DiExposed

I am sure all new members for the last 4 years were made aware.

In the source code there is clearly a comment stating that Eric did it, and not to tell anyone about it.

Yeah, alerting people that they have been compromised is bad.

Did you even watch it? They have been logging user/pass info and stored it away for who knows what reason. Basically if you log in there ever, they can use your password to hack you elsewhere.

Damage Incorporated has been discovered logging all user log ins since late 2006. This modification was added to the forums, for who knows what reason ... http://www.youtube.com/watch?v=t0iSM-vt9eI Discuss.