Thursday, November 22nd 2012

Please Reset Your TechPowerUp Forums Password

Earlier today (22/11), TechPowerUp servers were hacked. The attacker gained access to the forums user database, the one which stores user information. Details such as usernames, hashed and salted passwords fell into the wrong hands. Thanks to GPGPU, the passwords are as good as compromised. We have undertaken a security review, and are mandating a password change for all users. Your old password will not work, click on "forgot password" link and follow the instructions to reset it. If you use the same password (as your old TPU password) elsewhere (other sites), change it to something completely different. We sincerely apologize for the inconvenience, and promise to improve our security infrastructure.

If you no longer have access to the email account you used to register, please email w1zzard@techpowerup.com and mention your username, old e-mail, new e-mail and IP address you typically use to post on the forums.
Add your own comment

221 Comments on Please Reset Your TechPowerUp Forums Password

#1
Morgoth
look like i blocked tpu emails back in 2007
did you missed me ?
Posted on Reply
#2
dr emulator (madmax)
by: Morgoth-2
i mis my account... there are no tpu mails in my junk mail, only mails i got from tpu is the ones from wizzard not the password recovery
what is the email adres used by password recovery?
ok follow the first post
http://www.techpowerup.com/forums/showthread.php?t=175947

i gather you've made a new account ?

Please read the forum rules
as i'm sure they don't allow you to make multiple accounts (although this is kindof an exceptional circumstance)

what was your original log in name?

if you still have it type it into the User Name block at the top ,and then your old password

and it should take you to here forgot your old password

add your email that you first signed up with ,then answer the simple question and wait for the reply

if you have accidentally blocked Email messages from techpowerup.com ,you will have to go into your message settings and unblock it from your autoblock

quick how to

go to junk

at the bottom of the list of junk emails you should see"Looking for an email? If you don't find it here, check your blocked senders list."

click on the blue link and root through to see if it is .if it isn't i really don't know
Posted on Reply
#3
qubit
Overclocked quantum bit
Check a couple of posts later: morgoth got his account back.
Posted on Reply
#4
dr emulator (madmax)
by: qubit
Check a couple of posts later: morgoth got his account back.
:laugh::roll::laugh: ok it's 1 am and i'm knackered so i didn't see that
Posted on Reply
#5
TheGuruStud
I can confirm that it doesn't block you from using your old password...
Posted on Reply
#6
chaotic_uk
by: Morgoth
look like i blocked tpu emails back in 2007
did you missed me ?
TPU emailed forum users about this ?
Posted on Reply
#7
Chevalr1c
Auto-generated e-mails I suppose, related to password reset requests or in Morgoth's case perhaps e-mails he got after e-mailing an admin.
Posted on Reply
#8
KissSh0t
Why would someone want to hack into this website?
Posted on Reply
#9
laszlo
1st of all thanks wizz for help solving the pass reset...shit i joined in 2005 and none of my mail addresses were recognized;make me think maybe i didn't registered like normal people maybe i hack it ...whahahaah

no spam yet on mailboxes
Posted on Reply
#10
THE_EGG
I've had one spam email since the hack on TPU. Not bad if you ask me, and it could just be a coincidence too.
Posted on Reply
#11
micropage7
by: KissSh0t
Why would someone want to hack into this website?
yeah some cant stand to hack just to show that he can
and TPU is pretty famous so he could spread that i got TPU :banghead:
Posted on Reply
#12
caleb
Had no problems resetting and my account is 2004.
Stuff like this reminds me to change my password on regular basis... humans are so lazy and this is the best way to prevent being owned.
Damn Chinese owned my Gmail account that way :(
Posted on Reply
#13
Laurijan
THX for finding out that there was a hacker and that you force us to change passwords.
Posted on Reply
#14
HiSpeed
by: btarunr
We have undertaken a security review, and are mandating a password change for all users.
Why didn't you send an e-mail to all the members?

:twitch:
Posted on Reply
#15
jagd
No idea but probably same motivation why anandtech get hacked or other sites ,worst case they planned to use to upload viruses/trojans to members (happened for some sites with iframe viruses ) since than i use script blocker

by: KissSh0t
Why would someone want to hack into this website?
Posted on Reply
#16
Morgoth
by: chaotic_uk
TPU emailed forum users about this ?
no
the issue is back in 2007 i blocked tpu emails afhter geting all those enjoying subscribe emails, i couldt figure out how to make that stop on the forum side so i just blocked tpu
Posted on Reply
#17
qubit
Overclocked quantum bit
by: HiSpeed
Why didn't you send an e-mail to all the members?

:twitch:
Forcing a new password is standard industry security practice in such cases. Otherwise, the hacker can run rampant with user's accounts.
Posted on Reply
#18
HiSpeed
by: qubit
Forcing a new password is standard industry security practice in such cases. Otherwise, the hacker can run rampant with user's accounts.
You misunderstood my question.
When a forum is hacked like that, it seems for me an elementary thing to prevent all the users by e-mail, because a lot of them are not aware...
Posted on Reply
#19
W1zzard
by: HiSpeed
You misunderstood my question.
When a forum is hacked like that, it seems for me an elementary thing to prevent all the users by e-mail, because a lot of them are not aware...
That's a very good suggestion. Sending emails now. Thank you
Posted on Reply
#20
HiSpeed
by: W1zzard
That's a very good suggestion. Sending emails now. Thank you
Before to use a vBulletin automatic process, check that your hoster don't understand it like a spamming tool... ;)
Posted on Reply
#21
W1zzard
by: HiSpeed
Before to use a vBulletin automatic process, check that your hoster don't understand it like a spamming tool... ;)
it's our own webserver and our own email server
Posted on Reply
#22
speedpc
Hey Guys, Have a question I changed my password the day everyone was informed of the situation but now i keep getting emails from admin at *********** telling me to change my password. Is this nothing to worry about since it has already been changed ???? Just curious because this is the 3rd email i got after i had already changed it Thx
Posted on Reply
#23
HiSpeed
by: speedpc
Hey Guys, Have a question I changed my password the day everyone was informed of the situation but now i keep getting emails from admin at *********** telling me to change my password. Is this nothing to worry about since it has already been changed ???? Just curious because this is the 3rd email i got after i had already changed it Thx
:laugh:Yes, the forum is more secured now than a bank site... :laugh:
Posted on Reply
#24
HTC
This happened on the 22nd but i only got the mail today :( Completely missed this thread :(

This explains why i had trouble logging in these past couple of days.

Will change the pass now.

EDIT

Done
Posted on Reply
#25
HiSpeed
Hey Guys, don't forget to thank me for the idea (instead of W1zzard) ! :laugh:
Posted on Reply
Add your own comment