DEAR FA ADMINS
9 years ago
General
PLEASE TELL US MORE ABOUT THE ENCRYPTION METHOD USED FOR THE PASSWORDS STORED ON YOUR SITE AT THE TIME IT WAS HACKED AND WHAT YOU ARE USING NOW, YOU KNOW, JUST IN CASE THERE'S AT LEAST ONE USER WHO IS STILL SILLY ENOUGH TO RE-USE ONE OF THEIR "STILL-GOOD" PASSWORDS FOR YOUR NEW POST-HACK "HIGHER SECURITY" PASSWORD RESET THING. IF YOU WON'T LET ME USE A 5 DIGIT THROWAWAY NONCE THEN YOU'RE TELLING ME THAT YOU EXPECT TO GET HACKED AGAIN. TIME-GATE THE LOGINS OR SOMETHING JEEZ
THANKS, AND I HOPE NOT PAYING THOSE LAST FEW INTERNS HAS BEEN WORKING OUT FOR YOU ALL THESE YEARS
P.S. WHY DO KEYBOARDS ONLY HAVE CAPITAL LETTERS PRINTED ON THEM
P.P.S. DON'T STORE PEOPLE'S OLD PASSWORDS ON THE SITE EITHER SHITCAKES, WHAT IF PEOPLE DON'T TRUST YOU HOLDING ON TO ANY OF THE OLD ONES THEY GIVE YOU GOING FORWARD???
THANKS, AND I HOPE NOT PAYING THOSE LAST FEW INTERNS HAS BEEN WORKING OUT FOR YOU ALL THESE YEARS
P.S. WHY DO KEYBOARDS ONLY HAVE CAPITAL LETTERS PRINTED ON THEM
P.P.S. DON'T STORE PEOPLE'S OLD PASSWORDS ON THE SITE EITHER SHITCAKES, WHAT IF PEOPLE DON'T TRUST YOU HOLDING ON TO ANY OF THE OLD ONES THEY GIVE YOU GOING FORWARD???
FA+

may shed some line on FA's old...password handling
Nice to see that someone's put the DB up on TOR to crosscheck your shit, although it makes me wonder if it's part of the social engineering part to get higher-value targets to out themselves.
But maybe I'm remembering something wrong.