IMPORTANT: All MOULa Users

News pertaining to the site and the forums, as well as guild discussions and events in the world of Uru.

IMPORTANT: All MOULa Users

Postby Tsar Hoikas » Tue Mar 08, 2022 3:12 pm

FYI. All MOULa users. It has come to my attention that the administrator of the "Minkata" testing shard has been retaining your accounts passwords in plain text. This is a major violation of trust and security. Please be sure to secure all your accounts for banking and other websites by changing their password. I further encourage you to discontinue usage of this clearly insecure platform.
Image
Tsar Hoikas
Councilor of Technical Direction
 
Posts: 2180
Joined: Fri Nov 16, 2007 9:45 pm
Location: South Georgia

Re: IMPORTANT: All MOULa Users

Postby Tsar Hoikas » Tue Mar 08, 2022 4:58 pm

My understanding is that, at this time, account registration is disabled on the affected service. Advice remains to change any affected passwords.
Image
Tsar Hoikas
Councilor of Technical Direction
 
Posts: 2180
Joined: Fri Nov 16, 2007 9:45 pm
Location: South Georgia

Re: IMPORTANT: All MOULa Users

Postby CalumTraveler » Wed Mar 09, 2022 12:16 pm

To preface: i'm not happy that this was happening either.

For further information, it appears that the affected accounts are only those recently made, or having tried to change passwords. Existing accounts before this point that did not request a password reset never had their passwords exposed in this specific way. The main issue really seems to be that the way that account creation was recently setup after an update was not as secure as it should have been- resulting in errors cropping up when accounts were being made or modified through the webservice, resulting in passwords being saved in plaintext in a supposedly temporary error document. As previously mentioned, account creation is shut down for the time being until it's fixed.

As far as I'm aware this should not affect a wide majority of users, but that said: Definitely reset your passwords if you share them across platforms and services, especially if you recently tried to make a Minkata Account or requested a password reset.
CalumTraveler
 
Posts: 33
Joined: Sat Feb 02, 2013 4:45 pm

Re: IMPORTANT: All MOULa Users

Postby CalumTraveler » Thu Mar 10, 2022 11:02 am

The security issue and the errors in account creation have been reported as fixed, and account creation for Minkata is back online. We'll keep eyes on it just incase there's further issues.
CalumTraveler
 
Posts: 33
Joined: Sat Feb 02, 2013 4:45 pm

Re: IMPORTANT: All MOULa Users

Postby Emor D'ni Lap » Fri Apr 22, 2022 7:49 am

Thanks for the update on that, Calum.

For the record, rarified's explanation of the situation is here: https://forums.openuru.org/viewtopic.php?p=10114#p10114
Emor D'ni Lap
 
Posts: 87
Joined: Sun Jan 30, 2011 12:12 pm


Return to Guild News

Who is online

Users browsing this forum: No registered users and 0 guests

cron