Holy Fuck! Think your password info is safe? WRONG!
 

I just found a wide open website citing all of your usernames, passwords, email address and ICQ# for a particular program (which I believe is now defunct).

If your name is on this list please contact me at [email protected] for a URL so you can see what I am talking about. I prefer not to post the URL here for obvious reasons.

< names removed>

The copy past is adding a ha for some reason to the beginning. Sorry but I do not feel like editing it so you will have to see beyond it.... heh

I see a few people I know - hit me up on ICQ please. Thanks

big list man, that sucks if its showing everyones passwords and stuff :(

Hitting you up now

Thank you

not on the list
but that sucks for those that are on there.

You do realize that all anyone has to do is paste two or more unique names from this list into Google and they can find the same cached page, right?

Edit your post moron :2 cents:

Edit your post moron :2 cents:

You quoted me two times so how the hell would my making an edit get my quote out of your two goddammed replies? Looks like you're the moron, asshole

Hence the reasoning I would never promote that sack of shit you call an affiliate program :glugglug

Have a nice day.

Calling Ice
 

Fuckin A, get a mod in here to delete this thread asap!

You asked me to edit a post -- the same post which you included in your two posts -- and you did that because you don't like my affiliate program? Wow, you're a fuckin' genius. Are you mildly retarded, possibly?

some sponsor owners on there.. alot of gfy members 2

< names removed >

This thread should not exist.

I emailed & ICQ'd the guy - hopefully he's gets on it pronto.

And can you tell me why ?

I think it could have been handled a lot differently. My name is on that list, too. If your name isn't on that list then just stop and think how it would feel if some fucking moron like this cheapgalleries asshole posted your name without your permission (especially if you go by an alias or a nick on here). He could have just posted usernames -- at least if he had half a fucking brain.

There's some pretty dodgy passwords listed there. If you're on that list and you're using the same password elsewhere (which, if you use a password like "dietcoke" is probably likely) then CHANGE THEM ASAP!

there are always few systems opened as this one, some people i contacted at icq in the past know what i am talking about ;) its funny that people who dont know how to make their users secure are trying to make money on the internet :2 cents:

lolz .. that is so retarded.

I know exactly what site that is and I'm glad I stopped doing business with them years ago and b4 anyone says something stupid in response, I'm talking about them and their past sites. I'm not sure how long this one site in question has been around but they've been shady for years.

This is pretty fucked up.

Pretty fucked up, I can't believe sponsors don't take security more seriously :-/

holy shit.. I'm in the list.. can you ICQ me
<<<<<<<<<<details here

ICQ my short ICQ please...

Hmm... Traffic **** ... who owned it???

found that page, thanks

< name removed > is on it. and I just hacked in his account (jk)

:1orglaugh:1orglaugh:1orglaugh:1orglaugh:1orglaugh :error

Wtf idiot? You call him names while quoting his thread twice basically making you a bigger moron and now you are upset with him? Jesus...some people...

Thanks Cheapgallerymoron, i now have a huge list of passwords. Im sure right now some people are already busy using them. By posting those names youre getting some people in real big problems.

Anybody still being owed money by Jimthefiend? I sale cheap password.

another nice disclosure on gfy

Hmm cheapgalleryidiot left the building.

Hey Franck... Gotta hand it to ya:

I REALLY enjoyed Your skills last week, I've never met someone so good at b*llf*ndling.. *cheers* until we meet again!

Wtf?

Yeah whatever.

I found the cached page too, u r a genius

Hey,
I just found the list i think. Cached version anyways. I'm not gonna post the domain, but i woudl abbreviate it as 'TF'. Is this the one?

Some people have no business programming for people if they can't secure shit properly. Luckily the password listed for me on here I only use when I'm checking stuff out that I will never actually use.

Dude... roll that joint already!!!

Well that is pretty cool, kinda disturbing

I'm not on this list, but I'd be really, really pissed...even phone numbers.

what he said... unbelievable how many weak passwords on there...looks more like AOL users than webmasters.

every minute this thread stays up it's gonna create more headaches for those on the list but being a Sunday no mods around and most of the ppl on the list prob won't know until tomorrow either :Oh crap

I found a similar list a couple years ago on Google from another defunct company which even included the street addresses of thousands of webmasters but why the fuck would anyone post something like that up here for ppl to abuse?

This gets my vote for the most potentially damaging thread on GFY.

Yeah this should not be here.

Found it and saved the evidence.

Holy shit some of you are pretty fucking stupid. With passwords like "password" and adding "123" to the end of your login name to come up with your password, or better yet having your login name as your password as well, you all deserve to suffer a little bit. Having a password of "12345678" is pretty fucking stupid as well.

None the less, I hope the program gets sued and has to pay people some good cash for being so negligent with personal information like this. Fuck, a simple robots.txt entry could have prevented this particular breach, and what fucking idiot shows passwords in plain text through the interface like that? The person that coded this page up is just as stupid as the client who ordered and hosted it.

Unbelievable.

Time we make sure this goes public and encourage programs to address these issues. Fucking ridiculous.

http://www.icwt.us/index.php/2007/09...poor-security/

Why do the webmasters on that page need to suffer for this case of getting attention?

Can you imagine how many people will abuse this info that you're giving to them.

Right now you are helping people to do massive damage to some people on that list. All in the name of getting some attention?

I suggest removing it asap. Just like this thread.

Seriously man, its totally fucked up to make an article like that. Remove that shit. You have no idea how much damage that can do. People can lose scripts, servers, money anything really if they use the same password as listed on the site for other stuff. Youre helping nobody by writing that article.

minusonebit - first of all, the guy was made aware of the situation and contacted google.

I don't know what GOOD you think you may have done but people will not be too happy if it's yet MORE compromised by your post. Seriously - that's even more fucked up.

Some of those people are NOT aware that their info is compromised.

I agree, i really cant believe he used the url in an article. Is he trying to get attention to his website or what? Its totally fucked up.