Eh, me and tons of other people have said that, but the idiots won't believe it. fuck them.

[mumups]

Idiots these days. Ikiliki ain't at fault here...the community(some people) were the ones rushing him to finish it so they can get more people.


Eh, me and tons of other people have said that, but the idiots won't believe it. fuck them.

nope its defo his fault.
and if this was case:
1. ignore them.... besides not that many people cud be doin that coz forums wernt even up?
2. just use the old one until new one had been perfected. he must of had a backup other then the one on his dedi or whatever.
3. other shit

[Johnny]

Wow o_O, such problems since the database crashed..

[Aaron]

Go toon!