Hackergate part four - PLEASE READ!

PlayingSolitaire - exactly!

Girlwhowearsglasses - not sure that site's model is the best one to choose :) the sad reality is that no software is released without bugs, just not possible, no website can realistically keep up with every potential security issue, hackers have more time / incentive, the whole way in which the internet is designed is itself a massive security flaw - but it was designed for open-ness, not for security... ultimately it is up to each of us to consider how we manage our security...

as an example... I am thinking of a number:

• while it is in my head it is secure
• if I hadn't told you I was thinking of a number it would have been more secure as you would have had no starting point
• now that you know it is a number you can start to apply some stats / logic (number of digits probably 3 or less / certain numbers are more common / etc.)
• even though I haven't told you anyone the acutal number or put it anywhere, it is already less secure
• now if I write it down on my pad next to me, I have reduced security - but you would have to break in to find it - I could write it in code which would help a bit... but still less secure
• now I stick it in a computer database, not connected to the internet, you have to get to the computer to hack it...
• now I connect the computer to the internet - ahh, getting easy now - you can hack me from anywhere in the world - have I maintained security updates / was I aware of a security exploit / etc.
• then I put it on a web page - locked, but still more vulnerable

each step makes it easier and easier to work out that number... I as the user generally control the security by deciding how / where I share information - a much bigger issue than the security of websites...

that adultery website - if people hadn't registered, would their details have been released? - we control our security

This is what we need:

I used a second new password about 9pm yesterday, which just happened to be suitable under new rules. It worked, I've heard nothing from Mumsnet, so am assuming this is now my new password unless I hear further. What a mess.
By the way Jeffrey, Idon't remember seeing men on Mumsnet referred to as rapists and paedophiles - almost any other word you can think of and lots of (sensible) advice to LTB. Why not have a look sometime; I honestly doubt you'd find us anti-men.

Just seeing if this name has worked - sending virtual gin to all at MNHQ. Changing all of my email and passwords on various accounts has been a total PITA. I don't blame MNHQ, I squarely lay the blame with the hacker/s, but have to take responsibility for myself as well. It's brought me up with a jolt to have stronger passwords and check what information I have logged on my account here and elsewhere - not a bad thing.

MNHQ RebeccaMumsnet et al

My wish list of tech stuff not currently available:

In My Account a list of devices currently logged on.

A devices log on history

Remote log off from devices.

As well as security in general if anyone has ever posted about their ILs and then left their DCs with GOs & a logged in iPad you will know the panic/cataclysm potential there.

Wondering what the model set by more erm... Sensitive.... sites like that adultery one and online dating ones do re:this?

very different to organised crime which would not boast about it - but would strip as much cash and value out of accounts as possible...

Exactly - this is just willy waving really. If they were serious they would have fleeced as many people as possible as quickly as possible before anyone noticed.

FuckOffHacker - everyone should have had to create a new password at around 10.30 last night.

except loads of people who didn't but should have!

Why try and take money from mnetters late August? Children are costly little things. Entertainment, holidays, exam results, going off to uni and New uniform. I thought they were loving Fathers. They should know the money would be tight this time of year. Unless...

akkakk - I agree. If they really were into it for money stealing or even just to trace people via PMs etc they would have done this and NOT released the list to all our attention. It is an attack on Mumsnet itself.

This doesn't mean that others (or even them) won't try and hack peoples Paypal using the details that have been obtained and obviously everyone should reset their passwords (and never have the same for more than one site).

The itunes thing could be (1) true - but only one user and only a relatively small amount to show what can be done (2) a coincidence (not related to MN) (3) Something posted by DadSec on here to get people into a tizzy, cause more panic.

98 - my children have made some cookies, but I am afraid they may have spittal, snot etc in them. But I would if I could, because it's good good be nice in this world and I liked your nice thought.

And I think I have been thinking too much about computer stuff as I am starting to think about computer cookies not the chocolate chip ones now!

I think I have about £8 in my current account right now, so if poor Jeffrey is that desperate for the new disney app then he is welcome to splurge that on itunes from me.

Thanks for the reassurance all, I got a bit of a shock was all when was logged in under 2 diff passwords :)

At around 10pm last night my password was rejected, so I've re-set it again this morning, it could be my username but I don't know....

twirly - yes, technically possible, but statistically unlikely... and I am sure that the MNHQ accounts will have been a priority to get fixed :)

to be honest, looking at the lack of issues that have come from this it would seem that embarassment rather than full on trashing is order of the day, so consequences are unlikely to be serious for most... even where reputedly they got into someone's itunes account they spent only £100 - I suspect that the thrill is in 'being the master' / 'taking on the system' showing how clever you are etc. - i.e. the hack is all - very different to organised crime which would not boast about it - but would strip as much cash and value out of accounts as possible...

Sorry for the two messages as i said my ipad is constantly in meltdown mode

I think it says a lot of the overall feel of MN that so many of us are thinking of the tech team etc as the local WI or knitting circle.
I tend to forget that this is actually a huge business and not a tea rooms.

Also - hackergate? Really? The 'gate' suffix is a lazy cliché.

adora its apples new opperating system the latest update is causing some users real problems, i swear they are monitering everything i write as i tried to type this earlier and my screen froze!

adora the latest ios 8.??? (Cant remeber the other digits) has got bugs in it which causes webpages to be re-loaded its very very irritating as i am constantly being logged out of various websites.

Oh well, I've reset it anyway.

It didn't show one.

Just that message in a white box with a X I'm the corner. It wasn't a promenant message and I almost missed it. I'm using my iPhone, if that makes any difference.

HQ, you did prudently buy Cyber Risks Insurance, didn't you?

Adora does it say ridirected or reloaded?

What was the URL address on it Adora?

For those people struggling with passwords, I suggest you use a password manager. I use Dashlane, but there are a number of others out there such as Roboforms and Norton. The password manager will keep track of hundreds of passwords for you & can generate strong passwords for you. The only password you need to remember is the one to your digital password safe.

Just signed in with my new password and a message appeared at the top of the screen

There was a problem with this web page so you have been redirected.

Does that sound right?