EPTIt seems like the GOM player had stored SQL pass/user within the code of the player. Easy to read with a hex-editor and connect to the database.
Always reroute through php/asp... never direct access, Gom. Please.
GOMTV.net compromised - Page 31
| Forum Index > SC2 General |
|
Qzy
Denmark1121 Posts
It seems like the GOM player had stored SQL pass/user within the code of the player. Easy to read with a hex-editor and connect to the database. Always reroute through php/asp... never direct access, Gom. Please. | ||
|
phANT1m
South Africa535 Posts
| ||
|
tuestresfat
2555 Posts
| ||
|
NuKedUFirst
Canada3139 Posts
| ||
|
Miraju
Germany235 Posts
 . | ||
|
FinnGamer
Germany2426 Posts
On August 13 2011 08:26 Antoine wrote: i would say you've probably gotten these emails a lot longer than 1 day, i've had them slamming my spambox for like 5 years now I'm getting emails from games I don't even play, my Bulk is 50% noreply@blizzard.com ,WoWAccountservices@blizzard.com or WoWAccountAdmin@Blizzard.com. | ||
|
T-oastbro-T
Germany378 Posts
But for the most part I'm disappointed in their failure to acknowledge the leak and inform their users about it. As far as I know, there is no official statement on the homepage as of yet and I have received no email either. Timing is crucial for users, who made the ill-advised choice of using their gomtv-mail-pw-combination on sites like paypal, amazon etc. as well. Leaks will always happen. How damaging they are, depends on the effort necessary to obtain the data (i.e. how much thought and work the company invested in their security-mechanisms) and the manner in which the company deals with the incident (i.e. fixing the vulnerability and inform their user-base about their compromised accounts). At the moment, GomTV scores an "unprofessional"-rating under both aspects.  | ||
|
getSome[703]
United States753 Posts
Yes I think I used the same username/pw for GOM as I use for PayPal... fail I know. Just changed it though | ||
|
Slakter
Sweden1947 Posts
I skimmed through it, thanks for pointing that out! | ||
|
Zato-1
Chile4253 Posts
On August 13 2011 03:14 R1CH wrote: You should also change your GomTV password to prevent unauthorized account access Changing passwords has been disabled it seems. | ||
|
skAnarky
Canada140 Posts
| ||
|
KiNGxXx
7928 Posts
On August 13 2011 23:28 skAnarky wrote: the system let me change my password, but the password I changed it to, plus the password I used to use, now both dont work. I suggest not changing your password until GOM gives word now, as I am locked out of my account. You have to verify the change of the password via email. You got one from Gom after changing the password. I forgot it the first time and was like "wtf?" because no password worked. | ||
|
Twistacles
Canada1327 Posts
| ||
|
ondik
Czech Republic2908 Posts
| ||
|
hugman
Sweden4644 Posts
On August 13 2011 23:46 ondik wrote: FUCK I used the same mail I used for my bnet account. Luckily passwords for my e-mail and for my bnet acc are all different, am I 100% safe? Yes, worst case is that you get lots of spam | ||
|
RusHXceL
United States1004 Posts
| ||
|
lurked
Canada918 Posts
At least I dont use important passwords on gaming sites... But really? No encrytpion for the passwords? Son, I am disappoint... : \ | ||
|
skAnarky
Canada140 Posts
You have to verify the change of the password via email. You got one from Gom after changing the password. I forgot it the first time and was like "wtf?" because no password worked. I hit the verification link in the email unfortunately. | ||
|
Rorra
Australia1066 Posts
| ||
|
RoyalCheese
Czech Republic745 Posts
| ||
| ||
