Second Life security breach

Started by Llewelyn, September 09, 2006, 09:29:58 AM

Previous topic - Next topic

Llewelyn

For those who may not have heard yet:

http://blog.secondlife.com/?tag=security

From what has been said int he (soon-to-be-closed) SL forums, the database was compromised through the SL wiki, and information that could have been taken includes the RL contact info, e-mail address, encrypted password, and encrypted payment information.  They don't know what exactly was taken at this time.

One of the Lindens said the payment info encryption could not be reversed(it was stated to be hashed in a FAQ e-mail) but in a different post also said no encryption is unbreakable, so your guess is as good as mine right now whether the CC info and/or paypal info is actually out in the wild or not.  They're supposed to be giving more information Monday, but given that they did force a global password reset, and some people had been getting their SL accounts hacked apparently since Sunday, I'm more than a little wary.

Rowne

I tend to keep a close eye on my Paypal history anyway, since I'm not entirely sure whether I trust any online service yet.  Still, thanks for letting us all know here, not everyone is up to date on SL though some of us might've played it in the past (and might just well be planning on playing it again in the future *Sheepish.*).  Such info is good to have.

Blazehawk

Ugh. I was thinking of leaving and this just gives me another reason to.  :[