manga04_jpg login_tab_left_jpg
Username:   Password:    Forgot Password?
App
Try out our new iPhone application!
App
Manga Poll
Which operating system are you using on your main computer?
Windows
Apple (Mac, Rhapsody, etc)
Linux
BSD
Other
Multi-boot
 
See Old Polls

Manga is the Japanese equivalent of comics
with a unique style and following. Join the revolution! Read some manga today!

Coded in ConTEXT

Join #baka-updates @irc.irchighway.net

RSS Feed
 
center_left_tab Forums center_right_tab

You are now viewing a topic.

Mangatraders Hacked, and How it Affects MU

Back to News  See threaded view


Pages (6) [ 1 2 3 4 5 6 ] Next You must be registered to post!
From User Message Body
strixflash
Post #644418
user avatar
Noblesse Forever!
Member

1:29 am, Jun 12 2014
Posts: 1002


Thanks for the info!

Last edited by strixflash at 1:36 am, Jun 12

________________
User Posted Image
cloudsora
Post #644420
user avatar
Drowning in Manga
 Member

2:10 am, Jun 12 2014
Posts: 119


Didn't realize Mangatraders was this big that it would warrant a post by admins but I'm an active contributor on there. LUCKILY I have my shittiest password for that one that I only use on accounts that don't really have... anything worth stealing.

________________
Currently Reading: Gave up counting after 100 Manga...
Currently Watching: everything
Omochi
Post #644422
user avatar
Member

2:24 am, Jun 12 2014
Posts: 8


Well that's just peachy.

I found my email on the uncracked password list and pretty much cracked it myself. It was so simple and fast to crack that it's really quite pathetic. Completely unimpressed. mad I just had to use a primary email address on that site didn't I? *sigh*

Well, time to bunker down and wait for the incoming spam wave. *puts on tin foil hat*

tart
Post #644425
Member

4:12 am, Jun 12 2014
Posts: 257


Well to summarize what I've learned from scouring 4chan archives in the last couple hours for those interested:

- HorribleSubs admin (matt) exploited and gained access to everything (including PayPal donors information). BotoX posted the database and snowfag cracked some of the md5 hashes.
(Or in other words, someone found an exploit in the site that gave him root privileges on the webserver. He publicized that exploit elsewhere, where snowfag et al. used the database to get everyone's logins. The person who publicized the exploit/database in the first place was (at least ostensibly) acting with good intentions in mind.). Basically the hacking was done for laughs, but no money was taken.

- MT doesn't seem to be planning to come back (as the owners were trying to sell it for $10K anyway).

- Thanks to MT's staff, certain people have direct access to download servers (until June 14th I think?) and are downloading the entire library (1.6 TB) to make a new manga download site in the works (most likely just torrents)

Last edited by tart at 7:48 pm, Jun 14

Sogno
Post #644428
user avatar
Member

4:39 am, Jun 12 2014
Posts: 307


salted passwords?

you guys need pepper with your salt.

________________
WEBTOONS ヽ( ★ω★)ノ
Kemm
Post #644440 - Reply to (#644408) by godzilla210
Member

9:29 am, Jun 12 2014
Posts: 17


http://anipasscheck.herokuapp.com/ doesn't really work (it says tham I'm safe when I've found lists with my PW there).
https://haveibeenpwned.com/ does work, though.

npcomplete
Post #644446
Member

10:54 am, Jun 12 2014
Posts: 2


Since there are pics from the reddit thread showing someone gaining admin access here, do they have access to the password db?

tgirl
Post #644501
user avatar
hoo ha
Member

7:00 am, Jun 13 2014
Posts: 227


Checked the havebeenpwned and yep, my e-mail was definitely in MT's database. I haven't even used MT for years so I don't even remember what password I used back then.

I have changed my passwords for most of the sites I used, anyways. To be on the safe side.

