CHANGE THE CS SECURITY SYSTEM

Suggest new features or changes to Chicken Smoothie.

Re: CHANGE THE CS SECURITY SYSTEM

Postby *Icarus* » Sun Jul 16, 2023 11:04 am

regster wrote:
*Icarus* wrote:do you expect the cs staff to immediately know this stuff is happening when the breach happened on another site and only affected a small amount of people? after they were aware something was happening,they needed to find out what was happening, then they needed figure out how to address it and create and then code updates to the security. 5-7 days is impressive.


It wasn't the speed in which they fixed the problem - the main issue was them locking threads discussing the problem and trying to figure out what was going on. Many people felt as though they were being dismissed by CS staff. Yes, they fixed it in a good time, I will give them that. However, their silence until they fixed it, and their lack of letting people discuss the situation is what made people so upset. There were better ways to go about it, is all.

the threads, from my understanding were locked after the updates were made, they also might be trying to prevent misinformation from being spread but i wouldnt knoe if that was the case for sure
its very easy for stuff like this to turn into a huger deal than it needs to be ecspeciall y when people are anxious and worried
Image
User avatar
*Icarus*
 
Posts: 2370
Joined: Thu Feb 06, 2014 12:40 pm
My pets
My items
My wishlist
My gallery
My scenes
My dressups
Trade with me

Re: CHANGE THE CS SECURITY SYSTEM

Postby answrs » Sun Jul 16, 2023 11:20 am

*Icarus* wrote:the threads, from my understanding were locked after the updates were made, they also might be trying to prevent misinformation from being spread but i wouldnt knoe if that was the case for sure
its very easy for stuff like this to turn into a huger deal than it needs to be ecspeciall y when people are anxious and worried

You know what would've been a great way to quell the anxious worrying and stop misinformation? staff actually telling people (not on a locked thread 17 pages in) what the heck was going on and it was being addressed. :)

anyway, I'll leave this topic before it gets locked like all the other ones.
After 11 years of seeking, I finally obtained my all-time dream on October 1, 2020 ;w;

Image
User avatar
answrs
 
Posts: 14280
Joined: Tue Sep 30, 2008 11:32 am
My pets
My items
My wishlist
My gallery
My scenes
My dressups
Trade with me

Re: CHANGE THE CS SECURITY SYSTEM

Postby reggyy » Sun Jul 16, 2023 11:22 am

*Icarus* wrote:the threads, from my understanding were locked after the updates were made, they also might be trying to prevent misinformation from being spread but i wouldnt knoe if that was the case for sure
its very easy for stuff like this to turn into a huger deal than it needs to be ecspeciall y when people are anxious and worried


Alright, well just so you're informed the threads in fact were not locked until after they released any kind on announcement or update. It was before all that, which only added fuel to the fire, haha.
Image
Image
Image
─────────────────
reggyy 1057873
─────────────────
Image Image
Image
Image
Image
───────────
Image
he/him | vastrals
wermz | sqim
───────────
Image
Image
Image
Image
User avatar
reggyy
 
Posts: 1807
Joined: Mon Dec 12, 2022 2:46 am
My pets
My items
My wishlist
My gallery
My scenes
My dressups
Trade with me

Re: CHANGE THE CS SECURITY SYSTEM

Postby *Icarus* » Sun Jul 16, 2023 11:34 am

regster wrote:
*Icarus* wrote:the threads, from my understanding were locked after the updates were made, they also might be trying to prevent misinformation from being spread but i wouldnt knoe if that was the case for sure
its very easy for stuff like this to turn into a huger deal than it needs to be ecspeciall y when people are anxious and worried


Alright, well just so you're informed the threads in fact were not locked until after they released any kind on announcement or update. It was before all that, which only added fuel to the fire, haha.

i remember having the option to talk in them up until the updates were made,while ive been kinda lurking through this whole thing but i could have that wrong im not opposed to the idea of that
i do know this ones been up since jun 29th and it doesnt seem like your being silenced here, i know there was another thread about this that is also still open as of rn
im just trying to offer a difference in perspective,
and i do personally think this situation is not as big of a deal as people are making it seem, ill be transparent
Image
User avatar
*Icarus*
 
