Ashley Madison hacked

There was a link but it contained mal-ware. The link below is an archive
https://archive.is/FCGOk
All dem hoes need to go somewhere else now.

Edit: Taken from the Wikipedia page on Ashley Madison

The company received significant attention on July 15, 2015, after hackers stole all of its customer data—including names, addresses, sexual fantasies and credit card information—and threatened to post all the data online if Ashley Madison and fellow site Avid Life Media site EstablishedMen.com were not permanently closed. By July 22, the first names of customers were released by hackers.

 

[Watcher]

so amusingly enough someone compiled a list of all the emails found on GameDevMap

Here are some highlights

shane.yeend@imagination.com.au
DOB: '1973-07-15'
Plea: 'looking for hot 20-30 to play with my hot 26 year old partner'

amfahmi@maxis.com.my
DOB: '1975-02-13'
Plea: 'looking for mature'

mark.friedman@turner.com
DOB: '1957-06-21'
Plea: 'unhappily married man seeks sensuous woman for pleasure!'

robinson.freitas@turner.com
DOB: '1975-01-08'
Plea: 'mr. freeze'

crow@wetafx.co.nz
DOB: '1965-01-01'
Plea: 'i\'m seeking a frisky wellingtonian wench.'

dsanchez@blizzard.com
DOB: '1982-09-20'
Plea: 'my turn to have fun on the side ;

jason.smith@disney.com
DOB: '1969-04-14'
Plea: 'wazzzzzzzzzzzzzzup'

rkenney@blizzard.com
DOB: '1973-04-30'
Plea: 'who drank all the mountain dew?'

gino.p.desisto.-nd@disney.com
DOB: '1973-01-14'
Plea: 'if you relate to 101 grads

ryan.p.macnamara@disney.com
DOB: '1984-09-01'
Plea: 'not sure what i\'m looking for here and a little nervous'

fran.pajevic@disney.com
DOB: '1961-10-01'
Plea: 'excitement is the game'

jbrowne@ea.com
DOB: '1980-03-08'
Plea: 'i want an older woman!'

michael.drummond@igt.com
DOB: '1973-11-12'
Plea: 'i am mike'

And my personal favourite

hoodhopsfinest@neopets.com
DOB: '1991-01-05'
Plea: 'i\'m horny'

 

[AnOminous]

Honestly, I think this is bullshit. Privacy is important. The only reason why people aren't up in arms about this is because cheating is morally questionable (at best) and abhorrent at worst.

True, but so is taking $19 a pop for deleting shit and then not deleting it. That's fraud. That's a massive class action suit waiting to happen, not to mention a criminal prosecution.

And if there was going to be an object lesson on the importance of privacy and data security, it's hard to imagine a better bunch of people for it to happen to. I have very little sympathy for anyone involved.

 

[melty]

Sadly, pretty much no one except maybe the people involved are really going to be learning any objective lessons here. Most people are going to keep using their work emails for dumb/illegal shit, and trusting whatever "the tech people" tell them.
Privacy will continue being slowly whittled away and it seems there's little anyone can really do to stop it. I've heard some pretty interesting arguments about it being a more modern concept etc. but I don't know much about that myself. At this point, I just expect that in the future, it's possible that almost everything I've done online could be exposed. Which would suck but still wouldn't be as bad as what's happening to these assholes lol.

 

[Le Bateleur]

H-h-h-h-hey g-g-gonzo journalists! Here's a handy list of what's going up on Pastebin:

https://haveibeenpwned.com/Pastes/Latest

Usual caveats about these pastes not being verified (although the original leak has been verified multiple times over), and Avid Media being very lawyer-happy about all this...

 

[Marvin]

And if there was going to be an object lesson on the importance of privacy and data security, it's hard to imagine a better bunch of people for it to happen to. I have very little sympathy for anyone involved.

Do you mean you have no sympathy for the customers of Ashley Madison or Ashley Madison itself?

Sadly, pretty much no one except maybe the people involved are really going to be learning any objective lessons here. Most people are going to keep using their work emails for dumb/illegal shit, and trusting whatever "the tech people" tell them.

What's there to be told? "We're protecting your security." "Ok, thanks."

