Deprecated: Assigning the return value of new by reference is deprecated in /var/www/gamedev/ips_kernel/PEAR/Text/Diff.php on line 383 Deprecated: Assigning the return value of new by reference is deprecated in /var/www/gamedev/ips_kernel/PEAR/Text/Diff.php on line 405 Deprecated: Assigning the return value of new by reference is deprecated in /var/www/gamedev/ips_kernel/PEAR/Text/Diff.php on line 427 Deprecated: Assigning the return value of new by reference is deprecated in /var/www/gamedev/ips_kernel/PEAR/Text/Diff.php on line 449 Deprecated: Assigning the return value of new by reference is deprecated in /var/www/gamedev/ips_kernel/PEAR/Text/Diff/Engine/native.php on line 122 Deprecated: Assigning the return value of new by reference is deprecated in /var/www/gamedev/ips_kernel/PEAR/Text/Diff/Engine/native.php on line 137 Deprecated: Assigning the return value of new by reference is deprecated in /var/www/gamedev/ips_kernel/PEAR/Text/Diff/Engine/native.php on line 139 Deprecated: Assigning the return value of new by reference is deprecated in /var/www/gamedev/ips_kernel/PEAR/Text/Diff/Engine/native.php on line 141 History of post edits

Jump to content

  • Log In with Google      Sign In   
  • Create Account

Interested in a FREE copy of HTML5 game maker Construct 2?

We'll be giving away three Personal Edition licences in next Tuesday's GDNet Direct email newsletter!

Sign up from the right-hand sidebar on our homepage and read Tuesday's newsletter for details!


We're also offering banner ads on our site from just $5! 1. Details HERE. 2. GDNet+ Subscriptions HERE. 3. Ad upload HERE.


Hide differencesHistory of post edits

#ActualHodgman

Posted 06 January 2013 - 08:12 AM

I use 2-factor authentication on my google account -- when I log in on a new computer, it sends a code to my phone to confirm that it's me.
 
I was just sitting at my desk, about to go to bed, when unprompted, I receive a text message with one of these google verification codes. That means that someone has entered my user-name and password into the google login box!
 
Of course, I immediately opened up my account page and set a new password... and sure enough, my "Account activity" info says:
 
Last sign-in countries
Australia, Netherlands
I live in Australia, so someone in the Netherlands has gotten my password!
 
It was a 12 character password, made up of dictionary words and numbers, so it's guessable, but not easily.
 
I try not to use the same log-in details on different services usually... but my StarCraft 2 login details were this email address and this password, and (encrypted) SC2 user-data was stolen recently. When that hack occurred, I did change my SC2 password, but I didn't change my google password... so I guess it's possible that someone decoded the SC2 database and recovered my email/password from it, and tried to use them to log in to google, which would've worked...
 
Besides making sure that I don't have any other services where I use that password (and that email as the username), what else should I be doing? Have there been any other high-profile game database hacks recently that I could point the finger at? Anyone have any recommendations for good malware scanners that I should run to be sure my own PC isn't to blame?

I use 2-factor authentication on my google account -- when I log in on a new computer, it sends a code to my phone to confirm that it's me.
 
I was just sitting at my desk, about to go to bed, when unprompted, I receive a text message with one of these google verification codes. That means that someone has entered my user-name and password into the google login box!
 
Of course, I immediately opened up my account page and set a new password... and sure enough, my "Account activity" info says:
 
Last sign-in countries
Australia, Netherlands
I live in Australia, so someone in the Netherlands has gotten my password!
 
It was a 12 character password, made up of dictionary words and numbers, so it's guessable, but not easily.
 
I try not to use the same log-in details on different services usually... but my StarCraft 2 login details were this email address and this password, and (encrypted) SC2 user-data was stolen recently. When that hack occurred, I did change my SC2 password, but I didn't change my google password... so I guess it's possible that someone decoded the SC2 database and recovered my email/password from it, and tried to use them to log in to google, which would've worked...
 
