Habbox Management..

Mm i was thinking due to the fact of ,jess, getting owned.

Shouldn't habbox have some sort of protection for habbox staff emails.

Such as a new main folder say habboxforum.com/managers instead of /webmail

There the MANAGEMENT would have their emails, and use htaccess or whatever other method to IP filter, so only the selected members of management would be allowed to gain access through their IP.

So they'd have no way to access her email account which would contain her hxf/hxl/hx details and possibly her habbo if she wished.

This way noones gaining access to a managements gmail or whatever, resetting all passwords then redirects/stealing furni/doing shoutouts etc and generally more secure.

just thinking ;P

We are told to register Habboxforum and Habbox accounts separate from our personal accounts and all email addresses are not listed under Joomla or listed on the forum.

What happened to Jess is extremely unfortunate and nobody deserves the level of humiliation they have given her. Hacking the site is one thing but to give away the details they are is despicable. Nobody deserves that.

Security at Habbox is extremely important and this is an unfortunate, and very rare, case.

This wouldnt matter, she downloaded (stupidly?) an istealer therefore showing the passwords and sites she went on so accounts would be comprimised

If Habbox find out the group of people who have done it, they should sue them. It's a shame for Jess, she must be really annoyed and embrassed about it.

I doubt habbox would sue 14 year old kids lol.

And sue = money.

Btw isn't posting someone elses details on their site kinda illegal from like privacy protection acts and such?

No-one deserved what happened to Jess. Its just shocking, just prooves how immature people are these days. Not only that, but they must be pretty sad to sit there "hacking" a forum for teens and kids... How sad can you get?

Quote:

---

Originally Posted by Favourtism

This wouldnt matter, she downloaded (stupidly?) an istealer therefore showing the passwords and sites she went on so accounts would be comprimised

---

Firstly, theres no need to make snide comments like that, she made a mistake and i'm sure she could do without abuse right now...
also skot was suggesting something that only lets you sign in if your ip was recognised, so even if they gained passwords, they couldn't steal your ip.

Just as a suggestion a good keyring/password manager would quite easly fix the human error side of things by simply removing the need to actually type passwords in by hand at all? Thus nullifying the effect of key-loggers and removing the need to memorizes your account password leaving the door open to 70 character strings that would add a major security boost "/

Possible standardizing a keyring procedure for habbox staff may be an idea for stopping this kind of thing occurring again, equally since with lower level staff access to the account is not the be all and end all, the worst case of simply loosing your password is really not to bigger deal when higher ups can just reset it, and much less of a nuisance than the risk of the old fashioned method (aka what happened with the hackings)

Ips can change though etc.

Just an unfortunate inncident as indeed security on Habbox is up there.

I believe (and by no means is this a dig at Jess) that this incident can be used as a reminder for personal online security.

Jess fell into a trap that so many people fall into. It could happen to any one of us,

I just think that it's one of those occasions where it highlights the need for security, regular scanning etc.

Jess should not feel embarassed over this issue as it's not her fault it was just a simple mistake.

Originally Posted by Favourtism http://www.habboxforum.com/images/buttons/viewpost.gif
This wouldnt matter, she downloaded (stupidly?) an istealer therefore showing the passwords and sites she went on so accounts would be comprimised


Yeah because she saw someone send it to her on msn under then name iStealer and clicked Accept for the jokes.

Quote:

---

Originally Posted by Luccy.

Originally Posted by Favourtism http://www.habboxforum.com/images/buttons/viewpost.gif
This wouldnt matter, she downloaded (stupidly?) an istealer therefore showing the passwords and sites she went on so accounts would be comprimised


Yeah because she saw someone send it to her on msn under then name iStealer and clicked Accept for the jokes.

---

she still downloaded something really stupid, not much difference to what you said and what happened lmao

but surely she knew about basic security ?
i wonder what she accepted blates something like Sam 5 cracked or something

Quote:

---

Originally Posted by Immenseman

she still downloaded something really stupid, not much difference to what you said and what happened lmao

---

Didn't you get hacked at one point when you were management?

Personally I think that management should be treated as normal staff when it comes to hackings. If a news reporter was hacked and caused a fuss they wouldn't get their job back and would probably be permanently banned. Yet management seem to get away with it. One rule for the management another for the staff xD (Things like this have happened loads in the past and I'm pretty sure 6 months don't go by without a management member being hacked).

That's because management are constantly targeted - staff aren't. I was reverted but unlike some I had different pws for everything.

Quote:

---

Originally Posted by Immenseman

That's because management are constantly targeted - staff aren't. I was reverted but unlike some I had different pws for everything.

---

same but i was fired. when i was SS and News and Senior DJ but i got my forum back when i proved it was me. :)

Your habbox still got compromised and thrones put down to like 1HC and such.

