QuakeNet Q passes changed

[ShadowGPW]

Since the new #jj2 doesn't like to report QuakeNet news. I just made for you a blunt copy/paste from the Quakenet site:

As you may have noticed, earlier today the password for every Q account was changed. This was due to a suspected leak of some encrypted passwords from the QuakeNet website, shortly beforehand, causing the passwords to be changed as a precautionary measure whilst we investigated.

If you use your Q account password as any other password, we recommend you change these as well, to ensure you are fully secure.

You will be able to request your new password using Q's REQUESTPASSWORD command, as follows:

/msg Q REQUESTPASSWORD your.email@address.here

We would like to assure users that we are working hard to ensure this cannot happen again, and we apologise for any inconvenience caused.

:7

[FQuist]

Huh? #jj2 surely did report this news in-channel and even helped an amount of people work out how to retreive their pass.

[ShadowGPW]

Huh? #jj2 surely did report this news in-channel and even helped an amount of people work out how to retreive their pass.

as in news here ^^

[FQuist]

Well, some might find it useful to post it here. Others might not think it helps a lot to post it here and not just in the channel. *You* always were the JCF #jj2 news guy, wether you come in #jj2 or not. ;P

[ShadowGPW]

*ahum* Back on topic. :P

[Stijn]

->misc?

Anyway, it sucks. I was using an e-mail address that's not active anymore so I need to create a new accout now >8(

[Hazel-rah]

I have 2 nicknames on my email address and it will only send the password for the one I don't use. Anyone know how I can delete that other nick?

[White Rabbit]

I saw this news in the Status window.

[Tubz]

Oh well, I guess I'll change my password, not like I ever both to auth, because I'm automatically authed.

Easier way to change your password
~Type: /msg Q NEWPASS <.old password> <.new password> <.new password>
~Avoid the "<>" and "." when typing that in
~You're done

Erm, to change your password this way, you have to be already authed...

[Trafton]

This is really stupid. QuakeNet should know better. This is an unacceptable leak.

[ShadowGPW]

This is really stupid. QuakeNet should know better. This is an unacceptable leak.

Don't be so extreme negative with human errors...

I prefer that they fix it and let people know about what happend. Then rather keeping it silent , so that "nothing" happend at all. I'm glad they found the leak...

btw people if you cannot find your email adress anymore with your current q account or your email account that was linked with Q isn't valid anymore. Then give me a little private message at channel #[GpW]. Then I will redirect you to some "nicer and helping" QuakeNet IRC oppers to fix yarr account. Because the ones at the channel #feds are buttholes and hardly helping. :)

[Trafton]

Don't be so extreme negative with human errors...

I prefer that they fix it and let people know about what happend. Then rather keeping it silent , so that "nothing" happend at all. I'm glad they found the leak...

btw people if you cannot find your email adress anymore with your current q account or your email account that was linked with Q isn't valid anymore. Then give me a little private message at channel #[GpW]. Then I will redirect you to some "nicer and helping" QuakeNet IRC oppers to fix yarr account. Because the ones at the channel #feds are buttholes and hardly helping. :)
I'm fine with human error, but this is unacceptable. I am glad they announced it, yes, but this could be hundreds of thousands of leaked passwords - passwords used for other purposes, too. As someone in the computer security field, if this was a company I worked with who did this, I would dump them immediately. Period.

They make the error, they should deserve the backlash. It's how it goes.

[Monolith]

Easier way to change your password
~Type: /msg Q NEWPASS <.old password> <.new password> <.new password>
~Avoid the "<>" and "." when typing that in
~You're done

This requires you knowing your current password. The one they already changed it to. So you still have to get your new password by email. Then you can use the method to change your password.

[ShadowGPW]

I'm fine with human error, but this is unacceptable. I am glad they announced it, yes, but this could be hundreds of thousands of leaked passwords - passwords used for other purposes, too. As someone in the computer security field, if this was a company I worked with who did this, I would dump them immediately. Period.

They make the error, they should deserve the backlash. It's how it goes.

then delete any game or anything thats related to the internet now. Loads of programs you use have leaks.

[Tubz]

This requires you knowing your current password. The one they already changed it to. So you still have to get your new password by email. Then you can use the method to change your password.

Like I already said, if you already authed (logged in), then you can use my way.

Trafton, actually what's unacceptable is the amount of netsplits that happen on Quakenet.

[Trafton]

then delete any game or anything thats related to the internet now. Loads of programs you use have leaks.
I do not use any programs that require registration and if I do I do not use a password that I frequently use. I am not familiar with any major game leaks, although I may simply not have heard of them. QuakeNet should know infinitely better. I'm sorry. There's no defending them here - they screwed up, and should admit it. I dislike how they are acting like it is totally unpreventable.

[ShadowGPW]

I do not use any programs that require registration and if I do I do not use a password that I frequently use. I am not familiar with any major game leaks, although I may simply not have heard of them. QuakeNet should know infinitely better. I'm sorry. There's no defending them here - they screwed up, and should admit it. I dislike how they are acting like it is totally unpreventable.

Other major IRC networks have the same problem, it's not only QuakeNet. Bit stupid to judge if you have no idea about the scene.

[Hazel-rah]

I CAN'T AUTH BECAUSE IT SENDS ME THE WRONG PASSWORD.

[Trafton]

Other major IRC networks have the same problem, it's not only QuakeNet. Bit stupid to judge if you have no idea about the scene.
I am aware of the "scene," and while you are exaggerating a bit, you are right. I am just as disappointed in those situations as I am here.

Lax security practices cannot be forgiven because everyone is doing it.

How you can argue that QuakeNet is not to blame for this is beyond me.

[Stijn]

computer SCENE == security errors and leaks and stuff

[ShadowGPW]

computer SCENE == security errors and leaks and stuff

exactly, you can blame Quakenet ofcourse but it happens all the time. Getting mad doesn't solve it at all. I'm glad they found the problem atleast. (though it's still not 100% safe at this point, saw some take-overs at major clan channels)

[Trafton]

exactly, you can blame Quakenet ofcourse but it happens all the time. Getting mad doesn't solve it at all. I'm glad they found the problem atleast. (though it's still not 100% safe at this point, saw some take-overs at major clan channels)
There is no need to explain to me how often this happens. I know how often this happens. It does not happen "all the time." I am not mad, just very disappointed. I am glad they found the problem, and hope they have patched it. However, this is a major security breach.

This conversation is getting circular. I'm not sure why you are defending this. I will stop replying unless my posts sound like they are saying something new.

[Hazel-rah]

Is something wrong with Quakenet now? #jj2 is empty. So is #jazz2online...

[FQuist]

Netsplit possibly.

[White Rabbit]

One netsplit left Fquist, slim and me completely alone at #jj2. Fquist wanted to use his op powers to frighten us, so as a demonstration of what he could do he kicked himself off. Because of netsplit, L wasn't there to op Fquist when he come back. Oops! :p

[Tubz]

Why do people need/have voice in #jj2? What's the point?

[Monolith]

Why do people need/have voice in #jj2? What's the point?
The point of needing/having voices was proven to be uncessary, so they aren't used any more. The only people who do occationally have voices in #jj2 now are the ex-ops, and that's just sort of as a matter of courtesy.

[Tubz]

Courtesy? HAHAHA, ex-ops? More like people who don't feel like authing, to get ops. That's really what the case mostly/always is. It just seems pointless, but It's your people's channel, anyway, that's what I thought it was for.