Re: [NeoStats-Devel] Forums/NeoStats Accounts

By the way, I've pulled the sites down for now till I can check the downloads as well... and make sure that hasn't changed 

(btw, my new HDD died a few days ago so will be getting it replaced tomorrow)
  ----- Original Message ----- 
  From: Justin Hammond 
  To: [email protected] 
  Sent: Saturday, April 16, 2005 1:18 AM
  Subject: [NeoStats-Devel] Forums/NeoStats Accounts


  Guys,
  The Forum and NeoStats site defacements was the result of someone Password Grinding the our accounts (The Devs, Mark, DNB and myself). Suggest you go and change any accounts that you have that use the same passwords. I know for sure that they got mine and Mark's passwords, not sure about DNB.

  (They also tied to use a exploit agaist the PHPBB, but I'd patially patched it, so although it appeared they used the exploit to get into the /admin/ section, in the end they had used Mark's account first, then mine.)

  I've got backup's of the forums, but reluctant to put them back considering they may have also harvested other account info.. I'll think about it over the next few days.