Android Forums hacked: 1 million user credentials stolen

Re:Android Forums hacked: 1 million user credentials stolen by mcyger on Thursday July 12, 2012 @03:58PM (#4236433)

What's to be learned from this?

Server setting needed hardening?

Software needed updating and was vulnerable?

vBulletin is a well used and documented lice of code. I'd love to know what the security experts here think.

[ Parent | on HN ]

Re:Android Forums hacked: 1 million user credentials stolen by peterwwillis on Thursday July 12, 2012 @04:44PM (#4236691)

I'd love to know what the security experts here think.

Oh goody! Another million credentials to refine my password dictionary!

If it was a known vulnerability there is nothing to learn but "patch your shit". But if you want some advice, the only thing you can learn from somebody exploiting a web application (assuming the hole was in vBulletin, which we have no idea) is that you can't trust the security of web applications. Do all the general system-hardening stuff that nobody ever does, install a webapp firewall, and pray.

[ Parent | on HN ]

Re:Android Forums hacked: 1 million user credentials stolen by voltagex_ on Thursday July 12, 2012 @06:28PM (#4237184)

Seems to me that PHP bulletin boards are always a (easy?) target.

[ Parent | on HN ]

Re:Android Forums hacked: 1 million user credentials stolen by iamandrus on Thursday July 12, 2012 @09:14PM (#4237723)

Don't use this as a reason to diss PHP. Almost any target, no matter what language, is vulnerable.

[ Parent | on HN ]

Re:Android Forums hacked: 1 million user credentials stolen by dubcanada on Thursday July 12, 2012 @08:59PM (#4237695)

"PHP" bulletin boards are the largest there is, VB is the most well known forum software there is... It has nothing to do with PHP, you can exploit any language.

[ Parent | on HN ]