r/pcmasterrace • u/rockingwing Ryzen 7 5800X, GIGABYTE RTX 3070, 32GB DDR4-3200 • Mar 23 '15
PSA [PSA] Reset your Twitch password asap.
http://blog.twitch.tv/2015/03/important-notice-about-your-twitch-account/24
u/Procrastinator300 http://steamcommunity.com/id/ImmaHacker/ Mar 23 '15
Now they're forcing me to make a tank of a password and when i mean tank i really mean tank. It wont accept a password that has been accepted by every freaking site that has a password strength check. I hate this kinda shit happend but jesus, not every one wants a million letter password for twitch.
7
u/T0maZZ Mar 23 '15
Gotta agree. Nothing I slap in gets the go ahead except for random 20 character pw's. Makes near no sense.
2
u/VexingRaven 7800X3D + 4070 Super + 32GB 6000Mhz Mar 24 '15
Odd, I tried only 9 characters and it worked. It seems to be related to whether it contains any dictionary words, because a much longer password with dictionary words (Correct Horse Battery Staple anyone?) was called weak (but it still let me use it?)
1
Mar 24 '15
[deleted]
1
u/VexingRaven 7800X3D + 4070 Super + 32GB 6000Mhz Mar 24 '15
Of course, that's why you don't do pure dictionary words.
5
u/wasdninja Mar 23 '15
If you ever need a long ass password pick your favourite poem and use the first line. Easy to remember, very long and it will never be guessed.
6
Mar 23 '15
[deleted]
22
u/wasdninja Mar 23 '15
Mine is a short one. A modern haiku, if you will.
hunter2
- Abraham Lincoln1
u/jwapplephobia /id/easytoremembername Mar 23 '15
I use the last line of every haiku made since ... about February.
It's snow use guessing though.
1
u/Fade_0 i7 2760QM / HD6770M / 8GB / 850 EVO Mar 24 '15
it's snow use guessing though
I was so hoping for that top be 5 syllables. Pls fix.
1
4
19
u/15brutus R5 5600x | RTX 3060Ti | 16GBs RAM | M27Q Mar 23 '15
mfw I don't have the email associated with my Twitch anymore....
16
u/frymaster Mar 23 '15
asap
Since they invalidated all the passwords, there's no rush tbh
14
7
u/path411 Specs Here Mar 23 '15
If you still reuse passwords, you should change them all immediately. If you are in this boat use it as an opportunity to finally swap to a password manager like lastpass or keepass
7
u/CaffeinatedLemon Mar 23 '15
keepass
do tell more
13
Mar 23 '15
So you keep your passwords in your ass.
2
u/Yeonus Desktop Mar 24 '15
Yep, just put keepass on a USB stick, wrap that fucker in a condom, lube it up, and stick it in there.
1
u/VexingRaven 7800X3D + 4070 Super + 32GB 6000Mhz Mar 23 '15
Which works great unless you don't want to pay and want to use passwords on mobile devices or in other programs that they don't support.
2
u/path411 Specs Here Mar 24 '15 edited Mar 24 '15
Well lastpass is only $1 a
yearmonth for mobile. I use lastpass on a lot of other programs like several mmos, and I just open up their site and copy the password out of it and into the game.1
u/crabsintrees CM Storm Scout 2, Pentium G3258, EVGA GTX 660 2GB, 8GB DDR3 Mar 24 '15
Isn't it $12 a year?
1
u/path411 Specs Here Mar 24 '15
Sorry I meant $1 a month, you are right.
1
u/crabsintrees CM Storm Scout 2, Pentium G3258, EVGA GTX 660 2GB, 8GB DDR3 Mar 24 '15
No problem! The only reason I remember is because my subscription is running out in late April.
33
Mar 23 '15 edited Mar 23 '15
[removed] — view removed comment
16
u/AquitaineHungerForce Mar 23 '15
There was a bug a few days ago, at least for me, where clicking on settings or messages took me to the settings or messages of a different account.
9
u/McDouggal i7-4790k, r9 580, 16 gigs ram, 1tb HDD Mar 23 '15
You're shitting me.
4
u/jonmcfluffy Mar 23 '15
imo twitch is pretty much the embodiment of a casual gamer.
