There are rumors said that the Flippa.com website has been hacked by someone, and its true !
The good thing is, it has been hacked by ecthical hackers. So they have notified the Flippa.com owner to upgrade their securities.
We recommend Flippa user to change passwords for SitePoint, Flippa, PayPal, Escrow, Google Analystics and any other account Flippa asks their users to associate with them.
Vulnerability found on 14th July, at 23:12 hackers notified Flippa, the next day at 02:15 Flippa notified hackers it was fixed and then on 16 July 03:38 was the first threat of legal action if hackers released the video.
Until the 18th, has Flippa notified their users of such a large breach? Not at all. Im one of the user there got nothing info from Flippa.com about this.
Up till today, Flippa promptly allegedly patched the issue and according to a blog post (now disappeared) they are going to review the security in more areas. So as a whole, this is a bonus for Flippa users to know they should be able to bid in confidence.
The vulnerability was simple, you could either click Forgot Password or Register. The email Flippa sends you contains a link that is designed to authenticate your email and contains a UserID in the url. To hack Flippa, you simply change the UserID. This can be to any UserID to find their profile info/private messages or as shown in the video an Administrator UserID.
Now, the video safely been released to public, check the video below. wait for the loading…
