Sorry guys :(
2013-04-19 20:17
Sorry about the downtime guys, someone had fun stealing user sessions using an exploit on the site, instead of just informing us so we could patch the site up. :(

The user succeeded in hijacking Nix0ns account, using his admin rights to post fake news, and rename users. These users have all been fixed, and all content touched, has been reverted to its previous state.

We want to stress that the database was never accessed, and no passwords were lost. The amount of user accounts affected is also limited.

We have done our best to make sure this does not happen again, but one little bug is sadly all it takes.

You might have noticed you have been automatically logged out after the downtime, that is a security measure so any login cookies hijacked will not work, we are of course annoyed that we had to logout everyone, but we could not run the risk of user and admin accounts being vulnerable.

However, HLTV.org is here to stay, and a little setback like this will only serve to make us stronger. I hope you will all accept our deepest apology, and forgive us. Security holes are never acceptable, so no excuses, we fucked up.
No problem :) hltv.org the best :)
2013-04-19 20:19:16
whats wrong with admin on cadred?
2013-04-27 16:26:04
No problem.
2013-04-19 20:19:46
so that's why my nickname was qwe2226 and i had 3 posts i haven't made.

he must know i'm famous, since my account was a target. infact, the target was me, not hltv
2013-04-19 20:19:56
Nice to see HLTV.org back! :)
2013-04-19 20:20:47
by: Dare_Dev1L - HLTV.org
#8
Fortunately no damage was made, thank goodness for backups!
2013-04-19 20:21:44
Would be nice to have a response from yourself -

PM me.
2013-04-19 20:21:51
GG
2013-04-19 20:22:20
Was a pretty hard time :(

I was bored so hard, I started learning Chinese during that down time and now I'm speaking it fluently.

Post edited 2013-04-19 20:24:27
2013-04-19 20:22:33
hahahaha
2013-04-19 20:42:35
LOOOOOOL.
2013-04-19 23:57:54
Genius !! LOL
2013-04-24 12:34:37
lol Thanks to the down time , a language genius detected.:D
2013-04-27 10:45:51
by: xb0y
#12
Track IP and lodge complaint? Attack was started from http://www.hltv.org/?pageid=14&userid=439664 this ID
2013-04-19 20:22:59
by: Nomad - HLTV.org
#15
No use really..
2013-04-19 20:24:05
i've noticed that thread but i had no inspiration to troll that shit
2013-04-19 20:24:26
I think it started here...

http://www.hltv.org/?pageid=14&userid=%32%38%3..
2013-04-19 21:16:22
The IP used to store the cookies was 86.185.109.71, which is a BT customer (UK).
2013-04-19 23:43:29
i hope he fucked up some dreamteams:D
2013-04-19 20:23:16
God, the past hours were a nightmare. Without HLTV i started to doubt the purpose behind my existence; there was nothing to do.
2013-04-19 20:24:58
LOL
2013-04-19 21:01:35
Top lel.
2013-04-20 05:32:53
+1
2013-04-20 11:01:08
The fact that people think it's acceptable to do things like this.

*Sigh*
2013-04-19 20:30:06
anyway, i'm glad hltv is back before the matches tonight and i hope we wont have any other problems.

FU hackers.

oh, btw, i'm trying not to suspect them, but i think this is linked to that random site. ca dead ed

Post edited 2013-04-19 20:32:21
2013-04-19 20:30:19
*Face palm*
2013-04-20 00:01:35
Your own comments are suspicious as fuck.
2013-04-20 00:40:40
:D. i was a victim, my nickname was changed. i hope they can track the hacker and obama will do invasion in:
3
2
1
me and boston victims:<

Post edited 2013-04-20 00:50:30
2013-04-20 00:49:23
+1
2013-04-20 05:33:36
Was getting worried what with ESEA coming up, but swift correction of the problem, <3.
2013-04-19 20:32:16
NP.
2013-04-19 20:40:56
Np i just took some extra reps at the gym while u where gone :)
2013-04-19 20:46:12
Oh noes! damn kids.
2013-04-19 20:48:58
you should have started the blog with "sry, sry for insultes"
2013-04-19 20:48:59
haha yeah
2013-04-19 20:56:39
Lel!
2013-04-20 05:33:56
All cool :D I thought my life was over.
2013-04-19 20:49:38
Np guys,it was a rather quick maintance.

