It was known that late last year, the Gawker website was hacked. Hackers got hold of the site’s database which contained both the usernames and the passwords of about 1.4 million individuals who have posted comments at the Gawker site and its popular affiliates including gizmodo.com, deadspin.com, lifehacker.com, kotaku.com, jalopnik.com, and jezebel.com among others.
Worst, the hackers didn’t keep the database all to themselves. Instead, they uploaded everything to thepiratebay.org, a public torrent tracker, including the database’s rough analysis, 200,000 decoded passwords, plaintext credentials for some Gawker employees, and the 1.4 million email addresses, encrypted usernames and encrypted passwords.
The technical details on how the hack was done are not yet entirely disclosed, but Gnosis, the hacking group accountable for such has taken responsibility for what happened. Together with the database uploaded at thepiratebay.org was what looked like an angry shout-out aimed at the company.
Based on the occurrences, it looked like Gnosis guessed or decoded Nick Denton’s, Gawker founder, password which he used for his Campfire team-collaboration portal account. This account is used for internal communications and chat among the staff. The moment Gnosis gained access to this, they’re able to get hold of valuable information from the 4-gig chat logs.
Also, it seemed like the MySQL database password was divulged somewhere in the logs. It’s a petty issue for Gnosis to dump what they had gathered. Unfortunately for Gawker’s part, their passwords were encrypted using the criticized and ancient DES or Data Encryption Standard which made use of the 56-bit encryption key. With such poor encryption system, passwords with more than eight characters can be truncated to eight prior to storing in the database. Those users using more than eight characters
for the password will not be entirely compromised. However, account access is still possible once the first eight characters are cracked. Gnosis had successfully cracked about 200,000 passwords in the Gawker database, out of the 1.4 million passwords stored.
Analysis of the passwords hacked from the database were quite surprising and at the same time horrifying. Some highlights were the facts that 2,000 passwords used the word “password” as password; another 3,000 passwords used “123456;” 150,000 passwords consisted of all letters in lowercase; and Nick Denton used a password comprised of all the numbers. Pretty specific, huh?
Whoever had left a comment at any Gawker site may possibly be compromised. In addition, some individuals who used the same password for their different online accounts may likely be compromised too. Reports of social media accounts were uncovered such as Twitter accounts. Therefore, vary your passwords. Do not use only one password for all your online accounts.














