The Clockwork Mansion

Underground Warehouse => Treasury => Castle Keep => Topic started by: Llewelyn on September 09, 2006, 09:29:58 AM

Title: Second Life security breach
Post by: Llewelyn on September 09, 2006, 09:29:58 AM
For those who may not have heard yet:

http://blog.secondlife.com/?tag=security

From what has been said int he (soon-to-be-closed) SL forums, the database was compromised through the SL wiki, and information that could have been taken includes the RL contact info, e-mail address, encrypted password, and encrypted payment information.  They don't know what exactly was taken at this time.

One of the Lindens said the payment info encryption could not be reversed(it was stated to be hashed in a FAQ e-mail) but in a different post also said no encryption is unbreakable, so your guess is as good as mine right now whether the CC info and/or paypal info is actually out in the wild or not.  They're supposed to be giving more information Monday, but given that they did force a global password reset, and some people had been getting their SL accounts hacked apparently since Sunday, I'm more than a little wary.
Title: Re: Second Life security breach
Post by: Rowne on September 09, 2006, 03:35:31 PM
I tend to keep a close eye on my Paypal history anyway, since I'm not entirely sure whether I trust any online service yet.  Still, thanks for letting us all know here, not everyone is up to date on SL though some of us might've played it in the past (and might just well be planning on playing it again in the future *Sheepish.*).  Such info is good to have.
Title: Re: Second Life security breach
Post by: Blazehawk on September 11, 2006, 01:48:37 AM
Ugh. I was thinking of leaving and this just gives me another reason to.  :[