New Spammers going after normal Accounts

[Smoker1]

Guessing some People had their Accounts Hacked by Spammers/Scammers. Recently in a Switch Cheat General Request, 2 Accounts (1 created in 2017, and 1 in 2013), Spammed close to the same the Message. Both Reported.

Suggest People Update their Passwords to reflect something harder for Criminals to get, such as (Do NOT use, just an example), P@$5w0Rd4m3 (Case Sensitive, 2 Numbers, 2 Lower, 2 Capital, 2 Special Character, minimum and 8+ Length).

 

[Smoker1]

You do realise that data brokers existed for ages. It should be note-worthy that whenever you read the terms of service on a website, that any data you send will be collected by "3rd-parties".

Should be in plain English (or whatever Language for specific Countries), right at the start. Because with all these ToS, or EULA, it has so much.......not everyone is going to read all of it.

 

[k0walski]

@SylverReZ

Why not get it from the official site? That version has since been discontinued.

Ermmm, I guess it's just another fork (keepassxc) of original keepass. Both are open source... anyway, the idea is just to keep flies and meat separate. General concept is that every resource/web site should have its own password, recovery keys (if possible), 2fa, hardware (like YubiKey) etc. Of course one won't be able to protect themself from anything, but at least one might have taken care of this part of one's life.

Post automatically merged: Jun 19, 2024

@SylverReZ,
btw, why it's discontinued? I've just checked keepassxc - v2.7.8 is relatively fresh. Also does CVE (e.g., https://nvd.nist.gov/vuln/detail/CVE-2023-35866) while original keepass doesn't mention it.

 

[SylverReZ]

@SylverReZ



Ermmm, I guess it's just another fork (keepassxc) of original keepass. Both are open source... anyway, the idea is just to keep flies and meat separate. General concept is that every resource/web site should have its own password, recovery keys (if possible), 2fa, hardware (like YubiKey) etc. Of course one won't be able to protect themself from anything, but at least one might have taken care of this part of one's life.

Post automatically merged: Jun 19, 2024

@SylverReZ,
btw, why it's discontinued? I've just checked keepassxc - v2.7.8 is relatively fresh. Also does CVE (e.g., https://nvd.nist.gov/vuln/detail/CVE-2023-35866) while original keepass doesn't mention it.

Last repository update was 6-years ago, and the latest stable build was from 2016.

 

[k0walski]

Last repository update was 6-years ago, and the latest stable build was from 2016.

Are you sure we're talking about the same?
https://github.com/keepassxreboot/keepassxc (which is pointed by the https://keepassxc.org/download/ <- older releases link)... 6th of May this year...

Post automatically merged: Jun 20, 2024

Last repository update was 6-years ago, and the latest stable build was from 2016.

I see what you mean. Indeed, KeepassX was discontinued and then the fork, KeepassXC comes which is in active development/maintenance. Original KeePass (https://keepass.info/) is mainly for M$, however supports other platforms like OS X (*nix) and Linux through Mono framework. I prefer KeePassXC (C++).

 

[Minox]

Are you sure we're talking about the same?
https://github.com/keepassxreboot/keepassxc (which is pointed by the https://keepassxc.org/download/ <- older releases link)... 6th of May this year...

Post automatically merged: Jun 20, 2024

I see what you mean. Indeed, KeepassX was discontinued and then the fork, KeepassXC comes which is in active development/maintenance. Original KeePass (https://keepass.info/) is mainly for M$, however supports other platforms like OS X (*nix) and Linux through Mono framework. I prefer KeePassXC (C++).

Both options are perfectly workable in my experience. I do personally prefer the original KeePass but from what I've seen KeePassXC is more or less just the same application with a slightly different appearance.

 

[Sicklyboy]

ANY digital password manager, cloud or offline, is indisputably better than trying to hand manage passwords on paper or trying to memorize them.

2FA/MFA everywhere - whenever, wherever, and however possible, too.

 

[Jayro]

My password is random numbers, letters, and symbols, with 2FA turned on. And I have the password memorized, written down nowhere. It dies with me...

...or with a GBAtemp security breach, whichever comes first.