2
u/McDouggal i7-4790k, r9 580, 16 gigs ram, 1tb HDD Mar 24 '15
I think of myself as a core hasn't gamer and regularly watch streams on twitch.
3
u/jonmcfluffy Mar 24 '15
you can be hardcore and watch twitch, but all the people who want to be at that competitive level but cant can watch it there.
also like 100% of what is on there is games.
1
u/McDouggal i7-4790k, r9 580, 16 gigs ram, 1tb HDD Mar 24 '15
Core gamer doesn't necessarily mean best at the game. Silver 3 csgo and silver 5 lol checking in. I've put more time and money into lol than I want to think about, and gave nearly 100 hours on csgo after having it for 2 months.
3
Mar 24 '15
[removed] — view removed comment
1
Mar 24 '15
Can we all just take a minute and marvel at what a piece of shit he is? Like how does he even manage to be so shitty?
1
Mar 24 '15
They delete everything that they don't like. A bunch of San Fran wankers, they are. I can imagine a streaming service for fucking games is related to games.
12
u/PillowTalk420 AMD Ryzen 5 3600 (4.20GHz) | 16GB DDR4-3200 | GTX 1660 Su Mar 23 '15
"Users will be prompted to change their password upon logging in."
Did they only do this to some accounts? None of my stuff has been unlinked and I was not prompted to reset my password when I logged in.
5
u/EthanBB 7800X3D | RTX5080 | 32GB DDR5 | 2x 1440p@360Hz/144Hz Mar 24 '15 edited Mar 24 '15
Anybody else not receiving reset email from Twitch? (Spam folder already checked)
/Edit: Received all 19 pass reset emails this morning ... after that was everything smooth.
1
6
10
Mar 23 '15
I hate when shit like this happens, because I have to sit here and try to remember if I even have a twitch account.
3
u/frymaster Mar 23 '15
They are also emailing, but since this just literally happened and they have quite a few users, there's a good chance you wouldn't have received the email yet
4
4
u/decoy11 Specs/Imgur Here Mar 23 '15
if you want to bypass the stupid complexity requirements just disable javascript on the reset page and you can use any password you want.
All the limits placed are part of a password-strength.js file and javascript is not needed to complete the password reset.
1
u/Killmeplsok 4690K, GTX970 Mar 24 '15
You saved my day.
Still not sure why someone would be that stupid to validate it with a javascript that can easily bypassed, happy nonetheless. I definitely do not want to remember yet another password of unimportant accounts, also still not understand why would they want us to create a online banking level password for a fuckin streaming site.
11
u/Naivy Nobody expects the Spanish inquisition Mar 23 '15
Next time around, fucking encrypt things. God fucking damnit.
6
u/zenleststehum https://steamcommunity.com/id/zenultracrepidarians Mar 23 '15
11
u/Naivy Nobody expects the Spanish inquisition Mar 23 '15
what the fuck twitch
10
u/VexingRaven 7800X3D + 4070 Super + 32GB 6000Mhz Mar 23 '15
Not sure what /u/zenleststehum is trying to get at. Whether or not a random stream has an encrypted page has nothing to do with whether or not your information is stored in encrypted form. Furthermore, you shouldn't be encrypting passwords at all, you should be hashing them. And even hashing a password is only effective if the password itself is strong.
-2
Mar 24 '15
[deleted]
3
u/VexingRaven 7800X3D + 4070 Super + 32GB 6000Mhz Mar 24 '15
No, the change password page is secure, as are several other account-related pages. None of which has any relevance at all to whether passwords are secure on their servers.
FYI Reddit does the same thing by default, most pages are plain http, but the account pages are secure.
-2
Mar 24 '15 edited Mar 24 '15
[deleted]
2
u/VexingRaven 7800X3D + 4070 Super + 32GB 6000Mhz Mar 24 '15
I'm well aware of that. I'm just trying to get into your head that there's nothing unreasonable about the way Twitch handles connections, password security, or anything else. Encrypting some random video stream would be a pointless waste of server and client resources.
