Recent Events, Account Security and Protecting Yourself - Official Message

[Millertime2598]

Thank you guys!

 

[GRFMotorsports]

Man I think I started a trend on here..... just not a good one.

 

[wari210]

Anything that comes to your mind how your account was hacked. Strange mails etc.?

 

[QLR1]

Man I think I started a trend on here..... just not a good one.

At least you weren't hacked out of revenge

 

[QLR1]

Anything that comes to your mind how your account was hacked. Strange mails etc.?

In my case, there was nothing unusual going on with my personal email or any other account. Just only the forum account was affected.

 

[Millertime2598]

Same here. Nothing strange at all and then wake up to all those messages.

 

[Mistermugi]

Millertime2598--you still have the pit boss for $400?​

I get first dibs!

 

[ItnStln]

Millertime2598--you still have the pit boss for $400?​

I get first dibs!

I'll offer $450!

 

[Mistermugi]

You will have to match @Millertime2598 of $450 in Indonesian Rupees though.

 

[TheDukeOfIce]

@OakleyBoss has any thought been put into proactively running your members emails and hashed credentials through a compromised account check? (Like SpyCloud)

Some common security practices when sites like this have had multiple compromises via Account Take Over — is to force password changes for your entire user base. That is onerous for sure, but perhaps a little bit of filtering, you can get a data centric list of all -potentially- compromised accounts??
—From that smaller data set, then you can force password changes, or force 2SV or OTP for those high risk accounts.

Thoughts?

For musing: The most secure system is a system that nobody can use