Do you have a MacRumors account? We probably have some bad news for you. The popular Mac fan site's forum has been breached by hackers, who managed to obtain the emails and passwords of 860,000 users, one of the site's top editors said last night.
“In cases like this, it’s best to assume that the username and password you used on MacRumors are now known,” said Editorial Director Arnold Kim.
The web software used by the site for its forums was VBulletin. The software is known for its vulnerabilities and is the same one used by Ubuntu (which was also compromised). The passwords of the forum users are encrypted with MD5 but without being salted, which makes them insufficiently protected. Those of you who had an account on the MacRumors forum should immediately change your login details and be especially careful of phishing attacks, given that usernames and email addresses have been revealed.
