Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 14 Jun 2006, 21:58
Ntfu2 Ntfu2 is offline
 
Join Date: Feb 2006
How can they be so dumb??

Serisously, so like this site who i am not going to name or give the address to, is moving their server, or something. Anyway their webroot lacks a index file. Guess what else is inside their web root.


If you guesed backups of their database you would be correct. Now every joe schmoe probably has my email address, and all other information that the vBulletin database store, and can/will use it to spam or whatever else. Top that off with they left their advertisment database there to, probably contains some CC # or other payment information. I'd imagine every visitor to their site, now has a copy of their database and all the information it contained from hidden forums, private messages..freaking everything :lol:

Sucks to be them. /rant


cliff notes:
Guys moving server -> leaves db backup in webroot -> anyone can download it and restore...
Reply With Quote
  #2  
Old 14 Jun 2006, 22:25
KW802's Avatar
KW802 KW802 is offline
 
Join Date: Jul 2003
Real name: Kevin
So be a nice guy and fire off an email.
__________________
Sci-Fi / Goo Goo Dolls / Big & Tall

(Sorry, but I am no longer developing for vB; please do not PM. So long, and thanks for all the fish.)
Reply With Quote
  #3  
Old 14 Jun 2006, 23:12
Ntfu2 Ntfu2 is offline
 
Join Date: Feb 2006
Tried to contact them, but no dice.


their forum came back online and i let them know it was still there, and they gave me a dipstick response telling me to go pound salt. I hope bad things are done with it now

:karma:
Reply With Quote
  #4  
Old 14 Jun 2006, 23:22
Reeve of shinra's Avatar
Reeve of shinra Reeve of shinra is offline
 
Join Date: Oct 2001
whats the url to the backups? I'm sure some kindly citizen will alert users that thier cc info became freely available.
__________________
Make someone smile today!
Reply With Quote
  #5  
Old 15 Jun 2006, 00:07
Ntfu2 Ntfu2 is offline
 
Join Date: Feb 2006
Im sure they would. But i try to be a better ePerson than that
Reply With Quote
  #6  
Old 15 Jun 2006, 14:49
sambah sambah is offline
 
Join Date: May 2006
Originally Posted by Ntfu2
Serisously, so like this site who i am not going to name or give the address to, is moving their server, or something. Anyway their webroot lacks a index file. Guess what else is inside their web root.


If you guesed backups of their database you would be correct. Now every joe schmoe probably has my email address, and all other information that the vBulletin database store, and can/will use it to spam or whatever else. Top that off with they left their advertisment database there to, probably contains some CC # or other payment information. I'd imagine every visitor to their site, now has a copy of their database and all the information it contained from hidden forums, private messages..freaking everything :lol:

Sucks to be them. /rant


cliff notes:
Guys moving server -> leaves db backup in webroot -> anyone can download it and restore...
If any financial data has been left there you should contact the FBI or relevant authority.
Reply With Quote
  #7  
Old 15 Jun 2006, 14:55
KW802's Avatar
KW802 KW802 is offline
 
Join Date: Jul 2003
Real name: Kevin
Originally Posted by sambah
If any financial data has been left there you should contact the FBI or relevant authority.
He wouldn't know if any financial data is in the exposed backups unless he himself downloaded and reviewed them.
__________________
Sci-Fi / Goo Goo Dolls / Big & Tall

(Sorry, but I am no longer developing for vB; please do not PM. So long, and thanks for all the fish.)
Reply With Quote
  #8  
Old 15 Jun 2006, 15:17
sambah sambah is offline
 
Join Date: May 2006
good point

view the files as text and do a find for 16 digit numbers or summit?
Reply With Quote
  #9  
Old 15 Jun 2006, 23:48
Freesteyelz's Avatar
Freesteyelz Freesteyelz is offline
 
Join Date: Jan 2006
Why would you leave the CC on the same DB as your site/forum? It should be located off-site if anything.
__________________


Reply With Quote
  #10  
Old 16 Jun 2006, 01:45
Ntfu2 Ntfu2 is offline
 
Join Date: Feb 2006
You'd think,

it was a seperate DB i'd assume, one was named advertise, the other dbforumbu
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 20:43.

Layout Options | Width: Wide Color: