Looks like the @devkitPro accounts DB (with hashed passwords) just got dumped on Pastebin (https://pastebin.com/0A775EZt caught by @haveibeenpwned). If you haven't changed any reused passwords yet, better get on that now.
-
And anyone who didn't have the dump before now does, due to this weak argument. Please retweet this without the pastebin dump. Your audience aren't just your followers on Twitter; there are abusive lurkers who do not hack for ethical reasons which follow you.
Anyone who didn't have the dump can go to https://haveibeenpwned.com/ , type in the email address of *any* devkitpro forum user (e.g. mine, which is public), and follow the link to the pastebin. Sorry, I don't do security theatre. It's out there. Any and all attackers will have it.
-
-
I get what you're saying but nobody is pretending the dumps aren't out there. Nobody is hiding what happened. This seems pretty irresponsible to me given your involvement in the homebrew scene and the likelihood of your followers having grudges against users in that dump.
-
If I mentioned it's in a Pastebin *at all* then any would-be wrongdoers will find it anyway. And if I don't, that would be irresponsible towards those affected. Given the decision to mention it, putting the link in everyone's face is only going to help drive the point home.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.