Tag: SQL Injection

Turbine: Change Your Passwords


Number one question coming into MMO Fallout over the past few days: Has username and password information been stolen from Turbine’s forums? The answer, until something official can be confirmed, should be taken as a probably. While not confirming that any data was stolen, Turbine posted a news bulletin of the forum maintenance with the added note that polayers should change their passwords.

As an additional precaution we recommend that all players change their passwords by visiting http://myaccount.turbine.com. Please remember to use unique, hard-to guess passwords that are not associated with other online services or sites, and always look for and report unusual activity in your account to Turbine customer support.

I recommend changing your password proactively.

I Love A Good Conspiracy Theory: LOTRO Forums Hacked?


Nothing says loving like a hot conspiracy bun in the oven, I always say. If you use the Lord of the Rings or Dungeons and Dragons forums, you’ve likely noticed that Turbine has taken them down due to an unspecified issue:

We have identified a potential issue in the forum system.  As a precautionary measure we have disabled our forums while we investigate.  We will bring the forums back online when we complete our work.  We thank you for your patience.

In all honesty, and given the unseen amount of people who work to crack forum software, this will likely turn into a vulnerability issue. If my assumption is correct, they wouldn’t be the first forum knocked out today (my favorites list shows three fan sites down due to a breach of security). But the important thing is that Turbine is able to do damage control and get the forums back into a working state. Tweakers.net is reporting that the servers have indeed been breached, via SQL injection, although there has been no confirmation from Turbine. Reportedly this issue stems from some poorly assembled coding used to transition Codemasters customers over to Turbine’s service.

While the Turbine forums are down, why not browse the third party forums and take in the conspiracy theorists?

I found it amusing that just after they added the thread saying they want to hire new developers that the forums mysteriously were brought off line

I love the idea of the ex-employee happening to be a skilled and vengeful hacker. It’s like a murder-revenge story, but suitably nerdy.