if your mn log in is one you only use for Mn - do you need to change?

[Legologgo]

pliz

You need to reset your password, it's up to you if you use the same one as before or change it but you are opening up the risk of your account being accessed for the data that has been taken.

Just change it, stick a 1 or a ! At the end it's no hardship really is it?

Yes, because MN have reset all passwords.

If you are logged in, you can stay logged in. But if you want to log on from a different device, log back in if you log out, or do anything with your account details that requires password conformation, then you need to change.

I suppose there's nothing to stop you reusing your current password if you want to. If it's unique to MN and there is nothing a hacker controlling your account could do that would bother you, then it might not be as insane as it first sounds.

what data?
I n/c a lot

The heart bleed thing access mns servers and took all log details. That's why they have revoked all passwords a nd need us to reset.

Have you read the main thread?

Unless you are OK with the prospect of a hacker being able to see all your NCs, and perhaps expose them by posting on MN pretending to be you, you really need to choose a different password.

Hi Lego,

Even if you only use your password for Mumsnet you'll still have to reset it as we reset passwords across the whole site.

It would be advisable to pick a different password to protect yourself from the possibility of being hacked in the future.

Who else has sent out msgs about Heartbleed? I think MN was ahead of the curve this time in getting us to change quickly (BRAVO). I've got to change passwords at Surveymonkey & Prezi, too, and that's just my work email address.

Difficult to say because I changed many passwords anyway - so if the systems were reasonably sophisticated, they'd clock that and not email me.

I've noticed, though, that Paypal (who were apparently not themselves affected) have just hammered out a change to the user terms and conditions covering (among other things) responsibility for data used by third parties - so I would guess that there's a lot of scrambling around behind the scenes in many firms.

Difficult one for them to call, reputationally - admit you were vulnerable and have fixed it or try to hold the line but run around like disturbed ants behind it? I find it hard to believe that only MN and some Canadian tax authority (?) were the only ones potentially affected.

All in all, I think Mumsnet took the right approach.