Comments on: Italy’s Most Prominent BitTorrent Site Hacked

By: TNT Village, hackeado |

TNT Village, hackeado | — Fri, 07 Aug 2009 01:39:56 +0000

[...] El administrador del sitio comentó que un “hijo de puta” fue capaz de descubrir su contraseña y ya saben lo que se puede hacer con la contraseña del administrador: Absolutamente todo. [...]

By: Mandels

Mandels — Sat, 01 Aug 2009 05:41:59 +0000

Cosa? Pinolallo ci ha rubato dei soldi?!? Non ci credo!! Spero che qualcuno abbia delle spiegazioni.

Che tristezza comunque…

By: Toni

Toni — Fri, 31 Jul 2009 03:46:13 +0000

55 Jul 30, 2009 at 00:36 by Francy

i read that all…

there are a lot of information… about what happened in the past behind TNT Village.
Also the future of that website doesn’t looks bright.

They’ve a lot of financial straits…

A couple of admins lost their mental-health on there…

One guy called “PinoLallo” lost his customers due to his involvement with TNT Village. He lost at least 3000€ and customers after his account on one Domain registrar has been closed …..killing all of his customers domains too…

Another man, Dilling, the owner of TNT Village, lost his job because of his bad attitude caused by the stress and lack of sleep to manage TNTVillage.

… a lot of bad news in that leak 55 Jul 30, 2009 at 00:36 by Francy

i read that all…

there are a lot of information… about what happened in the past behind TNT Village.
Also the future of that website doesn’t looks bright.

They’ve a lot of financial straits…

A couple of admins lost their mental-health on there…

Another man, Dilling, the owner of TNT Village, lost his job because of his bad attitude caused by the stress and lack of sleep to manage TNTVillage.

… a lot of bad news in that leak

This is not the truth. The man called Pinolallo put TNTvillage on the same dnsdomain of his customers site. He lost his customers bacause of his stupidity, non of TNT…
He had also stolen 1200euro from the donation of TNT.
This is the truth.

By: Moova! News on the Move » El tracker más grande de Italia fue hackeado

Moova! News on the Move » El tracker más grande de Italia fue hackeado — Thu, 30 Jul 2009 21:15:50 +0000

[...] administrador del sitio comentó que un “hijo de puta” fue capaz de descubrir su contraseña y ya saben lo que se puede hacer con la contraseña del [...]

By: Marco

Marco — Thu, 30 Jul 2009 19:21:23 +0000

http://blog.tntvillage.scambioetico.org/?p=2632&cpage=1#comment-3419

By: Le Tracker BitTorrent italien TNT Village piraté ! «

Le Tracker BitTorrent italien TNT Village piraté ! « — Thu, 30 Jul 2009 19:02:21 +0000

[...] gros site de torrents italien, qui a été ciblé par les hackers. Selon l’administrateur contacté par Torrentfreak, plus de 50 000 identifiants, mots de passe et adresses e-mail ont été ainsi [...]

By: El tracker más grande de Italia fue hackeado | ALT1040 (Internet)

El tracker más grande de Italia fue hackeado | ALT1040 (Internet) — Thu, 30 Jul 2009 18:01:13 +0000

[...] administrador del sitio comentó que un “hijo de puta” fue capaz de descubrir su contraseña y ya saben lo que se puede hacer con la contraseña del [...]

By: hmmm

hmmm — Thu, 30 Jul 2009 15:56:41 +0000

@45
It looks like the mysql server ran out of memory just after it went over 50944 accounts.

The last line of the sql dump file reads:
Fatal error: Allowed memory size of 56623104 bytes exhausted (tried to allocate 53739521 bytes) in /data/http/server2_site/tntforum/sources/Admin/ad_mysql.php on line 342

By: Italian

Italian — Thu, 30 Jul 2009 14:33:41 +0000

@67:

you’re more than a noob. a real good perspon wouldn’thave done such miserable thing.

and, allow me to say this, but tnt is wonderful

By: N

Thu, 30 Jul 2009 09:04:40 +0000

Damn, there are hundreds topolino (mickey mouse) paperino (donald duck) wlafiga maria berlusconi and similar passords. No salt, apparently. Damn!

By: T_B

T_B — Thu, 30 Jul 2009 09:01:39 +0000

Why you don’t make your business?

