Jacco
[Link]
| Author | Post |
|---|---|
| AztecGold11 Member  514 Posts 8/05 |  Posted - Feb 25 2006 : 9:06AMI received this email yesterday. Due to a security breach at an affiliate website, which you are also a member, we have taken the precautionary step of changing your password and removing all saved credit cards you had on file with XRentDVD. Please take a moment to change your password as soon as possible. DO NOT set your password to something you have previously used. They also assigned me a password. How do they know where I'm a member? [Link] |
Jacco  All-Star Member "liable to deprave and corrupt" 2673 Posts 5/04 | Posted - Feb 25 2006 : 9:24AM Jacco [Link] |
| AztecGold11 Member 514 Posts 8/05 | Posted - Feb 25 2006 : 9:29AM [Link] |
| Bill All-Star Member 5334 Posts 6/00 | Posted - Feb 25 2006 : 9:34AM [Link] |
| Drew Black broken crankshaft 8011 Posts 9/99 | Posted - Feb 25 2006 : 10:24AM I received a phone call from Xrent late yesterday afternoon. They detected what appeared to be a dictionary-based attack originating from the UK trying to get into user accounts at their site. They shut the attack down but felt this event was too coincidental for comfort. I agreed. Xrent has traffic records for all of the traffic we send their way. They can tell if a customer clicks through from ADT and places an order or shops at their site. It takes time to mine through this data though and it's not 100% accurate. (Some customers woudl be overlooked if they don't shop through our links on ADT.) Xrent and ADT wanted to be 100% sure though that none of their customers used email addresses and passwords that matched ADT user profiles. I quickly generated a list of all forum user email addresses that were in place at the time of our security breach and sent them the a portion of these email addresses. So if your email address was 'drew@adultdvdtalk.com' Xrent received 'drew@a'. This list enabled them to quickly match up ADT forum accounts with customer accounts on their end that might have been used in such an attack. This was the absolute fastest way to ensure that no Xrent customers that are also ADT users were at risk. I think there was only 45 minutes from the time they detected the attack until the new password notification emails went out. [Link] |
| Drew Black broken crankshaft 8011 Posts 9/99 | Posted - Feb 25 2006 : 10:34AM [Link] |
| AztecGold11 Member 514 Posts 8/05 | Posted - Feb 25 2006 : 10:47AM I get fake emails from "ebay & paypal" all the time-I forward them to spoof ebay/paypal and they investigate them. I wonder if the hacker will try to get into the other adult DVD sites. [Link] |
| Drew Black broken crankshaft 8011 Posts 9/99 | Posted - Feb 25 2006 : 11:26AM I do know that at least one ADT user had the same email address and password used at both Xrent and the ADT forum and their account was not accessed in this attack. (I know this because the person confirmed it via email to me.) [Link] |
| fatalbert Member Diagonally parked in a parallel universe 576 Posts 5/03 | Posted - Feb 25 2006 : 2:27PM I logged on to their site via my own bookmark, using the temporary new password the e-mail had supplied, and everything looks kosher to me. [Link] |
| astroknight Questionable Moderator Tastes so good... 4187 Posts 11/99 | Posted - Feb 25 2006 : 2:43PM "Vegetarianism for me is about saying ‘yes’ to things - even meat." - Coupling [Link] |
| Von Hugenstein Member 63 Posts 2/06 | Posted - Feb 25 2006 : 6:57PM Edited by - Von Hugenstein on 2/25/2006 6:57:52 PM [Link] |
| axlsfury Senior Member 1110 Posts 7/04 | Posted - Feb 26 2006 : 4:50PM [Link] |
| Use the code below to link to this topic or a specific post. |
| URL of this thread |
| Link to this post with HTML |
| Link to this post with Forum Code |