Bitcointalk database leaked?

[unent]

Even it's still encrypted, the hackers still could hack your account if you use weak password or the hacker have hints for your password.
If you don't believe me, you might want to check this thread : https://bitcointalk.org/index.php?topic=1544686.0

Yeah, they can just compare the hashes of the passwords to a known database and if the sha256 hash matches one in the database, the hackers knows the password as well.

You are quite safe if you use non dictionary, non common, non previously used passwords with such encryption in place, as it is almost impossible that it will appear in any rainbow table of any kind.

That's the way, using strong passwords and changing the password with or without any hack periodically...

Why bitcointalk don't use a 2FA? It would be nice for security

If anyone wants extra security for their account they can post their Bitcoin address in the thread linked to here.

https://bitcointalk.org/index.php?topic=996318.0

Someone else quotes your address in that thread, then if your account gets hacked the hacker can't delete that quoted address. You can use it to get your account back by signing a Bitcoin message and sending it to Theymos. He will give you back your account if you can sign a message proving the account is yours.

[samcoin]

Regardless if theres a threat of hack or non at all, we should be proactive in changing our passwords from time to time, it would not take too much time if you would do that every month, that means only 12 passwords in a year that you can prepare prior to changing of password day.

You are right , some members do not care about this point , even they use the same password to register in other sites , then they ask why my account has been hacked ?
I think we must use a unique e-mail and password for such important forum .

[awesome31312]

I have also seen they publish the DB for sale on alphabey for a cheap price.

Yes, I saw that, $10 per account. I've heard the administrators here have already bought the database to see which accounts were compromised, and worked to resolve the issue accordingly. So really, it's only put up there to scam users of their hard earned Bitcoin, stay away from that listing.

[Mastsetad]

https://www.hackread.com/hacked-bitcointalk-forum-database-on-dark-web/
should i be worried about it and change my password or thats just some kind of a bs?

  Whoa! Didn't see that coming. I guess i should change my password too for safety purpose as i have not changed it from sometime now.

[crairezx20]

https://www.hackread.com/hacked-bitcointalk-forum-database-on-dark-web/
should i be worried about it and change my password or thats just some kind of a bs?

It's real, the database was hacked last year... If you haven't changed your password since then, it might be wise to do so now.
I find it a little weird you didn't know about this, it was the hot topic for weeks when it happened

I never heard that thing last year.. that the database was hack.. but i think they already fix the issue. .and i hope it will not happen..
My password still not change until its 1 year old.. but i think should i change it right now before it will happen.. everything online is possible so better to change our account password.

[oceanriver]

I have also seen they publish the DB for sale on alphabey for a cheap price.

yeah they sell it for a cheap price but all the information is encrypted so i doubt that we have something to worry about right now

[electronicash]

Is this news an attempt to popularize the coins with anonymity and untraceable features like XMR, ZCASH, SDC and NAV?  
I haven't yet changed my password. i always forget my password that's why i always click the remember me button. but how true is it that the database was leaked a couple of days ago?  

edited: i find it important so i changed my password

[The Sceptical Chymist]

I just changed mine.  Not taking any chances around this place--you see all the hackers and the scammers around, and you know it isn't a good neighborhood.  Mr. Rogers is hanging from a light pole with racist grafitti written in red ink across his chest. 

I have not yet visited the dark markets, and probably won't.  How much are accounts going for?  I don't quite understand how all of that works.

[shinratensei_]

Even though this hack event was a year old, it came into different hacker related site after someone tried to sell those data in darknet recently.

All passwords are encrypted, to break down in numbers; there are 469,540 passwords that are encrypted with the SHA-256 algorithm and 44,868 passwords encrypted with SMF password encryption.

I have read somewhere SHA-256 encrypted password are hard to decrypt isn't it? However using strong password like combination of words and number with special character is wise decision with ocassional change of password and using different password for different sites.