Think if it happens to you…:(

By: Wacko Jacko

Wacko Jacko — Thu, 30 Jul 2009 07:34:12 +0000

haha.. I just decrypted an MD5 password of some user and could login into his TNT account and his e-Mail acc also ! .. so it works :D

By: anon666

anon666 — Thu, 30 Jul 2009 07:15:03 +0000

YAY!! Nicely done, hacker dude :)

By: Yeah

Yeah — Thu, 30 Jul 2009 07:07:25 +0000

That teaches those Italian noobs right, i’ll be surprised if any members stay at TNT *g* *g*

By: TerribleTony

TerribleTony — Thu, 30 Jul 2009 04:44:18 +0000

Clearly these guys have no idea about Data Protection. Even if someone hacked my sites and stole my database, my users wouldn’t have to change their password, because they are salted and encyrypted. And it’s easy to do such things too. Knobbers.

By: LAWL

LAWL — Thu, 30 Jul 2009 04:43:16 +0000

” They are Italians….. only n00bs”

LAWL

By: LOL

LOL — Thu, 30 Jul 2009 03:36:04 +0000

They are Italians….. only n00bs

By: Anonymous

Anonymous — Thu, 30 Jul 2009 03:28:08 +0000

I’m italian.

TntVillage = shit.
And italy = shit.

By: Anonymous

Anonymous — Thu, 30 Jul 2009 01:26:50 +0000

Oh guess who is doing this!

The corporation of gansters and parasites those poissed for eradication soon!

By: Italy’s Most Prominent BitTorrent Site Hacked - Entertane.com – Torrent News

Wed, 29 Jul 2009 23:32:10 +0000

[...] G on Jul.29, 2009, under Entertane.com, P2P/Filesharing TorrentFreak.com by Enigmax:- TNT Village, Italy’s most prominent torrent site has been compromised by hackers. [...]

By: John

John — Wed, 29 Jul 2009 21:38:35 +0000

This should be an example for members of torrent sites (and any other sites) to realize that they shouldn’t use the same passwords for different things – or at the least, things of different value.

And never. ever. EVER. use your e-mail password for anything else.

If they have your inbox – they have all the passwords you used that inbox to sign up with.

As for the admin – the only reason you would store passwords in plaintext is so you can read them yourself. Seriously – all admins know to hash passwords. The ones that don’t cannot be trusted.

As for the ‘it’s not sharing it’s copying – look at the pirates whining about stealing when it’their stuff’ the difference here is obvious:

I do not sell my personal details to the public.

So although i wouldn’t concider this ‘a lost sale’ and thus a criminal offence, i would concider it identity fraud, and thus, a *serious* criminal offence.

It’s not the same at all…

By: bastardo

bastardo — Wed, 29 Jul 2009 20:59:09 +0000

ooooh, now i see what numbers on the end were, wow…

By: bastardo

bastardo — Wed, 29 Jul 2009 20:55:51 +0000

LMAO, i got 804 accounts using “123456″ as the pass in there…

By: Mauri [FR]

Mauri [FR] — Wed, 29 Jul 2009 20:01:26 +0000

Ouch busted, glad I never used that site. If I was one of the users I wouldn’t be as much worried about anti-p2p companies getting the info as I would be of spam. That database will screw a lot of people in that sense.

By: Francy

Francy — Wed, 29 Jul 2009 18:36:10 +0000

i read that all…

there are a lot of information… about what happened in the past behind TNT Village.
Also the future of that website doesn’t looks bright.

They’ve a lot of financial straits…

A couple of admins lost their mental-health on there…

Another man, Dilling, the owner of TNT Village, lost his job because of his bad attitude caused by the stress and lack of sleep to manage TNTVillage.

… a lot of bad news in that leak…

By: Peter

Peter — Wed, 29 Jul 2009 17:58:55 +0000

Who cares? Who actually uses their real email address on these sites anyway? Nothing to gain by getting this data. MPAA can hire as many hackers as they like.

By: Anonymous

Anonymous — Wed, 29 Jul 2009 17:49:00 +0000

the average torrent site is hackable and it is not always the source code’s fault. 90% or more of the owners and staff out the use the same password on other sites on the internet and all it takes is for an owner to use the same password and then somebody go to a site which stores md5 hashes since quite a few torrent source codes out there use md5 for the password.

By: oh noooooez

oh noooooez — Wed, 29 Jul 2009 17:41:51 +0000

Yer could use a info_hash as a good strong password if you pick a nice popular torrent to refer back to for when yer forget. :)

By: mr.T

mr.T — Wed, 29 Jul 2009 17:28:06 +0000

It’s Italy – |_|p <- care cup is empty foo.

