The FreeiPodGuide Forums

Darkside · Posted: Fri Nov 17, 2006 4:24 pm Post subject:

damnit i entered my p/w

csurge · Posted: Fri Nov 17, 2006 4:26 pm Post subject:

emoney · Posted: Fri Nov 17, 2006 4:42 pm Post subject:

Talked to chris, so I have a few updates. The post tables were deleted evidently so we're waiting on the backups from Wes. Considering that this happened recently, the backups shouldn't be too old.

Yes, the passwords are hashed and salted. I figured they were, but didn't know for sure.

FreeGiftzAdmin · Posted: Fri Nov 17, 2006 4:44 pm Post subject:

Thanks for the update. Hopefully he can get the site back up sooooon.

i-ninja-u-dead · Posted: Fri Nov 17, 2006 4:54 pm Post subject:

What does hashed and salted mean? Confusion

egyptianruin · Posted: Fri Nov 17, 2006 4:57 pm Post subject:

OrderGiftsFree · Posted: Fri Nov 17, 2006 5:00 pm Post subject:

Were PM's lost at all? How far back is this backup? With missing posts and PM's it can cause trouble and scammers. :\ I have 3 different trades going right now.

One me and friends greened and I'm owed $125 Paypal.
Second same thing, but I'm owed $160.
Third has been a long trade, but I'm waiting on my last refer for an xbox 360.

I want a4f back lol.
____

Off topic... If we made a super donation could we get our own custom donation picture besides the Gold, Silver, and bronze. Very Happy

YourGiftsFree · Posted: Fri Nov 17, 2006 5:02 pm Post subject:

Hashed means if your password is say "hi" it will look something like this

a0c9ifkkdwo43vmire9ww3443md883hdjd030kc

i-ninja-u-dead · Posted: Fri Nov 17, 2006 5:02 pm Post subject:

DRay9911 · Posted: Fri Nov 17, 2006 5:09 pm Post subject:

that's just great, you just cracked my password.

thanks a lot.

-dan

Wolfeman · Posted: Fri Nov 17, 2006 5:10 pm Post subject:

OrderGiftsFree · Posted: Fri Nov 17, 2006 5:11 pm Post subject:

Cracking hashes can be very long and tetius. Most forums if not all use MD5. The password "anything4free" with MD5 would be "528c31fe3bdb044e1cde0396b4f42e8f". Now the password "the" is "8fc42c6ddf9966db3b09e84365034357". If you go to google and type in "8fc42c6ddf9966db3b09e84365034357" for the password "the" you'll find some site with a list of passwords matching to a hash.

Example. Go to http://diclvx.org/md5/th.htm and search for the hash code and you'll find next to the hash code the password "the" Therefore in otherwords if anyone uses a password that has no numbers and no capitals I highly highly recommend you change your passwords. If you have numbers and a common word I'd recommend you also change your password. If you have a detailed hard password with numbers and capitals I can almost promise you'll be fine. Cracking a password from scratch with a md5 cracker would take hours for just 1 password. Obviously this person probably thought it was "fun" and won't be going through every password. Though if he posted it that can be bad. To be safe just change your password no matter what.

Hope that helped and made sence.... Hah

emoney · Posted: Fri Nov 17, 2006 5:15 pm Post subject:

they are safe to a degree.

And our PMs should be intact, as well as memberships. Just need the damn post table backup. Wes hasn't been on, but I'll let you know once I talk to him.

Getstuff4free Kyle · Posted: Fri Nov 17, 2006 6:22 pm Post subject:

YourGiftsFree · Posted: Fri Nov 17, 2006 6:56 pm Post subject:

theysayjump · Posted: Fri Nov 17, 2006 9:53 pm Post subject:

JPeeper · Posted: Fri Nov 17, 2006 10:23 pm Post subject:

schoolis · Posted: Sat Nov 18, 2006 3:08 am Post subject:

Hi it's schoolis here from A4F.

I've just registered here (as you can see, only 1 post) as I just saw the A4F down thread.

Firstly thanks to FiPG to making us this official thread, even though it is returning a favor it shows you guys are fair!

Also, how worried should I be about my password, it is the same for my bank, ebay account and my work place. Should I scramble into town now and get all these changed?

Also, because the passwords may have been "hashed and salted," how dangerous is this? Also what do you mean by salted?

I hope the backups are recent, they are crucial to the restoration on A4F...

Hope it gets back up soon, and please keep us posted with any updates anybody who knows anything.

Thanks

ajasax · Posted: Sat Nov 18, 2006 4:56 am Post subject:

mkpeaches · Posted: Sat Nov 18, 2006 5:15 am Post subject:

schoolis · Posted: Sat Nov 18, 2006 5:42 am Post subject:

johnjimjones · Posted: Sat Nov 18, 2006 7:47 am Post subject:

gnznroses · Posted: Sat Nov 18, 2006 10:15 am Post subject:

Isn't It A Pity? · Posted: Sat Nov 18, 2006 10:52 am Post subject:

Aww maaaaaaan! Sad

And I had just found out why it was taking so long to get me restored on Ps3.Free4me. I need to check my PMs to get my referrer's passport number. Anybody happen to know Illidan's PS3.free4me number?

Also I had been hesitant to do it before I knew what was going on with A4F.....but just a minute ago before gnznroses told me what's going on I did it anyway...I tried to log in with that popup that shows whenever you go to A4F. Was that a stupid thing to do? Could somebody get my login info and F with my account? Confused

schoolis · Posted: Sat Nov 18, 2006 11:19 am Post subject:

Many of us put in our user IDs and passwords.

Wes and the admins pulled the site at least yesterday, if not before I think, so if you put your password in now I don't think it will go to the hackers. I may be wrong though...

emoney · Posted: Sat Nov 18, 2006 1:01 pm Post subject:

yeah, we took it offline. No harm will come from submitting your name and pw.

Isn't It A Pity? · Posted: Sat Nov 18, 2006 2:53 pm Post subject:

^Thank goodness. Smile

I hope you get it back up soon so I can finish PrimoDinero and finish restoring my completed PS3.Free4me (since I just fully found out about my situation there).

Tolemac · Posted: Sat Nov 18, 2006 5:08 pm Post subject:

Thanks TSJ and FiPG for giving us orphans a place to get this info. Very Happy

Thanks emoney for the updates. Wink

Here's hoping Chris and Wess can sort it out soon.