Back to Epicmafia

Oracle is COMPROMISED, UNINSTALL

lailai
about 7 years

Approximately half an hour ago, I became aware that the version of Oracle distributed on the Chrome Web Store contained code that logged usernames and passwords on login, at the very least. (I’m not near a laptop and haven’t done a full code diff).

Oracle has been unpublished so it should be disappearing, but uninstall it NOW.

This code isn’t present on GitHub or v0.1.8, the last update I pushed out. The current compromised version is “v0.1.9” and Chrome Webstore says it was pushed on 10/3/17.

If you have used Oracle since then, you need to CHANGE YOUR PASSWORD NOW. If you have used this password on another site, you need to change it as well.

The extension is permissions wise scoped to Epicmafia.com, so any activity on any other site should not be affected.

At this moment I do not know how my account was breached and the compromised extension uploaded, nor do I know how access to Epicmafia.net was accessed (if at all). I will update in this thread as I further investigate.

xxerox
about 7 years
Charley Compromised LaiLai in advance to blame LaiLai.

All she had to do is keep pretending she is hacked every few weeks.
shaGuar
about 7 years
Honestly wouldn't surprise me if charley told him to do it. She might have fuc­ked his reputation and subsequently his whole career
deletedabout 7 years
name names lailai, lets get it all out in the air, who was said mod?
Bebop
about 7 years
the hacker must have been extra special clever to have planned it to happen just as lailai and charley get into an argument
yoyo200900
about 7 years
You went on a holiday and met with the people you tricked into giving you their passwords. Unbelieveable! But at the same time, I'd never have put it past you. You're awful!
lailai
about 7 years
I have my list of suspects on who would’ve been able to pull off this attack, would have access to epicmafia.net (the analytics server), and would have reason to, i.e. the former oracle contributor who I demodded when I was admin.

I’m actively investigating and will update here with more details.
Miki
about 7 years
deletedabout 7 years
what a coincidence that it was when CHARLEY was with lailai when it was updated last?

i bet charley is behind all of this, f'cuking 8d chess or some sh'it
Bebop
about 7 years
deletedabout 7 years
i did it.
shaGuar
about 7 years
Such an Arcbell topic
deletedabout 7 years
f'cuking lol
deletedabout 7 years
Don't look at me guys! I was hacked TOO!
deletedabout 7 years
Hahahahahaha you're such a clever little f*cker

Lie lie indeed.