Quantcast
Jump to content
Search In
  • More options...
Find results that contain...
Find results in...
    1. Welcome to GTAForums!   (85,746 visits to this link)

    2. News

    1. GTA Online

      1. Find Lobbies & Players
      2. Guides & Strategies
      3. Vehicles
      4. Content Creator
      5. Help & Support
    2. Crews

      1. Events
      2. Recruitment
    1. Grand Theft Auto Series

    2. GTA Next

    3. GTA V

      1. PC
      2. Guides & Strategies
      3. Help & Support
    4. GTA IV

      1. Episodes from Liberty City
      2. Multiplayer
      3. Guides & Strategies
      4. Help & Support
      5. GTA Mods
    5. GTA Chinatown Wars

    6. GTA Vice City Stories

    7. GTA Liberty City Stories

    8. GTA San Andreas

      1. Guides & Strategies
      2. Help & Support
      3. GTA Mods
    9. GTA Vice City

      1. Guides & Strategies
      2. Help & Support
      3. GTA Mods
    10. GTA III

      1. Guides & Strategies
      2. Help & Support
      3. GTA Mods
    11. Top Down Games

      1. GTA Advance
      2. GTA 2
      3. GTA
    12. Wiki

      1. Merchandising
    1. GTA Modding

      1. GTA V
      2. GTA IV
      3. GTA III, VC & SA
      4. Tutorials
    2. Mod Showroom

      1. Scripts & Plugins
      2. Maps
      3. Total Conversions
      4. Vehicles
      5. Textures
      6. Characters
      7. Tools
      8. Other
      9. Workshop
    3. Featured Mods

      1. DYOM
      2. OpenIV
      3. GTA: Underground
      4. GTA: Liberty City
      5. GTA: State of Liberty
    1. Red Dead Redemption 2

    2. Red Dead Redemption

    3. Rockstar Games

    1. Off-Topic

      1. General Chat
      2. Gaming
      3. Technology
      4. Programming
      5. Movies & TV
      6. Music
      7. Sports
      8. Vehicles
    2. Expression

      1. Graphics / Visual Arts
      2. GFX Requests & Tutorials
      3. Writers' Discussion
      4. Debates & Discussion
    1. Forum Support

    2. Site Suggestions

  • 0
Sign in to follow this  
kringled

PSA: recommended you change password for GTAForums and others

Question

kringled

All: There was recently an incident which may have compromised passwords from multiple sites and applications:

 

https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/

 

Here is an incomplete list of sites being used, which includes this one:

https://github.com/pirate/sites-using-cloudflare

Discord is also apparently affected.

 

Mods: Please feel free to move this to someplace more appropriate if it will be seen.

Share this post


Link to post
Share on other sites

9 answers to this question

Recommended Posts

  • 0
Chrome Toyota Prius

I should stop using that password.

Share this post


Link to post
Share on other sites
  • 0
DarkSavageDeathlyCloud

So....time to change the password ?

Share this post


Link to post
Share on other sites
  • 0
sivispacem

All

 

I raised this in the staff forum this morning.

 

The risk of information leakage is very low, though there have been a few examples of sensitive data being cached by Google and other services these appear to be the exception rather than the norm.

 

However for the sake of safety I would recommend people log out of any current sessions involving potentially affected services- including GTAForums and Discord- deleted cookies and then logs back into generate a new authentication token. This will mitigate the most significant possible risk, which is that user sessions could be hijacked.

 

If you'd feel happier also resetting your password I wouldn't discourage it, but currently don't think it is necessary.

 

-

 

Myself and a few others have also noticed that providers such as Google have been resetting tokens for user accounts associated with services using CloudFlare. This is not a password reset, simply an expiring of an existing auth token and a forcing of users to log back in. The advice above mirrors what other providers appear to have been doing in response to this bug disclosure.

 

If anyone wants more information or to discuss anything they suspect may be related, feel free to post in this thread or send me a PM.

Share this post


Link to post
Share on other sites
  • 0
PNutterSammich

I've had password reset requests and suggestions that I reset my password from Google, steam, PayPal and psn to name a few in the past 36 hours.

 

Sh*ts gettin real, yo.

Share this post


Link to post
Share on other sites
  • 0
Shaytan

For any services that allow so such as Google and Steam, I recommend activating login permissions (from a mobile app or SMS). Even if the password gets compromised, there's always an extra layer of security.

Share this post


Link to post
Share on other sites
  • 0
Goldn-Bayse

I was wondering is this in anyway related to my phone asking me to log back in with my google account?

Share this post


Link to post
Share on other sites
  • 0
sivispacem

I was wondering is this in anyway related to my phone asking me to log back in with my google account?

Yes, it's likely related, but most probably not to the forum. Google expired the session tokens of numerous people including myself who use more prominent CloudFlare services.

Share this post


Link to post
Share on other sites
  • 0
Blaze

GTAF 2FA when

Share this post


Link to post
Share on other sites
  • 0
Kirsty

From Tank to ensure everyone is aware:

 

 

I can confirm that - according to CloudFlare - we were not affected by this issue.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×

Important Information

By using GTAForums.com, you agree to our Terms of Use and Privacy Policy.