TMCnews


TMCnews Featured Article


June 14, 2011

Password Reset Software: Hackers LulzSec Release Porn Site Viewers Passwords

By Jamie Epstein, TMCnet Web Editor


A hacking group that call themselves LulzSec has already attacked big name companies such as Nintendo and PBS and even an IT security company that works closely with the FBI. However, now it seems they have changed their focus as they just have hacked into a porn website publishing over 26,000 user login passwords. This would have never been able to take place with password reset software as once users caught wind of the hackers plan they could have simply and quickly changed their password on their own.

Now you may think it is bad enough that these porn viewers’ information was published but what makes the situation even worse is that some of these participants were viewing this material at work.

According to a recent article on MSNBC.com LulzSec, sometimes referred to as LulzBoat, "drew particular attention to various government and military email addresses (.mil and .gov) that appeared to have accounts with the porn website," Graham Cluley, senior technology consultant for Sophos wrote on the security software company's blog.

Cluley detailed in is blog, "The hackers compromised the database of the hardcore website (called "Pron"), exposing not only the email addresses and passwords of over 25,000 members but also the credentials of 55 administrators of other adult websites." Adding "insult to injury the LulzSec group called on its many recent Twitter followers to exploit the situation, by logging into Facebook (News - Alert) with the email/password combinations and tell the victim's Facebook friends and family about their porn habit. Fortunately, it's reported that Facebook's security team responded quickly to the threat — and reset the passwords for all of the accounts it had which matched the email addresses exposed. Of course, it's still possible that those email address/password combinations are being used on other websites."

Thycotic is a company that offers a self-service password reset tool for end users that enables users to easily reset their own lost/forgotten/stolen password themselves, without the need for additional help from the help desk.

Password Reset Server combines ease-of-use with highly advanced and innovative security, while meeting Section 508 compliance standards.

The company even offers a free 500-user trial giving users 30 days of full access to try out the self-service software without any further obligation. Click here to try the Password Reset Server free for 30 days.

"If you believe there might be a chance that your username/password were exposed, or if you're simply in the habit of using the same password for multiple websites — now is the time to change your habits," Cluley’s blog stated.


Jamie Epstein is a TMCnet Web Editor. Previously she interned at News 12 Long Island as a reporter's assistant. After working as an administrative assistant for a year, she joined TMC (News - Alert) as a Web editor for TMCnet. Jamie grew up on the North Shore of Long Island and holds a bachelor's degree in mass communication with a concentration in broadcasting from Five Towns College. To read more of her articles, please visit her columnist page.

Edited by Rich Steeves