________________
- Looking for memory related manga/manhwa? -> click me
- Public webtoon list -> click me
Zero-Sum manga fix status (-super thank you, admins-) -> http://bit.ly/1mTntim
weronique
Post #644542
user avatar
Ur only Goddess~
 Member

7:22 pm, Jun 13 2014
Posts: 289


Does anybody have any further information about them? When will they be back? Will they be back? none

________________
http://society6.com/weroni

Get my paintings and accessories ♫
HikaruYami
Post #644551 - Reply to (#644428) by Sogno
Member

8:17 pm, Jun 13 2014
Posts: 111


It's a salted hash, not a salted password.

Anyway, a salted hash just means a randomly-generated string was appended (or prepended) to your password before the hash function was computed on it. This salt (the randomly-generated string) is stored in plaintext on the server with the hash, so the hash can be recomputed later. This means that salting passwords doesn't grant additional protection when you're only trying to break one password, but it does grant protection from someone trying to just decrypt everyone's passwords all at once.

A peppered hash means that a randomly-generated string (this time called a pepper) is used as an encryption key for an underlying encryption function within the hash function. Fast hash functions like the SHA family or MD5 don't use underlying encryption functions that can be peppered, so this notion has mostly lost its place in the literature. But my point here is that it was impossible to pepper the hashes on MT because they were using MD5.

betmen
Post #644597
user avatar
Member

8:40 am, Jun 14 2014
Posts: 101


this is suck, mangatraders is the best site to download manga.

HanaTenshiHimeko
Post #644599
Member

9:04 am, Jun 14 2014
Posts: 60


Well, I'm mad. I didn't get a chance to save my digital files before MT went down. And I tried changing my pw on MU the other day, but it seem like it didn't work. Oh well, there's nothing to steal from my MU account anyway, unless they want to see my lists of what I've been reading.

kyashi39
Post #644602 - Reply to (#644425) by tart
user avatar
 Member

9:27 am, Jun 14 2014
Posts: 11


Quote from tart
Thanks to MT's staff, people have direct access to download servers (until June 14th I think?) and are downloading the entire library (1.6 TB) to make a new manga download site in the works (most likely just torrents)


how? T A T;;? where can i have direct access to download servers?
i still have more to dl. since i lost my copy bec. my hdd gave up this year.



kyashi39
Post #644603 - Reply to (#644542) by weronique
user avatar
 Member

9:34 am, Jun 14 2014
Posts: 11


Quote from weronique
Does anybody have any further information about them? When will they be back? Will they be back? none


i tried tweeting to their tweeter account... there's still no new update from them.

i don't know where the rumor came from that they'll never be back, or/and they're selling it for 10k dollars. all i know is they're still 404 - error or...

"The site is currently under going maintenance or repair, please check back in later.

Early on June 09th 2014 EDT we discovered that someone had gained unauthorized access to our web server. All the contents of our database were downloaded and released to the internet. This data included private user information such as email addresses and obscured passwords for all registered users. Anyone that used the same password for MT as for any other online services should change their passwords as soon as possible. Your online accounts could be compromised if malicious users reverse engineer your MT password from this data dump and log into your other accounts.

The site will remain offline until we can implement a more robust system for maintaining password integrity at which time all users will be required to change their passwords. We believe the attacker gained access to the site's database through the forums so they will remain offline indefinitely while we investigate possible alternatives.

We deeply apologize for this incident and all the inconvenience it has caused and hope to move past it and come back safer and more secure than ever. It has been a trying few weeks for Mangatraders but we've weathered storms in the past and we'll weather this one as well."

kyashi39
Post #644604 - Reply to (#644542) by weronique
user avatar
 Member

9:35 am, Jun 14 2014
Posts: 11


i found it... i mean the http://pastebin.com/fzgRhdYd where IRC talk about 10k dollars, and MT going down permanently. i still wish this is not true.

Last edited by kyashi39 at 10:26 am, Jun 14

Pages (6) [ 1 2 3 4 5 6 ] Next You must be registered to post!

Back to News  Back to Top

Search This Topic:
 
Manga Search
MANGA Fu
MEMBERS
TEAM-BU


footer