Hackergate part four - PLEASE READ!

[RebeccaMumsnet]

Previous thread here and original thread here

We will post here throughout the day with updates and info, please do post any questions and we will get to them as soon as possible.

If you need to get in touch off of the boards, please email [email protected], we have a team of people working through the inbox now and will get back to you ASAP but please do bear with us, it's very busy.

There is also a specific thread about passwords here.

Thanks all
MNHQ

I haven't been forced to log out yet...

I have a question. The first time I tried to reset my password using the email link it failed because I didn't know the password had to be 10 characters long with numbers and symbols (mobile site didn't have that information). I requested another email link that didn't arrive so I went on to my pc an reset from there with no problems.

The issue is this morning I've received an email with a link to reset my password again (probably from the second attempt to reset it that failed to send me a link at the time). My question is if I ignore the link will I get locked out in two days when the link expires? I'm not particularly keen to follow it and change my password again since I've just got used to the new one.

Morning Rebecca

I got booted out and reset last night with no probs (ipad safari). Got conf email too so all good.

During all this, before I put in new pw, I was on a page in which MNHQ put links to a random password generator and also some password save app thingies. It looked really useful but now I can't find it again. Thought it might have been the MN welcome page but not there now?

Ah okay thanks New and akkakk

Following

Still no forced reset here on any device - iPad, iPhone or MacBook.
On the advice of MNHQ I tried to go back in and change my password to fit the new criteria but then the site crashed. Am going to go back to RebeccaMumsnet's original advice to me of sitting tight for now. Presumably since my password is no longer the one they broadcast all over twitter I should be ok. My head hurts too much.
MNHQ wishing you luck with this.

Just updated on the old thread but will put it here too.

After spending ages on the phone after being told by the provider it sounds like my phone had been hacked and they don't know if they could fix it they put me through to Apple who fixed it easily. It was a pure coincidence and they said it was highly unlikely they could hack a phone like that.

Hello everyone. I'm back and grateful to be so. Felt like I went round yesterday with a piece of duct tape over my mouth!

What an awful, horrible goddam mess! I'm not talking about MNHQ, whom I feel sorry for.

No, I meant me. I'd been using the wrong email address to re login. Apologies MNHQ . I've just finally sorted it after spending last night trawling the Internet and changing passwords all over the place.

It's made me think my own security on the net.

So, I'm back. I hope everything is in place at HQ and all will be plain sailing and thanks for the team trying to help me when it was an impossible task as I didn't have a clue what I was doing. It's also very scary how forgetful I've gotten.
Onwards and upwards hopefully.

I requested a password reset and did it, but can i confirm that the link to reset came from [email protected] is that right?

I'm a nurse, work all hours of day and night - have far more tragic things to deal with other then hacking - I'm struggling to afford to entertain my DC through the holidays - so no I wouldn't be up for donating food to those who run a million pound plus enterprise.

I don't doubt they are taking it in shifts anyway .

Mine did, mak

Glad to hear it, Zombie.

I know it doesn't feel reassuring when it's your phone that's playing up, but it's really, really difficult to take over a phone and there would be next to no value in doing it to a specific user.

The hacker is clearly annoyed with MNHQ and the users are just collateral damage.

So a positive post

I got logged out last night and did a complex password reset today.

All worked/happened as expected based on the information from MNHQ.

Hope the team are getting some respite - work in IT and been there pulling the all nighters so you have my sympathy

got another password reset today? how many more??!!

the pizza idea is ludicrous

I'm sure they can order a pizza if they want one.

@MotherOfFlagons

I haven't been forced to log out yet...

Hello MotherOfFlagons, and others reporting the same issue - Tech are currently having a look at this. Will report back as soon as I get more info.

Also, JustineMumsnet has posted an update on the 'technical details' thread over here.

Here's a c&p for convenience:

"Morning all,

Here's an update of where we are at. The tech team found the hole which was accessed to capture user login data via phishing and patched it yesterday pm. Then, as you probably know, we forced another password update requiring higher-security passwords last night (once we'd rebutted a further DDoS attack).

We are undergoing full security testing by external experts over the next few days to determine if there are any other weaknesses which might be exploited. We'll update you when that process is completed.

Many thanks for your patience and understanding. The best advice remains to update your password here and any passwords used on other sites that are the same as ones you've used on Mumsnet before yesterday.

We're really sorry for the extra bother any anxiety caused."

I'll pass on the pizza.

Does anyone know the tech email address? I have a link to send them

no I wouldn't be up for donating food to those who run a million pound plus enterprise.

Seconded.

Maybe we should all be changing passwords daily until this low life gets tired, anyway.

Consider yourself slapped down!

woohooo I'm back I was forced out and three password resets failed. was worried I'd he stuck

Good news Justine, thanks for letting us know.