• C16 Hacked
    151 replies, posted
First of all this is complete lies. The passwords are HASHED. SMF does this by default. Secondly, Cloud Sixteen is going to invalidate all the keys Sunday and regenerate. Customers have been notified this will happen.
[QUOTE=jasoncarter;46890073]Cloud Sixteen takes 2 automatic backups every day - all they did was steal an admin's password. Everything is back to normal now. Also the passwords are [I]not[/I] stored in plain text... that's ridiculous, SMF hashes them by default. C16 are also moving to XenForo this weekend, so. [URL]http://forums.cloudsixteen.com[/URL][/QUOTE] found the conna alt its like 'find the vegan' but better
So did you actually buy XenForo or is it unlicensed like your store page?
removing security layers has a chance to backfire, apparently!
[QUOTE=Chessnut;46896139]So did you actually buy XenForo or is it unlicensed like your store page?[/QUOTE] Cloud Sixteen has had a WHMCS license for 2+ years.
[img]http://i.imgur.com/Ksfb1IC.png[/img] It's been like this for a while now :v:
[QUOTE=jasoncarter;46896127]First of all this is complete lies. The passwords are HASHED. SMF does this by default. Secondly, Cloud Sixteen is going to invalidate all the keys Sunday and regenerate. Customers have been notified this will happen.[/QUOTE] Won't that be a huge inconvenience for server owners? :/ That aside, once their service suddenly stops working, I'm sure they'll rush to C16 asking for help.
[QUOTE=jasoncarter;46896127]First of all this is complete lies. The passwords are HASHED. SMF does this by default. Secondly, Cloud Sixteen is going to invalidate all the keys Sunday and regenerate. Customers have been notified this will happen.[/QUOTE] I wish I could post the list here, but i'll get banned. You're an idiot. There was not one hashed password.
[QUOTE=Chessnut;46896160][img]http://i.imgur.com/Ksfb1IC.png[/img] It's been like this for a while now :v:[/QUOTE] That's bullshit.
[QUOTE=jasoncarter;46896192]That's bullshit.[/QUOTE] How?
[QUOTE=sants1;46896179]I wish I could post the list here, but i'll get banned. You're an idiot. There was not one hashed password.[/QUOTE] Whatever you say, you're wrong, but okay. And like I said, Cloud Sixteen has paid for WHMCS subscription for over 2 years - so [i]that's bullshit.[/i]
[vid]https://dl.dropboxusercontent.com/u/24983881/ShareX/2015/01/2015-01-09_23-08-13.webm[/vid]
I'm laughing so hard. There are so many people who are starting CW servers only to have them invalidate on Sunday. I've gotten like 3 messages on steam asking to setup gamemodes, then I break the news to them about Sunday.
Seems like this Conna guy is the representative of what Garry's Mod is truly all about. It's truly nostalgic.
[QUOTE=jasoncarter;46896214]Whatever you say, you're wrong, but okay. And like I said, Cloud Sixteen has paid for WHMCS subscription for over 2 years - so [i]that's bullshit.[/i][/QUOTE] You know what else is bullshit? unhashed passwords lmao
Clockwork would be so much simpler and user-friendly if it excluded CAX. Don't you agree?
The serials have been invalidated now. Also Sants is bullshitting about the passwords not being hashed, guaranteed, I dunno why he'd do that, but then again, I don't understand anything Sants does.
[QUOTE=jasoncarter;46896309]The serials have been invalidated now. Also Sants is bullshitting about the passwords not being hashed, guaranteed, I dunno why he'd do that, but then again, I don't understand anything Sants does.[/QUOTE] Your main was banned for advertising a fraud company. good reason too
[QUOTE=sants1;46896322]Your main was banned for advertising a fraud company. good reason too[/QUOTE] That was a mistake ban reason and I have spoken to Garry since about that. You know nothing, you just think you know a lot. You're nothing but a lowlife "hacker" who only seeks destruction of things others create because you've never created anything of value yourself.
