Important Notice - Security Breach

[2momo123]

Thanks for the info, may I ask if the passwords are hashed and/or salted?

 

[Unforgiven]

both, the admin posted about it earlier in the thread somewhere.

 

[dstuttgen]

I changed my password yesterday. This morning I had 37 failed attempts at log-on and it says it is coming from my IP. What give?

Cheers, Dan

 

[Unforgiven]

I changed my password yesterday. This morning I had 37 failed attempts at log-on and it says it is coming from my IP. What give?

Cheers, Dan

You need to reset the password on any apps that access the forums (Tapatalk, Forum Runner, official Phandroid app) as they will continue pinging the site to check for any push notifictions. The same thing happened to me.

 

[dstuttgen]

Yup, figured that out after I posted. I needed to re-log in on my galaxy S. All better now. Thanks for the shout-back!

Cheers, Dan

 

[76ford90lx]

I do think a mass email would have been a good idea. Sometimes I dont have the time to log on for days or even a week or more.

Besides that great job on cleaning up the mess guys

 

[Lks Lks]

I also have some issue before.for a couple of a minute I logout my profile,l found some one already login with a name don't remember the name.then I logout his profile.its seems very strange.

but my profile is always secure because of good great amazing security and great people hard work to secure Android forum thanks a lot..

 

[Unforgiven]

I also have some issue before.for a couple of a minute I logout my profile,l found some one already login with a name don't remember the name.then I logout his profile.its seems very strange.

This is a known issue i believe. I don't think you are logged in as someone else, just their name is displayed.

 

[Lks Lks]

This is a known issue i believe. I don't think you are logged in as someone else, just their name is displayed.

ya may be just their name displayed.

 

[JosephHopkins]

Good job guys.. fast work!!

 

[joey3002]

How can I delete my account?
thanks

 

[Unforgiven]

PM Phases, but can I ask why?

 

[joey3002]

PM Phases, but can I ask why?

1. I dont use the site..
2. One less site to worry about..

I think its time I start cleaning up the sites I am a member of. Nothing against the site here.. Just if I do not use a site, why continue to be a member.

 

[Unforgiven]

1. I dont use the site..
2. One less site to worry about..

I think its time I start cleaning up the sites I am a member of. Nothing against the site here.. Just if I do not use a site, why continue to be a member.

Fair enough. While I left my account nearly dormant for 18 months, when I did have a need it was nice to have it still around. I wish you luck in the future and would hate to see you go.

 

[dautley]

To the Rob, Phases, and staff of Phandroid (Android Forums),
Good job in being so forthcoming with information as soon as it was discovered the site had been attacked, allowing your members to change their passwords and minimize any potential damage to ourselves both here and any other site where we might use the same user name/password combination.
With that in mind I would just like to remind others users who may be upset that their info MAY have been accessed that many attacks on Government, Military, Financial, and Privet sites (that we may never hear about) take place every day. Examples of this are China was able to access DoD servers @ Los Alamos and steal advanced nuclear warhead designs, the cyber-attacks on Iran, and it seems almost monthly we here about some credit card progressing company being hit months after the fact.
This is the nature of the internet and there is nothing a website or company can do to prevent an attack from happening in the first place.
What they can do is invest in good firewalls and monitoring software so they know when such attacks occur and notify users so they can take any actions we need to. This is exactly what AndroidForums/Neverstill Media did, so to all the staff involved, Thank You again!

 

[geeknik]

Eh, let 'em have my password. Thanks to LastPass, it was a randomly generated password not in use on any other of my accounts. I've updated it with another randomly generated password unique to this account. =)

 

[CuBz]

I had an email saying someone had tried accessing my account, but from my IP. My IP changes every few hours, so it seems very very fishy.

 

[Unforgiven]

I had an email saying someone had tried accessing my account, but from my IP. My IP changes every few hours, so it seems very very fishy.

You need to reset your password in any app on your devices that connects to Android Forums (Tapatalk, Forum Runner, or the AF app itself) as they will try and connect to the site for push notifications.

 

[droidsix]

Thanks to All... I am very impressed with your speed and professionalism.

I have done what I need to, and have no concerns. Thanks Again

 

[CuBz]

You need to reset your password in any app on your devices that connects to Android Forums (Tapatalk, Forum Runner, or the AF app itself) as they will try and connect to the site for push notifications.

Ah yes, the Phandroid app... silly me :stupid:

P.S. Does this forum support Tapatalk now?

 

[Unforgiven]

Ah yes, the Phandroid app... silly me :stupid:

No worries, I did the same exact thing.

 

[PyroSporker]

You need to reset your password in any app on your devices that connects to Android Forums (Tapatalk, Forum Runner, or the AF app itself) as they will try and connect to the site for push notifications.

This ought to be added to the first post in red so it doesn't have to be re-posted as many times.

 

[Unforgiven]

This ought to be added to the first post in red so it doesn't have to be re-posted as many times.

I've already asked for that.

 

[Kaldek]

I'm interested in whether the password hashes were salted. I'll feel better knowing they were salted.

 

[TVictory]

I'm interested in whether the password hashes were salted. I'll feel better knowing they were salted.

Each user has his/her own unique salt.