Quote:

---

Originally Posted by Luccy.

same but i was fired. when i was SS and News and Senior DJ but i got my forum back when i proved it was me. :)

---

I remember viewing the ***** thread when it happened and your password was really stupid though. Your email was something like
[email protected] and pass was wildthin1 lol?

I think stupid things such as having **** passes or downloading keyloggers should result in a firing tbh.

Quote:

---

Originally Posted by MikeyFusion

If Habbox find out the group of people who have done it, they should sue them. It's a shame for Jess, she must be really annoyed and embrassed about it.

---

Thats legally impossible.

Quote:

---

Originally Posted by Tawm

Thats legally impossible.

---

Although one hell of alot worse is possible, uk computer misuse lays are ridiculous. Unauthorized access alone is 6months-5 years + up to 10,000 fine (from memory), unauthorized access and damaging content is somewhere in the region of up the 25 years + unlimited fine :)
If habbox wanted, it would be quite easy to prosecute the individual involved too. Only reason people get away with this kind of thing is the fact the victims are generally pretty ignorant of the laws.

Habbox could quite easily just get off its ass and make an example after all, may prevent future hackings :)

Quote:

---

Originally Posted by Mentor

Although one hell of alot worse is possible, uk computer misuse lays are ridiculous. Unauthorized access alone is 6months-5 years + up to 10,000 fine (from memory), unauthorized access and damaging content is somewhere in the region of up the 25 years + unlimited fine :)
If habbox wanted, it would be quite easy to prosecute the individual involved too. Only reason people get away with this kind of thing is the fact the victims are generally pretty ignorant of the laws.

Habbox could quite easily just get off its ass and make an example after all, may prevent future hackings :)

---

Yes but you've got to remember all the hoops Habbox would have to jump through, IF they could. These guys aren't stupid, they are using TOR, Web proxies etc and were smart enough to not leave any traces.

Wheres the proof to backup the claims? It's Habbox's word against theirs.

She downloaded a file from someone she probably didn't even know, she deserves everything she gets, I will say the same to anyone on this forum that's stupid enough to accept "LOL DOG PHOTOS.JPG.exe (ohoho)". Myself included if that should ever happen to me (it wont).

If you can't keep your computer secure, buy a goddamn mac or use linux. It's very simple, don't ever click on links without taking 5 seconds to look and see if they're taking you to a site that looks fishy or an executable file.

Tips for not being owndizzled:
don't ever visit a .ru site, nothing good ever comes from there, ever.
don't accept any executable files at all, this includes:
ADE - Microsoft Access Project Extension
ADP - Microsoft Access Project
BAS - Visual Basic Class Module
BAT - Batch File
CHM - Compiled HTML Help File
CMD - Windows NT Command Script
COM - MS-DOS Application
CPL - Control Panel Extension
CRT - Security Certificate
DLL - Dynamic Link Library
DO* - Word Documents and Templates
EXE - Application
HLP - Windows Help File
HTA - HTML Applications
INF - Setup Information File
INS - Internet Communication Settings
ISP - Internet Communication Settings
JS - JScript File
JSE - JScript Encoded Script File
LNK - Shortcut
MDB - Microsoft Access Application
MDE - Microsoft Access MDE Database
MSC - Microsoft Common Console Document
MSI - Windows Installer Package
MSP - Windows Installer Patch
MST - Visual Test Source File
OCX - ActiveX Objects
PCD - Photo CD Image
PIF - Shortcut to MS-DOS Program
POT - PowerPoint Templates
PPT - PowerPoint Files
REG - Registration Entries
SCR - Screen Saver
SCT - Windows Script Component
SHB - Document Shortcut File
SHS - Shell Scrap Object
SYS - System Config/Driver
URL - Internet Shortcut (Uniform Resource Locator)
VB - VBScript File
VBE - VBScript Encoded Script File
VBS - VBScript Script File
WSC - Windows Script Component
WSF - Windows Script File
WSH - Windows Scripting Host Settings File
XL* - Excel Files and Templates

Thanks for playing, it is indeed sad what happened but if you're silly enough to click .exe links then you're the only one to blame.

Quote:

---

Habbox could quite easily just get off its ass and make an example after all, may prevent future hackings :)

---

it deffo would

Quote:

---

Originally Posted by Tawm

Yes but you've got to remember all the hoops Habbox would have to jump through, IF they could. These guys aren't stupid, they are using TOR, Web proxies etc and were smart enough to not leave any traces.

Wheres the proof to backup the claims? It's Habbox's word against theirs.

---

Hoops? Firstly i doubt the script kiddies would even of been smart enough to take such meager precautions, that said even if they did most the added security is an illusion. Even if its enough to stop the average web user tracking you down, the cyber crimes division, the people who would actually do all the "jumping through hoops" were the crime reported, are significant more skilled and capable of subpoenaing companies like hushmail to get them to hand all the relevant info straight over :)

Anonymity on the Internet is just in your head :)

Also, raw access logs, sever logs and the results of the actions tend to work quite well.

