+- Hack Forums (https://hackforums.net)
+-- Forum: Hack Forums Official Information (https://hackforums.net/forumdisplay.php?fid=1)
+--- Forum: Site News (https://hackforums.net/forumdisplay.php?fid=2)
+--- Thread: Past Password Reset (/showthread.php?tid=5259356)
* - Zexo - May 4, 2016
(May 4, 2016 01:00 PM)GlitΝch Wrote: But my dude, I just made a crazy complex password formula I was gonna use for different sites. Now I already need to add some sort of incremental pattern.
Same I made a super duper long one ;(
* - PrivateDonut - May 4, 2016
Maybe just force password changes for users who do not have gauth/authy enabled on their accounts? Either way, it wouldn't really bother me with changing my password if it was required.
* - exploit.c - May 4, 2016
(May 4, 2016 01:15 PM)YayHar Wrote: Try resetting your password with an email, and use the password Hackforums supplies you (jumbled letters).
Everytime you forget the password, just check your email ;)
Until someone pops your email, and doesn't have to reset the password since it's already been reset so it looks more legitimate and not stolen.
* - YayHar - May 4, 2016
(May 4, 2016 01:17 PM)exploit.c Wrote: Until someone pops your email, and doesn't have to reset the password since it's already been reset so it looks more legitimate and not stolen.
That's why you use Gauthy which requires access to your phone.
* - exploit.c - May 4, 2016
(May 4, 2016 01:13 PM)DuguWudi Wrote: Ahh, have to think of a new password for hf now. Let's see...π§
Well, I really dont like keep changing password coz I'll forget them all.
I remember there's a forum that force me to reset password, then each time I need to access the forum, I always request a password reset coz I never remember what new password I set for it.π§
That's why you use a password manager and just forget about it. KeePass is wonderful.
* - PrivateDonut - May 4, 2016
(May 4, 2016 01:18 PM)YayHar Wrote: That's why you use Gauthy which requires access to your phone.
Or use an email that is only used for hackforums; and never share it with anyone. Then you wouldn't have to worry about someone jacking it. π
* - exploit.c - May 4, 2016
(May 4, 2016 01:18 PM)YayHar Wrote: That's why you use Gauthy which requires access to your phone.
Suppose authy is linked to your email, you "lost your phone", you then request reset access to it in authy, login on a new device you now owned the 2FA. Therefore presenting the phone required useless. It wouldn't function like this on guath though
* - PrivateDonut - May 4, 2016
(May 4, 2016 01:18 PM)exploit.c Wrote: That's why you use a password manager and just forget about it. KeePass is wonderful.
Since it seems to store accounts locally, it seems like it wouldn't be to safe. I use a password manager currently, just never heard of KeePass.
* - YayHar - May 4, 2016
(May 4, 2016 01:19 PM)PrivateDonut Wrote: Or use an email that is only used for hackforums; and never share it with anyone. Then you wouldn't have to worry about someone jacking it. π
That is what I have on my account ;3
* - Sevn Alias - May 4, 2016
I heard that Hackforums database got leaked somewhere?
* - YayHar - May 4, 2016
(May 4, 2016 01:20 PM)exploit.c Wrote: Suppose authy is linked to your email, you "lost your phone", you then request reset access to it in authy, login on a new device you now owned the 2FA. Therefore presenting the phone required useless. It wouldn't function like this on guath though
Isn't gauth the same as Authy? π§
* - PrivateDonut - May 4, 2016
(May 4, 2016 01:20 PM)exploit.c Wrote: Suppose authy is linked to your email, you "lost your phone", you then request reset access to it in authy, login on a new device you now owned the 2FA. Therefore presenting the phone required useless. It wouldn't function like this on guath though
Authy always sends a SMS (text message) when you try to access it from a new device. At least it does for me. So without that code, you won't get to far.
* - ClassifiedHex - May 4, 2016
This is scary. Hope this gets resolved quickly
* - Roytoy - May 4, 2016
I'm a bit confused. Do we have to do it if we already did it yesterday?
* - Redwall - May 4, 2016
Sounds needed.
Safety is key.