[QUOTE=jasoncarter;46896331]That was a mistake ban reason and I have spoken to Garry since about that. You know nothing, you just think you know a lot. You're nothing but a lowlife "hacker" who only seeks destruction of things others create because you've never created anything of value yourself.[/QUOTE] [url]http://facepunch.com/showthread.php?t=1379983[/url] e-excuse me?
conna haven't you learned from the seven previous permabans that nobody wants you here
The passwords are actually unhashed, and also higher-level moderator accounts actually had a tool which allowed them to view another person's password at any given time. C16 is literally one of the most shifty gmod websites in a long time. Not only do they fail to hash passwords, but they also failed to secure their forums enough to stop these being leaked. Conna, just give up already, get out of the roleplay scene in general, and stop trying to have control over everything, even other people's passwords, you are basically a scam artist at this point in time. And it's true that SMF hashes passwords by default, but because they were stored unhashed, that tells me that you actually modified the software to stop the hashing. Shame on you.
[QUOTE=Blackfire76;46896489]The passwords are actually unhashed, and also higher-level moderator accounts actually had a tool which allowed them to view another person's password at any given time. C16 is literally one of the most shifty gmod websites in a long time. Not only do they fail to hash passwords, but they also failed to secure their forums enough to stop these being leaked. Conna, just give up already, get out of the roleplay scene in general, and stop trying to have control over everything, even other people's passwords, you are basically a scam artist at this point in time. And it's true that SMF hashes passwords by default, but because they were stored unhashed, that tells me that you actually modified the software to stop the hashing. Shame on you.[/QUOTE] CloudSixteen is a registered business correct? There is only one reason you would intentionally modify files to not hash passwords. And for a business to do something like that it kind of opens you up to a lot of possible legal ramifications. But then again someone would actually have to go through with that and for a $30 gamemode that only kids buy it probably won't happen.
[QUOTE=darksoul69;46896522]CloudSixteen is a registered business correct? There is only one reason you would intentionally modify files to not hash passwords. And for a business to do something like that it kind of opens you up to a lot of possible legal ramifications. But then again someone would actually have to go through with that and for a $30 gamemode that only kids buy it probably won't happen.[/QUOTE] considering they were hacked and private data (passwords, emails, etc) were exposed, yes, they are liable to a lawsuit
I hate how almost everything is a business now in Garry's Mod, it essentially became money laundering simulator.
[QUOTE=puppy156;46896596]I hate how almost everything is a business now in Garry's Mod, it essentially became money laundering simulator.[/QUOTE] in this case it is money laundering
[QUOTE=Blackfire76;46896589]considering they were hacked and private data (passwords, emails, etc) were exposed, yes, they are liable to a lawsuit[/QUOTE] Sorry but I wasn't referring to just a lawsuit. You said moderators had a tool to view the plaintext password of their registered users. That would be considered a criminal matter not a civil matter. Pretty sure anyway. I'm not a lawyer so don't take my advice.
people actually buy roleplay gamemodes or even play hl2rp at all? wtf?
[QUOTE=nettsam;46896624]people actually buy roleplay gamemodes or even play hl2rp at all? wtf?[/QUOTE] You'd be surprised at how many people play HL2RP. It's almost to the point where gamemodes like CombineControl and CW:HL2RP combined are like the main roleplay hub for Garry's Mod.
[QUOTE=Blackfire76;46896489]higher-level moderator accounts actually had a tool which allowed them to view another person's password at any given time.[/QUOTE] I'm not going to argue and I'm not going to try and prove anything, but in terms of account management, the most we could do was change your title, posts, usergroup, or avatar. Couldn't even change your name, let alone view your password. You're either confused or are trying to mislead others. You guys are welcome to believe him if you want, but it's simply an untrue statement. Do with that what you wish.
Sorry, you need to Log In to post a reply to this thread.