What should we do to make sure we are secure?

[annmarie]

I recieved the email that the server was compromised and data was stolen. i want to know what can i do now that my data is out there how can i secure myself from attacks?

[1715086939]

1715086939

[1715086939]

1715086939

[1715086939]

1715086939

[DannyHamilton]

I recieved the email that the server was compromised and data was stolen. i want to know what can i do now that my data is out there how can i secure myself from attacks?

If you used the same password or secret question anywhere else, change the password and secret question everywhere that you used it.
Be VERY suspicious of any emails that you receive to the email address that you used on your account here.  Phishing attacks are likely.
Be cautious when engaging in any exchange with any member of this forum, as their account may be compromised, and they might not be the individual you think they are.

- snip -

You should assume that the following information about your account was leaked:
- Email address
- Password hash (see below)
- Last-used IP address and registration IP address
- Secret question and a basic (not brute-force-resistant) hash of your secret answer
- Various settings

As such, you should change your password here and anywhere else you used that same password. You should disable your secret question and assume that the attacker now knows your answer to your secret question. You should prepare to receive phishing emails at your forum email address.

- snip -

A few people might have broken avatars now. Just upload your avatar again to fix it.

- snip -

If you changed your password in the short time when the forum was online a little over a day ago, the change didn't stick. You'll have to change it again.

- snip -

[dothebeats]

I recieved the email that the server was compromised and data was stolen. i want to know what can i do now that my data is out there how can i secure myself from attacks?

The first thing you should do is to change your password into something secure and write or store it into some secure place. Next thing is to avoid, as much as possible, clicking some emails into the email that you used in registering into this forum. Next is to be sure that you won't post any of your personal info of yours in the internet; hackers could definitely use it against you in some attempts of attack and/or blackmails. If you used the same password in this forum to another online site, change them so as to minimize the risks of getting those other accounts compromised.

[redsn0w]

I recieved the email that the server was compromised and data was stolen. i want to know what can i do now that my data is out there how can i secure myself from attacks?

The first thing you should do is to change your password into something secure and write or store it into some secure place. Next thing is to avoid, as much as possible, clicking some emails into the email that you used in registering into this forum. Next is to be sure that you won't post any of your personal info of yours in the internet; hackers could definitely use it against you in some attempts of attack and/or blackmails. If you used the same password in this forum to another online site, change them so as to minimize the risks of getting those other accounts compromised.

He should also change all the password (of various accounts on the exchanges, etc...) if he used the same one for all the accounts (a bad practice). You should change them quickly if you want to save your 'internet identity). However is really 'fun' that with a simple attack you can ruin a lot of things... was it really a soc. eng. attack?

[RodeoX]

For those changing their passwords today, you want a password like this: "Jo64@uHd!U7fcNe#@"
And avoid a password like this: "superfly69"

The first one requires a brute force attack rather than a dictionary attack. It will take a long time for an attacker to find the first password and perhaps minuets to find the second.

[dothebeats]

I recieved the email that the server was compromised and data was stolen. i want to know what can i do now that my data is out there how can i secure myself from attacks?

The first thing you should do is to change your password into something secure and write or store it into some secure place. Next thing is to avoid, as much as possible, clicking some emails into the email that you used in registering into this forum. Next is to be sure that you won't post any of your personal info of yours in the internet; hackers could definitely use it against you in some attempts of attack and/or blackmails. If you used the same password in this forum to another online site, change them so as to minimize the risks of getting those other accounts compromised.

He should also change all the password (of various accounts on the exchanges, etc...) if he used the same one for all the accounts (a bad practice). You should change them quickly if you want to save your 'internet identity). However is really 'fun' that with a simple attack you can ruin a lot of things... was it really a soc. eng. attack?

I'm not quite sure whether it was a social engineering attack or not, but theymos stated on twitter that it was one.

https://twitter.com/bitcointalk/status/601556710130515969

--

Yep I forgot to include that you should also change your passwords quickly if you want to make sure that you still have full control over your online accounts.