Approximately half an hour ago, I became aware that the version of Oracle distributed on the Chrome Web Store contained code that logged usernames and passwords on login, at the very least. (I’m not near a laptop and haven’t done a full code diff).
Oracle has been unpublished so it should be disappearing, but uninstall it NOW.
This code isn’t present on GitHub or v0.1.8, the last update I pushed out. The current compromised version is “v0.1.9” and Chrome Webstore says it was pushed on 10/3/17.
If you have used Oracle since then, you need to CHANGE YOUR PASSWORD NOW. If you have used this password on another site, you need to change it as well.
The extension is permissions wise scoped to Epicmafia.com, so any activity on any other site should not be affected.
At this moment I do not know how my account was breached and the compromised extension uploaded, nor do I know how access to Epicmafia.net was accessed (if at all). I will update in this thread as I further investigate.
Dont worry everyone my dad owns microsoft I can delete his minecraft account within 2 minutes xd f****** fool doesnt know who hes messing with lmao he better run or im gonna have to cancel my invite to him for my birthday party >:) Good luck, f*****.
3
deleteddeletedalmost 9 years ago
Compromised this, compromised that. Just admit to your sh1t and call it a day. Either you did it or you were stupid enough to let someone have access to all this "high value" information. End result, you are to blame.
1
deleteddeletedalmost 9 years ago
STAND WITH WHITEPIMP!
deleteddeletedalmost 9 years ago
How was this f*cker even allowed into a bar? He's like 18...?
2
deleteddeletedalmost 9 years ago
I mean what's his endgoal here? Didn't he quit because he had narcissistic personality disorder or something. What's he doing wasting his time on small potatoes like epicmafia when twitter is just down the street?
2
deleteddeletedalmost 9 years ago
He never was much of a mafia player
deleteddeletedalmost 9 years ago
please, let us know the inner workings of your investigation so we can all contribute.
[6:42:20 PM] Jordan B: Yeah, I always thought it was weird that lailai wouldn't link the GitHub to the Google extension. [6:42:48 PM] Jordan B: He insisted on making the actual published extension separate and uploading it to the Google store himself. [6:43:05 PM] Jordan B: I didn't care since I always compiled my own. [6:44:07 PM] William: is it okay if i post what you just said [6:44:56 PM] Jordan B: Oh yeah, go for it. [6:45:22 PM] Jordan B: >hacked [6:45:38 PM] Jordan B: The chrome extension is published through his Google account LMFAO
If "someone" hacked lailai's account and changed the script, then why would they record passwords to lailai's server instead of their own? It doesn't add up
Are you saying that he copied and pasted his report
2
deleteddeletedalmost 9 years ago
Approximately half an hour ago, I became aware that the version of Oracle distributed on the Chrome Web Store contained code that logged usernames and passwords on login, at the very least. (I’m not near a laptop and haven’t done a full code diff).
This reads like he wrote out what his alibi was going to be and then copy and pasted it as the first paragraph
