[Quad]

It's very important everyone enables 2FA.

I already have 2FA enabled. Should I disable and reenable it to get a new secret?

[Rikk‌a]

I already have 2FA enabled. Should I disable and reenable it to get a new secret?

That's what I'm wondering are the secrets saved on the DB?

[SawCyanic]

I got the mass e-mail you sent out 4 times but, thanks for letting us know about it.

[Regulus]

For some reason I got this:
Number of Unique Country Logins (last 30 days): 1

Although I haven't been outside Sweden anytime, I'm not even logging into HF anywhere except from home.
Could I get this if I've used like a VPN or something and accidentally been trying to access HF?
___

But overall I should be good:

1. Gauth / 2FA Validation - Done
2. Changed Email - Check (For even further safety reasons)
3. Changed Password - Check

[EthanX]

I got the mass e-mail you sent out 4 times but, thanks for letting us know about it.

Was that only for people effected? I never got that.

[SawCyanic]

Was that only for people effected? I never got that.

It says in the OP it was sent to all Ub3r members. Check your spam maybe?

[EthanX]

It says in the OP it was sent to all Ub3r members. Check your spam maybe?

Nope. Checked my email in usercp, It's correct but I only get private message emails. Have not got the emails omni sent out.

[Regulus]

It says in the OP it was sent to all Ub3r members. Check your spam maybe?

For some reason I didn't get that Email, hmm.

[Chaos Theory]

I would be surprised if there was a security compromise on your end.. Guess time will tell.

[EthanX]

For some reason I didn't get that Email, hmm.

Good to hear that I am not alone.

[Jаson]

I haven't got the email yet either.

Kinda scared of enabling 2fa and not being able to login, then losing all the rep I earned.

I'll changed my password to a 60 char hash.

[Juicy]

Good news is I don't ever remember my own password, so how could a hacker?

I have it written down somewhere im sure

[Omniscient]

I already have 2FA enabled. Should I disable and reenable it to get a new secret?

If you have 2FA enabled you should be fine. Which brings up another good point. If indeed we still had a leak they'd be able to disable Gauth or steal the secret key. I'm going to make an assumption (gulp) that we're currently secure. No current accounts from the past year were compromised yet and 2FA prevents theft.

If we're lucky then that's true and we just need to enforce 2FA and rotate passwords. We've had to rotate passwords before. Not that big of a deal really. I may need to be more diligent in the next few days to prevent stolen accounts and help with recoveries but that's just part of my day anyways.

For some reason I got this:
Number of Unique Country Logins (last 30 days): 1

Although I haven't been outside Sweden anytime

Yes, 1 country....Sweden. That's how it should be.

Also for the emails they do not send all at once. I have them to send them in a steady stream. So far 35% have gone out. Just be patient. Once all the Ub3r emails are sent I will be sending to the l33t members. I'll likely not bother with 3P1C since almost all 3P1C are Ub3r or L33t.

[Rikk‌a]

I would be surprised if there was a security compromise on your end.. Guess time will tell.

Doubt Omniscient would of been compromised if the DB leak were to happen because of the fact he has 2FA Enabled.

Unless someone manage to get his Secret key.

[EthanX]

I haven't got the email yet either.

Kinda scared of enabling 2fa and not being able to login, then losing all the rep I earned.

I'll changed my password to a 60 char hash.

There is NO reason you won't be able to enable Gauth. USE AUTHY!
If you do not have a phone, use https://www.authy.com/app/desktop/.

---

Doubt Omniscient would of been compromised if the DB leak were to happen because of the fact he has 2FA Enabled.

Unless someone manage to get his Secret key.

Haha, I don't think that's what he means. He means there was probably a compromise on Omni's forum.