Character
Rules
Events
Map
RP Points
Proplimits
Statistics
Steam Group
Members
Hall of Fame
Team
Bans
Blacklists
Warnings
Changelog
Content
08-08-2015, 07:00 PM
(This post was last modified: 09-01-2022, 01:04 AM by Fearless Community.
Edit Reason: Fixed Encoding
)
My final say on this matter:
It's a default MyBB installation, all passwords are encrypted with MD5 in the database and there have not been any case of an actual hacked account. During the server move, the mailserver wasn't working for a couple of hours, so those who tried resetting their password did not get an e-mail. It was fixed a few hours later. This is not a threat though, just annoying because the mail did not send to the user.
Some members are unable to login, this is not because someone changed a password, but simply because of a bug yet to be known. There's still not a threat found here. Just because the system doesn't detect the password, does not mean anyone else got access to it or changed it.
I will provide IP logs on request if you are concerned anyone might have access your account.
If you press forgot password, an e-mail will be send with a link so you can reset your password.
Solution regarding the case
As my former developers, who are part of another community now, had access to all my files, and probably took all of it with them, I strongly suggest resetting your password to a new one anyway. Although the passwords are encrypted, no risks should be taken. Just to clarify, I'm not suggesting they did, but it is a possibility.
It's a default MyBB installation, all passwords are encrypted with MD5 in the database and there have not been any case of an actual hacked account. During the server move, the mailserver wasn't working for a couple of hours, so those who tried resetting their password did not get an e-mail. It was fixed a few hours later. This is not a threat though, just annoying because the mail did not send to the user.
Some members are unable to login, this is not because someone changed a password, but simply because of a bug yet to be known. There's still not a threat found here. Just because the system doesn't detect the password, does not mean anyone else got access to it or changed it.
I will provide IP logs on request if you are concerned anyone might have access your account.
If you press forgot password, an e-mail will be send with a link so you can reset your password.
Solution regarding the case
As my former developers, who are part of another community now, had access to all my files, and probably took all of it with them, I strongly suggest resetting your password to a new one anyway. Although the passwords are encrypted, no risks should be taken. Just to clarify, I'm not suggesting they did, but it is a possibility.
Make your own dynamic signature by clicking here.