Bitcoin Forum
May 25, 2024, 04:53:29 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: What if I don't change my Password?  (Read 1382 times)
faceplantz (OP)
Newbie
*
Offline Offline

Activity: 27
Merit: 0


View Profile
October 16, 2014, 02:04:22 AM
 #1

Bitcointalk Forum has this on the news:

"Due to a recently-discovered flaw in the TLS and SSL protocols, you may want to change your password, especially if you accessed the forum using Tor."

What will happen if I will not change my password?
BadBear
v2.0
Legendary
*
Offline Offline

Activity: 1652
Merit: 1127



View Profile WWW
October 16, 2014, 05:55:37 AM
 #2

If someone else got it using the vulnerability, they'll change it for you, and good luck getting the account back. Other than that, nothing.

1Kz25jm6pjNTaz8bFezEYUeBYfEtpjuKRG | PGP: B5797C4F

Tired of annoying signature ads? Ad block for signatures
TheButterZone
Legendary
*
Offline Offline

Activity: 3010
Merit: 1031


RIP Mommy


View Profile WWW
October 16, 2014, 06:05:14 AM
 #3

Let's all just change our fucking passwords every day until the forum fucking gets modified to OTP-based authentication a la https://github.com/nanotube/supybot-bitcoin-marketmonitor

Saying that you don't trust someone because of their behavior is completely valid.
haploid23
Legendary
*
Offline Offline

Activity: 812
Merit: 1002



View Profile WWW
October 16, 2014, 06:54:27 AM
 #4

What will happen if I will not change my password?

Then you die.

Vortex20000
Hero Member
*****
Offline Offline

Activity: 504
Merit: 500

sucker got hacked and screwed --Toad


View Profile WWW
October 16, 2014, 07:06:59 AM
 #5

What will happen if I will not change my password?

Then you die.
Or change into a hag.

sgk
Legendary
*
Offline Offline

Activity: 1470
Merit: 1002


!! HODL !!


View Profile
October 16, 2014, 07:10:21 AM
 #6

Bitcointalk Forum has this on the news:

"Due to a recently-discovered flaw in the TLS and SSL protocols, you may want to change your password, especially if you accessed the forum using Tor."

What will happen if I will not change my password?

Somekindabitcoin
Hero Member
*****
Offline Offline

Activity: 518
Merit: 500



View Profile
October 16, 2014, 07:14:58 AM
 #7

If you don't change your password, worst case scenario is if you use the same password for the email you signed up with, your email will be hacked. If you also signed up for different online wallets using the same email, they could simply recover the account, change all the info so you can't get into your email and throw all your bitcoins in a mixer and you'll never see them again.

The best case scenario is that they take your account and you didn't sign a PGP key with your Bitcoin address or haven't referenced an owned bitcoin address and therefore, it would be unrecoverable.

BadBear only recovers if you could sign a message with an address you've previously used before.
Vortex20000
Hero Member
*****
Offline Offline

Activity: 504
Merit: 500

sucker got hacked and screwed --Toad


View Profile WWW
October 16, 2014, 07:20:11 AM
 #8

Bitcointalk Forum has this on the news:

"Due to a recently-discovered flaw in the TLS and SSL protocols, you may want to change your password, especially if you accessed the forum using Tor."

What will happen if I will not change my password?



1Referee
Legendary
*
Offline Offline

Activity: 2170
Merit: 1427


View Profile
October 16, 2014, 10:59:43 AM
 #9

Bitcointalk Forum has this on the news:

"Due to a recently-discovered flaw in the TLS and SSL protocols, you may want to change your password, especially if you accessed the forum using Tor."

What will happen if I will not change my password?

Don't be lazy and just change your password, although I don't think a hacker would waste his time on hijacking a newbie account  Cheesy

Changing password will take you only a minute....
MadGamer
Legendary
*
Offline Offline

Activity: 1568
Merit: 1031


View Profile
October 16, 2014, 06:41:19 PM
 #10

Didn't understand most of that message anyway but when It mentioned Tor ... I just passed  because I don't use that browser , should I change my pass anyways ? Embarrassed
Simon8x
Hero Member
*****
Offline Offline

Activity: 568
Merit: 500



View Profile
October 17, 2014, 08:43:04 AM
 #11

Didn't understand most of that message anyway but when It mentioned Tor ... I just passed  because I don't use that browser , should I change my pass anyways ? Embarrassed

Even if you didn't use Tor, your ISP or proxy server could also steal your password.

Should we consider PIA to be an untrusted proxy, or should be generally be safe with them?
So only "untrustworthy ISP" and TOR users are affected, everyone else safe? I hate changing PW's. More susceptible to forget them.

You'll have to use your own judgement on that. Do you trust that your VPN/ISP didn't use this attack against you to steal your password?

Some things to know:
- It's an active attack, so if your ISP was just recording traffic, this wouldn't help them now.
- If you didn't actually use your password to log in within the last couple of days (ie, not just logging in using "remember me"), then your ISP only could have stolen your password if they'd known about the vulnerability before it was publicly announced.


Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!