TexasGunTrader allegedly breached

[Defunct Ammo]

Mods please remove if this content isn't allowed.

 As the title states. A hacker, or a group of hackers, has allegedly breached TexasGunTrader.com earlier this week and has managed to get emails and passwords to all 250,000+ members  and is trying to pawn it of to whomever wishes to buy the information. According to some comments on this post states that if you click "forgot password," instead of an email with a link to reset it in your browser, it simply states your password so you can punch it in when you try to log back in. How this information is relevant to us is that as we are a firearm related forum just like TexasGunTrader — and we are just as subject to breaches despite the admin teams' best efforts to keep this place locked down and secure. Now, I don't know how things are run here administration wise, but this is a great example as to never duplicate your password across multiple logins for various websites. If your password for this site is also used for your facebook, mobile banking, etc, etc. I would highly suggest you changing it to something unique and definitely no where close to your previous password. As I have previously stated, we are a forum that practices and supports our second amendment rights. We are very much subject to attacks by groups of individuals who do not uphold or respect these values, and I'm sure the admin team is willing and doing everything they can to keep this place as secure as possible.

 

I am sharing the link to the post on the firearms subreddit to share the source of this information. Please proceed with caution with any links shared in the comments as I am unsure of everything that is posted there. Thank you.

Spoiler

TexasGunTrader allegedly breached, 250k+ users info for sale - passwords in plaintext : r/Firearms (reddit.com)

 

Edited September 25 by Defunct Ammo
Spelling, grammar, and further clarification.

[RED333]

Damn hackers, if they only put their smarts to good use we would have a better world.

[DraxTheDad]

These types of hackers are not all that intelligent actually, they just read some hacking pages and find holes in the software that is used to run the forums.  Many of the forums use the same code bases, so once one hole is found, it makes it really easy for them to get others.   And it doesn’t just happen to bigger forums, even small ones get hacked.   I ran a forum a few years ago for about 100 people… it was hacked.   They used an exploit in the image processing system to get the login information (kinda clever, but it was not something they produced, just copied and re-used).   

It’s a lot harder to make a good secure system than to hack into one.   I’ve been on both sides throughout my life.

I’m not too concerned about this page, or any other gun page.  Those who post here generally are gun people, and don’t give a crappola if the government knows we have guns and / or especially don’t care about gun grabbers.   Although you are right about passwords, don’t use the same one over and over again (ok, I do for sites I don’t care about at all, and really don’t care if breached, but never for important sites).   I highly recommend getting a password manager, most will sync online so it will work on all your machines, and can automatically log you in.  Great having a 30 digit random password . . . Until you run up against a site that automatically truncates it and doesn’t tell you (Yes, I’ve run up against those).