Doomworld has been compromised.

[Man of Doom]

Change your passwords ASAP.

[spineapple tea]

Well shit.

[IrOn7HuB]

It's over.

[Solmyr]

God damnit!

[SFFlowerBoy]

Changed my mail address and acticated two-step-authentication. Hope thats enough. How the hell did this happen?

[Gez]

I blame @Ralphjis.

Edited October 13, 2022 by Gez

[Kinsie]

Passwords are encrypted, so the odds of them being cracked are pretty damn low, and there's no payment info or whatever attached to the accounts because, well, free site, so you shouldn't freak out too much.

In any case, though a little erring on the side of caution and common sense can't hurt: Give your password a quick change to something lengthy, complicated and not used on any other sites. And if you were dumb enough to use the same password on multiple sites, might as well change those too. Preferably to something unique per-site.

[mrthejoshmon]

Deep-fucking-joy.

 

It's not like this place has had a joyous history of batshit lunatics that will use this undoubtedly for something fun.

 

Hope you weren't sharing your forum password with your email, God speed.

[A Nobody]

That's a good reason to delete my account then.

[Herr Dethnout]

IDK what they will got for my acc besides my email and my birth date (if I not put a fake one heh). Hacking a forum that doesn't have really much info to steal is like a big ._.XD moment

whatever, if I start writing random NSFW shit, you know why. 

 

Spoiler

hehe

 

[Mr Masker]

The moral of the story is, don't share passwords with all of your accounts. Only recently in my life have I realized the importance of this stuff and stopped being lazy about it.

 

I appreciate all the doom discords and this post that are spreading this news around.

[Altazimuth]

That thread title is comically alarmist. Encrypted passwords and such have been leaked, yes, but that doesn't mean everybody is instantly pwned, and to use such inflammatory language isn't going to achieve anything except for making people panic when they don't need to.

It is sensible to change your password now and exercise caution, but this is not the end of the world, nor Doomworld.

[Somniac]

Upon trying to enable 2FA:

 

Quote

We are experiencing some temporary issues with our verification system and could not verify your account. Please wait a moment and try again.

  

 

Any relation, or is this just a glitch?

[Mr Masker]

2 minutes ago, VisionThing said:

Upon trying to enable 2FA:

 

  

 

Any relation, or is this just a glitch?

I was able to enable google auth just fine.

[Quasar]

I'd like to note that changing your pwd or other data right now doesn't do any good if the exploit hasn't been fixed on the server. It could just be exfiltrated again using the same method.

Edited October 13, 2022 by Quasar

[aRottenKomquat]

This is why I use KeePass. Every site/system has a different password that's a huge number of autogenerated jibberish letters.

[A Nobody]

I changed my password.

 

There, password has been changed.

Edited October 13, 2022 by A Nobody

[IrOn7HuB]

What are we going to do Doombros?

[SFFlowerBoy]

 

Just now, IrOn7HuB said:

What are we going to do Doombros?

Die chuckles

[Sonikkumania]

1 minute ago, IrOn7HuB said:

What are we going to do Doombros?

Get drunk.

[T-117]

I hope only password hashes were in the database.

[Mr Masker]

1 minute ago, IrOn7HuB said:

What are we going to do Doombros?

nothing

[Alaux]

What if I signed up using a Google account? I can only change my Display Name and Email Address in Account Settings > Overview, probably because of that. Could the password of the Google account have been compromised?

[SFFlowerBoy]

Just now, Sonikkumania said:

Get drunk.

I like your words magic man

[Herr Dethnout]

15 hours ago, IrOn7HuB said:

What are we going to do Doombros?

Expecting to be banned by: "Offensive material"

 

Spoiler

hehe

 

[HeatedChocolate]

Doomworld has survived this long, I doubt something like this will topple it.

[SFFlowerBoy]

3 minutes ago, Alaux said:

What if I signed up using a Google account? I can only change my Display Name and Email Address in Account Settings > Overview, probably because of that. Could the password of the Google account have been compromised?

If the passwords are encrypted they can not do much if I understood that correctly. Still you can activate 2 factor authentication, so you have to type in a code from your cell phone before you are logged in.

Edited October 13, 2022 by SFFlowerBoy

[A Nobody]

Wait, what about users that use Steam?

[taufan99]

4 minutes ago, IrOn7HuB said:

What are we going to do Doombros?

Get back to Dooming.

What, we've been doing this for years, no point in asking! 😛

[gayzad]

im shitting and pissing oh my god