Waffles security alert.

**smcewa11** · 04-08-2009, 03:09 AM

From the site:

***
We believe our database may have been potentially compromised. Although the passwords are strongly encrypted, to be on the safe side, we still suggest all users change their passwords.

Edit: Just a heads up, we plugged the hole that allowed this to happen.
***

**cinephilia** · 04-08-2009, 03:40 AM

Edit 2: It is advisable to change your passkeys - you can now do this yourselves (for a limited time) in your profile.

**redMonster** · 04-08-2009, 03:42 AM

wtf I use the same password on all sites.

**cinephilia** · 04-08-2009, 03:56 AM

Originally Posted by redMonster

wtf I use the same password on all sites.

same here except that i also use them for ebay, hotmail and paypal

**RedRansom** · 04-08-2009, 06:47 AM

I dont know exactly my pass on trackers

**Charger** · 04-08-2009, 07:04 AM

Good I changed my password a while back, else I also use the same password on all sites

**Rigel9** · 04-08-2009, 07:34 AM

I use different random passwords like dfkKDs53-83kKJNzAQa3Fa-2didj on every site, so whatever...

**roger200** · 04-08-2009, 10:22 AM

https://addons.mozilla.org/en-US/firefox/addon/2848

allows me to use more passwords, and is great for re-installations.

**yayyyyyy** · 04-08-2009, 10:44 AM

same password on all sites IS NOT A PROBLEM.

1st: passwords are not encrypted... passwords are HASHED.... (lol@waffles staff talking about encryption...)

2nd: all the sites use different HASH salts.... so even if you got your HASH stolen from one site it cannot be used to login into another site

becouse same password still means different hashes

also lately most sites are allowing login only from specific ips and you need to recreate the cookie if you change the ip

a biggest problem instead is the PASSKEY... the only site I know that wouldn't suffer the passkey problem is GFT (where you need to be either logged in with the ip you want to use, or specify wich ip you want to use to connect to the tracker manually)