Clixsense, Neobux, Crowdflower 2016 thread

indsty

Seems to be back, and my money is there. But I think I will give it a miss until tomorrow. Can't see any explanation of what happened.

purplevamp

indsty wrote: »

Seems to be back, and my money is there. But I think I will give it a miss until tomorrow. Can't see any explanation of what happened.

The following popped up when I went back on the site just now:-

Members, I apologize for taking the site offline without warning but it seems this hacker was able to find an exploit and was able to remotely change the names and balances on some accounts. Some of you will need to reenter your names. None of your personal account information was exposed. We were able to restore many account names but we did not want to restore this information from our backup because it would mean much longer time offline so we made the decision to have some of you re-enter your first and last name.

We understand this is a major inconvenience to all of you as this person is causing us much grief. But, on a side note, we've opened an investigation with the FBI and they are now investigating to try and find this person.

Again I am very sorry for all of this and please be patient with us. We are doing the best we can to restore things back to where they should be.

Thank you

purplevamp

Well, a bit of good news re: Clixsense. I've just been paid $8 :j I'd forgotten I'd cashed this out and thought I'd received my latest payment from them. So at least they're still paying :money:

Kavor

The ClixAddon is now showing the correct balance. However, when I tried to login, it wouldn't accept my password and was presented with the message :-
"In line with what we've experienced over the last few days we were force to change your account password.
Your account login details have been submitted to your email address."


One and a half hours later and there is still no sign of the email.


EDIT :- 20 seconds later and the email arrives. Forum is still disabled and the daily ads haven't been added yet.

older_wiser

I would assume the hacker is getting back into the system via the daily ads they seem to have bought ad space on clixsense for this precise reason.

quite worrying that someone can do this but hopefully they have something to go on with the purchase etc its doubtful it will be that simple though. i still wasn't able to log in yesterday so assume the new DNS and other details haven't propagated fully yet.

dave2319

Thanks for all the updates here.

Ads and forum seem to be working fine now.
Only needed to reset my password, and my account balance is fine.

Let's hope they've got it sorted and it stays that way!

purplevamp

Posted today on the site:-

Update on hacking
11 Sep 2016 09:45 am
Members we want to keep you informed on what is happening with our recent hack. It has come to our attention that this hacker did get access to our database server for a short period of time. He was able to gain access to this not directly but instead through an old server we were no longer using that had a connection to our database server. (This server has since been terminated).

He was able to copy most if not all of our users table, he ran some SQL code that changed the names on accounts to "hacked account" and deleted many forum posts. He also set user balances to $0.00.

We were able to restore the user balances, forum and many account names. Some of you were asked to fill out your name again as we did not want to restore this from our backup due to the amount of time it would have taken to get back online.

What does this all mean? Simply put, your ClixSense account information is now much more secure. We did a forced password change as a precautionary measure and many of you have already changed your emails as well. If by chance you have used the same password here as other services (such as your email, Paypal or another PTC, etc..) please make sure you change these passwords too.

To say this past week was a bit stressful is an understatement. It has taught us that regardless of what you do to stay secure, it still may not be enough. We are continuing to improve ClixSense security all around and we will continue to keep you updated on any new developments.

Thank you

Kantankrus_Mare

Is anyone else having problems with the fisher investment task? I havent been able to get one to work all week.

Have taken the extension off and reinstalled and tried clearing cache though I think my laptop's days are numbered and not very successful with that.

sweetape

This is the second notification I received from haveibeenpwned.
Sent today:

'You've been pwned!
You signed up for notifications when your account was pwned in a data breach and unfortunately, it's happened. Here's what's known about the breach:
Breach: ClixSense
Date of breach: 4 Sep 2016
Number of accounts: 2,424,784
Compromised data: Account balances, Dates of birth, Email addresses, Genders, IP addresses, Names, Passwords, Payment histories, Payment methods, Physical addresses, Usernames, Website activity
Description: In September 2016, the paid-to-click site ClixSense suffered a data breach which exposed 2.4 million subscriber identities. The breached data was then posted online by the attackers who claimed it was a subset of a larger data breach totalling 6.6 million records. The leaked data was extensive and included names, physical, email and IP addresses, genders and birth dates, account balances and passwords stored as plain text.
You can also run a search for breaches of your email address again at any time to get a complete list of sites where your account has been compromised.'


In the first notification, my account was amongst the 2700+ that was initially leaked online, 9 September. In the 'paste' that came with the email, it was claimed,
'Method of hack: simple+easy un/pw combo. servers had no extra security.'

Sugarcandy

Kantankrus_Mare wrote: »

Is anyone else having problems with the fisher investment task? I havent been able to get one to work all week.

Have taken the extension off and reinstalled and tried clearing cache though I think my laptop's days are numbered and not very successful with that.

Yes I have only managed to do 2 of them in the last few days. I have uninstalled and reinstalled the extension as well. It's so frustrating and wastes a lot of time.