What's up with the news?

[Guest memelord]

http://www.adult-fanfiction.org/html-index.php

[DemonGoddess]

It’s fixed.  Apparently my account in the archive was hacked.  The hacker then deleted me after setting him/herself up as admin, and did all this.

[DemonGoddess]

Also told our hosting company which files were being used, and the time frame.  They were able to trace down the user and BLOCK them entirely.

[Guest ehh?]

Does that mean that it was vuln? not meant in a dickish way.

[DemonGoddess]

What it means is that my user login was actually hacked.  Got the https thing rolling now, just have to finish implementing it.  That should help.  I had the hosting company tech use the tools they have at their disposal to determine whether or not it was intrusive in that way, or only me.  From what they saw, it was only me.

[Guest Guesst]

Do you know when you’ll be making an announcement about this? The misunderstanding with Troy Hunt should be cleared up by this point given what happened.

You are working to implement security in more areas than just https right? Or is adding only https enough to secure the site and solve all security issues?

[DemonGoddess]

Yes, we’re working on tightening things up further.  Understand something, we are not an eCommerce site, thankfully, so credit card numbers, banking information, personal identifiers such as social security numbers are not something we ever ask our users for.  We don’t ever have a need to ask for that kind of critical information from a user.  No announcements will be made until everything is finished.  Kind of silly to do that if it takes awhile to get it done, yes?

[Guest Star in this show]

On 8/24/2018 at 12:38 PM, DemonGoddess said:

We don’t ever have a need to ask for that kind of critical information from a user.

The emails and passwords that are stored together in plaintext; We don’t need to worry about anything bad happening?

[Guest Red robin]

The people subscribed here might want to review their passwords: https://haveibeenpwned.com/PwnedWebsites#AdultFriendFinder

 

[BronxWench]

While we are not in any way affiliated with any other site, including AdultFriendFinder, any member who is concerned should take whatever precautions they believe appropriate, including changing all passwords. activating two-step authentication where available, and maintaining the security of all login information.