Hi all,
Long time no chat...  I'm in the process of patching things up to try to get things back to normal, but due to the nature of what has happened, this is not a trivial task and you may have to be patient for some things.   As sad as this is to say, I think it's very important that you all be aware that due to the way in which UKChatterbox was attacked, if you use your UKChatterbox profile password for any other sites or services, those logins may also be at risk and you should change those passwords immediately to something different and secure.  It is always good practice to never use the same password that you use for important services (such as e-mail, banking) for any site you sign up to.  Not only may the site be attacked and your password compromised, but with a lot of them you don't even know if the owner of the site or its employees with access to data are trustworthy.
Hopefully I will have an update for you all soon. Feel free to change your passwords for your UKChatterbox profiles although you will be asked to change them again regardless once things have been sorted out.  Also don't worry if you log on and find your staff access has been removed as this will only be temporary.
- fluentcode


FAO: All Staff.
Hi all,
Another word about passwords:
Please do not use your UKCB login password for any other service that you use including email. Ideally you should use substantially different passwords for everything.
For security purposes your UKCB password must subscribe to the following format:
    Be a minimum of 8 characters long.
    Contain at least two numbers.
    Contain at least two capital letters.
    Must be scrambled so as to make no sense.
    Must not be easy to remember. (if you can remember it then it can more easily be cracked)
An example of a suitable password would be something like:  B4rqD7gZ (do not use this example as your password!)
If your current UKCB password is in use on any other service or fails to meet security standards then please change it immediately to something unique which subscribes to the above requirements.
Regards,
Dragon.


Hi all,
Just to add:
We really need your cooperation with this.  There is little use in fixing up the site to make it secure again only to have staff still not checking their security questions and still not choosing decent passwords.  No matter how secure the site is made, we can't do anything to stop people gaining staff access if the staff don't make sure their e-mail is secure.
The issue with Stevie this morning was that his e-mail was accessed by answering the security questions (answers found on facebook etc).  Then, his UKChatterbox profile was accessed by requesting the password be resent via the forgotten password link.   Please everybody make sure your security questions cannot be answered by anyone but you and make sure your password for UKChatterbox is different to other sites and conforms to the format Dragon outlined in his e-mail.
Thanks,
- fluentcode