 

[autisticdragonkin]

Do you mean you have no sympathy for the customers of Ashley Madison or Ashley Madison itself?

Probably both

 

[AnOminous]

Do you mean you have no sympathy for the customers of Ashley Madison or Ashley Madison itself?

I thought anyone involved pretty much covered everyone. Including the self-righteous hackers.

 

[Marvin]

I thought anyone involved pretty much covered everyone. Including the self-righteous hackers.

You shouldn't have to be an expert in technology to be able to use it.

I have sympathy for the victims here, the customers. Privacy is important to everyone, even if someone's using it for a shitty purpose. Dismissing this with "well, they were cheating so..." is really shitty.

 

[autisticdragonkin]

You shouldn't have to be an expert in technology to be able to use it.

Just putting it out there that using fucknigger@gmail.com instead of your work email doesn't mean being a technological expert

 

[AnOminous]

Just putting it out there that using fucknigger@gmail.com instead of your work email doesn't mean being a technological expert

That still won't fix things for the people with paid accounts with their credit card payment information including their home address and phone number. It's a little harder to fake that paid stuff. Like Josh Duggar's account, apparently.

 

[Marvin]

Just putting it out there that using fucknigger@gmail.com instead of your work email doesn't mean being a technological expert

Admittedly the customers made fuckups, but you should still be able to trust the security of services you patronize.

Just like how if I am cheaing on my wife in hotel rooms, I'm definitely taking a risk. But still, if someone breaks into my hotel room and catches pictures of me doing it, people shouldn't be going "welp, your fault, you shouldn't have been cheating". There's a bigger picture here that affects all of us.

The tech industry is woefully underregulated with this sort of shit. Wiretapping physical phones is illegal and when cops want to do that, they need a warrant. But if that phone conversation happens over the internet, in say, skype, they can largely do whatever the fuck they want. (Within the TOS, of course.)

 

[bearycool]

And second, bigger dump was just made! Twice the size of the first one, and it has the email information and stuff of the CEO, Noel. Looks like all the dirty laundry is being presented.

 

[Guzzlord]

What amuses me the most is how the Management behind the website basically didnt reacted to the demands the hackers made.
I mean, yeah, it'd be kind of weird for a big website like this being taken offline out of the blue, but i think that shows how much these
companies actually care about their customers privacy....

On the other hand, i shouldnt be too surprised. They demanded money to delete off data from their servers

 

[Le Bateleur]

Admittedly the customers made fuckups, but you should still be able to trust the security of services you patronize.

Just like how if I am cheaing on my wife in hotel rooms, I'm definitely taking a risk. But still, if someone breaks into my hotel room and catches pictures of me doing it, people shouldn't be going "welp, your fault, you shouldn't have been cheating". There's a bigger picture here that affects all of us.

The tech industry is woefully underregulated with this sort of shit. Wiretapping physical phones is illegal and when cops want to do that, they need a warrant. But if that phone conversation happens over the internet, in say, skype, they can largely do whatever the fuck they want. (Within the TOS, of course.)

I see it as more about whether people truly understand the tradeoffs between privacy and convenience that they're increasingly making on the internet - and also how very many people persistently fail to grasp even the basics of online security.

To run with your illustration - there's a difference between cheating on your wife in a hotel in a different city under an alias, and cheating in a hotel where you know her cousin works and booking the room in your real name.

 

[Whatisgoingon]

Meh, I'm just excited to watch the shitshow, I don't really care about the morals or what have you. The coming weeks are going to be exciting.

 

[bearycool]

Admittedly the customers made fuckups, but you should still be able to trust the security of services you patronize.

Just like how if I am cheaing on my wife in hotel rooms, I'm definitely taking a risk. But still, if someone breaks into my hotel room and catches pictures of me doing it, people shouldn't be going "welp, your fault, you shouldn't have been cheating". There's a bigger picture here that affects all of us.

The tech industry is woefully underregulated with this sort of shit. Wiretapping physical phones is illegal and when cops want to do that, they need a warrant. But if that phone conversation happens over the internet, in say, skype, they can largely do whatever the fuck they want. (Within the TOS, of course.)

Honestly, I agree with this. However, I'm still in support that these people do get dox, but not only for the fact they cheated, but that it shows the major security flaws and the retarded lack of security in major websites.

