Password Security Update on 09/09/2016 03:16 PM CDT
Links-arrows 1
Reply Reply
We are updating our security procedures with respect to passwords. Currently, passwords can be entered without regard for letter case and be accepted. When we institute the changes, passwords will need to have the case that we have stored. Passwords entered using incorrect case will be treated as invalid.

If you've been using some uppercase letters in your password, that may not match what we have stored. In many cases, the password was stored with all letters lowercase.

We are expecting to do this update on September 13th, 2016.

You can update your password now at https://www.play.net/gs4/account/change_password.asp. If you do not recall your password, you can have a password reset email sent to the email address we have on record for your account at https://www.play.net/gs4/login/login_help.asp.

When you change your passwords, please remember to update your passwords in all saved places to include your browser(s), Simutronics Game Entry (SGE), and third party applications such as lich or genie.



Wyrom, PM
Reply Reply
Re: Password Security Update on 09/09/2016 07:13 PM CDT
Links-arrows 2
Reply Reply
Out of curiosity, how will the passwords be hashed post-update?
Reply Reply
Re: Password Security Update on 09/11/2016 12:45 PM CDT
Links-arrows 3
Reply Reply
Every time I try to update by password I get

A temporary condition exists which prevents changing your password at this time. (Code: OLD_PASSWORD)
Reply Reply
Re: Password Security Update on 09/23/2016 03:40 PM CDT
Links-arrows 4
Reply Reply
>Out of curiosity, how will the passwords be hashed post-update?

Any update on this? It's not unusual for companies to comment on their process. Dropbox's blog post just reminded me of this, as did chatter in the slack.

https://blogs.dropbox.com/tech/2016/09/how-dropbox-securely-stores-your-passwords/

I'm an infosec tyro but I'd be happy to at least hear that passwords are being hashed rather than encrypted, for example.
Reply Reply
Re: Password Security Update on 09/23/2016 03:41 PM CDT
Links-arrows 5
Reply Reply
You might find some answers over on the Simutronics forums.

SGM Sleken
Reply Reply
Re: Password Security Update on 09/23/2016 09:37 PM CDT
Links-arrows 6
Reply Reply
>You might find some answers over on the Simutronics forums.

I don't see any mention of the password migration there. Can you throw me a link?
Reply Reply
Re: Password Security Update on 09/24/2016 08:35 AM CDT
Links-arrows 7
Reply Reply
I wasn't clear. What I meant was to ask over there. The people that know read those forums.

SGM Sleken
Reply Reply
Re: Password Security Update on 09/26/2016 12:09 PM CDT
Links-arrows 8
Reply Reply
As Sleken said, I'd ask over on the Simutronics side of the forums. I'm not sure if that's anything they'd like me to discuss.



Wyrom, PM
Reply Reply