Be Excellent To Each Other
https://www.beexcellenttoeachother.com/forum/

Passwords and shizz
https://www.beexcellenttoeachother.com/forum/viewtopic.php?f=3&t=11654
Page 1 of 1

Author:  Grim... [ Mon Mar 15, 2021 16:07 ]
Post subject:  Passwords and shizz

Hello, lovely people. Some of you may be seen an ex-Beexer posting their concerns about Beex's security on Twitter today.

First off, I can't find anything that suggests any of you should be worried about the safety of your stored credentials on Beex. Several sock puppets I have only exist on Beex, and their credentials aren't anywhere online that I (or various tools) can find.

However.

Beex is old. It will use old-fashioned encryption, and it runs on an old version of PHP. That makes it substantially less secure than something like, say, MS Teams. However, it also has way less risk than MS Teams, because that has 1,000,000 people trying to hack it, and who the fuck cares about Beex? That's right - no-one.

Still, I encourage you to use good security practises on Beex. If you use your Beex username and password in several locations, you should change your Beex password to something unique. You should change all your passwords to something unique. There are loads of tools that can keep track of them for you.

Stay safe, Beexers!

Author:  DavPaz [ Mon Mar 15, 2021 16:20 ]
Post subject:  Re: Passwords and shizz

BTW, if you type your password inside brackets, Beex automatically censors it. For example...

(**********)

See?

Author:  Satsuma [ Mon Mar 15, 2021 16:23 ]
Post subject:  Re: Passwords and shizz

(passw0rd123)

Dammit!

Author:  Mimi [ Mon Mar 15, 2021 16:28 ]
Post subject:  Re: Passwords and shizz

I’ve just changed mine because I’ve never done it since Craster helped me reset my email/password a decade ago and told me not to forget to change it. I never did. It was cute and memorable so I just never got around to it :D

Author:  myp [ Mon Mar 15, 2021 16:35 ]
Post subject:  Re: Passwords and shizz

Interestingly I changed mine a few months back when I noticed Apple keychain telling me it was a shit, easy-to-guess password. I assume there has been some misinterpretation of this message somewhere…

Author:  Malc [ Mon Mar 15, 2021 16:38 ]
Post subject:  Re: Passwords and shizz

And/Or there is some UK retro gaming argument happening, and people who used to post on here are caught up in it.

Author:  Trooper [ Mon Mar 15, 2021 16:44 ]
Post subject:  Re: Passwords and shizz

myp wrote:
Interestingly I changed mine a few months back when I noticed Apple keychain telling me it was a shit, easy-to-guess password. I assume there has been some misinterpretation of this message somewhere…


Browsers now flag passwords that are in various breach lists, regardless of where they have been used. So if you don't really understand what that is telling you, it would be easy to incorrectly come to the conclusion that Beex had been breached, if the password you used here has shown up in a list somewhere.

Author:  Jem [ Mon Mar 15, 2021 16:54 ]
Post subject:  Re: Passwords and shizz

Oh that's what it was about. I thought it was exciting gossip and drama.

Author:  myp [ Mon Mar 15, 2021 16:55 ]
Post subject:  Re: Passwords and shizz

Trooper wrote:
myp wrote:
Interestingly I changed mine a few months back when I noticed Apple keychain telling me it was a shit, easy-to-guess password. I assume there has been some misinterpretation of this message somewhere…


Browsers now flag passwords that are in various breach lists, regardless of where they have been used. So if you don't really understand what that is telling you, it would be easy to incorrectly come to the conclusion that Beex had been breached, if the password you used here has shown up in a list somewhere.

Yes, I assumed mine had already been breached because it was either shit, easy to guess or often used, rather than a specific account of mine had been hacked. I understood the message.

Author:  Mr Dave [ Mon Mar 15, 2021 17:58 ]
Post subject:  Re: Passwords and shizz

Well, I think the only other account I had which uses the same password was my user account at school.

Which I highly suspect doesn't exist any more.

Author:  myp [ Mon Mar 15, 2021 18:12 ]
Post subject:  Re: Passwords and shizz

I’ve hacked it:

LEAFY-SUBURBAN-GRAMMAR\MR_DAVE
@pp734734ch3r!

Author:  Warhead [ Mon Mar 15, 2021 18:42 ]
Post subject:  Re: Passwords and shizz

Grim... wrote:
...........
Beex is old. It will use old-fashioned encryption, and it runs on an old version of PHP. That makes it substantially less secure than something like, say, MS Teams. However, it also has way less risk than MS Teams, because that has 1,000,000 people trying to hack it, and who the fuck cares about Beex? That's right - no-one.

.................


Don't do yourself down, one or two of us do.

Author:  Kern [ Mon Mar 15, 2021 19:11 ]
Post subject:  Re: Passwords and shizz

Most of us were replaced by bots ages ago.

Author:  GazChap [ Tue Mar 16, 2021 11:07 ]
Post subject:  Re: Passwords and shizz

Trooper wrote:
Browsers now flag passwords that are in various breach lists, regardless of where they have been used. So if you don't really understand what that is telling you, it would be easy to incorrectly come to the conclusion that Beex had been breached, if the password you used here has shown up in a list somewhere.

Yeah, I've already had 3 of my clients email me to tell me their site has been hacked because one of their users saw this warning popup when they logged in.

Fucking mindboggling how many people *still* use absolutely awful passwords.

Author:  myp [ Tue Mar 16, 2021 11:10 ]
Post subject:  Re: Passwords and shizz

Is it mindboggling though, really? We here are, by and large, super users. The average Jo/e really doesn’t know and/or care about password security in the slightest.

Author:  GazChap [ Tue Mar 16, 2021 11:19 ]
Post subject:  Re: Passwords and shizz

myp wrote:
Is it mindboggling though, really? We here are, by and large, super users. The average Jo/e really doesn’t know and/or care about password security in the slightest.

True enough. But they fucking should ;)

Author:  Trooper [ Tue Mar 16, 2021 11:21 ]
Post subject:  Re: Passwords and shizz

Also, my approach to passwords is very much dependant on the place i'm using it.

Work production servers and personal banking, i'm 2FA super passworded up the wazoo.
Beex, less so... Worst case someone logs in on my account and you like them better than me.

Author:  TheVision [ Tue Mar 16, 2021 11:44 ]
Post subject:  Re: Passwords and shizz

To be fair Trooper, you've got quite a few doppelgangers so how would we know?

Author:  Zardoz [ Tue Mar 16, 2021 11:49 ]
Post subject:  Re: Passwords and shizz

I can't even remember my own password so these Russian's interrogating me have no chance!

Author:  Pundabaya [ Tue Mar 16, 2021 12:52 ]
Post subject:  Re: Passwords and shizz

Kern wrote:
Most of us were replaced by bots ages ago.


****Suspicion Detected****
###Deflection Mode Engage###
I'm pretty sure GazChap is a bot.

Author:  Grim... [ Tue Mar 16, 2021 12:55 ]
Post subject:  Re: Passwords and shizz

[vote: gazchap]

Author:  DavPaz [ Tue Mar 16, 2021 12:58 ]
Post subject:  Re: Passwords and shizz

Nonsense [posterName] is a fine upstanding person that I met in [recentMeetUp]. We talked about [fetchBBCNewsRSSLatestHeadline]

Page 1 of 1 All times are UTC [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/