Information Breach
Hello everybody.
As some of you may have seen from the forums, the website https://haveibeenpwned.com/ is reporting that there was a breach of FFR in February of this year, resulting in the compromising of Usernames, Email Addresses and IP information, as well as Salted MD5 password hashes. Further, the Vigilante.pw twitter feed claims that as of July of this year, a large majority of those accounts had their passwords successfully cracked into plaintext.
What this means for you is a couple of things. If you use your FFR password for any other websites or services, you need to change those passwords right away. We actually have no evidence on our side of this breach, but there’s no reason to doubt muiltiple sources reporting it, so we need to treat it like it is fact.
What it means for FFR passwords is a little more complicated. Some levelling with you is going to happen now.
Due to various issues (Mostly the non-profit nature of the site and the absence of Synthlight) it is unlikely that we’ll be able to upgrade the security architecture in any especially meaningful way. As well, while in 2008, salted MD5 hashes were fairly secure, that has become less so as time passes. We are investigating ways to store passwords more securely that are still compatible with our existing systems, but in the near-term in today’s information security climate, we have to basically be frank that we lack any especially compelling ways to secure your password.
Out of the salted hashes compromised in the breach, nearly 400,000 of them remained uncracked. Those were users who had very strong passwords. Even with the comparative ease with which MD5 can be cracked, sufficiently strong passwords are at least some deterrant to these attacks. So for FFR, like any and every other service you have with a password, your best bet is to use a password manager like KeePass to generate you very strong passwords unique to each source. If you don’t want to use something like that, the usual suggestions for strong passwords apply: a mix of uppercase, lowercase, numbers and symbols, as long as possible, bearing no resemblence to any personally identifying words or phrases, and avoiding things like simple substitution (3 for e or 1 for i etc).
While we are definitely sympathetic to anybody who had passwords compromised that are used in any other places, please do understand that the first we heard about this breach was when it was posted in the forums, and investigation on our end needed to happen to try and confirm the reports, assess what happened, and try to figure out where we actually stood with regards to our options, and that we haven’t been trying to avoid, ignore or otherwise not address these issues by mostly remaining quiet up until now.
We apologise for the effort in changing passwords this is going to cause, and any alarm caused by our taking a few days to assess before saying something.
- Devonin and the FFR Team
11th Official Tournament Wrap Up
It’s been a crazy 8 weeks, but the tournament has come to an end. Thank you all who participated and congratulations to all our winners! Here are your top 3 in each division:
D7
1st EtienneSM
2nd shadow 1800
3rd smartdude1212
D6
1st YoshL
2nd ItsOnlyDanO
3rd MikeShinoda12345
D5
1st jose656
2nd Ghost_Medley
3rd alphanish
D4
1st magnans
2nd Winrar
3rd Conorn
D3
1st chuybar
2nd JotaCeOK
3rd Shadowcliff
D2
1st Stopmovin
2nd Felyx
3rd Kriptos
D1
1st Nighdragon
2nd Charmoeleon
3rd Killionz
On another note, the difficulty consultants are working on moving us to the new scale so please be patient on the 0 difficulty ratings on the tournament files.
Also don’t forget you have until tomorrow night to order a “did you miss me” FFR shirt. After this run I intend on retiring the design. You can find them here
11th Official Tournament – Finals!
This is it! The last seven songs of the tournament (don’t you dare tiebreak on us).
D1
Artificial Intelligence Bomb
Musician: naruto
Length: 2:04
Step author: hi19hi19
D2
Stage 1 (Teenage Mutant Ninja Turtles 2)
Musician: Shnabubula
Length: 2:58
Step author: hi19hi19
D3
SpaceLand*TOYBOX
Musician: OSTER project
Length: 1:42
Step author: bmah
D4
Aragami
Musician: xi
Length: 1:58
Step author: bmah
D5
OWA Raged In Vegas (Fuck Bees)
Musician: Kurorak
Length: 3:32
Step author: hi19hi19
D6
Odd-22
Musician: Terminal 11
Length: 2:27
Step author: choof
D7
Undici
Musician: Terminal 11
Length: 3:18
Step author: DossarLX ODI & TC_Halogen
Best of luck to the final 21 of you; at the end of this, we will have our tournament champions!
11th Official Tournament Round 8 Preview
Final Round!
Good Luck!
11th Official Tournament – Round 7
At the end of this round, we will have our tournament finalists!
D1
Azure Emotion
Musician: iF
Length: 2:01
Step author: DarkZtar
D2
Renatus
Musician: Soleily
Length: 2:56
Step author: rCaliberGX
D3
0×69
Musician: Kurorak
Length: 2:09
Step author: hi19hi19
D4
The Devil Plays Dance Games
Musician: dbk2
Length: 2:45
Step author: ilikexd
D5
Dysnomia
Musician: YZYX
Length: 2:01
Step author: DossarLX ODI
D6
Epileptic Crisis
Musician: Nightmare
Length: 1:58
Step author: ilikexd
D7
You Universe
Musician: Blitz Lunar
Length: 1:59
Step author: hi19hi19
Best of luck to the remaining competitors – the finals are just one round away!
11th Official Tournament Round 7 Preview
Semifinals are coming, get ready.
Good Luck!
11th Official Tournament Round 6
Whew, top 5 round is here already and it’s certainly not going to be an easy one. The songs for the round can be found below and the thread can be found here. I’d also like to congratulate AutotelicBrown and GammaBlaster on getting their first files in game!
D1
All is fair in Rage
Musician: litmus*
Length: 1:57
Step author: DarkZtar
D2
False White
Musician: maru
Length: 2:01
Step author: Silvuh
D3
Suicide Pact
Musician: LeaF
Length: 1:38
Step author: ilikexd
D4
Amphisbaena
Musician: Mitsuyoshi
Length: 1:55
Step author: DarkZtar
D5
Ripcord
Musician: The Flashbulb
Length: 2:33
Step author: ilikexd
D6
Wizdomiot
Musician: LeaF
Length: 2:30
Step author: AutotelicBrown
D7
Powerflux
Musician: YZYX
Length: 3:35
Step author: GammaBlaster
Congrats to all who made it into the top 8 and good luck getting to the top 5!
11th Official Tournament Round 6 Preview
It’s getting tougher….
Good Luck!
11th Official Tournament Round 5
We are now halfway through the tournament and on to our top 8 round. The songs for the round can be found below and the thread can be found here.
D1
Fall Memories
Musician: Phantasma
Length: 1:55
Step author: Silvuh
D2
Turn Around
Musician: Grabbitz
Length: 2:45
Step author: gameboy42690
D3
Meteor Lights
Musician: s-don
Length: 2:12
Step author: bmah
D4
Ringo’s Tea Party
Musician: IOSYS
Length: 1:46
Step author: Scintill
D5
Amber Shores
Musician: The Flashbulb
Length: 2:30
Step author: DarkZtar
D6
Maybe All This Time I Was Wrong
Musician: The Flashbulb
Length: 2:22
Step author: yo man im awesome & TC_Halogen
D7
OWA Raged at Kurorak for Making OWA Raged at Skeletor
Musician: Kurorak
Length: 2:40
Step author: hi19hi19
