EDGE 2015 is starting in

Find out more EDGE 2015
Menu
GameReplays invites hackers to probe site following data breach

GameReplays invites hackers to probe site following data breach

An Anonymous hacker alienates potential supporters

The owner of GameReplays.org has invited ethical hackers to probe the website for vulnerabilities after a recent compromise that resulted in 10,000 member accounts being exposed.

GameReplays.org is home to an online community of multiplayer game enthusiasts. The site organizes professional gaming tournaments and publishes match replays, as well as strategy guides and other tips and tricks.

On Monday, a hacker who claims to be affiliated with Anonymous and uses the Twitter handle EcecusHxc, published a list of 5,000 GameReplays accounts that were copied from the site's database after exploiting a vulnerability.

The leaked information included email addresses and password hashes, as well as the corresponding salts -- secondary keys used to encrypt password hashes so that they can't be cracked.

On Tuesday, the hacker published a list of an additional 5,000 GameReplays member emails and passwords, raising the total number of exposed accounts to 10,000.

According to GameReplays co-owner and general manager Jon LeMaitre, Ececus sent an email to the website's administrators on Sunday, claiming that he found a vulnerability and is willing to share the technical details if he is given proper credit for the discovery.

"Given that he sent the email in Spanish, and I was out celebrating Memorial Day weekend, I had no chance to address his email and thank him for alerting us to the issue," LeMaitre said in a blog post on Tuesday. "Because I was not able to respond to an email (written in a language I don't know), within 24 hours, he decided to go ahead and give himself credit for the hack."

Since Ececus didn't share the vulnerability details, the GameReplays team had to stop working on new website features that were in development, and dedicate their time to investigate the security issue.

The team plans to notify users who had their information exposed via email and the GameReplays forum. "Once this vulnerability has been fixed, we will re-salt everyone's passwords and take extra steps to make sure everyone's accounts are more secure in the future," LeMaitre said.

Ironically, GameReplays supports Anonymous' mission of exposing the corrupt links between businesses and governments that result in legislative proposals like PROTECT-IP, which threaten the very nature of the Web, LeMaitre said. "Sadly, there are people like _ecECus_ who give Anonymous and other hackers a bad reputation, since his goal isn't to help, but rather, to be immature and stroke his own ego."

Despite the bad experience with Ececus, LeMaitre is not discouraged from collaborating with hackers in the future and invited them to help locate vulnerabilities in GameReplays, but in a responsible manner. "Unfortunately, because we have such limited development resources, we cannot do this alone. Therefore anyone who helps us will be given due credit," he said.

LeMaitre's attitude toward unsanctioned security audits is similar to that of vendors like Google, Mozilla, Facebook or Twitter, which give credit, or even monetary rewards, to hackers who find vulnerabilities in their services and report them privately.

EDGE 2015:: For all the latest on EDGE 2015 including the keynote speakers visit the EDGE mini-site now

Follow Us

Join the ARN newsletter!

Error: Please check your email address.

Upcoming

Slideshows

In Pictures: 7 things we hate about Twitter

In Pictures: 7 things we hate about Twitter

You probably either love Twitter for its quirkiness and brevity or see it as a pointless waste of time. After nearly a decade on the social scene, Twitter still needs to improve its user experience and fill in notable gaps in the service. These seven problems are long overdue for a fix.

In Pictures: 7 things we hate about Twitter
IN PICTURES: EDGE 2015 - Sponsor Briefing

IN PICTURES: EDGE 2015 - Sponsor Briefing

With EDGE 2015 rapidly approaching, ARN and Reseller News NZ held a Sponsors Briefing where ARN publisher and president, Susan Searle, and Events Manager, Alexandra West, ran through the considerable logistics in detail. Attendees then enjoyed some splendid canapes and drinks. EDGE is designed to bring the A/NZ channel together in a collaborative and educational environment. Themed around channel channel leadership, EDGE will be held at the Sheraton Mirage, Port Douglas, July 20-23. Photos by MIKE GEE.

IN PICTURES: EDGE 2015 - Sponsor Briefing
In Pictures: Robots that cook, clean, sing and dance

In Pictures: Robots that cook, clean, sing and dance

Cooking, learning language and doing the laundry are a few of the human skills demonstrated by.real humanoid bots featured in the National Geographic movie Robots.

In Pictures: Robots that cook, clean, sing and dance

iasset.com is a channel management ecosystem that automates all major aspects of the entire sales, marketing and service process, including data tracking, integrated learning, knowledge management and product lifecycle management.

Show Comments