Important: your Supercell forum password may be at risk – change it immed

[BostonGirl]

Thank you LTMP for reposting. I had not seen this and it was unlikely that I would. The brief time I have on this forum I spend in "General"...generally.

Nick, for this kind of security issue, a banner at the top of every page for a week may be more effective or, even better, an in-game announcement. This is just a suggestion.

[Nick[Supercell]]

Nick, for this kind of security issue, a banner at the top of every page for a week may be more effective or, even better, an in-game announcement. This is just a suggestion.

The announcement feature (banners on each page) on vBulletin has proven to have many exploits and thus it has been disabled for many years. An in-game announcement would have been a bit overkill and since this applies to the forums only, the most applicable place to announce it was/is on the forums. All registered users affected should have gotten an email about this anyway.

Cheers,

Nick

[BostonGirl]

Okay re the banners. I also take the point on the in-game announcement - kind of. I realise that part of the consideration would be PR. No company wants to have to announce a security breach.

Would a force-page solution work better? In addition to the "Announcement", anyone coming to the forum for a week (for example) would be taken first to a page explaining the breach and allowed the opportunity to change the password.

I'm not trying to be difficult so I hope you take my posts in the spirit I intend. I really had not seen the notice until LTMP's post and I had come to forum three times for the day, albeit briefly.

[meemeeme]

Hi, I got this e-mail before one hour and I am finaly here after I was unable login to forum more than one year. I thougt that I loose my account...

[Nick[Supercell]]

Okay re the banners. I also take the point on the in-game announcement - kind of. I realise that part of the consideration would be PR. No company wants to have to announce a security breach.

We are very transparent in these cases, but no need to alarm all players out of which only a handful are affected. Like I said, emails were sent to all affected which is sufficient (in addition to the announcements on multiple forums).

Would a force-page solution work better? In addition to the "Announcement", anyone coming to the forum for a week (for example) would be taken first to a page explaining the breach and allowed the opportunity to change the password.

Unfortunately the forums don't have such a feature, tho the idea is good. We are limited to what the forums offer.

I'm not trying to be difficult so I hope you take my posts in the spirit I intend. I really had not seen the notice until LTMP's post and I had come to forum three times for the day, albeit briefly.

It is always recommended to check the announcements every now and then. We try to keep our community in-the-know by posting announcements when there's a need for it.

Cheers,

Nick

[ClashOfHolmes]

But how do hackers gain access here? Rauta in some message said that this is a super sure forum...

[buggles]

Then ask that person to go here: https://forum.supercell.com/profile.php?do=editpassword to change the email address to a one which works. Note - to change the email address OR password on that page requires that your friend knows his/her current password.

Cheers,

Nick

Ok, Nick. I went to link and I get nothing in order to change my forum Pass Word, now what ?

[Nick[Supercell]]

But how do hackers gain access here? Rauta in some message said that this is a super sure forum...

As you may understand, I can't go into details how it is done or was done (security reasons). That being said, we are always doing our best to keep our forums safe but since the service (forums) is provided by a 3rd party company, we can only update the forums when an update is available.

Cheers,

Nick

[ClashOfHolmes]

Ok, Nick. I went to link and I get nothing in order to change my forum Pass Word, now what ?

1st: Insert your current password in the first text box
2nd: Insert your new password in the second and then re-write it in the 3rd
3rd: Click on 'Save Changes'

Well, now your password is changed! Try logging out and then logging in.

[Nick[Supercell]]

Ok, Nick. I went to link and I get nothing in order to change my forum Pass Word, now what ?

That's odd. If you are logged in, you should see one input field to enter your current password, and then 2 input fields to input your new password. If you have trouble doing this on mobile, try desktop view (full site link from the footer of the page).

Cheers,

Nick