#MINECRAFT SERVERS PE LIFEBOAT PASSWORD#

Yup, they recommended short passwords… Quite what they perceive the benefit to be of short passwords for anyone other than criminals trying to crack them I cannot imagine.īut if you use the same password on Lifeboat as your eBay, Amazon, GMail or any other online account – then you can easily see why such sloppy security practices by even a gaming site could be disastrous. By the way, we recommend short, but difficult to guess passwords. Use a real email” You will need to use it if if you ever forget your password, so be sure it is valid. “You will then be prompted for a password and an email. Lifeboat knew about this, but didn’t tell its users.Ĭould a worse picture be painted of how well Lifeboat was caring for its users?Ĭheck out this section of Lifeboat’s “Getting Started” guide: In short, for the last four months passwords belonging to members of the Lifeboat community have been in the hands of online criminals, who could have used them to break into innocent people’s other online accounts. We retain no personal information (name, address, age) about our players, so none was leaked.”

“When this happened early January we figured the best thing for our players was to quietly force a password reset without letting the hackers know they had limited time to act. To make matters worse, as Lifeboat tells Motherboard, the security breach happened in January – and the company did not inform its users that an incident had occurred and that gamers would be wise to ensure they were not using the same passwords anywhere else on the web:

And unsalted MD5 hashes are a notoriously weak way to secure passwords, making it trivial for criminals to crack. It’s important to note that only players of the smartphone edition of Minecraft were affected, and even then only if they were members of the independent “Lifeboat” community, which runs a variety of servers offering free-to-play multi-player games on the Minecraft platform.Īll the same, Lifeboat has over seven million users. But, if you changed it in February this is no need to do so.Over seven million members of the independent Minecraft “Lifeboat” community have had their security and privacy put at risk after hackers breached servers and stole usernames, email addresses and MD5-hashed passwords. If you’d like to change the password to your Lifeboat account again, you can do that here. The password that you chose is encrypted using much stronger algorithms, and we’ve taken steps to better guard the data. Lifeboat has made a statement saying, “We learned of the breach in late February, and we immediately prompted you to choose a new password in-game. Lifeboat, a division of Minnesota-based Hydreon Corporation issued a statement on Apconfirming the breach and urging users to change their passwords on other services such as email or social media that use the same password. Personal information such as names and mailing addresses were not leaked, according to the company. Description of breach: Lifeboat Network, the operator of a network of hundreds of servers for the popular Minecraft PE mobile device game, announced that they experienced a data breach that resulted in email addresses, usernames and weakly-hashed passwords for more than 7 million users being leaked onto the Internet.

Minecraft servers pe lifeboat