Curse

Red Locust · Jun 18, 2005, 10:58 PM // 22:58

Is it just me or is the Guild Hall fan website unreachable? I'm getting a connection refused message everytime I try to go on there.

βlitzkrieg · Jun 18, 2005, 11:02 PM // 23:02

Yeah, I think it go hacked or something, and will be down for awhile.

Kula · Jun 19, 2005, 03:46 AM // 03:46

I hope there aren't any members that use the same email and password on TGH as they do to log on their GW account. I've heard of accounts being stolen/hacked through other forums this way, even from members that never downloaded any third party programs.

But even if it's not possible, and TGH is by no means what I would refer to as a "shady" place (plus I've always enjoyed it there), it's better to be safe than sorry, that's what I think.

Weezer_Blue · Jun 20, 2005, 01:56 AM // 01:56

I don't use the same password at TGH and GW, but I use a certain password for almost everything I don't really care about. Free membership = password I'll never forget no matter what. Games such as GW are the only exception.

Inde · Jun 20, 2005, 02:22 PM // 14:22

Quote:

Originally Posted by Kula

I hope there aren't any members that use the same email and password on TGH as they do to log on their GW account. I've heard of accounts being stolen/hacked through other forums this way, even from members that never downloaded any third party programs.

But even if it's not possible, and TGH is by no means what I would refer to as a "shady" place (plus I've always enjoyed it there), it's better to be safe than sorry, that's what I think.

It uses vBulletin 3, which does not use normal md5 password encryption. Its more complicated in such a way that hackers cannot extract your password.

Dreamsmith · Jun 20, 2005, 03:55 PM // 15:55

Yeah, most modern software (if it's reasonably secure) doesn't actually store your password, but instead stores a large hashcode generated from your password. It doesn't know what your password is, but if you give it a password, it can hash that and compare the results. Thus, if someone downloads a system's "password" file, they can't see anyone's password, but they can generate hashcodes for common passwords or dictionary words or such and then see if any of the entries match. As long as your password isn't in the program's dictionary, they can't figure out what it is (on existing computers within a reasonable timeframe).

This is, of course, assuming the programmers of said software aren't completely ignorant of security issues. Alas, there's still the occasional bit of software that actually stores passwords because the coders were not qualified to touch security issues with a 10 meter cattle-prod and just didn't know any better...