Security Breach

A Blog Post for GameBanana

Greetings! We are one of the oldest mod sites on the Interwebs. Sign up and maximize your browsing experience.

  • Subscribe: Get notified of new submissions like this.
  • Say Thanks: Show your appreciation by sending tom points.
  • Post: Give tom your thoughts on this Blog.
  • Vote: Help tom win the Monthly Awards.
  • Flag: Alert moderators and warn members of a problem with this Blog.
  • Watch: Get notified when this Blog is updated.
Mascot

Resistance is futile...

Sign up

Already a Bananite? Login

Over the weekend our admins detected some kind of security breach which has affected several thousand accounts. It appears that a small number of IPs had successfully logged into several thousand accounts. Some of these IPs were found to be on IP blacklists. 

We believe that bots were performing brute force login attempts on accounts and eventually gained access to some of them. I don't believe that plain passwords have been compromised as they are encrypted with salts in our member database. 

As a response we have reset these accounts' passwords and implemented several new security measures:

  1. After 5 failed login attempts, you will be blocked from logging in for 60 seconds. An email will also be sent to the account owner and a modlog entry made.
  2. If you log in from an IP that has been blacklisted by dronebl.org, it will be recorded in the modlog.

We have several more security features planned, such as 2-step authentication and irregular location notifications.

Remember to always use strong passwords. If you don't use a password manager, you should! Try keepassx.

Big thanks to mini for detecting the issue.

Posts

Embed

Share banner
Image URL:
HTML embed code:
BB embed code:
Markdown embed code:

Blogger


tom avatar
tom username pic Joined 16y ago
Super Admin
Present
Homepage
8,643 points Ranked 528th
49 medals 11 legendary 9 rare
  • Achieved Super Admin clearance Medal icon
  • 10 years a member Medal icon
  • Thanked 500 submitters Medal icon
  • Submitted 200 Blogs Medal icon
  • Submitted 200 Threads Medal icon
  • Submitted 60 Polls Medal icon
Sign up to access this!
Sign up to access this!
Sign up to access this!
Sign up to access this!

Category

Details

Initiative
None

Stats

Posts
11
Views
298
Date Added
1mo
Date Modified
1mo

Share

  • Share on Reddit
  • Share on Twitter
  • Share on Facebook
  • Share on Google+

More from Submitter

WiPs by Submitter

bcp.crwdcntrl.net tracking pixel