DawgTalkers.net Forums DawgTalk Everything Else... Ashley Madison Hacked Information Released

It will be interesting to see what the divorce rate is in 2015/16....


HACKERS FINALLY POST STOLEN ASHLEY MADISON DATA
KIM ZETTER SECURITY DATE OF PUBLICATION: 08.18.15.
08.18.15
TIME OF PUBLICATION: 5:55 PM.
5:55 PM

HACKERS WHO STOLE sensitive customer information from the cheating site AshleyMadison.com appear to have made good on their threat to post the data online.

A data dump, 9.7 gigabytes in size, was posted on Tuesday to the dark web using an Onion address accessible only through the Tor browser. The files appear to include account details and log-ins for some 32 million users of the social networking site, touted as the premier site for married individuals seeking partners for affairs. Seven years worth of credit card and other payment transaction details are also part of the dump, going back to 2008. The data, which amounts to millions of payment transactions, includes names, street address, email address and amount paid, but not credit card numbers; instead it includes four digits for each transaction that may be the last four digits of the credit card or simply a transaction ID unique to each charge. AshleyMadison.com claimed to have nearly 40 million users at the time of the breach about a month ago, all apparently in the market for clandestine hookups.

“Ashley Madison is the most famous name in infidelity and married dating,” the site asserts on its homepage. “Have an Affair today on Ashley Madison. Thousands of cheating wives and cheating husbands signup everyday looking for an affair…. With Our affair guarantee package we guarantee you will find the perfect affair partner.”

The data released by the hackers includes names, addresses and phone numbers submitted by users of the site, though it’s unclear if members provided legitimate details. A sampling of the data indicates that users likely provided random numbers and addresses, but files containing credit card transactions will yield real names and addresses, unless members of the site used anonymous pre-paid cards. One analysis of email addresses found in the data dump also shows that some 15,000 are .mil. or .gov addresses.

The data also includes descriptions of what members were seeking. “I’m looking for someone who isn’t happy at home or just bored and looking for some excitement,” wrote one member who provided an address in Ottawa and the name and phone number of someone who works for the Customs and Immigration Union in Canada. “I love it when I’m called and told I have 15 minutes to get to someplace where I’ll be greeted at the door with a surprise—maybe lingerie, nakedness. I like to ravish and be ravished … I like lots of foreplay and stamina, fun, discretion, oral, even willingness to experiment—*smile*”

Passwords released in the data dump appear to have been hashed using the bcrypt algorithm for PHP, but Robert Graham, CEO of Erratasec, says that despite this being one of the most secure ways to store passwords, “hackers are still likely to be able to ‘crack’ many of these hashes in order to discover the account holder’s original password.” If the accounts are still online, this means hackers will be able to grab any private correspondence associated with the account.


It’s notable, however, that the cheating site, in using the secure hashing algorithm, surpassed many other victims of breaches we’ve seen over the years who never bothered to encrypt customer passwords.

“We’re so used to seeing cleartext and MD5 hashes,” Graham says. “It’s refreshing to see bcrypt actually being used.”

Here’s how the hackers introduced the new data dump:

AshleyMadison-Data-Dump2Click to Open Overlay Gallery

KIM ZETTER
Following the intrusion last month, the hackers, who called themselves the Impact Team, demanded that Avid Life Media, owner of AshleyMadison.com and its companion site Established Men, take down the two sites. EstablishedMen.com promises to connect beautiful young women with rich sugar daddies “to fulfill their lifestyle needs.” The hackers didn’t target CougarLife, a sister site run by ALM that promises to connect older women with younger men.

“Avid Life Media has been instructed to take Ashley Madison and Established Men offline permanently in all forms, or we will release all customer records, including profiles with all the customers’ secret sexual fantasies and matching credit card transactions, real names and addresses, and employee documents and emails,” the hackers wrote in a statement following the breach.

To show they meant business, they posted sample files containing some of the stolen data, which included company financial information detailing employee salaries and documents mapping the company’s internal network.

The hackers appeared to target AshleyMadison and EstablishedMen over the questionable morals they condoned and encouraged, but they also took issue with what they considered ALM’s fraudulent business practices. Despite promising customers to delete their user data from the site for a $19 fee, the company actually retained the data on ALM’s servers, the hackers claimed. “Too bad for those men, they’re cheating dirtbags and deserve no such discretion,” the hackers wrote. “Too bad for ALM, you promised secrecy but didn’t deliver.”

Avid Life Media defiantly ignored the warnings and kept both sites online after the breach, promising customers that it had increased the security of its networks.