We've seen match delays 3 times that,so:)

Post edited 2013-04-19 20:57:31
2013-04-19 20:57:14
I laughed my ass off when I saw the topic they created, posted at Facebook "NIGGERS AT CADRED" LMAO
2013-04-19 21:02:32
I have noticed an error with access this morning. Is it h4xx0r played?
2013-04-19 21:05:58
Stay strong HLTV!
2013-04-19 21:08:35
What doesn't kill you make you stronger!
2013-04-19 21:19:20
The rather worrying thing is that i literally read your downtime message around 50 times in half an hour. lol! :)
2013-04-19 21:32:39
Haha, +1
2013-04-19 21:36:29
I know that feel bro :D
2013-04-19 23:44:32
+1
2013-04-20 05:34:39
ahah true
2013-04-20 05:42:10
There we were, now here we are.

HLTV is inmune! :D
2013-04-19 21:39:34
Nevermind , gl hltv administration, you are the best :)
2013-04-19 21:59:52
Nomad rampage...multikill :D
2013-04-19 22:01:20
most website would not even bother to make a statement about this =)

just keep up the good work ^^
2013-04-19 22:13:26
by: Jonathan E. - HLTV.org
#61
Some people just have too much free time...
2013-04-20 00:04:00
problem?
2013-04-20 07:21:45
;)
2013-04-20 16:26:09
by: Jonathan E. - HLTV.org
#85
It is surely not mine as you yourself know.
2013-04-20 23:43:42
You're admin on a CS website. Are you sure aout who has too much free time?
2013-04-21 00:55:43
by: Jonathan E. - HLTV.org
#87
So you apparently can't do more than one thing at the same time?
2013-04-21 01:08:42
What doesn't kill you makes you stronger :)
2013-04-20 00:06:23
same exploit that was posted here couple days ago ?
2013-04-20 00:08:05
<3 HLTV.org
2013-04-20 00:27:48
How did he manage to store user sessions in the first place?
2013-04-20 00:46:46
u wanna know to much.
they save our passwords and someone cracked the script. don't user the pass on hltv on other sites/email/paypal.

Post edited 2013-04-20 00:51:28
2013-04-20 00:50:52
by: Nomad - HLTV.org
#71
No, the password was not "cracked", all passwords are hashed (http://en.wikipedia.org/wiki/Hash_function), and in the database which was not accessed.
2013-04-20 02:40:43
i was joking/trolling. i've noticed that my pass is the same. only the username got changed.
2013-04-20 02:44:53
Esea dreamteam gone?
2013-04-20 04:26:28
by: Jonathan E. - HLTV.org
#74
It is right there as far as I can see.
2013-04-20 04:55:33
hahahahahaha oh :D.
2013-04-20 07:22:28
It's OK.
2013-04-20 10:08:16
Shit happens :)
I had revealing couple of hours while hltv was down, thinking about the meaning of life and crap like that, but then everything got fixed ;)
2013-04-21 04:39:43
pffffewww just in time XD
2013-04-21 14:43:35
it's ok now: http://i.imgur.com/wdMGstC.jpg
2013-04-21 09:23:52
uh oh...

Post edited 2013-04-21 11:14:54
2013-04-21 11:14:43
shif happens :P
2013-04-21 11:35:24
stop stealing my lines :P
#89
2013-04-21 14:49:25
shit happens :D
2013-04-21 18:35:40
lol didn't read comments above ^_^ sorry

https://www.youtube.com/watch?v=30GD25un0XQ
2013-04-21 21:47:49
Okay:)
2013-04-26 15:44:03

Login or register to add your comment to the discussion.