Mumsnet website attack warning

Crystal_Green

Hmm well at least I'm not 'on the list'

oliveoyl

They're being hacked again now. No wonder my reset password thing didn't come through half an hour ago.

Crystal_Green

Yes my impression was that it was not over yet

One-Eye

Wed 19-Aug-15 22:12

Our apologies again for the stress and upset of the last week, and in particular the last 24 hours - and thanks for your patience and support in helping us deal with it.

Thanks to everyone who’s raised concerns about the strength of passwords on Mumsnet. We’ve now built new code which will oblige anyone logging in to create a new, complex password that conforms to higher security standards.

In the next hour, we’re going to force all users to be logged out. Then we'll change all users' passwords so they MUST reset their password to log back in. To make absolutely certain that everyone has a new, secure password, you’ll be logged out even if you’ve already changed your password in the last two days.

We’re sorry that this is the second mass password-reset in the space of a couple of days, but now we have code in place to strengthen security, we want to implement it as soon as possible.

Please don’t worry when you’re logged out: it’s MNHQ, not the hacker, behind it.

tgroom57

oliveoyl wrote: »

They're being hacked again now. No wonder my reset password thing didn't come through half an hour ago.

Neither did mine just now.
Given that (according to DMail) 3,000 passwords and (presumably) email addresses have been posted online I think its safe to assume that no accounts will be directing to the correct email address.

Ie. someone with email address and password will have logged in and changed your email account associated with that username (if possible to do on mumsnet).

So you won't get a password reset, and cannot get back into your account.

Update: just asked for a pword reset and got the email within 5 minutes, 2nd go.

Crystal_Green

I've just changed my password again to another long gibberish last pass jobby but if they are hacking into the mums net site the complexity of the individual password is meaningless.

Just make sure it's not one you use anywhere else.

Fortunately Mumsnet is one of my oldest accounts on the internet and had a name and password on it so ancient it's not used anywhere else but tbh I would be hesitant to supply my address details even to claim a prize at the mo.

marialionza

I had a hunch it is from the hackers...just let's see what they say.

Zanzib

I had the Mumsnet email today, and the links were correct. I used the password reset and everything was okay.

They are emphasising the https bit when logging in.

I made up a new password and it's not used elsewhere, and complex, so if there's a problem it won't compromise anything else.

mjm3346

Seems to be an ongoing issue as they have been done over several times since and again this week - apart from not using the same password on their site as you use anywhere else, an e-mail address created just for use on their site will make it easier to spot any duff stuff.

Juzza12

Was just about to post this http://www.itproportal.com/2015/08/26/mumsnet-hacked-and-swatted-again/

Shame we have to hear about it elsewhere.