Okay, the encrypted form is can reducing the panic situation is happening at this time, but yesterday bitcoin talk is attacked by DDoS and hacker is wanna be infiltrated in them again for stolen the database but that is failing.

[pooya87]

Even though this hack event was a year old, it came into different hacker related site after someone tried to sell those data in darknet recently.

All passwords are encrypted, to break down in numbers; there are 469,540 passwords that are encrypted with the SHA-256 algorithm and 44,868 passwords encrypted with SMF password encryption.

I have read somewhere SHA-256 encrypted password are hard to decrypt isn't it? However using strong password like combination of words and number with special character is wise decision with ocassional change of password and using different password for different sites.

Okay, the encrypted form is can reducing the panic situation is happening at this time, but yesterday bitcoin talk is attacked by DDoS and hacker is wanna be infiltrated in them again for stolen the database but that is failing.

please don't create panic by saying something you don't have any information about.

DDoS is not a hack and it has nothing to do with the leak, it is a type of attack (denial of service) which will make the website not accessible because it is flooding the bandwidth and taking up all the resources.

educate yourself before saying random stuff: https://en.wikipedia.org/wiki/Denial-of-service_attack

[MingLee]

Even though this hack event was a year old, it came into different hacker related site after someone tried to sell those data in darknet recently.

All passwords are encrypted, to break down in numbers; there are 469,540 passwords that are encrypted with the SHA-256 algorithm and 44,868 passwords encrypted with SMF password encryption.

I have read somewhere SHA-256 encrypted password are hard to decrypt isn't it? However using strong password like combination of words and number with special character is wise decision with ocassional change of password and using different password for different sites.

Okay, the encrypted form is can reducing the panic situation is happening at this time, but yesterday bitcoin talk is attacked by DDoS and hacker is wanna be infiltrated in them again for stolen the database but that is failing.

please don't create panic by saying something you don't have any information about.

DDoS is not a hack and it has nothing to do with the leak, it is a type of attack (denial of service) which will make the website not accessible because it is flooding the bandwidth and taking up all the resources.

educate yourself before saying random stuff: https://en.wikipedia.org/wiki/Denial-of-service_attack

To be honest people who think that DDoS'ing is a form of hacking piss me off a lot. There is a huge difference between a DDoS (something literally anyone can do with basically no effort) and legit hacking which is far more involved and actually something that is pretty neat. DDoS script kiddies just piss me off for the most part.

Aside from that though, a DDoS on the site means nothing, and the database it basically pretty tight so there isn't a lot that can be done right now unless they're decrypting all of it as we speak, and that should be (relatively) thwarted by changing your password.

[Reid]

https://www.hackread.com/hacked-bitcointalk-forum-database-on-dark-web/
should i be worried about it and change my password or thats just some kind of a bs?

If you are really worried about this then perhaps you should change it every month.

Well I kind of do that every month with my e-mails so that it will be safe and I kind of got used to it also.
Specially when you are using computers in different areas. Base on their comments this happened a year ago so no need to dig a buried article.

[malmoghetto]

That's the way, using strong passwords and changing the password with or without any hack periodically...

Why bitcointalk don't use a 2FA? It would be nice for security

Because it is forum based on old software in times when no one even heard about 2FA?
And new forum software which will probably use 2FA functionality is in development for couple years already.
So there is very little reason to waste time and effort to update current version of Forum with new features.

2FA is unnecessary to a forum, we use 2FA on cash or crypto coin related accounts, such as trading site accounts, dark market place site accounts.

If the database of bitcointalk is leaked, 2FA wouldn't work because our passwords are compromised. Hackers can try your passwords on other bitcoin sites, try to steal our money. They know analyze the passwords using social engineering knowledge.

