- Joined
- Dec 28, 2014
I don't understand this "password leak". The passwords in the database should at least be salted and hashed. I'm pretty sure this is the default for XenForo. I don't know how you can screw that up. Brute-forced passwords is a lazy excuse for a sysadmin to give. Brute-forcing in reality, especially over the internet, is not very practical or likely.
Is it possible whoever is doing this is lying about a password breach and is really just hijacking sessions?
Now as some words of advice; never, ever use an email that just reads 'yournamehere@thisiswhereIwork/study/theplaceIliveat.com' when you sign up for things such as social media, forums, or things related to entertainment (in this case it's video games) because the moment these types of email usernames and even IP Addresses are obtained then you can considered yourself doxxed by that point.
RetardEra, being complete absolute morons as well as complete pieces of shit, actually forced their users to dox themselves this way, despite obviously being completely untrustworthy scumbags.