TSR security breach - what happened and what we're doing

Is this particularly relevant to the security breach though?

I must say this but it gets rather confusing having so many different passwords

Fair point.


TSR has no obligation to protect against stupidity. Get a grip.

'We make it difficult for people to get access to the admin control panels'

Basically they will have limited who has access to the Admin Control Panel.

Changing your password again could just mean that the attacker was able to take multiple database dumps as opposed to them being able to edit the server side files though.

It means that high level access to the more sensitive parts of the site, like the admin control panel have been further restricted.

I don't the ins and outs, but it happened last time there was a security breach. Someone got hold of a password and accessed this site

The stupidity is the person revealing it so the sit can get hacked.

Don't know why hackers need to be hacking TSR during Exam period. We're under enough stress already.

I'm pretty sure there are more ways of getting hold of a password besides going to someone and asking them for it.

I was on about the previous incident

A bit confused why we have to change our passwords for all our other things again if we already changed it yesterday night..I'm running out of passwords that I can remember lool

Even last time, was it confirmed that it is a privileged user divulging their password which caused the breach.

A bit confused why we have to change our passwords for all our other things again if we already changed it yesterday night..I'm running out of passwords that I can remember lool

Even last time, was it confirmed that it is a privileged user divulging their password which caused the breach.

I assume because when you changed it last night the hacker may still have been on the system.

Wat. Where? Must have missed this...

I doubt that. Where was this said?

so someone up there told someone else their password?

The hacker PM'd me saying

"Lets Skype? "

We then continued to chat via private messaging, but I don't think he actually accessed anybody's Skype account, guessing that's just crossed wires!

I have a post on creating unique but memorable passwords here.

This is because the breach was only resolved recently so any password changes before that could still have been compromised.

During the last security breach, then they said 'They accessed the site through a compromised privileged user account.'. Morgsie said 'The stupidity is the person revealing it so the sit can get hacked. ' in relation to last time - I am saying I am not sure a compromised account necessarily means someone revealing their password.

The hacker has a affection for u