Old Freeper Accounts Hijacked?

Original Content | 03/16/2025 | By Laz A. Mataz

[madison10]

Same. It is like we have a leak.

[bankwalker]

... invariably, their profile shows them joining between 1998 to 2002.

A newer account can have the signup date modified with the simplest of SQL statements. I wonder how many people actually have access to do that.

[Lazamataz]

This year was the first time I was called nasty stuff. I don’t think it was warranted. I thought it was against the rules. The person should have been zotted, but wasn’t.

Speaking of being called nasty stuff, on this VERY THREAD I was accused of fanciestism.

I am a member of AntiFancy, so this was wounding to me.

[bankwalker]

every combination doesn’t need to be tried ... only until you get a hit ...

[Lazamataz]

A newer account can have the signup date modified with the simplest of SQL statements.

Sure, but I'm fairly certain that SQL injection is covered here.

[GingisK]

Hey! It took over a year to convince JR to let me back on. This is really me.

[madison10]

I know! That is disgusting! You are not in the least fancy.

[Lazamataz]

Um, holy crap. Grok analyzed my sarcastic and irreverent style rater well. That, frankly, amazes me.

[bankwalker]

how many people have access? mods, etc.?

[Lazamataz]

Hey! It took over a year to convince JR to let me back on. This is really me.

How can we be sure you are you? You could be a fanciest.

[telescope115]

I have a strong password generated by Apple iOS so I feel relatively safe.

[Slings and Arrows]

I just changed my password to something tougher. Thanks for the heads-up.

[Kudsman]

That is hysterical. Laz is making unfancy fancy.

[OwenKellogg]

A little scary.

[linMcHlp]

BTW, I think that the sign-on username should not be the Freeper name.

Meaning, I much prefer using a password generator to create each of:

- account username
- account password

Thus, both of those, are known only to the account holder.

[BipolarBob]

Congratulations Laz! You outed one with very little trouble. The quick temper and illogic reasoning are sure signs. We'll keep an eye for ol' No. 7.

[Lazamataz]

I just changed my password to something tougher. Thanks for the heads-up.

That's great, but be aware, your password can be sent to you IN CLEAR TEXT by email. Emails go through a lot of hands before you get it, and at any step, the email can be sniffed, and your password compromised. This is why I'm advising JohnRob to, instead, do password-reset links in emails. Maybe also password-recovery questions, like "What was the name of your first cat" and stuff like that.

[Nik Naym]

“Within a day, I suddenly ‘bought’ Air Italia airline tickets and several expensive suits in Milan.

I’ve never been to Milan.

Lucky you. I never could afford a cool Italian suit. See, you really ARE a fanciest.

[Lazamataz]

BTW, I think that the sign-on username should not be the Freeper name. Meaning, I much prefer using a password generator to create each of: - account username - account password Thus, both of those, are known only to the account holder.

Great idea! Thanks!

(However, that might be a heck of a lot of development work)

[BipolarBob]

Traitor! You’ve given everyone my passwords. I’m screwed.