p.1 #1 · FM Database / passwords appear to be compromised
Looking through my gmail spam folder, I discovered this email sent on the 25th:
> Hello!
> I'm a member of an international hacker group.
>
> As you could probably have guessed, your account MYEMAIL was hacked, because I sent message you from it.
>
> Now I have access to you accounts!
> For example, your password for MYEMAIL is Biflap
>
> Within a period from July 7, 2018 to September 23, 2018, you were infected by the virus we've created, through an adult website you've visited.
> So far, we have access to your messages, social media accounts, and messengers.
> Moreover, we've gotten full damps of these data.
"Biflap" was a password assigned to me by the FM forums on registration and not one I've ever specified or used elsewhere.
According to https://www.fredmiranda.com/forum/topic/1319621 hashing was implemented back in 2014, so this indicates either the DB was compromised before then or the passwords are still stored unhashed somewhere.
Googling around I don't see any indication that this is a known problem or has been addressed already....
p.1 #2 · FM Database / passwords appear to be compromised
I suggest you contact Fred Miranda directly. His contact link is in the upper right hand corner of this page. As you may or not know, he is a working photographer and the only game in town, as it were, to address the issue you've raised. So, if he does not immediately respond, you can count on it that he will. HTH
p.1 #5 · FM Database / passwords appear to be compromised
EB-1 wrote:
There are various ways your password can be taken. I just delete all those ransomware emails and move on with life.
EBH
Well yeah, but that doesn't mean that Fred doesn't want to know that his machines are possibly compromised, and that other users here don't care either. Not everyone follows password safety rules. I'm run the operations for a web hosting company, I sure as hell let my clients know when they've been compromised.
Bernie wrote:
This has been going around for a few months now. Time to change passwords if you haven't already.
p.1 #6 · FM Database / passwords appear to be compromised
Same here. PM'ing him now...
I attempted to change my password after receiving spam (not the same as your email) containing my FM-specific email and FM-specific password, in plain text. I'm assuming FM.com was hacked at some point.
However, this site does not properly handle special characters in passwords during login. After a successful password reset using special characters, I am not able to login. When I change it to a "simpler" password, it works fine. Nice...
I'm taking a guess that their code is using double quotes somewhere it should using single quotes.
p.1 #9 · FM Database / passwords appear to be compromised
Imagemaster wrote:
Also watch out for hackers and scammers posting on one of your threads and trying to get you to click on a link, such as shown below.
That sentence makes no sense at all.