Homeless.co.il was hacked by turkish hackers

Earlier today it was published that Turkish hackers managed to grab a list of user details (32k) including emails and password. (add to this 72k email accounts that were hacked)

When will site owners learn to use hash codes instead of password ???

From my point of view the owner of the site should be blamed for the damage as much as the hackers who did it, you can expect someone to build a site not to mention a leading site and treat security as an after thought !

For anyone wondering who is effected… the list is open on the wild it took me several min to find it in order to look if I've been personally hit (i wasn’t worried much as i do use password generator to supply password on the fly to sites that I'm surfing at…and not having the same password for all of my accounts)

Some point of interest by looking at the list:

The list contains 3026 distinguished domains … of course i cant list all the domains here  due to the space of this post so i left only the ones with more then 3 people coming from.

As you can see… we have large representation of Remax, Amdocs, Cellcom, Pelephone, Orange, Comverse, HP, Intel… and even some government accounts….

lots of security officers have already had to react… or probably will do tomorrow…

I wonder how many ISPs and public mail users comming from gmail/walla/hotmail/yahoo … use the same password that was published on the excel for their own email/pay pal accounts… my guess is that that out of 27k ISPs account some do…

If you ever used homeless… and have one pass for all…change your password asap !