- Moderator
- #21
The site just went down again, just for about a minute 
It said DNS could not be reached Is this the same as before?
It said DNS could not be reached Is this the same as before?
SQL injection vulnerability
- Thread starter Mendo Cath
- Start date
- Joined
- Apr 2, 2013
- Messages
- 4,925
- Thread starter
- #22
Not that I am aware of.
Ashara Koh'inor
Aes Sedai
- Joined
- May 24, 2015
- Messages
- 4,715
- Location
- North Carolina, US
- Pronouns
-
- She - Her
- Discord
- Ashara#3362
- Moderator
- #23
Thanks for taking care of everything so quickly and being patient enough to answer all our questions. Great job!!!
- Moderator
- #24
Thanks for getting things taken care of so quickly, Mendo!
Cahr Ystian
Novice
Thank you for the good work.
- Joined
- Apr 2, 2013
- Messages
- 4,925
- Thread starter
- #26
The site just went down again, just for about a minute
Unrelated. Our host reported "DNS Resolution Issues" around the same time.
When it rains?
- Moderator
- #27
Good to know 
I just thought I'd tell you, in case it had happened again
I just thought I'd tell you, in case it had happened again 
Kassidy Rose ni DaiShan t' al'Kalin
Aes Sedai
Password changed. 
Polegnyn Nemeara
Aes Sedai
Password updated :fistbump
Naomi al'Moranwin
Aes Sedai
My password was only 797 days old! Totally secure.
- Admin
- #31
Mine was clearly secure as I couldn't hack it on my own and had to reset it. 
I'm going to presume that my groggy text message conversation with Mendo last night about this was successful.
I'm going to presume that my groggy text message conversation with Mendo last night about this was successful.
Samarasin Tavaral
Aes Sedai
- Joined
- Aug 6, 2010
- Messages
- 5,576
Mine was somewhere around 1400.My password was only 797 days old! Totally secure.
Elania al'Manir
Aes Sedai
Ditto.
Axis m'Troutilas
Gaidin
same around 1400, must be the last time we updated the forums
- Admin
- #36
Got the update to fix this (the vulnerable part of the forums was disabled in the meantime), so there's going to be a quick emergency maintenance to apply it and re-enable things. Should be just a quick blip.
[edit]Done![/edit]
[edit]Done![/edit]
Caerwyn Jolan
Gaidin
I suspect this sort of thing is common. I know i used to reuse passwords between sites until a couple years ago.
So. The way security folk that i know (computer security) do it, is similar to what I do, which is to use a password manager like Lastpass to create unique, complex passwords (the one i just set my tv.net password to is a random string of 20 digits with mixed character types, I generally use 20 characters or whatever the maximum length of the password field that is accepted is.
This lets you never worry that a compromised password on one site affects others. (it turned out my password here actually predated my doing this, but i had since changed all the other places that password was used).
Lastpass (and several other password managers) have browser plugins so its easy to actually log in with them. you dont have to type those crazy passwords.
Anyway, if you're thinking of upgrading your online security becuase of this incident, i'd recommend using a password manager rather than just picking another password and setting a bunch of sites to use it.
thanks
Caerwyn
1500 days..... so I... win? Er...?
Either way, it was time to change my password.
Caerwyn, I've been very interested in using a password manager but was afraid that I'd get confused and just end up without access. I'd love suggestions (and a little education) for current best practices.
Dear IT Team, the Internet is dark and full of terrors. Thank you for noticing the breach and working straight away to notify everyone and correct the problem as best you can.
Either way, it was time to change my password.
Caerwyn, I've been very interested in using a password manager but was afraid that I'd get confused and just end up without access. I'd love suggestions (and a little education) for current best practices.
Dear IT Team, the Internet is dark and full of terrors. Thank you for noticing the breach and working straight away to notify everyone and correct the problem as best you can.
Damn you beat me! I only had 1484 
Thanks Mendo and Defen!
Thanks Mendo and Defen!
Caerwyn Jolan
Gaidin
1500 days..... so I... win? Er...?
Either way, it was time to change my password.
Caerwyn, I've been very interested in using a password manager but was afraid that I'd get confused and just end up without access. I'd love suggestions (and a little education) for current best practices.
.
This is a pretty good article on password managers, how they work and it mentions some of the stronger ones at the end.
A number of the screenshots are from using Lastpass but there are several other choices mentioned.