Emps-World Forum

Emps-World => Update Notes => Topic started by: Thomy on April 04, 2015, 08:46:18 am

Title: Security Batch #1
Post by: Thomy on April 04, 2015, 08:46:18 am

Hey guys,

Due to the recent website hack, I've decided that we need more security features. As you've probably also already seen, the entire homepage runs under https now. Moreover, I'm changing the hash algorithm that is used in our database to ensure that even hacked passwords will be completely worthless. And that hackers in the future have no way of decrypting 'easy' passwords anymore. I've decided to use 'bcrypt', which is not vulnerable to rainbow attacks (= simple password hacking) and not vulnerable to bruteforcing (guessing until you have the password). The reason for that lies in the complexity of the algorithm, it would take years to bruteforce a password! With this update, the in-game and forum passwords will now also be 100% equal, they are no longer stored as 2 different values.

There will also be a Security Batch #2 in the near future, where I'll make the game client to server connection safer. My plan here is to use RSA for the username and password exchange.

Please note that it's still recommended to change your password here (https://emps-world.net/account#password), if you haven't already done so.

All the best,
Thomy

Title: Re: Security Batch #1
Post by: Edwin on April 04, 2015, 08:48:21 am

Thanks for this security update Thomy!

Title: Re: Security Batch #1
Post by: Keiskelar on April 04, 2015, 08:48:40 am

Awesome thanks!

Title: Re: Security Batch #1
Post by: Crankshaft99 on April 04, 2015, 08:51:27 am

Good work !!!  8) 8) 8) 8)

Title: Re: Security Batch #1
Post by: C4 Nerd on April 04, 2015, 08:51:53 am

Thank you for keeping us safe, Thomy! ;D

Title: Re: Security Batch #1
Post by: Sharkx on April 04, 2015, 08:55:43 am

Cant login on website to change password

Title: Re: Security Batch #1
Post by: Bubblebeam2 on April 04, 2015, 09:09:58 am

Thomy is best police! Thanks.

Title: Re: Security Batch #1
Post by: Il Pk I on April 04, 2015, 09:28:41 am

Thanks once again for keeping us up to date :)

Title: Re: Security Batch #1
Post by: Thomy on April 04, 2015, 09:37:55 am

Quote from: Sharkx on April 04, 2015, 08:55:43 am

Cant login on website to change password

Are you failing at the login page or at changing your password? Mind trying again, I've updated the systems to fix possible bugs you might've had.

Title: Re: Security Batch #1
Post by: Patuorg on April 04, 2015, 09:43:04 am

Good... Make your own internet bank. Hue hue hue

Title: Re: Security Batch #1
Post by: Zudikas95187 on April 04, 2015, 09:53:15 am

thank you for the information thomy.

Title: Re: Security Batch #1
Post by: Sharkx on April 04, 2015, 10:40:48 am

Quote from: Thomy on April 04, 2015, 09:37:55 am

Quote from: Sharkx on April 04, 2015, 08:55:43 am

Cant login on website to change password

Are you failing at the login page or at changing your password? Mind trying again, I've updated the systems to fix possible bugs you might've had.

Everything is fine now. Thanks

Title: Re: Security Batch #1
Post by: Icedrags on April 04, 2015, 10:52:41 am

thank you for the info :)
well done!

Title: Re: Security Batch #1
Post by: Skelon on April 04, 2015, 10:58:58 am

awesome, good work big boss man

Title: Re: Security Batch #1
Post by: Freestuffyay on April 04, 2015, 11:20:15 am

Thank you once again Thomy :)

Title: Re: Security Batch #1
Post by: Cman 8 23 93 on April 04, 2015, 11:21:51 am

I appreciate you taking the time to all of this. Thanks again Thomy!

Title: Re: Security Batch #1
Post by: Avenus on April 04, 2015, 11:55:49 am

That is amazing, goodjob!

Title: Re: Security Batch #1
Post by: 66destroyer3 on April 04, 2015, 12:23:43 pm

thanks for the work!

Title: Re: Security Batch #1
Post by: Charr on April 04, 2015, 12:32:10 pm

Thanks thomy.

Title: Re: Security Batch #1
Post by: Pure Ranged1 on April 04, 2015, 01:38:05 pm

Thanks for keeping us safe.

Title: Re: Security Batch #1
Post by: Ashootsh on April 04, 2015, 01:41:59 pm

My password is kinda hard to guess, and the hacker till now didnt hack my account.

Just wondering If he couldn't hack me do i have to change my password?

Regarding the issue, do i have to change the bank pin also?

Title: Re: Security Batch #1
Post by: Vaughn147523 on April 04, 2015, 02:13:49 pm

Thanks for the upgrades to security.

Title: Re: Security Batch #1
Post by: Hugo Terwiss on April 04, 2015, 02:39:55 pm

thankyou thomy for keeping us safe! :D

Title: Re: Security Batch #1
Post by: The King38 on April 05, 2015, 12:51:17 am

Thanks for the update , but i tought its GE ::)

Title: Re: Security Batch #1
Post by: Dokas5000 on April 05, 2015, 06:38:09 am

Thanks for this update,Thomy :)

Title: Re: Security Batch #1
Post by: Joshiee on April 06, 2015, 07:46:05 am

Great work; thank you!