Michael
DATABASE LEAK [FULL]
Before we continue with this post, we warn all CPPS players to change their passwords if used for uberPenguin.com.
We bring you breaking news on an update of the recent public release of the uberPenguin backup database.
Earlier last month we brought you news of the uberPenguin database backup being publicly released. We now bring you reports on the database being released in full.
This leak contains a total of 2806 usernames, passwords, emails, IP addresses, and private message logs, and came to light after a recent ownership change of uberPenguin.
Passwords are found to be stored in unsalted SHA256, so if you did not use a complex password, your password could be decrypted.
We further warn users to review their passwords used elsewhere and change them if necessary.
Thanks,
Michael
Ross
Michael
Speedy CPPSHQ
Aj834
Angie
Hess
Leaf
Quackles
Ross
Vale
I thought UBERPENGUIN got Closed?
Unsalted SHA256 lol… Admins should begin using BCRYPT.
var bcrypt = require(‘bcryptjs’);
var salt = bcrypt.genSaltSync(10);
var hash = bcrypt.hashSync(“B4c0/\/”, salt);
bcrypt.compareSync(“B4c0/\/”, hash); // true
bcrypt.compareSync(“not_bacon”, hash); // false
var hash = bcrypt.hashSync(‘bacon’, 8);