Menu

Home

News

Store

Stats

Items

Classes

Map

Dismiss Notice
Wynncraft, the Minecraft MMORPG. Play it now on your Minecraft client at (IP): play.wynncraft.com. No mods required! Click here for more info...

Cloudflare Security

Discussion in 'Wynncraft' started by Jumla, Feb 24, 2017.

Thread Status:
Not open for further replies.
Page 1 of 2
  1. Jumla

    Jumla Head Developer/Founder of Wynncraft Staff Member Admin Developer HERO

    Messages:
    141
    Likes Received:
    2,873
    Trophy Points:
    84
    Minecraft:
    Hi everyone!

    I've received a few questions about the recent cloudflare security compromise and I want to update anyone who's worried about.

    Fortunately, the Wynncraft website does not use Cloudflare as our CDN, so no wynncraft data was put at risk. That being said, data (including passwords) from popular Minecraft tools like Minecraft Forums and Discord were compromised. Here's a comprehensive list of websites involved. Your data is almost certainly involved in the security breach at some level and you should reset passwords and enable 2 factor authentication wherever possible.

    Stay safe, everyone!

    Note: This is posted in the Wynncraft section instead of the news section since Wynncraft wasn't directly affected by the breach itself.
     
    Jumla, Feb 24, 2017
    #1
    wxhlf, Stycore, icebreaker and 32 others like this.
  2. Kpar

    Kpar God of Omegar. Lord of the 8th realm.

    Messages:
    341
    Likes Received:
    186
    Trophy Points:
    54
    Seems legit
     
    Kpar, Feb 24, 2017
    #2
    coolname2034 likes this.
  3. SizzlingBacon

    SizzlingBacon Enlightened Adventurer CHAMPION

    Messages:
    1,754
    Likes Received:
    4,581
    Trophy Points:
    164
    Guild:
    Minecraft:
    nuuu
     
    SizzlingBacon, Feb 24, 2017
    #3
    wxhlf and coolname2034 like this.
  4. Ganny

    Ganny Famous Adventurer VIP+

    Messages:
    1,644
    Likes Received:
    3,952
    Trophy Points:
    164
    Guild:
    Minecraft:
    Always looking out for us jumjum.
     
    Ganny, Feb 24, 2017
    #4
    Psychomentalist, coolname2034, Stag2001 and 3 others like this.
  5. Thunder

    Thunder Chief Thunder HERO

    Messages:
    3,818
    Likes Received:
    6,408
    Trophy Points:
    217
    Guild:
    Minecraft:
    I'm not worried at all about this. Anyway, maybe YOU should force a forum password reset just to be safe.

    Edit: I tl;dr'ed this post.
     
    Thunder, Feb 24, 2017
    #5
    coolname2034 and orange0404 like this.
  6. Artifax

    Artifax Eltom Rainbow Archer | Build Maker VIP+

    Messages:
    1,196
    Likes Received:
    354
    Trophy Points:
    51
    Minecraft:
    At first page :D ok now I'll read the thread
     
    Artifax, Feb 24, 2017
    #6
    coolname2034 likes this.
  7. Timelapse

    Timelapse Just A Test, Please Ignore

    Messages:
    249
    Likes Received:
    733
    Trophy Points:
    76
    I bet they just want to steal our Discord #vip-room memes. Fucking Martians.
     
    Timelapse, Feb 24, 2017
    #7
    coolname2034 likes this.
  8. NeonRider

    NeonRider Famous Adventurer CHAMPION

    Messages:
    1,176
    Likes Received:
    901
    Trophy Points:
    117
    Guild:
    Minecraft:
    Thanks for the heads up.
     
    NeonRider, Feb 24, 2017
    #8
  9. Jumla

    Jumla Head Developer/Founder of Wynncraft Staff Member Admin Developer HERO

    Messages:
    141
    Likes Received:
    2,873
    Trophy Points:
    84
    Minecraft:
    Since no Wynncraft data was made public (and the leak itself only impacted around 1 in every 3,300,000 visitors), I don't think a full forum reset is warranted. That being said, you should never share passwords between websites.
     
