_GOTOBOTTOM
Armor/AFV
For discussions on tanks, artillery, jeeps, etc.
NEWS
Password Hacking at Network54
staff_Jim
Staff MemberPublisher
KITMAKER NETWORK
Visit this Community
New Hampshire, United States
Joined: December 15, 2001
KitMaker: 12,571 posts
Armorama: 6,599 posts
Posted: Friday, May 31, 2013 - 10:45 AM UTC
This is a pretty serious issue for anyone who has an account on Network54. If you use a distinct/unique password for that site only you are safe, if not... read on.

Link to Item

If you have comments or questions please post them here.

Thanks!
jwest21
Visit this Community
Pennsylvania, United States
Joined: October 16, 2006
KitMaker: 3,374 posts
Armorama: 3,126 posts
Posted: Friday, May 31, 2013 - 12:36 PM UTC
Thanks Jim. Mine was one that was compromised
JPTRR
Staff MemberManaging Editor
RAILROAD MODELING
#051
Visit this Community
Tennessee, United States
Joined: December 21, 2002
KitMaker: 7,772 posts
Armorama: 2,447 posts
Posted: Friday, May 31, 2013 - 12:45 PM UTC
Thanks Jim. I don't recall if I ever registered at either one; I haven't been back to either since I found Armorama anyway!
retiredyank
Visit this Community
Arkansas, United States
Joined: June 29, 2009
KitMaker: 11,610 posts
Armorama: 7,843 posts
Posted: Friday, May 31, 2013 - 12:51 PM UTC
Thanks Jim. Turns out I had three accounts? That being said, they were all compromised. Reset.
bulldawg380
Visit this Community
Georgia, United States
Joined: August 19, 2009
KitMaker: 347 posts
Armorama: 338 posts
Posted: Friday, May 31, 2013 - 02:23 PM UTC
is this for real or just an ad for that password company
bzak
Visit this Community
California, United States
Joined: June 07, 2006
KitMaker: 264 posts
Armorama: 98 posts
Posted: Friday, May 31, 2013 - 04:39 PM UTC
I just tried to change my password. Got caught in an endless loop of entering old password, new password and new password again. Never got it changed. It never accepted any thing I typed.
staff_Jim
Staff MemberPublisher
KITMAKER NETWORK
Visit this Community
New Hampshire, United States
Joined: December 15, 2001
KitMaker: 12,571 posts
Armorama: 6,599 posts
Posted: Friday, May 31, 2013 - 05:37 PM UTC

Quoted Text

is this for real or just an ad for that password company



It is most definitely real. There are many articles about this online and one blog that confirmed it is an employee of the company. Sadly most of the news about this does NOT include the important bit about the passwords being saved as plain text. This is a really serious issue if you have other logins that use that email and password.

Jim
gcdavidson
Visit this Community
Ontario, Canada
Joined: August 05, 2003
KitMaker: 1,698 posts
Armorama: 1,563 posts
Posted: Saturday, June 01, 2013 - 12:32 AM UTC

Quoted Text

the passwords being saved as plain text. This is a really serious issue
Jim



I could not believe that when I first read it. Brutal.
armyguy
Visit this Community
Wisconsin, United States
Joined: December 07, 2012
KitMaker: 262 posts
Armorama: 150 posts
Posted: Saturday, June 01, 2013 - 03:14 AM UTC
If the pass word is used just on scale model web sights what information can you get other then you love shermans hate tigers.
I understand the implications if the password is connected with personal E Mail.
Thanks for the heads up and will check with IT people at work .
Removed by original poster on 06/01/13 - 15:40:23 (GMT).
hliu24
Visit this Community
California, United States
Joined: November 19, 2010
KitMaker: 798 posts
Armorama: 797 posts
Posted: Saturday, June 01, 2013 - 03:50 AM UTC
Hey guys

I ordered couple sets from luckymodel, I have receipted 150 shipping confirmation emails from them since 3am on the morning, ?????????? Any one notice too? I am still getting those every 5 minutes, driving me

Jay
tatbaqui
Staff MemberNews Writer
ARMORAMA
#040
Visit this Community
Metro Manila, Philippines
Joined: May 06, 2007
KitMaker: 2,713 posts
Armorama: 2,451 posts
Posted: Saturday, June 01, 2013 - 02:26 PM UTC

Quoted Text


Quoted Text

the passwords being saved as plain text. This is a really serious issue
Jim



I could not believe that when I first read it. Brutal.



I changed my ML password after reading their forum post, but never really read thru what was the issue. In this day and age of advanced security stuff and concern on data security, it is surprising and yes, disturbing to know the level of sophistication their provider had in place. Moreso the fact that Network 54 has been around for quite some time. Nonetheless I won't be surprised to hear that this is their standard offering for free user accounts.
 _GOTOTOP