• If you enjoy the forum please consider supporting it by signing up for a NES Membership  The benefits pay for the membership many times over.

Hackers....tried to steal my account.

Just like Ashley Madison, I'm sure a mapping of board IDs to real-life names would be of interest to some people. I'm pretty sure the .gov TLAs already have their hands on that info, but there are a lot of antis who feel that the names and addresses of license holders/gun owners should be a matter of public record, as evidenced by some recent shenanigans in New York State. There are also burglars, etc., who would love to have address info of where to find peoples' gun collections.
 
Got one of those emails that someone attempted to access my account. Changed my password, speeding up work on turning my bedroom into a more or less faraday cage


Sent from my iPhone using Tapatalk
 
Make sure your password is decent, everything will be OK.

It's all automated bullshit, no one cares about any one here's individual NES account. Just ignore it and/or change your password.

Can we start filtering the IP addresses so nothing outside of NE gets in?

Short answer: No.
 
So really what is to be gained by hacking an account?

Spamming the website and/or users via IM or email

Hoping that the member uses the same username and password for more sensitive accounts like banking.

Some men just like to see the world burn.
 
They tried to hack me too, 199.127.226.150.
Not sure why they'd bother, I don't keep much money in my NES account [laugh]

In a few years I bet vBulletin will offer 2 Step Verification.

Probably in no rush since they don't even offer SSL for sign in.

I hope nobody breaks into my NES Vault. I have a ton of guns, ammo, gold and silver, porn and girls tucked away inside.

I guess I should not really worry since they are digital.

My real safe only holds one gun and I always have it on me.

I just hope they don't take away my best porno mag - Hustler.
 
it was just implemented.

I have been calling for that for years.

I even agreed to pay Derek part of the cost if there was one to upgrade and add that feature.

Let me know if I should throw some bucks for the effort if this was an added expense.
 
I have been calling for that for years.

I even agreed to pay Derek part of the cost if there was one to upgrade and add that feature.

Let me know if I should throw some bucks for the effort if this was an added expense.

attachment.php


send him the cash. i'll take a 50% finder's fee btw.
 

Attachments

  • SSL.JPG
    SSL.JPG
    12.4 KB · Views: 37
Last edited:
Better would be to move the entire board to SSL (well...TLS) which would keep prying eyes out of the content unless people's employers are proxying the cert.

Costs resources, though. I have a board that offers SSL, but it gets a tiny tiny fraction of the traffic this place does.
 
Merged threads....

Use a strong password and you'll be fine.
 
Better would be to move the entire board to SSL (well...TLS) which would keep prying eyes out of the content unless people's employers are proxying the cert.

Costs resources, though. I have a board that offers SSL, but it gets a tiny tiny fraction of the traffic this place does.

The entire board is available via TLS, and as of today, approximately 35% of our traffic is going out via it.

I have left it up to the user for the time being, but default new individuals to SSL/TLS.

This will do absolutely nothing to stop the messages that this thread is about, however... and as long as you have a secure password, these messages are nothing to be concerned about.
 
The entire board is available via TLS, and as of today, approximately 35% of our traffic is going out via it.

I have left it up to the user for the time being, but default new individuals to SSL/TLS.

This will do absolutely nothing to stop the messages that this thread is about, however... and as long as you have a secure password, these messages are nothing to be concerned about.


Fantastiballs! Great stuff, thanks for the heads up, switching over my bookmark.

FYI - I forced TLS on my board but ran into problems with people's browsers whining about non-encrypted content from linked images and such. Some versions of some browsers seem to really have trouble with it. I wound up offering http again as a result.
 
Fantastiballs! Great stuff, thanks for the heads up, switching over my bookmark.

FYI - I forced TLS on my board but ran into problems with people's browsers whining about non-encrypted content from linked images and such. Some versions of some browsers seem to really have trouble with it. I wound up offering http again as a result.

Same issue. That's exactly why I left HTTP available as an option. Thankfully browsers are getting much better at handling this, but as you said, some just totally puke.
 
Back
Top Bottom