p>Hackers are able to steal millions of Minecraft passwords

/p>

p>29 April 2016

/p>

p>Hackers have gained access to login information for more than seven million Minecraft users on the site Lifeboat.

/p>

p>Lifeboat lets players run servers for customised, multiplayer maps for the smartphone version of Minecraft.

/p>

p>Evidence suggests that stolen information, including email addresses and passwords is being offered by sites that sell hacker files.

/p>

p>Research suggests that passwords were vulnerable to attack, and attackers could easily work them out.

/p>

p>Minimise damage

/p>

p>The information regarding the breach was shared with an independent security expert Troy Hunt who said he got the list from someone who deals in stolen credentials. Many people had told him the data was available on dark web sites.

/p>

p>Mr. Hunt said the data was stolen in early 2016, but the breach has only just been made public.

/p>

p>Passwords for Lifeboat accounts were washed however, he added, the algorithm used offered little security.

/p>

p>Hashing is a method of encryption that encrypts passwords, making it difficult to read in the event that the password is lost.

/p>

p>He said that a Google search for a hashed passcode will often give the correct plain text value. Popular cracking tools could automate and speed up this process, he said.

/p>

p>"A large portion of these passwords could be reverted to plain text within a short amount of time," he said in a blog post about the breach.

/p>

p>This often lead to other security issues, he said, because many people re-use passwords so the discovery of one password can lead attackers to compromise accounts on other sites. https://strongcraft.org/ </p>

p>Motherboard was supplied with a written statement from Lifeboat saying that it had taken the necessary steps to reduce the damage.

/p>

p>"When this happened in early January we figured the best way to protect our users was to quietly make a password reset, without notifying the hackers that they had time to take action," it told the news site adding that it now used stronger hashing algorithms.

/p>

p>It stated that it had not received any reports of anyone being hurt due to this.

/p>

p>Mr. Hunt was critical about the company's policy of "quietly" forcing the reset of passwords. He claimed that this policy made him "speechless".

/p>

p>He stated that Lifeboat could have been more proactive in notifying users to let them quickly change passwords in the event that they were used on other sites.

/p>

p>"The first thing to be on the mind of every company following an incident like this is: 'How can we minimize the harm to our users?" He added.

/p>

p>Minecraft transforms virtual reality into a reality

/p>

p>28 April 2016

/p>

p>Beautiful People data sold online

/p>

p>26 April 2016

/p>

p>An estate agent is looking for Minecraft builders

/p>

p>30 March 2016

/p>

p>Minecraft to assist AI

/p>

p>14 March 2016

/p>


トップ   編集 凍結 差分 バックアップ 添付 複製 名前変更 リロード   新規 一覧 単語検索 最終更新   ヘルプ   最終更新のRSS
Last-modified: 2022-09-15 (木) 10:47:23 (595d)