    Jumla, Feb 24, 2017
    #9
    Stycore, SpadenadeZ1, coolname2034 and 2 others like this.
  10. Thunder

    Thunder Chief Thunder HERO

    Messages:
    3,818
    Likes Received:
    6,408
    Trophy Points:
    217
    Guild:
    Minecraft:
    Tfw I edit post but person replies to unedited post while editing.
    Edit: Congrats on replying to my message to get 100 posts! :D
     
    Thunder, Feb 24, 2017
    #10
  11. orange0404

    orange0404 corkus is actually here HERO

    Messages:
    3,893
    Likes Received:
    3,558
    Trophy Points:
    194
    Guild:
    Minecraft:
     
    orange0404, Feb 24, 2017
    #11
  12. sorae

    sorae drifting VIP

    Messages:
    3,268
    Likes Received:
    5,211
    Trophy Points:
    217
    Guild:
    Minecraft:
    I thought the forums used CloudFlare? I remember getting CloudFlare 403s a few years ago.

    There's a website that you can check if a website used CloudFlare, and it says the forums uses it.
     
    sorae, Feb 24, 2017
    #12
  13. Jumla

    Jumla Head Developer/Founder of Wynncraft Staff Member Admin Developer HERO

    Messages:
    141
    Likes Received:
    2,873
    Trophy Points:
    84
    Minecraft:
    We do use cloudflare, but only as a DNS, not a CDN provider. As a result, our traffic wasn't being passed through the software with the bug.
     
    Jumla, Feb 24, 2017
    #13
    Snerp, Stycore, Villageacules and 3 others like this.
  14. sorae

    sorae drifting VIP

    Messages:
    3,268
    Likes Received:
    5,211
    Trophy Points:
    217
    Guild:
    Minecraft:
    Changed my password just in case. I use the same password for like 5 things, so it's kind of a breath of fresh air for me.
     
    sorae, Feb 24, 2017
    #14
    coolname2034 and funnysillyman like this.
  15. PlasmaXD

    PlasmaXD I'm dead don't post on my wall VIP+

    Messages:
    417
    Likes Received:
    126
    Trophy Points:
    64
    Minecraft:
    should pin so this isn't stuck in the abyss of necrothreads
     
    PlasmaXD, Feb 24, 2017
    #15
    Chigo_, coolname2034 and Thom_Com like this.
  16. valvoid

    valvoid Build/CMD Hybrid HERO

    Messages:
    3,205
    Likes Received:
    1,872
    Trophy Points:
    125
    Guild:
    Minecraft:
    Thanks jum :) also what is difference between DNS and CDN xD
     
    valvoid, Feb 24, 2017
    #16
  17. sorae

    sorae drifting VIP

    Messages:
    3,268
    Likes Received:
    5,211
    Trophy Points:
    217
    Guild:
    Minecraft:
    DNS is a service that basically "translates" the address of the website that you go to, so you end up going to the correct address. Some can manipulate where you go, though (example: OpenDNS).

    I might be wrong - this is all the knowledge that I know from my internet being down and Google Chrome.
     
    sorae, Feb 24, 2017
    #17
    Jared2183 and coolname2034 like this.
  18. Ackro

    Ackro The true Elite Quadbrid! HERO

    Messages:
    3,090
    Likes Received:
    5,587
    Trophy Points:
    217
    Minecraft:
    Hahah, I only use websites like our forums, Google, Youtube, Office 365, Discord.... Wait, Discord had a breach. Damn.
     
    Ackro, Feb 25, 2017
    #18
    XavierEXE, SpadenadeZ1 and coolname2034 like this.
  19. half milk 2

    half milk 2 i will kill again HERO

    Messages:
    1,679
    Likes Received:
    24,290
    Trophy Points:
    164
    Minecraft:
    What if I don't give a fuck about my accounts?

    [​IMG]
     
    half milk 2, Feb 25, 2017
    #19
    XavierEXE and coolname2034 like this.
  20. flip

    flip Chef HERO

    Messages:
    3,748
    Likes Received:
    8,331
    Trophy Points:
    217
    Minecraft:
    Wot if this is a secret plan carried out by Creeper People to carry out another 9/7??
     
    flip, Feb 25, 2017
    #20
    coolname2034 likes this.
Page 1 of 2
Thread Status:
Not open for further replies.