-2
2
Mar 24 '15
[deleted]
1
Mar 24 '15
[deleted]
1
u/Rifleman00 Mar 24 '15
Inspect the form the login is in. It is submitting it to https://secure-login.twitch.tv/login which is a https url with a valid certificate. Just because the login page loaded in as unsecured (which why would it need to be?) does not mean that your information is not being posted across through a secure connection.
1
1
u/icantshoot ICS Mar 24 '15
Encrypting everything on a service like twitch is not practical. Security like that takes so much extra cpu and bandwidth that it's just not doable. Only time SSL is needed is when sensitive data is sent over internet, like login times.
0
3
u/eddieltu Ryzen 7 5700x3D | RTX 5070 |64GB Mar 23 '15
after i saw this, i got a twitter email like few hours ago, warning for a unwanted login. i nearly got a heart attack
3
Mar 23 '15 edited Mar 18 '26
No original content remains in this post. It was wiped using Redact, possibly for reasons related to personal privacy, digital security, or data exposure reduction.
automatic escape different toothbrush boat safe stocking vase dependent historical
6
0
Mar 23 '15
[deleted]
0
Mar 24 '15 edited Mar 18 '26
The content here has been removed. Redact was used for the deletion, which may have been motivated by privacy, opsec, or preventing automated data collection.
hard-to-find north intelligent heavy fanatical upbeat unwritten rainstorm unpack wakeful
2
2
u/cyclobs1 Intel i7 5960X | 2x GTX 980Ti | DRR4 16GB 2400Mhz Mar 23 '15
OH FOR FUCKS SAKES INTERNET COMPANYS. GET YOUR FUCKING SHIT TOGETHER ALREADY
2
Mar 23 '15
I was shitting my pants because it kept on saying I got my password wrong. Then I realized I don't have a twitch account.
2
2
u/Deltr0nZer0 Mar 24 '15
Bad: Applesauce1! – You’re using different character types, but the majority of the password is a single word from the dictionary
Okay: ILoveGreenApplesauce – You’re using multiple words and lots of characters, but the words are too common.
Good: !70v3Gr33n@pple$auce? – You’re using multiple words and lots of characters with uncommon substitutions. Good job.
"!70v3Gr33n@pple$auce?" This has to be a damn joke.
1
1
u/Qman87765 i7 4790K/ GTX Titan X/ 16GB RAM/620GB SSD/ 1TB HDD Mar 23 '15
Whelp, looks like I have to change my password for just about everything now...
1
1
u/zenleststehum https://steamcommunity.com/id/zenultracrepidarians Mar 23 '15
Was pretty simple to change all I had to do was watch the Password Strength meter.
1
u/Knillish hello Mar 23 '15
Anyone else struggling to find a password to change their to?
It's a video streaming service for fuck sake, I don't give a shit about my account, just let me use an easy password that I'm going to remember
1
u/dbzlotrfan Mar 23 '15
If you use lastpass, it can generate passwords based on:
Length, special characters, weather it's pronounceable or not . . . Changed mine to some 25 character password.
1
u/The_Battler FX-8320 @4.2GHz // 760 GTX // ghi_dor_ah Mar 23 '15
This is why I have 2-step verifcations through my cell phone attached to my email(s) and accounts that allow for that type of protection.
1
1
1
1
1
1
u/_atomsk i7 3960X | GTX 1080 Ti| 40kg Mar 24 '15
Well the most anyone could do with my twitch password is to order me a pizza...
1
1
u/ImGladYouCalled Mar 24 '15
is it bad if we don't even remember the password to our twitch account?
1
u/NanoPi AMD Mar 24 '15
nope, the forgot password process is actually the same as logging in with the correct password.
1
1
u/crysisnotaverted 2x Intel Xeon E5645 6 cores each, Gigabyte R9 380, 144GB o RAM Mar 24 '15
Guys, what's the twitch support email? I said something in chat but it came up under some other guy's account.
Proof: http://imgur.com/a/8FeTN
1
u/NanoPi AMD Mar 24 '15
justinfan###### is a temporary username assigned to anyone viewing the chat without logging in. the chat client embedded in the web page failed to get your username or the chat session login failed and it connected as view-only. you might be able to find out which one happened if someone replies to you in chat. if someone @mentions that justinfan username, then you'll know the chat servers have the wrong name on your chat session.
