Our sincerest condolences for the hacking of themeparkreview.com. Site is down, and the group that did this has posted the full sql database, which includes all user information. This includes your username, email address, and possibly password (although the password is encrypted) that was on the forums. Most of the passwords in the forums sql file I saw were blank. Perhaps these passwords had expired on the forums, or these passwords were users who recently reentered their passwords after Robb sent out the email the other day about changing them. But the passwords in the newsletter subscriber file seem to all be there. I have found some of the whootah members info in the database, but for the ones I checked I did not find the password in the forums database, the field was blank. I did find some of whootah members passwords in the newsletter database. So if anyone thought they no longer had an account there still, you probably should change your password just in case, even though some people have told me they have deleted their account there, or requested it to be deleted. Whootah members, Contact me privately since you all know how to contact me, and I know how you would do so and I can see if yours is in the database as well. It is to note I’m not sure what the encrypting code is for the passwords, so I can not tell you what password they received. But I can tell you if you’re in the database listing.
I have not talked with Robb, or anyone about this at all, this is all just from my reading and investigating. I image this could have started with an exploit on phplist noted here http://www.waraxe.us/ftopic-4266-0-days0-orderasc-.html to dump the newsletter subscribers information. Then they used that set of passwords to find the admin account and logged in, eventually gaining cpanel access, which then allowed the sql database dump. With that, they can do whatever they want to the site, and with the information it contains.
From reading comments on the interwebs, it seems they may be trying to say this was a phishing attempt on the forums and have asked you to change the password you use on the forums. If you follow some peoples recommendations to use a different password for each login account you have, then you’re safe. But who does that? I can guarantee you the hackers infiltrated the site via exploits and gained access to the full databases. I urge all current and former members of TPR to change any password on ANY website where they used the same TPR password. The passwords you used are now on the net (although encrypted), and will be sold and had fun with by bored people and those who intend to use it to make money.
This is unfortunate for our community , and I know that Robb has a lot of work ahead of him to recover from this.
Finally, the ice is broken and a new Whootah video is ready for release. The drought is over and the tap is open. Soon to follow, even more video goodness. Forgive the delay and enjoy!
There’s one thing in common with whootah.com website status and what we’re getting all our loyal visitors for Christmas.
If you frequent the forums then you already know where the real action is. If not, you’re missing out so sign up and subscribe to the topics. Recent hits include:
Yeah, so I recycle presents. If you played these at work last year then you’ll know why you shouldn’t play them at work again this year. If you didn’t, feel free to find out.
Anyway, have a good Christmas and holiday season. As always, our new years resolution will be to have more videos. And you can tell how successful that went last year with our only video release of 2007. But only because Jonathan made us all get off our ass so he could get an A in film school. Website work is planned however, and we will be requesting ideas here shortly. If you’re continually bored you could also check out our other methods of content:
The pictures section here simply goes to my own personal collection of pictures at flickr. This is constantly updated, with currently over 17,000 pictures. Lots of goodies there.
You should also check out some of our beloved members at their respective locations -
The new Down By Avalon CDs are now available. If your interested in purchasing one from me directly, just send me an e-mail or message me on the forums.
If you would prefer to purchase the tracks (or album) online for download, Click Here!
Join the Whootah Crew (Alan, Barbara, Phil and Johnny) as they make their way around DC! our 3-Day visit included lots of Smithsonian and Monuments as well as some great food and people!
