It seems that you're using an outdated browser. Some things may not work as they should (or don't work at all).
We suggest you upgrade newer and better browser like: Chrome, Firefox, Internet Explorer or Opera

×
avatar
cogadh: Yeah, because none of those people who would have intended to do harm with the data will download it from TPB </sarcasm>.

They want to expose security flaws, that's fine and I applaud that, but by releasing all this info they are not just exposing a flaw, they are hurting everyone who should have benefited from their exposure of that flaw. Thanks, but no thanks.
Don't misunderstand me, I'm not trying to applaud the actions of lulzsec or anything like that. I'm just saying that if sites have shitty security and as a result get breached, I'd simply prefer that it be done by some loud-mouthed clowns so that 1) the damage done prior to the breach being made public is minimal and 2) since it's widely publicized a bit more pressure is put on companies to improve their security practices.
avatar
DarrkPhoenix: Don't misunderstand me, I'm not trying to applaud the actions of lulzsec or anything like that. I'm just saying that if sites have shitty security and as a result get breached, I'd simply prefer that it be done by some loud-mouthed clowns so that 1) the damage done prior to the breach being made public is minimal and 2) since it's widely publicized a bit more pressure is put on companies to improve their security practices.
Like having someone break in and smash up your rooms and furniture rather than stealing it and uncovering the rest of your valuables?
avatar
KavazovAngel: About those on Bethblog...

.. Yup, username is there, email is there, IP of every post you made is there, pass is there... Grrrrrrrrrrrr.
Did they steal information from the forums?
avatar
DarrkPhoenix: I have an account of the Bethesda forums, but looking through the data that lulzsec published it doesn't look like they grabbed that data. I'm still treating my username/e-mail/password as compromised, but I've already changed my password and the previous password wasn't re-used on any other sites so the potential damage is pretty minimal.
Ah okay thanks.
Post edited June 14, 2011 by lowyhong
Codemasters: http://uk.games.ign.com/articles/117/1175310p1.html
I have an account for Bethesda forums from when Fallout 3 was in the works. But I have no clue as to what username/email/password I used. Guess I have to go on a fishing trip and find out. Maybe download the data from TPB and look though it :P
avatar
lukaszthegreat: i wonder why companies are allowed to keep credit card details...

there should be law against that and maybe what is happening now is a good thing. it will wake up law makers and force them to change laws

i'm kidding myself am i not?
I agree 100%. Hackers wouldn't have much to gain by bypassing their so called security. I guess that's what they're after in the first place.
avatar
lukaszthegreat: (snip)
See, that is always baffling me - why is there need to store data if it's used only for purchase transactions. I f-ing hate when a service requires you to give your CC details when registering.
avatar
KavazovAngel: They'll lose me as a customer, that's for sure.
As they're not collecting CC data, nor they recognize countries by IP, the only harm you may get from such attack on GOG is if you use the same password elsewhere.

And that's not really clever anyway.
avatar
SLP2000:
/care

They gave away my pass / birthday / all games I have here / all PMs. That is too much.

But anyway, it is not about what info hackers steal, it is about, in this case, if it happens, GOG not giving fuck about securing their clients info.
avatar
KavazovAngel: But anyway, it is not about what info hackers steal, it is about, in this case, if it happens, GOG not giving fuck about securing their clients info.
I have no idea about security of websites, so correct me if I'm worng but there's no 100% secure website. There's always someone who could hack it.

If so, how can you be telling about not giving a fuck?
Post edited June 14, 2011 by SLP2000
avatar
SLP2000: If so, how can you be telling about not giving a fuck?
You'd be surprised how many web "developers" don't give a damn about security, and use a global admin user for every connection the website makes with the database... or store passwords in a simple, plain, varchar type... or don't use proper authentication and stuff for accessing the database...
avatar
KavazovAngel: ... if it happens, GOG not giving fuck about securing their clients info.
Where do you buy your crystall balls and/or assorted divination apparatuses ?
And remember guys: cloud computing is the futuuuureeeeeeeeeeee O_o
avatar
KavazovAngel: ... if it happens, GOG not giving fuck about securing their clients info.
avatar
Namur: Where do you buy your crystall balls and/or assorted divination apparatuses ?
Magic'r'us ? Or Sorcery.com maybe ? Or ebay.... :D
avatar
Aningan: Magic'r'us ? Or Sorcery.com maybe ? Or ebay.... :D
I'm betting it's the same place where Harold Camping does his shopping ;)