WARNING: 33.000 SMF password stolen and on the loose in Finland

[niko]

Only really old versions of SMF used MD5 hashing which is crackable. Many forum systems and other web applications still use MD5.

Current versions of SMF use SHA1 and as far as I know are not directly crackable,

I wasn't aroun
d for the SMF 1.0 series but if the MD5 uses the username as a salt (like 1.1 with sha1) then I imagine getting actual passwords from these hashes still takes quite a bit of time

function md5_hmac($data, $key)
{
$key = str_pad(strlen($key) <= 64 ? $key : pack('H*', md5($key)), 64, chr(0x00));
return md5(($key ^ str_repeat(chr(0x5c), 64)) . pack('H*', md5(($key ^ str_repeat(chr(0x36), 64)) . $data)));
}


Not standard md5 at least. $data = password, $key = username

[voyager1337]

You can find anything on those sites but most of it is pure rubbish and designed just to make you download it.  I know of an XBOX Live Keygen that's also on those turrents but it's nothing but a virus

[Surferbird]

Latest news, sorry for bad translation (originally in finnish)
Central Criminal Police investigate the hijack and distribution of passwords. Police has ask help
from other outside finland countries to cach the authors.

The file that has been publiced in net contains specially discussion
forum and different communityservice information. No bank netpasswords is within these.
Identifications from IRC-Gallerys has not leake out, as believed yesterday.

Virus defend company F-Secure advice forum and community services to change passwords.
Also Cert-fi has given this advicer when warned people. Same time Cert-fi thold people to use
long words containing many special characters in passwords is needed.

Never before has so many passwords (80,000) been exposed in Finland.

[Surferbird]

You can find anything on those sites but most of it is pure rubbish and designed just to make you download it.  I know of an XBOX Live Keygen that's also on those turrents but it's nothing but a virus

No, it's not true at all. There is really good stuff, seems you cant find or use torrents

[karlbenson]

btw, this made it to arstechnica
http://arstechnica.com/news.ars/post/20071015-hackers-target-finnish-forum-crack-logins-for-almost-80000-users.html