-
Hey, guest user. Hope you're enjoying NeoGAF! Have you considered registering for an account? Come join us and add your take to the daily discourse.
Funcom forums hacked (The Secret World, Age of Conan)
- Thread starter Wollan
- Start date
DownGrader
Member
So what was the point then...
doctorcdcs
Member
oh no.
on another note: op, the link in your tag doesn't work... unless that was intentional
edit: never wipe a keyboard while in a text box
on another note: op, the link in your tag doesn't work... unless that was intentional
edit: never wipe a keyboard while in a text box
KojiKnight
Member
Most likely the passwords were stored as simple hashes, the culprits then compare those hashes to known values, then use those passwords with their associated emails to get into something more secure...
The first target would likely be their game accounts as many people would use the same password for both, but maybe it's the same passwords they also used for their emails, etc.
Or are you saying in encrypting them to begin with? Why make hackers jobs too easy? Also a long secure password is a lot harder to crack and likely not worth the time.
It is a good policy. Even if they are encrypted, once stolen, they should be considered compromised. Encrypting them can give people a month of safety to change any shared passwords.
thebigmachine
Member
Yuuup. It's like swiss cheese, horribly insecure. I think I'm safe since I don't usually sign up to forums for specific games/publishers.
Mithos
Member
Same, I never make forum accounts for games (MMO'S) only the actual game account part.
This is so weird sounds like it is plaintext and not salted or hashed in any kind.
Neogaf runs vBulletin.
Could be they were using MD5, which can easily decrypted online.
Zepp Twofist
Member
I can't remember if my forum account shared credentials with my actual account. Guess I'll change the password to make sure nobody gets their hands on all my awesome role playing gear.
thebigmachine
Member
I know and as far as i'm aware they have never been hacked. That doesn't change the fact that it is frequently in need of patching/updating to stay ahead of all of the discovered vulnerabilities. This assumes there's someone in charge of doing this for Neogaf. I can guess with certainty that this is one of the exceptions across all the sites that use vBulletin.
Audioboxer
Member
Probably explains some of the recent PS4 account compromises...
I have an account but the password as always was long, unique and created by last pass. Chances are though the criminals have been trying to use my email to log into other services.
I have an account but the password as always was long, unique and created by last pass. Chances are though the criminals have been trying to use my email to log into other services.