After all they are a Habbo fansite, ran by teenagers and a few older members. ALTHOUGH they are a Habbo fansite they still hold thousands of peoples data.

Quote:

---

Originally Posted by Mentor

Hoops? Firstly i doubt the script kiddies would even of been smart enough to take such meager precautions, that said even if they did most the added security is an illusion. Even if its enough to stop the average web user tracking you down, the cyber crimes division, the people who would actually do all the "jumping through hoops" were the crime reported, are significant more skilled and capable of subpoenaing companies like hushmail to get them to hand all the relevant info straight over :)

Anonymity on the Internet is just in your head :)

Also, raw access logs, sever logs and the results of the actions tend to work quite well.

---

You also have to remember:

Quote:

---

Originally Posted by HHGS.Net

After all they are a Habbo fansite, ran by teenagers and a few older members. ALTHOUGH they are a Habbo fansite they still hold thousands of peoples data.

---

Quote:

---

Originally Posted by Tawm

You also have to remember:

---

That stops them reporting a hacking to the police?? o.0

Why is this still going on? Hardly any damage was done and it's no big deal, maybe for Jess but everyone else should just get over it, you're giving the hackers the attention they want even though they shouldn't be proud of it as it was hardly an "owning"

Quote:

---

Originally Posted by Mentor

That stops them reporting a hacking to the police?? o.0

---

No, however this isn't their real life job. Sierk is obviously busy, Jin has exams and what not to worry about and nvrspk4 has a life to run. Reporting it probably isn't worth the hassle. The best thing they can do which is what they will do is take measures to ensure it isn't as likely to happen again.

Plus its police your talking about...

Quote:

---

Originally Posted by Immenseman

No, however this isn't their real life job. Sierk is obviously busy, Jin has exams and what not to worry about and nvrspk4 has a life to run. Reporting it probably isn't worth the hassle. The best thing they can do which is what they will do is take measures to ensure it isn't as likely to happen again.

---

So someone gets mugged your advice is it not worth the hassle or reporting it, you have exams/other stuff to do/a life to run ect?? The best thing to do is just let them get away with it and never go outside again (a measure to stop it happening again) ...

Sounds logical to me o.0 Chances are its little more than a phone call and few forms, but its not my site, i don't have to fix anything so up to habbox in the end..

its dlox we are talking about, it will be front page news him walking outside yet alone being arrested for hacking a habbo fansite.

Quote:

---

Originally Posted by Mentor

So someone gets mugged your advice is it not worth the hassle or reporting it, you have exams/other stuff to do/a life to run ect?? The best thing to do is just let them get away with it and never go outside again (a measure to stop it happening again) ...

Sounds logical to me o.0 Chances are its little more than a phone call and few forms, but its not my site, i don't have to fix anything so up to habbox in the end..

---

That would be personal damage, that isn't. You don't have to exaggerate to attempt to prove a point that I've already acknowledged. There was very little damage done, unlike a mugging where you could lose hundreds. Nothing too major happened. It'd be more beneficial for them to spend the time they had to ensure that other managers were aware of said dangers.

Quote:

---

Originally Posted by Immenseman

That would be personal damage, that isn't. You don't have to exaggerate to attempt to prove a point that I've already acknowledged. There was very little damage done, unlike a mugging where you could lose hundreds. Nothing too major happened. It'd be more beneficial for them to spend the time they had to ensure that other managers were aware of said dangers.

---

Crimes a crime, but your choice. We pay tax's in order to have the police, so seems to make scene to me to make use of em. Equally you could also loose £2.99 in a mugging depending on what you had on you. Just because damage was minimal this time, doesn't mean it will be next time.

we pay tax for police who do nothing wooo

Quote:

---

Originally Posted by Mentor

Crimes a crime, but your choice. We pay tax's in order to have the police, so seems to make scene to me to make use of em. Equally you could also loose £2.99 in a mugging depending on what you had on you. Just because damage was minimal this time, doesn't mean it will be next time.

---

I've totally ignored the essential point that the police aren't going to take the complaint should one be issued all that serious.

I think [the hacking site that is filtered] itself should be closed down. Someone should contact their host as they're promoting criminal acts

The host is offshore, im sure its hosted by Don aswel so ye. no chance you will just get your ip and email leaked on ***** to be laughed at.

Yeah, I actually got banned on Habbo for telling ludus to do something about it, lol. I assume Habbo have tried... and failed.

Quote:

---

Originally Posted by Immenseman

I've totally ignored the essential point that the police aren't going to take the complaint should one be issued all that serious.

---

Shall i take it this is from experience? :rolleyes: