Loading....

Unu is back! 8.000.000 is the magic number – gamespot.com

Posted by 2fingers in English News

Posted on May 19th, 2009

“Unu”, the ex HackersBlog member that stole the spotlight with his findings in internet security has come up with a new, very interesting finding. He gained access to personal data of a very large website.

According to unu, over 8.000.000 (that 8 followed by 6 zeros!! 8 Millions) member accounts of gamespot.com have been at the mercy of anyone who could take advantage of them by means of SQLi. In the mail sent to us, “unu” says that using that SQLi anyone could extract client details such as: home address, DOB, email, and more. He backs up his claims with screenshots on personal deatils of user 2.800.000. Passwords were not in plain sight in this case so gamespot.com users can feel safe (sic).

This Vuln could have been an extremely serious threat for gamespot users but, according to “unu” the problem is now solved and the parameter that allowed data extraction was sanitized and case is closed.

gamespot.com schemaversion

gamespot users

Related Posts

12 Responses to “Unu is back! 8.000.000 is the magic number – gamespot.com”

  1. ifrim Says:
    May 19th, 2009 at 7:57 pm

    bravo ba :) what will be next? :) ) hacking wikipedia? :p :) )

  2. Alexu` Says:
    May 19th, 2009 at 9:14 pm

    Imi pare bine ca ” Unu is back ” . Parca nu e la fel fara el :)

  3. David Says:
    May 19th, 2009 at 9:32 pm

    I’m just wondering if this vulnerability was lost in in some bad hands…
    That’s a BIG database :-)

  4. Fre3 Says:
    May 20th, 2009 at 6:52 pm

    Bine ati revenit dar sincer … tema este asa dezordonata nu stiu unde si ce sa citesc si e foarte obositoare va rog sa puneti tema initiala … este mult mai PROFI ca sa zic asa negra si simplu de navigat .

  5. Blackie Says:
    May 20th, 2009 at 8:49 pm

    Oare cati bani o fi facut Unu pana acum din SQLi ? :) )
    Numai din astea 8 mil de date, se pot face cateva sute de mii de $.
    Mi se pare foarte interesant cum reuseste el sa gaseasca vulnerabilitati prin site-urile astea mari, ca de exemplu eu pana acuma nu am reusit un SQLi in vreun site cu mai mult de 150k useri. Probabil nu caut eu unde trebuie :) )
    Bravo lui, stima din partea mea !

  6. chessh Says:
    May 20th, 2009 at 8:57 pm

    Ce revenire “linistita” ai avut :) ) Welcome back :)

  8. Blackie Says:
    May 20th, 2009 at 9:21 pm

    @Shocker
    Mi-e greu sa cred asta. Cel putin nu cred ca daca cineva ar avea ocazia sa faca “ceva” bani din chestia asta, nu ar face-o.
    Poate numai daca ar avea deja destul de multi, incat sa nu-si mai faca griji pt ziua, luna, anul urmator.
    Dar, cine stie, poate asa e, ca tine.

  9. 2fingers Says:
    May 20th, 2009 at 9:38 pm

    Nu toti romanii sunt hoti Blackie.

  10. Blackie Says:
    May 20th, 2009 at 10:19 pm

    @2fingers
    Nu toti. Decat cei nevoiti sa fie – 90%.
    Nu sunt hot, nu am facut nici macar $1 prin aceste metode, dar asa cum zisei si mai sus, daca ajungi sa te gandesti la ziua de maine ca nu ai ce cheltui, incep sa-ti vina tot felul de “idei”.
    Unii se lasa purtati de idei, unii au foarte mult noroc si reusesc totul in cativa ani, chiar MUNCIND ! (dar astia sunt foarte putini), altii se umilesc muncind cate 30 ani pt familie, o casa si o masina.

  11. 2fingers Says:
    May 20th, 2009 at 10:30 pm

    Nu a zis nimeni ca esti hot Blackie. Unu face asta pentru ca este pasiunea lui, nu ca sa castige bani.

  12. Orange.fr compromised - 245,000 clear text passwords exposed? » Counter Measures Says:
    May 25th, 2009 at 2:41 am

    [...] have posted a couple of stories this month, one regarding a SQL injection vulnerability at gamespot.com which exposed the personal details of 8 million subcribers. From previous postings, you can do the [...]

Leave a Reply

Download Muzica Filme Porno