this post was submitted on 28 Aug 2023
12 points (92.9% liked)

Sim Racing

887 readers
13 users here now

Discussing all things Sim Racing

founded 1 year ago
MODERATORS
Designate6361@lemmy.ml
itsmikeyd@lemmy.ml
Designate6361@lemmy.letthewookiee.win
BURN@lemmy.world
itsmikeyd@lemmy.world
12
Trading Paints Credentials Leaked - CHANGE PASSWORDS (twitter.com)
submitted 1 year ago by BURN@lemmy.world to c/simracing@lemmy.ml
10 comments fedilink hide all child comments
 

Hadn't seen this posted, but for anyone who uses Trading Paints in conjunction with iRacing you need to go in and change passwords NOW!

There was a leak of 270,000 accounts with emails/passwords in md5 format (easily reversible to plaintext)

If you use the service make sure to reset your passwords asap and if you use the password shared on other services you should make sure to change it as well

you are viewing a single comment's thread
view the rest of the comments
[–] jamesrylandmiller@mastodon.social 1 points 1 year ago (1 children)

@BURN they should at least use bcrypt

[–] BURN@lemmy.world 1 points 1 year ago (1 children)

That’s my go-to for any password encoding

Hopefully this gets iRacing to open up their oAuth portal to external apps and someone can develop something more secure.

It really shouldn’t be that hard. It’s an account management and CDN software, it honestly can’t be that hard to build a properly hardened version

[–] jamesrylandmiller@mastodon.social 1 points 1 year ago

@BURN yeah. MD5 for as long as I can remember is compromised.