Track this topic | Email this topic | Print this topic

We here at CoN were notified over this past weekend about a potential past intrusion into the CoN database, which may have affected user information, including email addresses and passwords.

Please note that our passwords have never been stored in plaintext, and while there's evidence suggesting that we may have been susceptible to brute force attempts to unmask user passwords, we want to assure you that we are going to do everything we can to safeguard your accounts.

Let us first give our apologies for this happening; it's our belief that any information that was stolen was out of date, though we know that doesn't make this news much better. Nevertheless, we're taking additional steps to further enhance our security measures; yesterday, we rolled out changes in how we securely store passwords, effective immediately for all new users and set to update for older users upon their next login. The new storage method tracks to current best methods and reduces the chances of any passwords being reversible to nearly zero.

If you're already logged in, or once you log in next, we kindly ask you to update your password. For those who haven't logged in within the last two months, we've already reset your password, and you can regain access to your account through our 'forgot password' process. By doing this, you'll be utilizing our new, more robust security and also separating your CoN login information from anywhere else you might have used it online.

If you encounter any issues, have concerns, or questions, please reach out to R51 on Discord, via the forums, or via email for assistance. As we always say, there are web professionals behind the running of this site, and we'll always answer questions about how things work here and even what you can do to keep your accounts secure elsewhere.

It's nearly 2024 and we probably don't need to tell you this, but now's the time to make sure you're not reusing passwords. If your password was unique to CoN, then we still suggest you change it but you don't have much else to worry about. If you have used your CoN password elsewhere, this is still a good time to make a change for the better. We will continue to look out for your account as best we can, and if you meet us halfway, we'll all be in good shape for the future.

Whew!

When I found myself logged out and unable to login via my old password, I was worried for a moment there that my account had been compromised.

I was even more worried when the password recovery e-mails weren't reaching me.

Turns out they were in my spam box.

Thanks for continuing to maintain this site, R51.

This post has been edited by Glenn Magus Harvey on 11th December 2023 15:42

--------------------

Check the "What games are you playing at the moment?" thread for updates on what I've been playing.

You can find me on the Fediverse! I use Mastodon, where I am @[email protected] ( https://sakurajima.moe/@glennmagusharvey )

Admittedly, I had been using the same password since I joined, but I haven't used it anywhere else in a very long time, or anywhere with sensitive info, so (hopefully) no real harm done. Still, thanks for keeping up on things here!

--------------------

Console RPG Cliches

I was originally really confused when I tried to log in. Glad for the extra security.

--------------------

..DDR..Maine..
..Hikaroo-chan no Deviantart..

<Tiddles> And I love how people suggest "Why not call it my great name?????" when their name is clearly the worst thing ever.
<Tiddles> "How about ; Mozilla Xplorer & Mozilla Xpress."
<Tiddles> How about you die in a fire?