Here's a prime example of why it's so important to use different passwords on different sites. The below email was sent out today explaining how a large forums company had their user list stolen by hackers. It's gives a good explanation of how that can effect the users.
PLEASE NOTE: This does NOT relate to MacGyverOnline - it's posted as a general example to raise awareness of online security and does not relate to any software we use on this site.
If you're like me and hate having to remember so many passwords there's a good application you can use called
KeePass which stores all your passwords in an encrypted database which can be stored on a web drive (such as google drive or skydrive) so you can access it using the KeePass apps for both iPhone and Android as well as from your normal computer.
| QUOTE |
<snip>
Unfortunately, we are 100% sure that our user database has been stolen.
As such we HIGHLY RECOMMEND, even implore you, to:
1.) Change your password on other websites you are using, if you use the same password there. This is very important to do, as it also will help prevent other websites being hacked through your compromised password, if it is compromised.
2.) Change your password here on our website.
3.) If you use the password you use here anywhere else, say for example to login to your webhost, it is highly urged to change it.
4.) Please note that personal messages may have also been compromised. We don't know for sure if the hacker only downloaded the user tables or not, although that's the only thing he/she is after. If they did: keep in mind that passwords you shared through PM should now be considered vulnerable. It's best not to take the risk and gamble, and just change any password you shared through PM as well.
5.) Charter members, current and past, are encouraged to change ALL passwords if they ever sent any in to us. That would include FTP.
<snip>
The method used by the hacker is that a database is downloaded from another hacked website, the passwords are attempted to be decrypted and if it is successful: they try to login to other websites using that username & password, or try to cross-reference by using password reset links.
Unfortunately for us, a Administrator used the same password elsewhere on another site and access to our site was obtained when the password from the other hacked site was successfully decrypted. As a result, the hacker was able to login here with admin rights.
Hundreds of websites have been hacked lately by using this method, so you are highly encouraged to change your passwords...
... And remember: don't use the same password on multiple sites!
It helps to prevent hacks like this.
|
