New back-end password function, all need to reset passwords! - Page 1

Visual ESP ETA and showcase vid: showthread.php?tid=21154

[Info] New back-end password function, all need to reset passwords!

30-Jan-17, 02:30

Menalix Offline

Admin/Developer

Posts: 5,923
Joined: Jan 2014
Reputation: 177

For those wondering why they need to change passwords, well here is an explanation.

At Hexui we have for long used mybb's default md5 hashing function for hashing passwords, this algoritm is weak against bruteforcing attempts made with tools such as hashcat.
A proper cracking build could properly take down all password combinations in the range of 1-9 characters within a hour.

Being able to crack our hashed passwords would need them to get our database with the passwords first which is quite an impossible task in my eyes.
That doesn't mean it can not happen, and that's why we are changing the hashing function to "bcrypt" to prevent any crack attempts if a database leak ever is going to happen.

OBS: We have to forced all users to log-out.
Please use this page to reset your password: https://hexui.com/forum/member.php?action=lostpw

Regards: Hexui.

30-Jan-17, 02:35

MasterL Offline

Member

Posts: 60
Joined: Jan 2017
Reputation: 2

Thanks for updating, dad Big Grin

30-Jan-17, 02:36

Menalix Offline

Admin/Developer

Posts: 5,923
Joined: Jan 2014
Reputation: 177

(30-Jan-17 02:35)MasterL Wrote: Thanks for updating, dad

Give your thanks to Division, he's the one behind the work Tongue

30-Jan-17, 02:38 (This post was last modified: 30-Jan-17 02:39 by MasterL.)

MasterL Offline

Member

Posts: 60
Joined: Jan 2017
Reputation: 2

(30-Jan-17 02:36)Menalix Wrote:
(30-Jan-17 02:35)MasterL Wrote: Thanks for updating, dad

Give your thanks to Division, he's the one behind the work

Thanks for updating, mum Big Grin

Or should I say: mange tak, kære ven

30-Jan-17, 02:42

Yannick Offline

Retired Staff

Posts: 794
Joined: Mar 2015
Reputation: 26

Nice to have some added security on the forum, thanks for the work Div

30-Jan-17, 04:54

Division Offline

Retired Staff

Posts: 9,175
Joined: Apr 2014
Reputation: 248

(30-Jan-17 02:38)MasterL Wrote:
(30-Jan-17 02:36)Menalix Wrote:
(30-Jan-17 02:35)MasterL Wrote: Thanks for updating, dad

Give your thanks to Division, he's the one behind the work

Thanks for updating, mum

Or should I say: mange tak, kære ven

30-Jan-17, 10:26

Complekz Offline

Retired Staff

Posts: 2,207
Joined: Dec 2014
Reputation: 38

100 character password master race <3

30-Jan-17, 19:56

Wolfie2 Offline

Member

Posts: 9
Joined: Jan 2017
Reputation: 0

I can't login for some reason with my main account...

30-Jan-17, 19:58

Menalix Offline

Admin/Developer

Posts: 5,923
Joined: Jan 2014
Reputation: 177

(30-Jan-17 19:56)Wolfie2 Wrote: I can't login for some reason with my main account...

Read the full news post I wrote here, and you will know what to do.

I will quote the specific text:

Quote:OBS: We have to forced all users to log-out.
Please use this page to reset your password: https://hexui.com/forum/member.php?action=lostpw

31-Jan-17, 01:31

toast_rus3LOST Offline

Member

Posts: 1
Joined: Jan 2017
Reputation: 0

** PRUNED BY ADMIN **

31-Jan-17, 02:14

Division Offline

Retired Staff

Posts: 9,175
Joined: Apr 2014
Reputation: 248

(31-Jan-17 01:31)toast_rus3LOST Wrote: ** PRUNED BY ADMIN **

please make a thread here so we can have a 1on1 convo Smile

https://hexui.com/forum/forumdisplay.php?fid=63

06-Feb-17, 09:50

ROCCAT Offline

Member

Posts: 1
Joined: Jan 2017
Reputation: 0

So do i have to change my password?

06-Feb-17, 17:10

Division Offline

Retired Staff

Posts: 9,175
Joined: Apr 2014
Reputation: 248

(06-Feb-17 09:50)ROCCAT Wrote: So do i have to change my password?

You can "change" it to the same that would be fine Smile

« Next Oldest | Next Newest »

User(s) browsing this thread: 2 Guest(s)