Password Security Update 09/09/2016 03:16 PM CDT
We are updating our security procedures with respect to passwords. Currently, passwords can be entered without regard for letter case and be accepted. When we institute the changes, passwords will need to have the case that we have stored. Passwords entered using incorrect case will be treated as invalid.

If you've been using some uppercase letters in your password, that may not match what we have stored. In many cases, the password was stored with all letters lowercase.

We are expecting to do this update on September 13th, 2016.

You can update your password now at https://www.play.net/gs4/account/change_password.asp. If you do not recall your password, you can have a password reset email sent to the email address we have on record for your account at https://www.play.net/gs4/login/login_help.asp.

When you change your passwords, please remember to update your passwords in all saved places to include your browser(s), Simutronics Game Entry (SGE), and third party applications such as lich or genie.



Wyrom, PM
Reply
Re: Password Security Update 09/09/2016 07:13 PM CDT
Out of curiosity, how will the passwords be hashed post-update?
Reply
Re: Password Security Update 09/11/2016 12:45 PM CDT
Every time I try to update by password I get

A temporary condition exists which prevents changing your password at this time. (Code: OLD_PASSWORD)
Reply
Re: Password Security Update 09/23/2016 03:40 PM CDT
>Out of curiosity, how will the passwords be hashed post-update?

Any update on this? It's not unusual for companies to comment on their process. Dropbox's blog post just reminded me of this, as did chatter in the slack.

https://blogs.dropbox.com/tech/2016/09/how-dropbox-securely-stores-your-passwords/

I'm an infosec tyro but I'd be happy to at least hear that passwords are being hashed rather than encrypted, for example.
Reply
Re: Password Security Update 09/23/2016 03:41 PM CDT
You might find some answers over on the Simutronics forums.

SGM Sleken
Reply
Re: Password Security Update 09/23/2016 09:37 PM CDT
>You might find some answers over on the Simutronics forums.

I don't see any mention of the password migration there. Can you throw me a link?
Reply
Re: Password Security Update 09/24/2016 08:35 AM CDT
I wasn't clear. What I meant was to ask over there. The people that know read those forums.

SGM Sleken
Reply
Re: Password Security Update 09/26/2016 12:09 PM CDT
As Sleken said, I'd ask over on the Simutronics side of the forums. I'm not sure if that's anything they'd like me to discuss.



Wyrom, PM
Reply