Site Password Reset

[Bcat]

Just a heads up, the hacker also had y'all emails which wasn't encrypted so if y'all shared similar password with the site and your email, change your email password. The hacker was also aware of the encryption used to encrypt (Stating something like md5) so he could still decrypt your password, so do change it. Not trying to scare anyone....

Source: The guy was on the discord server yesterday, showing off. He posted a sample of Jeremy data which included username, email, and encrypted password.

I was calm for a second but now I?m anxious again D:

 

[watercolorwish]

oh shoot this scared me lol but i needed to change my password anyways its been forever

 

[Keldi]

Just changed both passwords u.u
Maybe I should make a backup email :/

- - - Post Merge - - -

I was calm for a second but now I’m anxious again D:

We're both anxious *makes back up email account*
Ah. A little better feeling.

 

[Jeremy]

If you're interested in the security of other accounts you might have, check out this resource that keeps track of known breaches on other sites: https://haveibeenpwned.com/

And it helps to use only strong passwords. For example, don't use nothing but a short word and numbers. It helps to have longer words, numbers, different cases, and symbols. You probably don't see many sites forcing you to use symbols when registering, but adding one or two symbols is a pretty good way to make a secure password.

 

[Keldi]

If you're interested in the security of other accounts you might have, check out this resource that keeps track of known breaches on other sites: https://haveibeenpwned.com/

And it helps to use only strong passwords. For example, don't use nothing but a short word and numbers. It helps to have longer words, numbers, different cases, and symbols. You probably don't see many sites forcing you to use symbols when registering, but adding one or two symbols is a pretty good way to make a secure password.

Oh just let me save that on my home page! Thanks Jeremy!
And you bet my passwords look like a toddler smashed randomly on my phone but with some composure lol

 

[Bcat]

Thanks Jeremy, I feel better now

 

[Chris]

Damn now I have to change the password I've used since I was 5

But jesus

Know this feeling. Six months from now you'll still be erroneously putting in the old password. Anytime I log into my email I get a message reminding me I changed my password some 180+ days ago.

 

[Jacob]

the hacker is trying to take my weird doll you better try me

 

[Keldi]

Anybody else use that site Jeremy linked andchecked every account they've made as well as their friends on BTF?

 

[Zane]

Some people have got waaaaaay too much time on their hands.

Thanks 4 the update!

 

[Reginald Fairfield]

I bet it was Starrywolf again

Who?

 

[Jeremy]

There's a little bit of misinformation in here because knowing what type of encryption is used doesn't mean someone can decrypt the passwords. When something like this happens, they see a bunch of seemingly random letters and numbers that represent a password. It's one-way, so the passwords cannot be decrypted directly. What they would have to do is try (likely with a program) a random combination of letters and numbers millions of times until they get a match. There are trillions of possible password combinations, so more often than not this won't happen, but it's always best to change it just in case. This is also why people suggest using strong passwords. "ABC" is easier to figure out than something long with different types of characters.

 

[Paperboy012305]

I wondered why I had to change my password, thanks for keeping us notified.

 

[Sweetley]

Who?

A user which was active here a long time ago and then got banned (if I remember correctly).

 

[Reginald Fairfield]

A user which was active here a long time ago and then got banned (if I remember correctly).

What do you have to do to banned here?

 

[Oblivia]

In addition to what Jeremy has already said, no one needs to panic. The likelihood of a hacker targeting a normal user's account is essentially nonexistent, and there's not much anyone can do with just an email address.

The admin accounts are the hot commodity when it comes to any sort of malicious attack, and we're taking every precaution to make sure the site and every account is safe and secure going forward.

 

[Paperboy012305]

Umm, it felt like the server IP Address couldn't be found for a second, explain this.

 

[That Marshal Fangirl]

Oh wow, I was watching Netflix and just barely went through the comments. The idea of a hacker stealing your password is pretty scary! I'm glad everything seems to be back to normal again.

 

[Bcat]

Phew, thanks for making me feel a LOT better

 

[amazonevan19]

thanks for the heads up and all your hard work guys <3