WarcraftRealms.com - password compromised

Found a bug with the site? Let me know!
Post Reply
Maxous
Posts: 1
Joined: Sat Jan 09, 2010 6:04 pm
Location: Gerogia

WarcraftRealms.com - password compromised

Post by Maxous »

All,

I use unique passwords for each website. I received an email earlier today with the password to this website listed. Just some kid demanding money in bitcoin. Anyways, everyone on this site needs to update their passwords. MODS if you are reading this, please consider forcing everyone to change their password. You also need to find out how the leak occurred.

-Topknot

User avatar
bringoutyourdead
Forums Admin & general flunky
Posts: 1430
Joined: Fri Nov 07, 2008 1:11 pm
Location: Texas, USA

password compromise

Post by bringoutyourdead »

This site has never been secure for data transmission..
note we don't have https.
Which means anyone in the internet chain between you and this site can see every bit of data that passes by,

One of the reasons, I always tell everyone.. use a unique password for every site they ever log into.

On the other hand... the actual server side and database is behind security, so it is less likely that part has been breached.

Having said that, I will pass on your message to Metalbeast the site owner.

User avatar
Fett
Census Taker
Posts: 58
Joined: Sat Nov 01, 2008 3:34 am

Post by Fett »

I've gotten I think four of those emails with my password for this site.

May I recommend:
https://letsencrypt.org/

They issue free SSL certificates. Granted, the 90 expiration is a little annoying, but the price is right.

Post Reply