MSE News: Security warning for web forum users (MSE unaffected)

mynewaccount

spud17 wrote: »

Is this in any way connected to posts, by myself and others where unique email addresses were suddenly spammed?

Yes, I was rather surprised by the tone of this announcement, given that I registered on this board (not on this username) in December 2007, using a unique email address not used *anywhere* else, and while in the end I didn't actually activate the forum account (and therefore did not post), the email address I had entered began attracting spam (initially from a Russian dating site, as I remember) about 18 months later.

Something of a coincidence, to say the least. Fair enough, we know that spammers do sometimes just make up email addresses and try them on spec, but to hit the exact same 11-character sequence (@my personal domain dot blah dot blah..) which I used on this forum is pretty good luck in anyone's book.

anewman

Must also remember sadly many people use the same password and email for different sites. This means another site (possibly a bank one or paypal etc) could be accessed. There is a free secure utility that can be used on any computer operating system which allows you to keep track of all the different passwords you use if you're the forgetful type. It's called Keepass and is available at http://keepass.info/download.html there's also a portable version you can use on a usb memory stick. It works by using one password to encrypt all the others and can even automatically generate highly secure passwords.

GentleGiant_2

Hardly runs the 'majority of forums' as the article implies.

Many Vbulletin users have moved over to IPB given the problems with VB4 - http://www.invisionpower.com

This was a file left in by the company during testing.