That wouldn’t matter for the customers whose data had already been taken. Any increased security would be too little too late for them. Now they face the greatest fallout from the breach: public embarrassment, the wrath of angry partners who may have been victims of their cheating, possible blackmail and potential fraud from anyone who may now use the personal data and bank card information exposed in the data dump.

“Avid Life Media has failed to take down Ashley Madison and Established Men,” Impact Team wrote in a statement accompanying the online dump Tuesday. “We have explained the fraud, deceit, and stupidity of ALM and their members. Now everyone gets to see their data…. Keep in mind the site is a scam with thousands of fake female profiles. See ashley madison fake profile lawsuit; 90-95% of actual users are male. Chances are your man signed up on the world’s biggest affair site, but never had one. He just tried to. If that distinction matters.”

The hackers deflected responsibility for any damages or repercussions that victims of the breach and data dump may suffer.

“Find yourself in here? It was ALM that failed you and lied to you. Prosecute them and claim damages. Then move on with your life. Learn your lesson and make amends. Embarrassing now, but you’ll get over it,” they wrote.

It’s important to note that Ashley Madison’s sign-up process does not require verification of an email address to set up an account, so legitimate addresses might have been hijacked and used by some members of the site. One email in the data dump, for example, appears to belong to former UK Prime Minister (Tony Blair).


Avid Life Media condemned the release of the data.

“This event is not an act of hacktivism, it is an act of criminality. It is an illegal action against the individual members of AshleyMadison.com, as well as any freethinking people who choose to engage in fully lawful online activities,” the company said in a statement. “The criminal, or criminals, involved in this act have appointed themselves as the moral judge, juror, and executioner, seeing fit to impose a personal notion of virtue on all of society. We will not sit idly by and allow these thieves to force their personal ideology on citizens around the world.”

This story was updated as it developed.

Linky Doo

Ashley Madison - soon a dating website for newly divorced couples.

While I hate to see anyone's information stolen, I admit that I have a hard time feeling all that sorry for people cheating on their spouses.

My only issue is that the hackers are acting like they are all righteous do-gooders and stuff, yet they did something unethical to obtain the information to begin with.

"Let he without sin cast the first stone."

I'm 100% against forcefully breaching private date such as contained on that website, but the nature of the website (how can that business model and that website have/maybe had generated so much profit?) involved in this situation... I ask myself if I feel the same.

Bottom line though is there was a breach of privacy, and any thought about right or wrong should seize and end right there. Being a web dev and always being mindful of OWASP guidelines and programming/adding/checking logic against our apps to test security - I can say this that I don't judge, whatsoever, those that think this was a good act. That's for sure. Shame that such a website or business model exists unless it's conceptual agreement, which I doubt is the case for the majority...

JMO

Well it sure isn't the first time that people have been
"Outed" by some group.

32 million * .925 = 29.6 million men, or somewhere around 59 million married people involved, assuming negligible quantities or male/male marriages where both partners are on the site, but assuming a high rate of both male and female member on the site. In the U.S., the average number of children per married couple in the US is 1.95 (source). That is roughly 117 million people affected by this assuming U.S. data. That is a LOT of people. This could change our culture.

Haha the duggar dude was on that site. Hilarious.

But I'm against this. People can say what they want about the site, at the end of the day, what they did was illegal, and a breach of privacy. We don't get to choose which times to protect that or not.

I've been saying that on these boards for years. Yet, I mean, you've been reading the religious threads, right?

However, you seem to use this scripture to say we should not point out sin. It was not meant to blind us to the fact that a sin has or is being committed, it tells us not to judge the sinner, for all have sinned. Judgement is for God alone.

I don't see harping on it day in and day out as "pointing it out". I see that as harping on it and persecuting others for not believing as you do.

If you see it different, then so be it.

Josh Duggar calls himself 'hypocrite,' admits to being 'unfaithful' in statement

One day after reports indicated that "19 Kids and Counting" star Josh Duggar had opened an account on a website designed to facilitate extramarital affairs, he issued a statement asking for forgiveness.

"I have been the biggest hypocrite ever," reads the statement, posted Thursday on the Duggar family's official website. "While espousing faith and family values, I have secretly over the last several years been viewing pornography on the internet and this became a secret addiction and I became unfaithful to my wife."

On Wednesday, Gawker reported that Duggar had paid to open an account on the recently hacked adultery website AshleyMadison.com, whose advertised slogan is "Life is short. Have an affair."

The executive director of the Family Research Council, the 27-year-old has been cited in multiple scandals this year. TLC canceled "19 Kids and Counting" in May, when he was accused of molesting five children, including his own sisters, about 12 years ago.

