Are passwords stored in plaintext here? I’m just wondering how paranoid I need to be about the break-in. If the passwords are stored in plaintext, it might be good to change it everywhere I use it. If the password is stored encrypted (what I would expect), then probably (I’m hoping) my password wouldn’t get cracked - and I can rest a little easier.
Can someone let me know please?
The person who cracked the boards got administrator access. The administrators have the ability to see what anyone’s passwords are. While they may be stored encrypted, the admins can look at them in plaintext, and presumably so could the cracker.
That’s not entirely true. Under vBulletin, the Admins cannot see the password from the control panel, in plaintext or otherwise. But there are two other ways to get the plaintext password, if one if really tricky…it’s what I have to do on my Board, since e-mailing passwords does not work on the UnaBoard.
The OP brings to mind a related thought, that being that it’s generally not a good idea to use the same password at multiple sites.
What if someone used my password and good name lol ?
Whatever can they post that would make me upset?
Yes, of course. I know that. But for god’s sakes, I have at least 20 sites I need passwords for. Remembering a unique stong password for each site is impossible. Reuse is simply the only sane option.
I have one password that I use for places where security is not much of a concern. If someone found it, they’d be able to read the online NY Times pretending to be me, and stuff like that. Aside from that one, and using the same password for two different remote servers at my college, I manage the rest by memorizing them all. Of course, there’s really very little anyone could do with access to my email, except read some spam that they didn’t recieve.
They’re not encrypted; they’re stored in plaintext in the database. However, the vBulletin administration software doesn’t show the passwords by default. If you get the database password, on the other hand, then you can see them all.