Baka-UpdatesManga
Manga Poll
How old is your current smartphone?
I don't use a smartphone
Less than 6 months
Between 6 months to a year
1-2 years
3 years
4 years
5 years
6 years
Older than 6 years
 
mascot
Manga is the Japanese equivalent of comics
with a unique style and following. the revolution! Read some manga today!

RSS Feed
Forums

Mangatraders Hacked, and How it Affects MU 5x3nw

Pages (6Next
You must be ed to post!
From
Message Body
 avatar
Noblesse Forever!
Member


11 years ago
Posts: 1067

Thanks for the info! 4g3


... Last edited by strixflash 11 years ago
________________
 avatar
Drowning in Manga
 Member


11 years ago
Posts: 133

Didn't realize Mangatraders was this big that it would warrant a post by s but I'm an active contributor on there. LUCKILY I have my shittiest for that one that I only use on s that don't really have... anything worth stealing.


________________

Currently Reading: Gave up counting after 100 Manga...
Currently Watching: everything

Post #644422
Post #644422
 avatar
Member


11 years ago
Posts: 8

Well that's just peachy.

I found my email on the uncracked list and pretty much cracked it myself. It was so simple and fast to crack that it's really quite pathetic. Completely unimpressed. >:-( I just had to use a primary email address on that site didn't I? sigh

Well, time to bunker down and wait for the incoming spam wave. puts on tin foil hat


Post #644425
Post #644425
Member


11 years ago
Posts: 302

Well to summarize what I've learned from scouring 4chan archives in the last couple hours for those interested:

  • HorribleSubs (matt) exploited and gained access to everything (including PayPal donors information). BotoX posted the database and snowfag cracked some of the md5 hashes.
    (Or in other words, someone found an exploit in the site that gave him root privileges on the webserver. He publicized that exploit elsewhere, where snowfag et al. used the database to get everyone's s. The person who publicized the exploit/database in the first place was (at least ostensibly) acting with good intentions in mind.). Basically the hacking was done for laughs, but no money was taken.

  • MT doesn't seem to be planning to come back (as the owners were trying to sell it for $10K anyway).

  • Thanks to MT's staff, certain people have direct access to servers (until June 14th I think?) and are ing the entire library (1.6 TB) to make a new manga site in the works (most likely just torrents)


... Last edited by tart 11 years ago
Post #644428
Post #644428
 avatar
Member


11 years ago
Posts: 362

salted s?

you guys need pepper with your salt.


________________

WEBTOONS ヽ( ★ω★)ノ

 Member


11 years ago
Posts: 31

http://anicheck.herokuapp.com/ doesn't really work (it says tham I'm safe when I've found lists with my PW there).
https://haveibeenpwned.com/ does work, though.


Member


11 years ago
Posts: 3

Since there are pics from the reddit thread showing someone gaining access here, do they have access to the db?


Post #644501
Post #644501
 avatar
hoo ha
Member


11 years ago
Posts: 247

Checked the havebeenpwned and yep, my e-mail was definitely in MT's database. I haven't even used MT for years so I don't even what I used back then.

I have changed my s for most of the sites I used, anyways. To be on the safe side.


________________
 avatar
Member


11 years ago
Posts: 299

Does anybody have any further information about them? When will they be back? Will they be back? 😐


Member


11 years ago
Posts: 398

It's a salted hash, not a salted .

Anyway, a salted hash just means a randomly-generated string was appended (or prepended) to your before the hash function was computed on it. This salt (the randomly-generated string) is stored in plaintext on the server with the hash, so the hash can be recomputed later. This means that salting s doesn't grant additional protection when you're only trying to break one , but it does grant protection from someone trying to just decrypt everyone's s all at once.

A peppered hash means that a randomly-generated string (this time called a pepper) is used as an encryption key for an underlying encryption function within the hash function. Fast hash functions like the SHA family or MD5 don't use underlying encryption functions that can be peppered, so this notion has mostly lost its place in the literature. But my point here is that it was impossible to pepper the hashes on MT because they were using MD5.


Post #644597
Post #644597
 avatar
Member


11 years ago
Posts: 130

this is suck, mangatraders is the best site to manga.


________________
Post #644599
Post #644599
Member


11 years ago
Posts: 60

Well, I'm mad. I didn't get a chance to save my digital files before MT went down. And I tried changing my pw on MU the other day, but it seem like it didn't work. Oh well, there's nothing to steal from my MU anyway, unless they want to see my lists of what I've been reading.


Post #tart
Post #tart
 avatar
 Member


11 years ago
Posts: 13

Quote from tart

Thanks to MT's staff, people have direct access to servers (until June 14th I think?) and are ing the entire library (1.6 TB) to make a new manga site in the works (most likely just torrents)

how? T A T;;? where can i have direct access to servers?
i still have more to dl. since i lost my copy bec. my hdd gave up this year.


 avatar
 Member


11 years ago
Posts: 13

Quote from weronique

Does anybody have any further information about them? When will they be back? Will they be back? 😐

i tried tweeting to their tweeter ... there's still no new update from them.

i don't know where the rumor came from that they'll never be back, or/and they're selling it for 10k dollars. all i know is they're still 404 - error or...

"The site is currently under going maintenance or repair, please check back in later.

Early on June 09th 2014 EDT we discovered that someone had gained unauthorized access to our web server. All the contents of our database were ed and released to the internet. This data included private information such as email addresses and obscured s for all ed s. Anyone that used the same for MT as for any other online services should change their s as soon as possible. Your online s could be compromised if malicious s reverse engineer your MT from this data dump and to your other s.

The site will remain offline until we can implement a more robust system for maintaining integrity at which time all s will be required to change their s. We believe the attacker gained access to the site's database through the forums so they will remain offline indefinitely while we investigate possible alternatives.

We deeply apologize for this incident and all the inconvenience it has caused and hope to move past it and come back safer and more secure than ever. It has been a trying few weeks for Mangatraders but we've weathered storms in the past and we'll weather this one as well."


 avatar
 Member


11 years ago
Posts: 13

i found it... i mean the http://pastebin.com/fzgRhdYd where IRC talk about 10k dollars, and MT going down permanently. i still wish this is not true.


... Last edited by kyashi39 11 years ago
Pages (6Next
You must be ed to post!