UFO Nepal Compromised, Hackers Posts Member's Detail Online

Roshan Karki Unknown
UFO Nepal one of the leading clothing brand of Nepal and one of the very first to start website in this section has been hacked. Its member details like name, address, phone number, username and password has been posted online. The website allowed members to browse their collection of clothes and accessories. Members also used to get email on new arrivals.(But I'd rather call it spam as it used to send 4 or 5 same email).

What hurts most is the website is claimed to be powered by dreams and ideas. The company behind Nepal's most popular portal cybersansar.com . There are many websites created under this company. I wonder how secure are all of them.

Lesson to be learnt here would be to use different password for different websites. And web developers what happened to digest based password with random salting and iteration?

Now it will be interesting to see UFO Nepal and/or Dreams and Ideas response.

Update


After more than two weeks of this incident, UFO  Nepal has sent an email. However the email says the site is being updated and advises its user to change password for security precaution. The whole email reads  as follows:
Dear UFO Members, We are very grateful to have you as member and thank you for being with us this long. We are upgrading our website www.ufonepal.com very soon. For a security precaution, you are advised to change password of your account asap. Sorry for any inconvenience. Thanks, The UFO Team


Comments

Post a Comment

Comments are moderated. No spam please.

Popular posts from this blog

Perm Root HTC Desire Gingerbread 2.3.3

Roshan Karki Anonymous
This guide is for permanently rooting HTC Desire running stock Android Gingerbread 2.3.3 . If you want to temp root then you can follow this guide. Before starting please be aware that problems while rooting can brick your phone. While the process in this guide is relatively simple and easy, I can't be held responsible for whatever happens. Enable USB debugging in your phone by going to  Settings  ->  Applications  ->  Development . Plug in your phone to the computer. Go to Revolutionary website  http://revolutionary.io/  . From there download revolutionary software. Leave this browser tab opened. We need to generate Serial key later. Extract the downloaded software on your computer and run the software with root permission. $sudo ./revolutionary It will tell you your serial number and ask for the beta key. Copy the serial number and go to the browser tab we left open while downloading the software. Put the serial key there...
Read more

Increase Free Space On HTC Desire Android Phones

Roshan Karki Anonymous
Are you running out of free space on phones like HTC Desire and variants? It only has about 150MB of free space and after official Gingerbread 2.3.3 update the free space has decreased. Its really frustrating seeing all those apps with 20MB+ size eating up valuable space on Android phones. Even with App2SD I had very very difficult time maintaining free space. Installing apps like Facebook, Google Plus, Google Reader would eat up all the space. Today I used link2sd to increase free space on my Android phone and now I've more than 1GB of free space for installing apps. I've been installed so so many apps now. link2sd can move your application apk, dex and lib files to second partition of your SD card and creates a symlink where necessary. Even when you mount your SD card in computer the apps in SD card will work as only the first partition will be mounted in computer. Requirements : Root MicroSD card Clockworkmod recovery to partitoin the SD ca...
Read more

Giving Out Google Wave Invitations

Roshan Karki Anonymous
One of our generous reader is offering seven Google Wave invitations. So please put your email address as comment. You can use scr.im to protect your email address from spammers. To get the invitation you don't need to be my regular reader nor you need to be my RSS subscriber. Its not necessary that you have posted comment in this blog. It doesn't matter if you hate me or have kicked me. Invitations will be sent on first come first serve basis.
Read more