Thingiverse hacked. Change your passwords!

[Microdoser]

Thingiverse has been hacked. If you use the same password anywhere else, change all of them. At the minimum, change your thingiverse password.

[xrunner]

Thanks. Yea no notice on the page about this. I've written them about other issues in the past never got any response. The customizer doesn't work. Time to start looking elsewhere.

[brucehoult]

It was a year ago. I used one of my lowest security passwords there -- one I specifically use for sites that I figure probably won't have great security. What is someone going to do? Upload their own designs under my name? Delete mine? (I still have originals) Make nasty comments using my name. Whatever. They can't do anything financially.

[thm_w]

It was a year ago. I used one of my lowest security passwords there -- one I specifically use for sites that I figure probably won't have great security. What is someone going to do? Upload their own designs under my name? Delete mine? (I still have originals) Make nasty comments using my name. Whatever. They can't do anything financially.

All I can think is they'd steal high value accounts then use them to post malicious files or links.
Why not use lastpass or similar, easier to autofill a secure password than remembering an insecure one.

[I wanted a rude username]

What is someone going to do? Upload their own designs under my name?

The greatest risk is to people who reuse the same username and password on other sites. The most convenient solution is to use a password manager ... then you only need to remember one password, but your password on each site is unique.

[Zucca]

TU was by far the most no sense website I encountered.
The only good thing is a lot of people are shitting in it....

Yes time to find something else.... any suggestions?

[brucehoult]

What is someone going to do? Upload their own designs under my name?

The greatest risk is to people who reuse the same username and password on other sites. The most convenient solution is to use a password manager ... then you only need to remember one password, but your password on each site is unique.

My email and banking sites use different and very secure passwords. Sites where expensive things can be bought and sent to custom addresses (amazon, mouser etc) get the next level: different but based on a pattern. Thingiverse, eevblog, and local pizza shops don't have enough downside to be worth worrying about -- they sure as heck don't use the same passwords as important sites and that's the main thing.