"I brought hurt and a reproach to my family, close friends and the fans of our show with my actions that happened when I was 14-15 years old, and now I have re-broken their trust," reads another part of the statement he issued Thursday. "The last few years, while publicly stating I was fighting against immorality in our country, I was hiding my own personal failings."

Duggar added that he was "ashamed of the double life I have been living," and grieving for the pain he caused his family, as well as "Jesus and all those who profess faith in Him." Before asking people to pray for "my precious wife Anna and our family," he stated, "As I am learning the hard way, we have the freedom to choose to our actions, but we do not get to choose our consequences. I deeply regret all hurt I have caused so many by being such a bad example."

In the paragraph leading into Duggar's statement, his parents, Jim Bob and Michelle Duggar, issued one of their own: "When we learned of this late last night our hearts were broken," they were attributed as saying. "As we continue to place our trust in God we ask for your prayers for Josh, Anna, our grandchildren and our entire family."

http://www.today.com/news/josh-duggar-ca...tatement-t39911

Oh and 40? I'm not harping on it, just pointing it out.

I was just gonna post ^that^ story about Josh Duggar! TOO LATE.

Oh what a tangled web we weave. When first we practice to deceive.
- Sir Walter Scott (Marmion, 1808)

My goodness! Guy has 19 kids, and is still looking f=to cheat on his wife? Man, it's not like she's holding out on him.

As far as this question of religious people judging others .... I have no doubt that it does happen, but pointing out a sin is not judging another.

If you are riding in a car with your friend, and he's doing 60 in a school zone, it is not judging him to suggest that he slow down if he wants to avoid a ticket. (and maybe killing a kid as well)

Maybe he lost attraction to her

Man people be turning their wives into baby factories. After 4-5, it's time to stop. No reason to be out there with an NBA squad.

I think Josh is the son who was in trouble before, not the father of 19.

Couldn't trust the father to pull out of a parking lot. Jeez....

Don't blame him man, after all these years of marriage I just have to look at the wife and she has an orgasm.

I thought they were snack cakes

I wonder how many politicians were on that site.

I'm sure we'll find out soon enough-

You have to be an extra-special kinda dumb to do this stuff ON A WORK COMPUTER.

Stepping out on one's spouse isn't exactly smart to begin with.. but this takes dumb into 'Darwin territory.'

I gots no sympathy for a single one of them.

I did not have sexual relations with that woman, or that one, or that one, or OHHHH hey bab ummm I mean that one.

Wanna make money? Become a divorce lawyer lol.

Ashley Madison just became the worlds largest dating site for divorced men.

Well that just killed farmersonly.com's coming out party on their IPO.

Since we are all sinners then nobody should ever point out another persons (or groups) immoral acts or try to raise the overall moral consciousness?

If your sisters husband was cheating on her and you found out, would you think she deserved to know? Because that's all this group did, only on a really big scale..

You don't have to be lonely!!!

Yes and no.

The problem isn't that they are pointing out the cheating, the problem is the manner in which they obtained the information.

If you tapped your BiL's phone, bugged his house and set up video cameras in his bedroom to illegally to obtain your proof of cheating, then you are as wrong as those you are ousting.

2 wrongs don't make a right. Although 3 lefts do.

Maybe, but your sister is still going to be glad you did it so she can know the truth...

True, but then these people were doing it to complete strangers.

This thread lets me know there are people perfectly fine with the government spying on us.

If people are cool with hackers doing it, then people should shut up about the government doing it.

Hacking is just part of life now, get used to it already.

Remember the Pizza shop that wouldn't serve Gays? Yea they
got hacked and shut down.

Our entire Government has been hacked too.

I could go on and on.

Nothing is safe on the net. Once you put it there it's public and usually forever.

If people really want info about you they'll find it.

I believe maybe you should have continued reading the thread. My second response covered that. There's a difference in pointing out the sin and harping on it over and over again. That's what we see on here very often. The continued harping that often does more harm than good.



Sure I would want her to know. The difference I brought up is how on this board, people keep telling their sister and the sister doesn't care. At some point the redundancy can be overwhelming.

In this story, I despise people hacking into the private life of others. But somehow can't resist laughing at the foolishness of those who were caught.

I have the solution for this problem. If you're still trying to play the field and aren't settled on one person to spend your life with, don't get married.

yup.

pretty simple: be honest with yourself- saves a lot of 'stupid' down the line...

I would like my sister to know, but not everybody else to know at the same time.

Not sure how comfortable I am with public shaming.