+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: World News (https://sinister.li/Forum-World-News)
+--- Thread: DailyMotion got hacked (/Thread-DailyMotion-got-hacked)
Pages:
1
2
DailyMotion got hacked - Bish0pQ - 12-06-2016
Apperently on the 20th of october DailyMotion got hacked. It was reported by LeakedSource monday. 85 million accounts were stolen, so if you use DailyMotion, change your passwords.
Article: Click here for the article
Opinions?
RE: DailyMotion got hacked - Pikami - 12-06-2016
At least they are not plain text
Bcrypt hashing is so slow that nobody will bother cracking the hashes
RE: DailyMotion got hacked - mothered - 12-06-2016
(12-06-2016, 12:29 PM)Pikami Wrote: At least they are not plain text
Bcrypt hashing is so slow that nobody will bother cracking the hashes
Yes, storing user-credentials In plain text Is just sheer stupidity.
During my exploitations, you wouldn't believe how many passwords and PIN codes I've comes across In plain text. I have hundreds on hand from Individual sites- all saved with unedited screenshots. Bcrypt (key stretching) can prove to be quite effective against bruteforcing and the like, even when powerful GPUs are used In attacks. On topic, DailyMotion's security breach just demonstrates that the nature of the website (pretty much superior on securing It's data), has no bearing against dedicated hackers and attacks. That Is, anyone and anything with an Internet connection Is vulnerable to exploitation.
RE: DailyMotion got hacked - Pikami - 12-06-2016
(12-06-2016, 02:22 PM)mothered Wrote:(12-06-2016, 12:29 PM)Pikami Wrote: At least they are not plain text
Bcrypt hashing is so slow that nobody will bother cracking the hashes
Yes, storing user-credentials In plain text Is just sheer stupidity.
During my exploitations, you wouldn't believe how many passwords and PIN codes I've comes across In plain text. I have hundreds on hand from Individual sites- all saved with unedited screenshots. Bcrypt (key stretching) can prove to be quite effective against bruteforcing and the like, even when powerful GPUs are used In attacks. On topic, DailyMotion's security breach just demonstrates that the nature of the website (pretty much superior on securing It's data), has no bearing against dedicated hackers and attacks. That Is, anyone and anything with an Internet connection Is vulnerable to exploitation.
Oh, I believe you, lots of websites still store passwords in plain text and anything can be exploited if you have enough resources. That's how everything works. It's just nice to see a company that uses great hashing techniques for storing passwords instead of using MD5 witch isn't even created for password hashing...
RE: DailyMotion got hacked - Oni - 12-06-2016
(12-06-2016, 02:22 PM)mothered Wrote:(12-06-2016, 12:29 PM)Pikami Wrote: At least they are not plain text
Bcrypt hashing is so slow that nobody will bother cracking the hashes
Yes, storing user-credentials In plain text Is just sheer stupidity.
During my exploitations, you wouldn't believe how many passwords and PIN codes I've comes across In plain text. I have hundreds on hand from Individual sites- all saved with unedited screenshots. Bcrypt (key stretching) can prove to be quite effective against bruteforcing and the like, even when powerful GPUs are used In attacks. On topic, DailyMotion's security breach just demonstrates that the nature of the website (pretty much superior on securing It's data), has no bearing against dedicated hackers and attacks. That Is, anyone and anything with an Internet connection Is vulnerable to exploitation.
We use Bcrypt as well.
RE: DailyMotion got hacked - Seventh - 12-07-2016
Better question of why Dailymotion though..... I mean its use is quite substandard compared to its competitors.
RE: DailyMotion got hacked - Bloody Eye - 12-07-2016
Never used Dailymotion. I don't know any entertainers that do.
RE: DailyMotion got hacked - mothered - 12-07-2016
(12-06-2016, 11:52 PM)Oni Wrote: We use Bcrypt as well.
That's nice to know and certainly good practice.
The security of one's credentials on a given website may not only relate to that site alone, hence If It's compromised and (for example) the same email address and password Is used on other sites, then they'll also be at risk. I've actually come across one victim who used the same login details on more than 20 Individual websites.
RE: DailyMotion got hacked - Bish0pQ - 12-07-2016
(12-07-2016, 05:43 AM)Luka Wrote: Never used Dailymotion. I don't know any entertainers that do.
Me neither, I was kind of surprised when I read there were 80 million users. I thought nobody used that shit (scammers do, but that's about it).
RE: DailyMotion got hacked - Mew - 12-08-2016
Yeah it was, it sucks.
I know a lot of people who use it for SEO stuff