Hello,
My name's itzthead, and I see some people asking why the great one would be hacking people's accounts on this site.
Yesterday I hacked the website and got access to the admin panel through a vulnerability. I defaced the front page but it was only like that for a second so you likely didn't see it, however you can see the mirror of it here: http://zone-h.org/mirror/id/21249199.
I also managed to get access to Dom's other websites (yup1.com, dombruno.com, gbapi.net), but I had greater access on those than on this one. I had the privileges to see all the files on this site from the others. One of those files was the database login information. From the database, I downloaded the entire users table, which contains everyone's username + password. Many of the passwords will no doubt work on the user's email as well. I'm probably gonna end up making some money from this actually.
The next day your wonderful admin failed to say anything about the hacking. Didn't he know that your accounts may have been compromised? He'd rather not own up to his website having terrible security than save his users. So, I hacked a bunch of accounts and spammed the site to show everyone what happened, partially because I was annoyed that he didn't acknowledge my achievement, and also to expose him.
Also, think about this, why didn't he just take the website offline yesterday? If the site was down I wouldn't be hacking anything. The reason why is because he can't stand to take the site offline for a minute because he makes revenue from it. So, he'd rather that you all get your shit hacked than lose anything for himself. It could be worse too, depending on what the vulnerability was (which he has no idea cause he hasn't patched it), I could arbitrarily infect all the users with a virus of some sort. Does he care?
Oh yeah and I also did it just for kicks, but now I'm probably done. I've re-hacked his other sites 2 times, and I might re-hack this one, but I'm pretty much done logging into everyone's accounts. Now it's time to get their emails.
Regards,
itzthead