By: UNF

UNF — Wed, 29 Jul 2009 17:20:58 +0000

Darwin sez, if TNT Village survives, its security will be improved. Hence, thankz, Hackerz!

By: Anonymous

Anonymous — Wed, 29 Jul 2009 16:55:27 +0000

“THEY DID NOT STEAL ANYTHING; THEY ONLY MADE A COPY!!!

come on guys, why make a difference between stolen movies and stolen personal details. Don’t blame people for thinking it’s OK to steal the latter when the entire world also thinks it’s OK to steal movies…”

I agree. As a pirate/file-sharer myself, I recognize that this act isn’t stealing. It is wrong, though.

By: Anonymous

Anonymous — Wed, 29 Jul 2009 16:16:43 +0000

hey thanks a lot francy!

By: Francy

Francy — Wed, 29 Jul 2009 16:12:04 +0000

I found it….

http://www.alivetorrents.com/torrent/2800125/tnt-village-database-and-private-topics

….i’m downloading it right now.
Btw, that is a shame for us italians… I meant, why are admins keep using weak passwords!? that’s something more than “stupid”…

By: Anonymous

Anonymous — Wed, 29 Jul 2009 15:45:13 +0000

where is the torrent?

By: vek

vek — Wed, 29 Jul 2009 15:41:55 +0000

“the actual database with around 50,000 usernames”

the actual number of the users are at least 260000 not 50000…

By: donkeyb0n3r

donkeyb0n3r — Wed, 29 Jul 2009 15:41:36 +0000

@29/30

Ye ofc, though that would only complicate the whole theory on password cracking even more, when ur explaining it to those who dont know nothing about this… :)

By: Sendaii

Sendaii — Wed, 29 Jul 2009 14:33:26 +0000

@12: Not if the MD5 hashes were salted. They would be very difficult to crack, if not impossible. They obviously weren’t. This was an accident waiting to happen.

By: hot sex gary

hot sex gary — Wed, 29 Jul 2009 14:27:15 +0000

@16

pirating personal details is slightly different to pirating information that is readily broadcast over radio and television but is for some reason regulated when it is migrated to a digital form

ps: who would get a kick out of trolling here? i can picture self-righteous old people in suits chuckling to themselves after working a 10 hour shift and trying to forget the prospect of heading home to an ugly wife and irritable kids

By: headofRIAAmustdie

headofRIAAmustdie — Wed, 29 Jul 2009 14:21:13 +0000

Passwords should really be randomly generated with a combination of upper and lower case letters and numbers and symbols. Admins should also change their random passwords every few weeks at least. and All user passwords should be hashed and even the admin shouldn’t be able to see them. those 50k ppl better get ready for the spam wave that’s gonna hit ur inbox soon. lol

By: Anonymous

Anonymous — Wed, 29 Jul 2009 14:05:14 +0000

Even the most careful of admins using contained virtual computers and the heaviest of security could still possibly be compromised by someone persistent enough.

By: Anonymous

Anonymous — Wed, 29 Jul 2009 14:02:45 +0000

Even with a salted password, since the whole site was available the salt could easily be discovered and a brute-force library be created from a dictionary+salt. Weak passwords would still need to be changed.

By: Anonymous

Anonymous — Wed, 29 Jul 2009 14:01:13 +0000

Just goes to show… idiots shouldn’t be admins.

By: Stevie C

Stevie C — Wed, 29 Jul 2009 13:44:11 +0000

this is probably the work of a skript kiddie brainwashed by the MAFIAA

By: mick

mick — Wed, 29 Jul 2009 13:33:36 +0000

unlike your generalizing, as usual

double sigh

By: BioShockerT81

BioShockerT81 — Wed, 29 Jul 2009 13:11:24 +0000

As usual the pirates’ double standards have been shown. Sigh.

By: Yeah

Yeah — Wed, 29 Jul 2009 12:57:37 +0000

Sorry, that was @7

By: Yeah

Yeah — Wed, 29 Jul 2009 12:55:02 +0000

@5: sarcasm detector fail?

By: Anonymous

Anonymous — Wed, 29 Jul 2009 12:52:16 +0000

52 mb of “plain text” is nothing in comparison to total of tnt users. More of row of those file are: insert into (field, field….. ). In conclusion the very data is very poor.

By: tophing

tophing — Wed, 29 Jul 2009 12:51:11 +0000

sorry, my previous post was for 12 and not 11

By: tophing

tophing — Wed, 29 Jul 2009 12:50:09 +0000

@11

you don’t save an encrypted password in the DB, but an hash…