by Max Barry

Latest Forum Topics


NationStatesNationStates News RSS

News Archive: 2021202020192018201720162015201420132012201120102009200820072006200520042003

Fun with Security

by Max Barry
Tue, 01 Apr 2003

You might think people have better things to do than try to hack into NationStates to steal other people's nations, but I can tell you: No! They don't! We've had a few attacks recently, some more successful than others. In one case, someone from Puerto Rico sent out a bunch of e-mails that looked as if they came from NationStates, asking people to write back with their passwords. The most offensive thing about this was that they obviously thought NationStates admin couldn't spell. In another, a hacker's tool known as "Brute Force" tried thousands of password combinations and eventually got a couple.

This makes me feel glad I'm not running a bank. We've now installed a trap to prevent people trying passwords over and over, which should help a lot, and there's another security upgrade to come. But in the meantime, here's a hint: using your nation name as your password is a really bad idea.