You should change your password

Shredder2600 · March 1, 2016, 5:46am

data stolen. [Link removed]
bt

shredder

Fouquin · March 1, 2016, 5:47am

Nothing but emails was stolen. These are old temp hashes and this has already been resolved.

Alamar · March 1, 2016, 5:48am

Closing this as the breach has already been discussed here:
https://forum.teksyndicate.com/t/tek-syndicate-breach/96534

Tek Syndicate Breach

Here are the things we do know so far: 1) A forum admin was impersonated. The attacker we believe was able to download a backup of the forum from October 2015 (maybe just a partial download, maybe the whole thing, not sure) using this access. We're not really sure exactly how they managed to do that, but still digging. 2) Tor was used to obscure their identity/source machines, so we're considering blocking all of tor for the website. Some of the traffic from appears to have leaked their real IP via STUN, though, so that's neat. 3) The discourse database contains user's emails and (I believe) some randomly generated md5 sums to use as temporary auth tokens. The auth mechanism we use is not the normal discourse one, and the hashed salted passwords are stored elsewhere. I had not seen any dump posts of any kind until the last day or so that contained any of this info.3.5) During the token reset, I accidentally created an off-by-one situation where the wrong tokens would be generated on login because of the time it took to physically run the queries against all rows. Finally I decided it would just be best to log everyone out forcibly and zero all the temporal tokens just in case. 4) The md5 sums you see floating around are I think (92% sure) those temporary auth tokens. But from October (so long since obsolete). I have reset all of them pre-emptively just in case. If someone's bored feel free to run those through one of the md5 sum reversing databases and I suspect the hit rate will be very very low, which is a good indicator those aren't even based on anything. At any rate The Actual Real Password Hashes don't even physically look like the hashes that have been posted (which look like plain-jane md5s). 5) The forum database probably also contains private between-user communications, though we expunge messages you delete. So if you have old private messages hanging out, they might be in the db. Always delete after reading? I guess if you're worried about that. 6) I don't think anyone that's new since October is involved at all. 7) given this, the best approach is probably to ignore the bozos and they will perhaps move on to hacking twitter accounts of flatulent teenagers

I apologize to everyone about the loss of your email addresses in this compromise, but I'm glad that's all it appears to have been. I suppose we've come of age and will want to invest more in our infrastructure. And remember my mantra: at the end of the day we're just a few random bozos on the internet :)

If anyone has any information about the parties involved, please do let us know, though.

MisteryAngel · March 1, 2016, 5:48am

We allready have a thread about it going.
In which you can find all the important information you need according to this.

https://forum.teksyndicate.com/t/tek-syndicate-breach/96534