I received an alert today that there has been a breach on SCI.Rutgers.com (Care Cure Community Forum). For those of you still using that site, you should be made of the aware of the breach.
Description: The site sci.rutgers.com has been reported to possibly have suffered a data exposure that could include 329,262 druids, usernames, emails, passwords, salts and ips. The possible exposure would have happened in 2016 although it was reported in 2017.
Potential Type: breach
Potentially Impacted Website: sci.rutgers.com (Care Cure Community - Rutgers)
Since it happened in 2016.... Deleting that account would be the proverbial closing of the barn door after the horse is long gone.
Rather than deleting an account the usual advice is to change the password on your email account, which is a good idea regularly anyway. Never open mail from addresses yo udon not recognize, and never ever click on links in them.
Data breaches happen often. I can hack into all my neighbors' gmail, fb, and all other accounts and I know their internet history. Lot of porn. Sigh..
Dont be shocked when someone just do it casually or do it just to explore their own technical skills. This is world is full of smart people. It is all about how smart you are. Only Gmail,Fb,Yahoo and such super cool website passwords are safe. That too only if you are not prey of social engineering.
If you ask me how to keep safe with these data breaches, I would say the below things. 1. Never ever use your Gmail, Fb or Yahoo or other email acount passwords same as other websites password. I dont mind using inspiredsciforum password same as careforum password. But this will not be same as my email acount password. 2. If it is possible, try to maintain two email accounts. One for all these usage and one of which you have sync with photos,documents and *may be* some potential information. Link bank accounts to one email acount that you are not using with public forums. 3. Never ever enter password in a link without seeing the url. 4. Dont use your spouse name or pet name or your mobile number or any such easily guessable phrases as your passwords. 5. Check your wifi settings. If it is wap or psk. Do not put it in wap. 6. Upgrade your antivirus. 7. Do not install any files that are doenloaded from main website.
Will update if I remember anything again
People who do these massive data breaches are not interested in your passwords mostly. They cannot take money just by logging into some stranger email account as it is not probable that he saves all relevant information in email.
They do it because they just want to expose the vulnerabilities and want to seel your email ids to marketing nigerians.. Sorry Nigerians if any.. that is how we see in India..
Did you see a mail stating that a prince from africa is struck in airport security and he want few bucks. He would return huge money when he goes back? or a mail mentioning your details and asking you to give money as fine for not paying your IT returns?
Those emails from data breach will be used like this.
Post by kilg0retr0ut on Aug 8, 2017 4:02:10 GMT -8
I read in a post a while back that the had to change things again at CC. I believe that CC is a safety concern of Rutgers, something about being a weak spot.
younggun, wow what you shared was surprising. You actually delve into the personal information of your neighbors. It makes me wonder about my neighbors and whether any of them are hacking into my accounts.
Inspiration comes and goes but when it arrives, oh how I cherish it.
younggun, wow what you shared was surprising. You actually delve into the personal information of your neighbors. It makes me wonder about my neighbors and whether any of them are hacking into my accounts.
That was child excitment for me califanna.. Not interested in such things anymore. I was able to do that by routing into my isp through kali.. and then spying on the data going through my isp router port.. this gives me info about all my neighbors data that was not encrypted and also who were using same isp..
Many people use same password for their email acounts and other sites.. so I get a sheet full of emails and passwords ready with some tools and scripts.
That bug was fixed by my isp already and I do not even care to find other way.
I also get many wifi signals through old routers used by neighbors. Old routers are easier to hack. It is just running a script and I crack through it.. When someone is inside your wifi network, they can install a small software on your router that takes all traffic from you. It gives me complete access to their online data.
Btw, if someone is thinking why should I do that at first place, my ex gf pics were stolen by a guy/gal and we knew that those were taken by someone in my apartment. We were also sure that he/she knew my gf and her mobile number. So I decided to get into their gmail acounts and then into their contacts and look for her number. I also wanted to peep intp google photos/drive and see if he/she saved her details there.. So, I hacked into almost everyone's accounts.
If someone thinks it is easier to hack into someone else's account, trust me, it is not. If all your softwares are up to date, if your hardware is not too old and if you keep changing passwords regularly, you should be good. Mainly, dont use same password everywhere.
If anyone hacked anything of mine it would be a bad move as the contents would more than likely bore them to death and my first wife took all my cash lol
If anyone hacked anything of mine it would be a bad move as the contents would more than likely bore them to death and my first wife took all my cash lol
She might hack in just to make sure you are miserable.
I step in the water, but the water has moved on...
That article is from 2015 and before they did their site upgrade. Most of us long time CC users are already aware of that. Cali, did you see something about a new breech?
That article is from 2015 and before they did their site upgrade. Most of us long time CC users are already aware of that. Cali, did you see something about a new breech?I
crappler, thanks for noting the 2015 article date. I was just trying to give vintage, some more information about what the issue revolved around.
The breach I was made aware of was what I noted in the first post. I have a service that peruses the dark web for reports of activity involving accounts that I use and with that I get notices of intrusive activity.