[PrivateDonut]

Isn't gauth the same as Authy? 😧

No, their two different two factor auth apps/programs.

[exploit.c]

Since it seems to store accounts locally, it seems like it wouldn't be to safe. I use a password manager currently, just never heard of KeePass.

You're telling me you'd rather like Big Company X host your password database instead of yourself.... Wow.

The smart move is virtual machine dedicated to HF, one dedicated to secure storage, and one dedicated to suspicious file inspection. You eliminate a huge risk, since it's in secure environments, also have 2fa on that and use unique emails.

[YayHar]

I heard that Hackforums database got leaked somewhere?

Yes, I can confirm.

---

No, their two different two factor auth apps/programs.

I know, but don't they do the same thing?

[Rikk‌a]

I heard that Hackforums database got leaked somewhere?

Glad you are caught up to speed, Omniscient already informed us this.

I presume he still does not know how the hell this happened so there's a possibly the site can still be exploited which is why Omniscient has placed a bounty of 1k.

Anyways changing your passwords would be the best idea but who knows it could happen any time while people are searching for exploit they could possibly leak it again, which is probably why Omniscient has not forced password resets on all members yet until the problem is resolved.

[Grammar Rays]

I remember this, and if there's even the slightest there's a dump, then resetting all is for the best.


Just fyi, off-topic to this thread - https://hackforums.net/showthread.php?ti...id50806965
I posted the sticky in my thread. I was wondering why I haven't received the email.

"However, all L33t and Ub3r did get an email about the compromise." I just wanted to clarify this. I did read your sticky though.

[PrivateDonut]

You're telling me you'd rather like Big Company X host your password database instead of yourself.... Wow.

The smart move is virtual machine dedicated to HF, one dedicated to secure storage, and one dedicated to suspicious file inspection. You eliminate a huge risk, since it's in secure environments, also have 2fa on that and use unique emails.

I take account security seriously, and I have never had any of my accounts stolen from me in the years I have been online. So I have no worries about anything. I was simply making a statement.

[YayHar]

I remember this, and if there's even the slightest there's a dump, then resetting all is for the best.


Just fyi, off-topic to this thread - https://hackforums.net/showthread.php?ti...id50806965
I posted the sticky in my thread. I was wondering why I haven't received the email.

"However, all L33t and Ub3r did get an email about the compromise." I just wanted to clarify this. I did read your sticky though.

Check your spam folder, check the filters set on your email.

---

I take account security seriously, and I have never had any of my accounts stolen from me in the years I have been online. So I have no worries about anything. I was simply making a statement.

You can always write your password on paper. I have never had my journal hacked into yet.

[PrivateDonut]

I know, but don't they do the same thing?

Yes they both do the same thing, but authy is easier to manage/recover if you was to ever lose it. And you can access it from any device (mobile/desktop).

---

You can always write your password on paper. I have never had my journal hacked into yet.

Haha yeah, that's very true! I use to do that awhile back(years). But until two years ago I could remember all my passwords, until I decided to start using more secure passwords. But even then my old passwords wasn't weak or anything along those lines, just needed to step up on them.

[Silicon Valley]

A password reset doesn't bother me.

[PrivateDonut]

A global password reset is a good idea most accounts are hacked over old database leaks.

I believe the last database leak was in 2013 or 2014(I believe). If people don't change their password over 3 - 4 years, then I don't know what to say....

[Grammar Rays]

Check your spam folder, check the filters set on your email.

First thing I did.


I was trying to see if it was just me or other members also, I think Omni misread my thread.

[Rikk‌a]

I believe the last database leak was in 2013 or 2014(I believe). If people don't change their password over 3 - 4 years, then I don't know what to say....

There's a new database leak apparently that's what everyone is saying not trying to say this is true to start drama but it seems like it.

[YayHar]

First thing I did.


I was trying to see if it was just me or other members also, I think Omni misread my thread.

Your email gets a lot of spam it seems. Maybe it got buried under all those Viagra advertisements.

---

There's a new database leak apparently that's what everyone is saying not trying to say this is true to start drama but it seems like it.

Personally I doubt it, but it's not impossible.

[Rikk‌a]

First thing I did.


I was trying to see if it was just me or other members also, I think Omni misread my thread.

Apparently it takes long to process through my took a entire day for the email to get received.

[PrivateDonut]

There's a new database leak apparently that's what everyone is saying not trying to say this is true to start drama but it seems like it.

Hmm until it's confirmed, I rather not believe it. But I do believe if there was a database leak, Omni would have already force password resets everyone accounts.