IMPORTANT - PASSWORD UPDATE

[davideo]

This is from EAB

Please be aware there appears to be several accounts that have been used to post spam that haven't been used for a while.

If you haven't changed your password for a while please do so to avoid your account being used for spam and then banned.

There is no indication that EAB has been hacked, so it's likely people that have used the same email and password combo elsewhere, but as a precaution we recommend you update your details.

Please note that the same seems to be happening here in the last couple of days

 

[miggymad]

I use Avast's free random password generator and rotate my passwords on a regular basis (especially for all my online banking/Amazon/Ebay purposes).

Random Password Generator

 

[comraider]

Please be aware that this is a widespread problem across the internet because of password manager services being hacked (as well as people reusing the same password on different sites).

I highly recommend everyone to use two-factor auth (2FA) for more security (not just on AmiBay, but for all of your online accounts).

 

[Pinback]

online password services? uff, what a punch in the guts. when i am hammering my head on the keyboard just like right now, i have very secure passwords.

 

[comraider]

online password services? uff, what a punch in the guts. when i am hammering my head on the keyboard just like right now, i have very secure passwords.

Whether you use a password manager or not, using two factor auth should almost be a requirement at this point. It's way too risky to hinge the security of an account on just a password.

 

[Pinback]

i explicitely mentioned _online_ password services and never promoted to use just one password. so I allow myself not to feel addressed.

when i read "old accounts are being used", it is possible that those were created before admins decided to establish strong passwords and didnt push the change to old accounts.

2FA is a valid option to minimize the risk of easy breaches.

 

[comraider]

i explicitely mentioned _online_ password services and never promoted to use just one password. so I allow myself not to feel addressed.

when i read "old accounts are being used", it is possible that those were created before admins decided to establish strong passwords and didnt push the change to old accounts.

2FA is a valid option to minimize the risk of easy breaches.

No worries, my reply wasn't addressed directly to you--just overall advice.

The issue isn't due to weak passwords on AmiBay or vulnerabilities with the XenForo software. Most likely, spammers retrieved large amounts of passwords, and are targeting users who have not logged in recently because that makes it less likely to be noticed by that user.

 

[StrongARM]

2FA is a valid option to minimize the risk of easy breaches.

Exactly that is the case.

 

[davideo]

After recent events I'm giving this thread a bump.