Besides making sure that I don't have any other services where I use that password (and that email as the username), what else should I be doing? Have there been any other high-profile game database hacks recently that I could point the finger at? Anyone have any recommendations for good malware scanners that I should run to be sure my own PC isn't to blame?

#2Hodgman

Posted 06 January 2013 - 08:02 AM

I use 2-factor authentication on my google account -- when I log in on a new computer, it sends a code to my phone to confirm that it's me.
 
I was just sitting at my desk, about to go to bed, when unprompted, I receive a text message with one of these google verification codes. That means that someone has entered my user-name and password into the google login box!
 
Of course, I immediately opened up my account page and set a new password... and sure enough, my "Account activity" info says:
 
Last sign-in countries
Australia, Netherlands
I live in Australia, so someone in the Netherlands has gotten my password!
 
It was a 12 character password, made up of dictionary words and numbers, so it's guessable, but not easily.
 
I try not to use the same log-in details on different services usually... but my StarCraft 2 login details were this email address and this password, and (encrypted) SC2 user-data was stolen recently. When that hack occurred, I did change my SC2 password, but I didn't change my google password... so I guess it's possible that someone decoded the SC2 database and recovered my email/password from it, and tried to use them to log in to google, which would've worked...
 
Besides making sure that I don't have any other services where I use that password (and that email as the username), what else should I be doing? Have there been any other high-profile game database hacks recently that I could point the finger at? Anyone have any good malware scanners that I should run to be sure my own PC isn't to blame?

II use 2-factor authentication on my google account -- when I log in on a new computer, it sends a code to my phone to confirm that it's me.

 

Ime.
 
I
was just sitting at my desk, about to go to bed, when unprompted, I receive a text message with one of these google verification codes. That means that someone has entered my user-name and password into the google login box!

 

Ofbox!
 
Of
course, I immediately opened up my account page and set a new password... and sure enough, my "Account activity" info says:

[quote]Lastsays:
 

Last sign-in countries

Australia, Netherlands[/quote]Icountries
Australia, Netherlands
I live in Australia, so someone in the Netherlands has gotten my password!
 
Itpassword!
 
It
was a 12 character password, made up of dictionary words and numbers, so it's guessable, but not easily.
 
Ieasily.
 
I
try not to use the same log-in details on different services usually... but my StarCraft 2 login details were this email address and this password, and (encrypted) SC2 user-data was stolen recently. When that hack occurred, I did change my SC2 password, but I didn't change my google password... so I guess it's possible that someone decoded the SC2 database and recovered my email/password from it, and tried to use them to log in to google, which would've worked...
 
Besidesworked...
 
Besides
making sure that I don't have any other services where I use that password (and that email as the username), what else should I be doing? Have there been any other high-profile game database hacks recently that I could point the finger at? Anyone have any good malware scanners that I should run to be sure my own PC isn't to blame?
blame?

#1Hodgman

Posted 06 January 2013 - 08:01 AM

I use 2-factor authentication on my google account -- when I log in on a new computer, it sends a code to my phone to confirm that it's me.

 

I was just sitting at my desk, about to go to bed, when unprompted, I receive a text message with one of these google verification codes. That means that someone has entered my user-name and password into the google login box!

 

Of course, I immediately opened up my account page and set a new password... and sure enough, my "Account activity" info says:

Last sign-in countries

Australia, Netherlands

I live in Australia, so someone in the Netherlands has gotten my password!
 
It was a 12 character password, made up of dictionary words and numbers, so it's guessable, but not easily.
 
I try not to use the same log-in details on different services usually... but my StarCraft 2 login details were this email address and this password, and (encrypted) SC2 user-data was stolen recently. When that hack occurred, I did change my SC2 password, but I didn't change my google password... so I guess it's possible that someone decoded the SC2 database and recovered my email/password from it, and tried to use them to log in to google, which would've worked...
 
Besides making sure that I don't have any other services where I use that password (and that email as the username), what else should I be doing? Have there been any other high-profile game database hacks recently that I could point the finger at? Anyone have any good malware scanners that I should run to be sure my own PC isn't to blame?

PARTNERS