Where has the MM disappeared to?

Malevolence · 12 Oct 2021 at 23:32

Just thought I'd have a quick peruse through it to see if there's anything worth grabbing and it's not there anymore. :confused:

[FnG]magnolia · 12 Oct 2021 at 23:34

Maccy: Hmm, what does THIS button do?

MM:

moogle · 12 Oct 2021 at 23:34

There's a note on it. It's been done to protect us I think. Mods might have more info later.

Thekwango · 12 Oct 2021 at 23:35

Oh yea gone for me too.

Pigeon_Killer · 12 Oct 2021 at 23:35

Do you not get the massive message at the top of the page telling you there's been a security breach so MM has been disabled?

moogle · 12 Oct 2021 at 23:36

Pigeon_Killer said:
Do you not get the massive message at the top of the page telling you there's been a security breach so MM has been disabled?

Doesn't show unless you look at the MM. So for most it has disappeared.

Malevolence · 12 Oct 2021 at 23:36

Pigeon_Killer said:
Do you not get the massive message at the top of the page telling you there's been a security breach so MM has been disabled?

No. If I had I wouldn't have posted this thread asking where it's gone.

[FnG]magnolia · 12 Oct 2021 at 23:38

Pigeon_Killer said:
Do you not get the massive message at the top of the page telling you there's been a security breach so MM has been disabled?

No.

e: Actually, yes. I must be blind.

"Due to a recent security breach with some user accounts, the Members Market has been temporarily hidden.
Hopefully should be available shortly."

Pigeon_Killer · 12 Oct 2021 at 23:39

Weird. I get this on mobile...

Thekwango · 12 Oct 2021 at 23:40

Pigeon_Killer said:
Do you not get the massive message at the top of the page telling you there's been a security breach so MM has been disabled?

missed it!! I’m ashamed!!

Malevolence · 12 Oct 2021 at 23:41

Pigeon_Killer said:
Weird. I get this on mobile...

Nothing here on desktop. And charge your phone.

Surveyor · 12 Oct 2021 at 23:41

Malevolence said:
No. If I had I wouldn't have posted this thread asking where it's gone.

I don't have the message either.

Someone posted their account had been hacked and it turned out the hacked account was used today to list a graphics card for sale.

Puzzled · 12 Oct 2021 at 23:42

There was a user who posted earlier saying their account had been hacked and it was being used to sell a graphics card in mm. Looked like there were a few similar style posts from different users.

Bad if true, mm runs on trusting users on here.

Malevolence · 12 Oct 2021 at 23:50

That would explain it then. Wonder how many more accounts have been compromised?

Oh well, guess I'll check again after work.

rare · 12 Oct 2021 at 23:52

Damn that’s not good - well done to the mods for jumping on it though. Not sure I’ve ever seen anything like that happen in MM and I’ve been using it for a very long time…

moogle · 12 Oct 2021 at 23:55

Got the 2FA enabled on my forum account luckily. But sounds scary if they get in and redirect the trust email to impersonate a fellow member to defraud another.

Quartz · 12 Oct 2021 at 23:57

So it's password changes all round again?

Rainmaker · 12 Oct 2021 at 23:57

Wait, what breach? What's the mechanism and who has been impacted? This needs disclosure. Is 2FA enough or is this a backend hack that bypasses the need for (the hacker to use) it? Time for a forum upgrade to something secure that actually supports markdown?

moogle · 13 Oct 2021 at 00:01

Rainmaker said:
Wait, what breach? What's the mechanism and who has been impacted? This needs disclosure. Is 2FA enough or is this a backend hack that bypasses the need for (the hacker to use) it? Time for a forum upgrade to something secure that actually supports markdown?

2FA would stop them from gaining access to your account even if they guessed your PW. It's probably the trust system they attack by changing the email of the hacked account so someone sends a trust thinking they're emailing the right member.

I've seen those GPU threads with BT only and no photos included. Just got to be a little wary at the moment!

Zefan · 13 Oct 2021 at 00:19

Mods finally got round to condemning.