Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors Forums: Security Leak

So can they have my email?

The only info I have on this site are a username, password, and misc. email. It may not be me main email, but I'd had to have it violated.....
 
brand said:
If MacRumors was really taking this as seriously as they portray to be then the article on the front page would stay at the top of the page for an extended period of time. Instead the article has already been pushed down by two other articles and tomorrow it probably won't even be on the front page anymore. Almost seems intentional to try and get it off of the front page as soon as possible. Not surprised that it wasn't a second page story.

This is a good textbook case of how not to handle security and and how not to react to being hacked.
Click to expand...

I'm sorry but to imply MR is purposefully trying to hide this is not correct.

All the writers know what to do is click post and the article is automatically listed. It's not done on purpose although it could be seen that way. It's actually the way the site is designed. The only way to post something and keep it on top is to go into the templates and change them. That would take a while so far all we know they may be working on this as we type.

It would be a good idea to try and make a link at the top of the main template and reboot the website.
 
This is a little irresponsible.

I don't blame MacRumors for being the target of a hack, but this has been going on for over twenty-four hours and you still haven't emailed all users? And the visibility is poor. There is nothing to flag this as attention-worthy and it is just the same as another retail store opening post.

I know you guys are scrambling and trying to figure things out. But you need to email all users, even if they don't come here anymore. You don't have to have all the facts in order, just a brief message on why passwords need to be changed. Forum functionality is not a priority here.
 
Trauma1 said:
This is a little irresponsible.

I don't blame MacRumors for being the target of a hack, but this has been going on for over twenty-four hours and you still haven't emailed all users? And the visibility is poor. There is nothing to flag this as attention-worthy and it is just the same as another retail store opening posts.

I know you guys are scrambling and trying to figure things out. But you need to email all users, even if they don't come here anymore. You don't have to have all the facts in order, just a brief message on why passwords need to be changed. Forum functionality is not a priority here.
Click to expand...

They should also reset everybody's passwords (and log them off) so that people are forced to find out about the news and change their passwords. The email could tell them about the attack and give them a link to change their password.
 
At least force everybody signing in to view this thread before they can do anything else. I can't remember if that is default or if it requires a modification.
 
Trauma1 said:
This is a little irresponsible.

I don't blame MacRumors for being the target of a hack, but this has been going on for over twenty-four hours and you still haven't emailed all users? And the visibility is poor. There is nothing to flag this as attention-worthy and it is just the same as another retail store opening post.

I know you guys are scrambling and trying to figure things out. But you need to email all users, even if they don't come here anymore. You don't have to have all the facts in order, just a brief message on why passwords need to be changed. Forum functionality is not a priority here.
Click to expand...

Agree 100%.

I found about this breach reading Ars ...

This should be on top of the home page in BIG BOLD LETTERS, not just another post that's already drifting out of the view.

Can somebody clarify what other profile information was there for picking on top of username, password hash and email?
 
davideotape said:
Im pretty sure "sticky"ing this thread would take an admin 30 seconds
Click to expand...

Now that can be done easily. I agree it should be a sticky but that won't let everybody see the info. A lot of users just use the forum spy and rarely view MR by discussion thread hierarchy.

The spy and the main page are the most viewed I believe.

And it's been done.

Thanks guys.
 
Peace said:
The only way to post something and keep it on top is to go into the templates and change them. That would take a while so far all we know they may be working on this as we type.
Click to expand...

Well obviously that's not true. At the top of the main page the iPad mini Retina being for sale is prominently displayed. And that just went for sale today.
 
Thankfully a link to the article is in bold at the top now in the forums and the forum spy. Only place where it isn't at the top is the front page, so that will need some work.
 
Hopefully the hacker was attempting to rid the site of the ridiculous in-thread advertisements.
 
tutubibi said:
Agree 100%.

I found about this breach reading Ars ...

This should be on top of the home page in BIG BOLD LETTERS, not just another post that's already drifting out of the view.

Can somebody clarify what other profile information was there for picking on top of username, password hash and email?
Click to expand...

Yeah, the truly irritating thing was that originally this was just a footnote on the "Site Feedback" section.

I went there this AM to see why the outage had happened.

I expected to read about spilled coffee on a server or perhaps a virus or worm, but instead saw this:

https://forums.macrumors.com/threads/1670477/

And there it was hidden..."oh by the way, looks like they got everyone's info"

(paraphrased).

Only after urging from people who found the thread was a news story generated.

Getting word out to change passwrords should have been #1, WELL before updating news page.

And first word about this should NOT have been buried in the site feedback section.
 
abhibeckert said:
Which is why I just want someone to delete my account, if they don't take security seriously then I don't want any personal info on the site, including my email address.
Click to expand...

Same here. I just had to confirm my email address and security question THREE TIMES because of unusual activity. I had to do these on two of my email accounts. :mad:
 
egeek84 said:
Thanks for letting us know, just got done changing my password!
Click to expand...

Only the people that have come onto the site and have read this know about it.

There's still thousands and thousands of users out there who are unaware of this.
 
All of you saying you're getting suspicious activity reports from email providers, other sites, imesssage,facetime, etc.

Did these services share the same password as your macrumors account or was it a different password and you still got these notices ??
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back