Comments on: Richard Dawkins forum compromised

By: A Whole New Meaning To Phishing | Business Computing World

A Whole New Meaning To Phishing | Business Computing World — Mon, 07 Dec 2009 14:13:47 +0000

[...] all seriousness, this attack is highly reminiscent of the recent hack of the Richard Dawkins forum and is very much a trend I expect to see increasing over the coming months and years. Gaining [...]

By: Chris Smith

Chris Smith — Fri, 23 Oct 2009 00:57:52 +0000

You don’t remember the phpBB.com hack from February this year? :)

The unsalted passwords stolen then were from people who had not logged in since early 2007. phpBB3 uses salted hashes using the following framework: http://www.openwall.com/phpass/

By: Richard Dawkins’ website hacked « Anglican Samizdat

Richard Dawkins’ website hacked « Anglican Samizdat — Thu, 20 Aug 2009 17:44:13 +0000

[...] Filed under: evolution — David @ 1:43 pm Tags: evolution Why was Dawkins’ site chosen? Natural Selection. No Intelligent Design for Dawkins [...]

By: Stew

Stew — Thu, 20 Aug 2009 15:09:22 +0000

The Christian Taliban

By: eleven

eleven — Tue, 18 Aug 2009 22:33:58 +0000

The hacker has now been thoroughly ID’d, as the idiot left a trail to his registered .com

By: Rik Ferguson

Rik Ferguson — Tue, 18 Aug 2009 20:58:32 +0000

You don’t remember the phpBB.com hack from February this year? :)

By: ::: dawkins website gehacked ::: | LucitheR - der Teufel steckt im Detail

::: dawkins website gehacked ::: | LucitheR - der Teufel steckt im Detail — Tue, 18 Aug 2009 15:40:47 +0000

[...] Infos gibt es hier [...]

By: nobody

nobody — Tue, 18 Aug 2009 12:21:18 +0000

but remember hashed passwords can also often be cracked using rainbow tables.

Is there really any current forum software that fails to salt the hashes?

By: Rik Ferguson

Rik Ferguson — Tue, 18 Aug 2009 07:47:55 +0000

Thanks Jim, that’s relatively good news for forum members, but remember hashed passwords can also often be cracked using rainbow tables.

By: Jim Dominic

Jim Dominic — Tue, 18 Aug 2009 06:26:37 +0000

The forum software the Dawkins site was using does not store passwords in clear text.