Enjoy raiding and pvp in highly customizable and well organized groups, but hate the setup of Factions? Then check out my upcoming server containing multiple custom plugins and opearting on Minecraft version 1.8!
Uh, its not that urgent... this only means they found heartbleed in OpenSSL. It doesn't mean any hackers have found out how to exploit the heartbleed bug. Besides, what hacker, that knows anything about OpenSSL I might add, is going to want to hack another persons Minecraft account? Even if someone does, you can easily recover your account with just your email.
Well stated. They would more than likely target a website that they can use your account to generate profit for themselves, such as PayPal or Amazon.
Rollback Post to RevisionRollBack
Enjoy raiding and pvp in highly customizable and well organized groups, but hate the setup of Factions? Then check out my upcoming server containing multiple custom plugins and opearting on Minecraft version 1.8!
At first I thought that this was another April Fools prank but this is real. I have a migrated account so I tried to change my password on Mojang.com but it wouldn't let me log in. Hmm...seems a bit suspicious to me really. Either that or too many people are trying to change their passwords. :S
Edit: I did manage to change my Mojang account password in the end, but still couldn't log in from the homepage for some reason.
If you all want to possibly prevent the exploit just to be safe, you can always go pick up MalwareBytes Anti-Exploit for free from the MalwareBytes website, works great for me.
Otherwise I've been needing to make my password stronger anyhow...
Researchers also found an exploit in TLS (web encryption), so I would change anything TLS you have back to SSL for now, until the exploit is fixed. The exploit lets people write data directly to your RAM outside the allowed buffer. Learned this today in my Computer Security and Ethics class this morning.
This doesn't make any sense at all. If Mojang was not hacked, and the problem has been fixed then why in the world would we need to change our passwords?
Either you were hacked and we should change them, or everything is A ok and we don't need too. Personally, it would seem to me that there are some clear discrepancies in your story.
Up above you say, "As a precaution, it has been recommended that you update your Minecraft password, just to be sure." However, you end the very same post by saying, "Regardless of whether you have or have not migrated, it is crucial to change your password."
If it is only recommended that we change our passwords then why is it so crucial?
I would like to know what actually happened and why you are pushing us so hard to change our passwords? Personally, I think your OpenSSL was hacked and you just don't want to say it for fear you may lose some customers.
I'm not changing my password until they tell us what exactly happened!
The Meaning of Life, the Universe, and Everything.
Join Date:
2/17/2014
Posts:
59
Location:
My bedroom
Minecraft:
MrWolfboy1
Member Details
What is a Mojang Acount???? i have a minecraft account, but how do i change my password?? by the way i was trying to play on some servers but it says: Failed to login:Invalid session (try restarting your game). does this mean ived been hacked?!?!?!?!?
If you all want to possibly prevent the exploit just to be safe, you can always go pick up MalwareBytes Anti-Exploit for free from the MalwareBytes website, works great for me.
Otherwise I've been needing to make my password stronger anyhow...
The exploit is not done on you, it is done on the server. Anti-virus and any other related software would have no effect on it. Besides, how do you think anti-virus software works? Someone, somewhere in the world has to get a virus at least once for it to even be reported to the anti-virus companies. And if they dont report it, others get the virus. In this case, it isnt a virus, it is an exploit, but it would still be useless.
Researchers also found an exploit in TLS (web encryption), so I would change anything TLS you have back to SSL for now, until the exploit is fixed. The exploit lets people write data directly to your RAM outside the allowed buffer. Learned this today in my Computer Security and Ethics class this morning.
How do I change my passwords if I no longer use my email (username), I no longer have that email no longer? I really need help because when I try to log in it will not let me in. Anyone got any ideas?
Wow-this is really scary. Does any-one know if this was deliberate or just an accident? For those who don't know 'Heartbleed' was a massive gap in the system that effectively allows users to trick the system into revealing data in the systems memory. Things such as credit card details, email accounts or usernames and passwords.
I'm not changing my password until they tell us what exactly happened!
They DID say exactly what happened. An exploit was found in SSL. Any hacker with the technical know-how could get through the encryption, and steal passwords, usernames, bank account information, etc. using this exploit. Minecraft is one of many things that use SSL, and may have been affected. To be sure that you don't lose your account, it's recommended that you change your password.
If you all want to possibly prevent the exploit just to be safe, you can always go pick up MalwareBytes Anti-Exploit for free from the MalwareBytes website, works great for me.
Otherwise I've been needing to make my password stronger anyhow...
What is a Mojang Acount???? i have a minecraft account, but how do i change my password?? by the way i was trying to play on some servers but it says: Failed to login:Invalid session (try restarting your game). does this mean ived been hacked?!?!?!?!?
Sometimes it means that you logged in somewhere else (logging into Minecraft.net to update your password for instance would cause this), it probably isn't anything.
Rollback Post to RevisionRollBack
I'm on the CSM team, but I've retired from Minecraft modding for the most part. I made Cliffie's Goos.
I'm an old-timer, been around since Alpha. MC: Windows 10 edition is like the uncanny valley, almost modern Minecraft but off in every way.
I have an XBox tag, but only because I needed one to try the Windows 10 version. I don't have an XBox.
Probably. This bug affected an estimated 2/3 of websites.
http://arstechnica.com/security/2014/04/critical-crypto-bug-in-openssl-opens-two-thirds-of-the-web-to-eavesdropping/?kw=100k_pvs&search=100k_pvs
Enjoy raiding and pvp in highly customizable and well organized groups, but hate the setup of Factions? Then check out my upcoming server containing multiple custom plugins and opearting on Minecraft version 1.8!
Public alpha starting soon! Sign up today!
Well stated. They would more than likely target a website that they can use your account to generate profit for themselves, such as PayPal or Amazon.
Enjoy raiding and pvp in highly customizable and well organized groups, but hate the setup of Factions? Then check out my upcoming server containing multiple custom plugins and opearting on Minecraft version 1.8!
Public alpha starting soon! Sign up today!
Edit: I did manage to change my Mojang account password in the end, but still couldn't log in from the homepage for some reason.
Otherwise I've been needing to make my password stronger anyhow...
I'm not changing my password until they tell us what exactly happened!
Download the AliensVsPredator Minecraft Mod today at http://aliensvspredator.org
Short answer, no.
Do you use the old launcher?
KrisJelbring tweeted that to fix the breach they had to drop support for the old launcher
They DID say exactly what happened. An exploit was found in SSL. Any hacker with the technical know-how could get through the encryption, and steal passwords, usernames, bank account information, etc. using this exploit. Minecraft is one of many things that use SSL, and may have been affected. To be sure that you don't lose your account, it's recommended that you change your password.
No anti-malware on your computer will fix this.
Sometimes it means that you logged in somewhere else (logging into Minecraft.net to update your password for instance would cause this), it probably isn't anything.
I'm on the CSM team, but I've retired from Minecraft modding for the most part. I made Cliffie's Goos.
I'm an old-timer, been around since Alpha. MC: Windows 10 edition is like the uncanny valley, almost modern Minecraft but off in every way.
I have an XBox tag, but only because I needed one to try the Windows 10 version. I don't have an XBox.