phpbb main site recently hacked

[PCHeintz72]

Caught this on Yahoo news.

List of hacked passwords reveals '123456' is most popular
- http://www.yahoo.com/s/1028044

It never occured to me people actually use that.

The reason I bring it up on this forum at all, was the site that they mention being hacked was phpbb itself.

Recently a niche programming-oriented website called phpbb.com had its user database hacked into and the passwords for 20,000 members stolen.

[Spokavriel]

Fun. Um isn't this site kinda hosted there in mirror form? Does that mean passwords for here might have been caught up in the hack?

[PCHeintz72]

Fun. Um isn't this site kinda hosted there in mirror form? Does that mean passwords for here might have been caught up in the hack?

lwf58 would be able to answer that better than me. However, to my knowledge, while this site used that forum software, it is not connected to it in any physical way and is on separate servers.

In that, it is different from Invision forum software, which all share the Invision software on their own servers.

[Spokavriel]

Care to take your own words for that > http://fukufics.phpwebhosting.com/viewt ... 868#241868 <Follow the link to your own post only on what I hope is a mirror.

[PCHeintz72]

Care to take your own words for that > http://fukufics.phpwebhosting.com/viewt ... 868#241868 <Follow the link to your own post only on what I hope is a mirror.

Shrugs... it may be backed up there, but I'm certain I remember lwf58 stating this was on its own server.

We will have to wait for him to let us know. Unless the phpbb main server has a notice.

An attempt to check revealed the distubing message:

Maintenance
We are sorry to report that we have been attacked through a 0-day-exploit in our PHPList installation (responsible for the mailing list about new releases). phpBB.com will remain unavailable while we work to recover. No vulnerabilities have been found in the phpBB software itself.

[Spokavriel]

Good news is if you aren't on the mailing list personally you should be safe. Bad news is allot of people on that list may be getting harassed soon. And if the passwords and software can be tracked out to the sites that those users on the Mailing list maintain who knows what may be tried. So in a way it's good news but not all good.