Site Password Reset

[KnoxUK]

To my knowledge this is TBT's first database leak. I hope the vulnerability has been patched or else we'll soon have another.

Hopefully it stops, but I think its because of the server issues not so long ago.

 

[AnimalCrossingPerson]

Hopefully it stops, but I think its because of the server issues not so long ago.

The other way around.

As you may have noticed yesterday, the forum was down in the morning and then again later that night. This was due to an attack on the site. [...] This incident appears to be unrelated to the site downtime that we experienced two weekends ago.

 

[Antonio]

Didn't they transfer hosts?

 

[~Unicorn~]

hope this is resolved soon.

shoo hackers

 

[Ilafae]

Im so glad I found this thread I was a little worried, I've not been able to use the site for almost two days and when I finally managed to get on a proper page the pass reset came up, but im still having problems with anything loading, but im glad people know whats up.

 

[Xerolin]

Oh my god I logged into the site and thought I was banned, and with my history is wouldn't have been surprised

- - - Post Merge - - -

I bet it was Starrywolf again

Hey I know starry as a friend and he's not smart enough to do that so ://// sorry

 

[Khaelis]

Oh dear.. that's unfortunate. Will you consider getting TBT under https:// protocol in the near future because of this?

 

[KaydeeKrunk]

I was about to ask about why it said my pass was 361 days old, but never mind that.

I hope you can resolve this issue without much hassle!! ♥

Mine was thousands of days old... O.O

 

[Reginald Fairfield]

Can't seem do view my profile again.

 

[EpicGamer12]

Oh dear.. that's unfortunate. Will you consider getting TBT under https:// protocol in the near future because of this?

To be fair, the site having https wouldn't have changed what happened. It would have just meant the site is more secure over insecure networks (such as your local coffee shop's network). MITM attacks are unlikely over your home network (and your ISP likely can monitor your traffic anyway).

 

[KaydeeKrunk]

Can't seem do view my profile again.

Having the same issue. =/ Hope it's fixed soon!

 

[cornimer]

Can't seem do view my profile again.

Same here

 

[That Marshal Fangirl]

Yep, all the profiles are broken again. Please fix this before today, as I have a couple people I need to say happy birthday to. :/

 

[Alienfish]

Yeah broke here too.. honestly I'd rather have other stuff gone than this aaa

 

[duckykate]

A+ brilliant idea they definitely did not think of that until right now.

Then why isn't it secure����

 

[AnimalCrossingPerson]

MITM attacks are unlikely over your home network (and your ISP likely can monitor your traffic anyway).

Regardless of encryption, your ISP can monitor which websites you visit, but only without encryption can they view and modify (such as adding their own adverts) the actual page content. Of course, there may be laws theoretically preventing them from doing so, but that depends on your area.

- - - Post Merge - - -

A+ brilliant idea they definitely did not think of that until right now.

Then why isn't it secure����

The actual website and server is okay in terms of security. There are no obvious ways in and there is only one field I've found on here which can be abused. It's just the connection from the server to the visitors which isn't secure (and for no good reason with it being easy and free to implement these days, but the staff are sick of me mentioning it).

- - - Post Merge - - -

Not sure where that top part of the second quote from. Looks like the website's a bit broken. Won't try and fix it as it's too fiddly on mobile.

 

[Jeremy]

The user profiles are back. The feedback system was causing this.

Also, please don't answer questions on behalf of the site as it could spread misinformation or panic. The site is secure and we were able to tell how the attacker gained access shortly after it happened. It has been addressed, but I can't disclose details for security reasons.

 

[AnimalCrossingPerson]

The site is secure and we were able to tell how the attacker gained access shortly after it happened. It has been addressed, but I can't disclose details for security reasons.

We're not expecting you to share how it was done, especially if the process may work on other websites.

 

[Mink777]

I bet it was Starrywolf again

Could have been others too such as L o t t i e, Izzy Reincarnated, Jared:3, Hulaetta(or whatever), or pups.

- - - Post Merge - - -

Wait, was it pidge?

 

[Haydenv019]

I don't understand why hackers would need to target an ANIMAL CROSSING FORUMS. All they're gonna get is *cough* online user's IP's, emails, and site passwords which TOTALLY couldn't relate to any other passwords they use on other applications and websites (like me)

Still don't get it.