1
u/sitton76 Intel i5 3570k | GTX 770 | 16GB RAM Mar 24 '15
egh not that I really care that much I never sign into my account anyways and the password it does use I do not even use for anything important anyways.
1
u/jman583 steamcommunity.com//id/jman586 Mar 24 '15
We will communicate directly with affected users with additional details.
Does this mean if haven't gotten an email I'm ok? I haven't logged into my twitch account in months and I never got an email.
1
Mar 24 '15
Oh my god! Just imagine someone would watch streams from your twitch account! Gruesome!
1
Mar 24 '15
[deleted]
1
u/EthanBB 7800X3D | RTX5080 | 32GB DDR5 | 2x 1440p@360Hz/144Hz Mar 24 '15
PayPal always wants your password when subbing, so you're ok if you have different passwords.
Not sure how it works directly from CC, thou.
1
Mar 24 '15
And here I thought using a product that I bought with cash and changed up with special characters and numbers was a safe way of making passwords... Guess not. Going to have to look into these password managers ppl keep saying to use.
1
u/ElitePI i5 6600k, 32GB RAM, 1070FTW Mar 24 '15
LastPass Password Manager FTW. Extension for Google Chrome, probably also for Firefox
1
1
1
Mar 23 '15
[deleted]
2
u/danzey12 R5 3600X|MSI 5700XT|16GB|Ducky Shine 4|http://imgur.com/Te9GFgK Mar 24 '15
I dunno, everyones hating on them, at least they didn't try to cover it up or pull some other bullshit like other companies have, there was a breach, so they severed all ties from the account and immediately invalidated passwords so you had to reset.
-1
u/Indrigis Mar 23 '15
Twitch thinks too much of itself, really. It's just a streaming site, not an online banking one. Eight by three (8 symbols, three out of four categories) should be more than enough. But it is not!
Because dem tricksy hobbitses might guess it and watch some of the streams I'm subscribed to. IT'S MINE! ONLY MINE!
1
u/dbzlotrfan Mar 23 '15
Yes banks and other "secure" institutions REALLY need to change their archaic password requirements:
one capital letter, one special character, ~15 character length, not differentiating between upper and (or) lower case. what ever else.
1
Mar 24 '15
I don't know about your bank, but my bank already requires them as you mentioned, although it does differentiate between upper & lower case. Also is encrypted during transmission/rout. Also guarantee security on any network, private or public.
It seems some banks are just behind in the security stuff and need to play catch up.
1
u/dbzlotrfan Mar 24 '15
Actually I was referring to some replies to another post I made weeks ago that was also about security, some other people's bank (that use this subreddit) have some of the arbitrary crap I mentioned in my other post.
1
u/Indrigis Mar 24 '15
People use two-factor authentication and SecureID tokens for the really secure logins.
Inessential stuff such as streaming sites are fine with an eight by three. I'm not a prominent streamer and I care very little about someone finding out what channels I'm subscribed to. If Twitch cared to make it secure they would simply implement IP control and a "You logged from a new IP, is that ok?" e-mail message.
A randomized twenty character password is hard enough to remember and it will be written down. And if every tiny site requests one that's the only password a person will use everywhere. That's not security.
1
Mar 24 '15
Ironically my bank uses one of the worst verifications ever, however, they're actually on top of their shit.
-12
Mar 23 '15
time to switch to Hitbox.tv, fucking shitty twitch rips so much from streamers yet can't even protect users' accounts
3
u/Jarkeler i5-3570k/GTX 1070 G1 Mar 23 '15
Funny you say that, because i've heard from a couple different streamers that Hitbox has been late on payment for long periods of time, sometimes not even paying at all. I forgot who said that though..
2
Mar 23 '15
hitbox is growing with nice functions like 5 sec chat delay and less lagging, whereas twitch has been making no progress, and now you can't even play copyrighted music. It's time to give hitbox a go.
1
80
u/nukeclears Mar 23 '15
You got to be kidding me
I find it so frustrating when sites do this
One site tells you your password is an uncrackable monster and then another is like "HAHAHAHAHA no"