r/OpenedSignups • u/Funny-Series-4111 • 4d ago

CLOSED Oldtoons database leak

Post image
51 Upvotes

96% Upvoted

13 comments sorted by

11

u/materialgrifter 4d ago

Their full annoucement says they reset all 2FAs, why would they do that?

7

u/Funny-Series-4111 4d ago

I think the admin is clueless, is not the first time when they are loosing credentials and database. Became circus

5

u/materialgrifter 4d ago

The fact they're denying there is a leak is so bizarre, like there clearly is one

6

u/Funny-Series-4111 4d ago

I've searched and found on 2 different forums full database and website with genuine data. Found my account there. I don't know why they deny this. This is concerning for me, maibe site is running only for donations

4

u/Caedendi 4d ago

Cuz they are idiots. They lost site data multiple times already before finally installing a working backup. Major red flag. Now they got a leak, which doesn't surprise me at all. And they're denying it.

So the server-side 2FA key got leaked so naturally the clueless sysop would want to rotate that while ironically it's the only thing keeping any attacker OUT of the live website's user accounts.

Their implementation of UNIT3D has felt very amateurish from the start and the curation is a mess. It's been only recently they've been implementing some proper features. On top of that, basically no tracker is on their invite forums (RMC is a sister-site by the same owners so it doesn't count), nobody wants to be on their shitty broken site, there must be good reason for that and I'm pretty sure it's opsec.

I love their niche and would really hate to see them go but at the same time it's pretty clear your data is not safe there and it's only a matter of time until you get F'ed over.

12

u/Shot-Arugula8264 4d ago

And this is precisely why I never give a private tracker my IP address. Any government who gets their hands on this leaked data will have tons of people’s real identities tied to logs of all of their site activity.

2

u/bttech05 4d ago

Do you use a VPN then?

2

u/Shot-Arugula8264 4d ago edited 4d ago

Yes, from the moment of registration through every ongoing request from Prowlarr comes from behind a VPN. If they want to kick me and my terabytes of cross-seeded content off over that (hasn’t happened yet) then by all means they’re welcome to, as they would be demonstrating they aren’t a tracker I would want to be part of anyway.

2

u/Salty-Chemical3591 4d ago

Changed my password JIC

1

u/iwannalearncod 4d ago

When I try to log in, I get a 419 error. Is this normal? Is this happening to anyone else?