[solved] If you're a customer of Intl-Outdoor there is the possibility that your data is online

[Steve_the_Chief]

NEVER EVER specify a public folder as output for the backup routine of a webserver

[scaru]

Damn, the SQL list is still there but at a different URL. :'( Intl-outdoor has really screwed up, but atleast it doesn't show up when you search last name site:intl-outdoor.com.

[Werner]

its still available to everyone that is what counts.
Just Google has made their homework IO not.
That’s really embarrassing

[jmpaul320]

i have forgotten my password to IO so many times i end up resetting it everytime i make an order… and then forget about changing it lol.

[scaru]

@jmpaul320

i have forgotten my password to IO so many times i end up resetting it everytime i make an order… and then forget about changing it lol.

If you want to know your password you could just look it up in the tables.

[CM2010]

Any word from int-outdoors yet?

[gords1001]

Aren’t they out for cny? If so, there may not be anyone to deal with this

[jmpaul320]

@gords1001

Aren’t they out for cny? If so, there may not be anyone to deal with this

ive seen hank on gmail messenger… you could try that

[wikiman]

@jmpaul320

@gords1001

Aren’t they out for cny? If so, there may not be anyone to deal with this

ive seen hank on gmail messenger… you could try that

Yeap, I saw it.
Why the subject is “solved”? Data are still available. In addition I can see some amounts of the transactions.

[scaru]

@wikiman

@jmpaul320

@gords1001

Aren’t they out for cny? If so, there may not be anyone to deal with this

ive seen hank on gmail messenger… you could try that

Yeap, I saw it. Why the subject is “solved”? Data are still available. In addition I can see some amounts of the transactions.

I'm not seeing any transactions, just: full name, address, phone number, email, and a encrypted version of their password.

[wikiman]

For example:

INSERT INTO `orders_status_history` VALUES(‘4611’,‘1538’,‘2’,’2012-03-20

16:02:29’,‘0’,’Transaction ID: 5YU21003UL582231C nPayment Type: PayPal

Express Checkout (instant) nTimestamp: 2012-03-20T23:02:28Z nPayment

Status: Completed nAmount: 92.00 USD ’);

[gords1001]

Fancy trying graham Entwistles phone number? Just for a giggle.

[scaru]

@wikiman

For example: INSERT INTO orders_status_history VALUES(‘4611’,‘1538’,‘2’,‘2012-03-20 16:02:29’,‘0’,'Transaction ID: 5YU21003UL582231C nPayment Type: PayPal Express Checkout (instant) nTimestamp: 2012-03-20T23:02:28Z nPayment Status: Completed nAmount: 92.00 USD ');

Damn, you're right. At least there is no way for them to release the paypal account's password as they never get it. ;) I also found IP addresses.

[Hopback]

I just had a phone call, someone trying to sell me paisley…….

[Pulsar]

@Hopback

I just had a phone call, someone trying to sell me paisley…….

i like a hint of paisley on my spam in the morning… is that shiz easy to grow???

[ri_chevy]

I can’t come up with anything. Do you have to log in? How does one enter sql into the search?

[brad]

@ri chevy

I can’t come up with anything. Do you have to log in? How does one enter sql into the search?

If you find out, let me know, I pm-d someone to ask them but didn’t get through.

[scaru]

Guys, as someone who knows this stuff I'm not going to share a link. Much better if less people find it.

[wikiman]

@scaru

Guys, as someone who knows this stuff I’m not going to share a link. Much better if less people find it.

I agree.

[scaru]

I have sent PMs to a few of the people above but here my official response is.

Sorry, but I’m not going to share a link to the info just because I would prefer for less people to know about it. If you have purchased from IO your: full name, address, phone number, email registered with them, paypal email, paypal transaction ID #, IP address, shipping option, currency paid in, and a encrypted version of your password are all on it.

Sorry,

David