This shit ain't new: Heartbleed and Sony were another form of this, but without the moral backing of cheaters. I'm not saying that was good, and a few of my friends were personally affected by that, but it's like a whistle blowing: it alerts the general public that security is shit, and it's only going to get worse unless we deal with it. This hacking shit isn't killing anyone. Though the lack of financial security and privacy is scary, it won't kill you. It's still terrible, but at least now you know the problem exist and it needs to be fixed at once.

I would also like to talk a little bit more on a discrete subject: P vs. NP. That is a major, still unsolved problem in computer science, and whether P = NP or not will drastically shape how security is looked at for computers. That's fucking major shit, and a huge hole in our understanding of computer "security". I don't know mathematics like a pro, so I won't go into too much detail. But the problem will either not affect cryptography, or render it completely useless. All or nothing. The fact we have issues like this in all modes of computer science and security is, well, awful. We got air coming out in a false hermetic seal in many places.

People need to get off their asses and deal with major fuck ups like this.

At the same time, I could care less for the cheaters: they are just test rats for us so that we can improve security. And hopefully, said test rats get mad and ask for a complete overall of security. In the end, I'll be eating a lot of popcorn for the next few days

 

[Le Bateleur]

/cow/'s AsMad thread is actually pretty good (meaning it will be about trannies and/or full of Rika and Autphag posts by the time you're reading this. Don't let me down, /cow/boys). Among the interesting reposts is this:

 

[Watcher]

They found Anthony Burch in the leaks

 

[bearycool]

They found Anthony Burch in the leaks
View attachment 43958

Every minute, it just gets better.

 

[Marvin]

I see it as more about whether people truly understand the tradeoffs between privacy and convenience that they're increasingly making on the internet - and also how very many people persistently fail to grasp even the basics of online security.

To run with your illustration - there's a difference between cheating on your wife in a hotel in a different city under an alias, and cheating in a hotel where you know her cousin works and booking the room in your real name.

In a lot of cases, I think using your real email actually shouldn't be considered a personal risk with these sort of things. There's not really a technical reason why humans will regularly be manually handling customer emails with these sort of systems. We should be able to trust the security of these systems in the same way we trust public telephone exchanges to not record our calls. (Well, and we should be able to trust that when (not if) security fuckups do happen, the people responsible will be held reliable.)

But admittedly, getting a throwaway email isn't that hard, and these people played a huge gamble by using their work emails there.

Honestly, I agree with this. However, I'm still in support that these people do get dox, but not only for the fact they cheated, but that it shows the major security flaws and the retarded lack of security in major websites.

This shit ain't new: Heartbleed and Sony were another form of this, but without the moral backing of cheaters. I'm not saying that was good, and a few of my friends were personally affected by that, but it's like a whistle blowing: it alerts the general public that security is shit, and it's only going to get worse unless we deal with it. This hacking shit isn't killing anyone. Though the lack of financial security and privacy is scary, it won't kill you. It's still terrible, but at least now you know the problem exist and it needs to be fixed at once.

People seem to think that immediate public disclosure is the best or only way to go about disclosing errors. That's not at all the case. While there weren't many alternatives to public disclosure with heartbleed, most everyday security vulnerabilities should be handled with a lot more tact. While yeah, with dramatic public disclosure you might scare companies into patching the issue a few days quicker, you end up dicking over a whole lot more people in the process.

Spoiler: kinda offtopic

I would also like to talk a little bit more on a discrete subject: P vs. NP. That is a major, still unsolved problem in computer science, and whether P = NP or not will drastically shape how security is looked at for computers. That's fucking major shit, and a huge hole in our understanding of computer "security". I don't know mathematics like a pro, so I won't go into too much detail. But the problem will either not affect cryptography, or render it completely useless. All or nothing. The fact we have issues like this in all modes of computer science and security is, well, awful. We got air coming out in a false hermetic seal in many places.

P=NP probably wouldn't affect cryptography. A faster algorithm doesn't mean "fast enough for practical use".

A way bigger security issue is that our security infrastructure is swiss cheese. The use of C is like 90% of the problem. We need to phase out the use of C and similar languages in situations where security is important.