SRL Archive - Senior News and General

Or at least I think I do. Along time ago, I was really big on rsu.com. I was a VIP or whatever, and I saw they were going to make a hacker for SRL. I informed Fawki and the other admins, but I suppose they might be the ones responsible for this. Also, that would be why one of my accounts was the first to get hacked, because I had the same passwords for both sites so they might have a simple hacker for their own site and found it or something.

This makes sense if that is true.

Mind getting some evidence for us?

A "hacker"? …

'Cracker'…

Sorry, but that sounds like shit to me.. xD

Lol, good luck on cracking my password it's longer than the great wall of China :p

"All the hackings"…? How many more are there?

I doubt they succeeded in the way they originally planned, because they were talking about a brute forcer, so Dankness implemented a number of incorrect tries thingy. But maybe they are behind it in a different way. IIRC RSU was going after SRL Members, what membership levels are all the hackings?

Well I have seen a few my account has been hacked or close to that and this is just a suggestion. I gave fawki proof and maybe boreas, or someone too awhile back, some screenshots of the post

Ummm pwnaz0r was hacked. After we banned iroki, someone with the email "asdfhacks@hotmail.com" added me on msn and told me iroki was innocent and that he hacked him. He PM'd be from multiple other account he claimed to have hacked to prove it. This may be the person. I tried to find anyone in our system and could not.

I made a discussion but nothing ever happened with it.

So if it same person, he has multiple junior members account, a few members, and one SSRL that we know of…

So wait… there's someone actively still hacking SRL accounts? Or was… I changed my password when I entered SSRL either way.

Doubt it was a program or something, rsu probably removed the md5 encoding of passwords in the database when you register there, so they could see all their user's passwords as plain text. As pwnaz0r mentioned he used the same pass there as here. As I'm sure alot of other members would of done

Oh and by the way, he does not have my password anymore.

From: The Claw
rsu probably removed the md5 encoding of passwords in the database when you register there, so they could see all their user's passwords as plain text.

No need to, VBulletin uses Javascript to encode the pass to MD5 client side, then sends that MD5 hash, it's really easy to do, doesn't use salts or anything like that.

Easy enough to modify the source to remove that javascript though? Unless you're unable to edit the code with VBulletin? Never looked into it

yes it is pretty easy to remove, you can just send the database-stored MD5 to the server and it'll accept it =/

ahh i get you now, I didnt know you could do that lol. thats probably more likely than them editing the source, to be honest.