[hajimasan]

https://www.hackread.com/hacked-bitcointalk-forum-database-on-dark-web/
should i be worried about it and change my password or thats just some kind of a bs?

i think you are right because when i tried to acess the bitcoin froum site in my mobile browser then it was sometime opening and some time server error time out showing .
i think the admin of this forum were busy in the work of fixing the problem of data hack or other think si that it was happened tp acess this forum . it was all about 2-3hours ago

[Yakamoto]

That's the way, using strong passwords and changing the password with or without any hack periodically...

Why bitcointalk don't use a 2FA? It would be nice for security

Because it is forum based on old software in times when no one even heard about 2FA?
And new forum software which will probably use 2FA functionality is in development for couple years already.
So there is very little reason to waste time and effort to update current version of Forum with new features.

2FA is unnecessary to a forum, we use 2FA on cash or crypto coin related accounts, such as trading site accounts, dark market place site accounts.

If the database of bitcointalk is leaked, 2FA wouldn't work because our passwords are compromised. Hackers can try your passwords on other bitcoin sites, try to steal our money. They know analyze the passwords using social engineering knowledge.

2FA would work even if your password is compromised. Even if the hacker has your password they would be stopped by needing your SIM card to get past the 2FA layer of security. That's why the sequence is username/email, password, 2FA and not username/email, 2FA, password.

2FA blocks a ton of things, and as long as your company doesn;t give out a copy of your SIM card to anyone who calls them asking for it, you should be fine for the most part.

[swtest]

Has bitcointalk admin confirmed this? They should remind us to modify the password if the database.

[davis196]

https://www.hackread.com/hacked-bitcointalk-forum-database-on-dark-web/
should i be worried about it and change my password or thats just some kind of a bs?

There was a DDos attack against the forum today, so bitcointalk was offline for maybe half an hour.

Why the hackers hate us so much?

I will have to change my password.

[ninjada]

https://www.hackread.com/hacked-bitcointalk-forum-database-on-dark-web/
should i be worried about it and change my password or thats just some kind of a bs?

There was a DDos attack against the forum today, so bitcointalk was offline for maybe half an hour.

Why the hackers hate us so much?

I will have to change my password.

Yeah, the DDOS attack was caused by this very thread, hackers EGO got offended about the fact that someone said, "they can not sale it, it is useless since the DB is encrypted". script kids. 

BTW they won't stop until Friday.

[shinratensei_]

Even though this hack event was a year old, it came into different hacker related site after someone tried to sell those data in darknet recently.

All passwords are encrypted, to break down in numbers; there are 469,540 passwords that are encrypted with the SHA-256 algorithm and 44,868 passwords encrypted with SMF password encryption.

I have read somewhere SHA-256 encrypted password are hard to decrypt isn't it? However using strong password like combination of words and number with special character is wise decision with ocassional change of password and using different password for different sites.

Okay, the encrypted form is can reducing the panic situation is happening at this time, but yesterday bitcoin talk is attacked by DDoS and hacker is wanna be infiltrated in them again for stolen the database but that is failing.

please don't create panic by saying something you don't have any information about.

DDoS is not a hack and it has nothing to do with the leak, it is a type of attack (denial of service) which will make the website not accessible because it is flooding the bandwidth and taking up all the resources.

educate yourself before saying random stuff: https://en.wikipedia.org/wiki/Denial-of-service_attack

Thanks for your link sir, really helpful for me, but I brought by the situation like the another people's said. and appearing some topic is discussing the leaked of bitcoin database yesterday.

[dunfida]

https://www.hackread.com/hacked-bitcointalk-forum-database-on-dark-web/
should i be worried about it and change my password or thats just some kind of a bs?

i think you are right because when i tried to acess the bitcoin froum site in my mobile browser then it was sometime opening and some time server error time out showing .
i think the admin of this forum were busy in the work of fixing the problem of data hack or other think si that it was happened tp acess this forum . it was all about 2-3hours ago

Same, i was trying to access this forum but  it could took longer times to load and it shows error and i saw this thread knowing that is been DDos  ans saying that our   account details have been compromised and  been sold to dark net which is  somehow  quite disturbing for me.