Regarding leaked passwords

[riwu]

http://www.sythe.org/showthread.php?p=15407820
Does this reveal our actual passwords or the hashed form (which is the form the server database should be storing as?)

 

http://www.sythe.org/showthread.php?p=15407820
Does this reveal our actual passwords or the hashed form (which is the form the server database should be storing as?)

The database stores them as hashes but the hashing algorithm used in vbulletin is outdated relative to modern computing power. The criminals who have managed to obtain password hashes from our database (via illegally breaking into our servers) can and probably have reversed the stolen password hashes.

The new software we are moving to has better password hashing and we will consider modifying it to use still better hashing to help prevent a similar occurrence in future.

 

[Moes]

You should enable 2fa

 

[Brendan]

The database stores them as hashes but the hashing algorithm used in vbulletin is outdated relative to modern computing power. The criminals who have managed to obtain password hashes from our database (via illegally breaking into our servers) can and probably have reversed the stolen password hashes.

The new software we are moving to has better password hashing and we will consider modifying it to use still better hashing to help prevent a similar occurrence in future.

If this is the case, can the announcement made by Video be edited to ensure users who use the same Sythe password as other accounts know to change those passwords too?

Surely there's not too many that silly, but just in case.

 

You should enable 2fa

Wow you got two ranks for the security breach? Must be a security legend lol. Glad we got someone watching our back. 2FA the best

 

[Hostblapstat]

My phone is fucked, is there any other way to enable 2fa on a computer or something? Idk

 

My phone is fucked, is there any other way to enable 2fa on a computer or something? Idk

http://www.sythe.org/internet/1655576-sythe-two-factor-authentication-tutorial-pc.html

 

[riwu]

I deactivated my 2FA a few days ago as i was using an autobumper and didn't bother to write extra codes to handle the 2FA.

I want to activate it back now but it's giving me this error when i type in the code (after scanning the barcode):
'Error: The code you entered was not correct. Check you have a valid Google Two Factor authenticator app.'

I have tried multiple times and i'm pretty sure im entering the correct 6-digit code from my phone's google authenticator (updated to the latest version)

Can you please check and see if there's something wrong with my account?

 

I deactivated my 2FA a few days ago as i was using an autobumper and didn't bother to write extra codes to handle the 2FA.

I want to activate it back now but it's giving me this error when i type in the code (after scanning the barcode):
'Error: The code you entered was not correct. Check you have a valid Google Two Factor authenticator app.'

I have tried multiple times and i'm pretty sure im entering the correct 6-digit code from my phone's google authenticator (updated to the latest version)

Can you please check and see if there's something wrong with my account?

Make sure the clock on your device is correct

 

[riwu]

Make sure the clock on your device is correct

I did that and it was giving this:

I ended up reinstalling the app and it finally works!
Now i just need to get my autobumper to handle 2fa (using backup code)...