The new password requirement is ridiculous

[Nightmare800]

Like seriously? An upper case, a number and lowercase ten character password isn't enough now? For what fucking reason? What's someone else gonna do, hack my smut forum password? To what end?

Oh yeah, I really need to protect my *checks notes* comment history on a smut site. Come on.

 

[CockBreaker69]

Imagine someone hacks an uploaders account and uploads a compromised game. Just food for thought

 

[Insomnimaniac Games]

For what fucking reason? What's someone else gonna do, hack my smut forum password?

Yes, that's exactly what they'll do and what prompted the change in the first place. Link

 

[whowhawhy]

https://f95zone.to/threads/this-is-...the-next-login-if-you-h.208574/#post-13768268

You don't have to know your password. Practice proper password security and use a password manager, that way you only need to remember 1 strong password and can have a unique password for every website and service.

We use:

• Basic minimum 12 chars length
• Make sure it doesn't contain 'f95/f95zone' etc
• Check it's strong with
  You must be registered to see the links
  which estimates how long it would take a computer to crack the password
• Make sure it's not in a leaked dump with
  You must be registered to see the links
  (before any more people freak out, read
  You must be registered to see the links
  )

The main issue is people reusing weak passwords across multiple services, then when one service gets hacked and the database dumped, the password gets cracked, and then their email/password combo is shared across the internet. Attackers aren't brute forcing accounts here, they're checking known 'valid' email/pass combos.

---

Imagine someone hacks an uploaders account and uploads a compromised game. Just food for thought

it's less about staff accounts and more about old accounts with a history of being human and not malicious putting other users' caution to sleep.

An uploader account wasn't breached, they used multiple hacked regular user accounts with a history of normal posts/no warnings/etc.
(...)
Accounts that appear 'trustworthy' are worth something to attackers. There's a big difference between an exe shared by a 1 post account who registered yesterday vs one shared by a 6 year old account with 2000 posts.

 

[HELIO CESAR]

What's someone else gonna do, hack my smut forum password?

Yeah Bro i Will, matter of fact already did, and It seems you only download gay shota games

 

[Sarcastrophe]

Like seriously? An upper case, a number and lowercase ten character password isn't enough now? For what fucking reason? What's someone else gonna do, hack my smut forum password? To what end?

Oh yeah, I really need to protect my *checks notes* comment history on a smut site. Come on.

Your forum account maybe worthless to you. But to hackers, it's a treasure. They can learn what kind of person you are from your comments, they can see your e-mail and try the same password to read your private e-mails. If they can't get access to your e-mail address, they can send you a phishing e-mail. Use a well known password managers like KeePassXC, Proton Pass or Bitwarden to generate strong passwords and safely store them.

 

[Steuan]