Posts: 2370
Joined: Thu Feb 06, 2014 12:40 pm
My pets
My items
My wishlist
My gallery
My scenes
My dressups
Trade with me

Re: CHANGE THE CS SECURITY SYSTEM

Postby Audrey_Bee » Sun Jul 16, 2023 11:41 am

*Icarus* wrote:
regster wrote:
*Icarus* wrote:the threads, from my understanding were locked after the updates were made, they also might be trying to prevent misinformation from being spread but i wouldnt knoe if that was the case for sure
its very easy for stuff like this to turn into a huger deal than it needs to be ecspeciall y when people are anxious and worried


Alright, well just so you're informed the threads in fact were not locked until after they released any kind on announcement or update. It was before all that, which only added fuel to the fire, haha.

i remember having the option to talk in them up until the updates were made,while ive been kinda lurking through this whole thing but i could have that wrong im not opposed to the idea of that
i do know this ones been up since jun 29th and it doesnt seem like your not being silenced here, i know there was another thread about this that is also still open as of rn
im just trying to offer a difference in perspective,
and i do personally think this situation is not as big of a deal as people are making it seem, ill be transparent


Yeah I don't remember threads being locked until Nick came out and said changes were being made. Then there was no need for the threads.

Darni wrote:Also they are completely valid in their frustrations and feelings especially since people went into debt for this entire debacle. 


Yes people are valid in their frustrations. I actually lost a few trades, one which included a pet I had been after for literal years and I still haven't been able to get to that point again.

But the staff are valid in feeling stressed over everyone demanding immediate answers and solutions. Very few people here understand how difficult it is to resolve things like this and I will say again as I have said before: this.is.not.their.full.time.job !!

Yes it'd frustrating. Yes things could have been done better looking back but what's done is done and they're trying their best. Putting pressure on them and saying they're not doing enough doesn't help. Especially when the staff seem to get zero recognition for the good things they do.

They're not perfect. They're human beings trying their best. I think people need to remember that!
Image
Image
User avatar
Audrey_Bee
 
Posts: 10691
Joined: Thu Dec 19, 2013 4:10 am
My pets
My items
My wishlist
My gallery
My scenes
My dressups
Trade with me

Re: CHANGE THE CS SECURITY SYSTEM

Postby reggyy » Sun Jul 16, 2023 1:16 pm

@AudreyPotter @*Icarus* (This response is for you guys - I just didn't want to clutter the thread with doing more quotes, haha)

AudreyPotter wrote:But the staff are valid in feeling stressed over everyone demanding immediate answers and solutions. Very few people here understand how difficult it is to resolve things like this and I will say again as I have said before: this.is.not.their.full.time.job !!


AudreyPotter wrote:They're not perfect. They're human beings trying their best. I think people need to remember that!


Alright, so I will start this off by saying I agree with the part about not being hard on the staff. Especially the global moderators/admin assistants as there was not much they could do during that situation. I also acknowledge that the admins/owners are people who lead busy lives and cannot be there for CS 24/7.

*Icarus* wrote:i do personally think this situation is not as big of a deal as people are making it seem, ill be transparent


AudreyPotter wrote:Yeah I don't remember threads being locked until Nick came out and said changes were being made. Then there was no need for the threads.


Mmmk moving on to these comments. From what I am aware of, this was made into a big thing to actually get the attention of the admin. I've also gathered that security and communication between users + staff on CS has been an ongoing problem for a while.

Here's a thread (among many) that dates back to 2014:
Forum/viewtopic.php?f=119&t=2352431&p=73954861&hilit=security#p73954861

From 2021/2022:
Forum/viewtopic.php?f=119&t=4532903&hilit=security
Forum/viewtopic.php?f=119&t=4797428&hilit=security

Lastly, a couple from the recent hacking event:
Forum/viewtopic.php?f=119&t=4877289&hilit=security (regarding transparency)
Forum/viewtopic.php?f=125&t=4876701
Forum/viewtopic.php?f=126&t=4876643

Moving on to locked threads as someone commented on them only being locked after an announcement was made..

Forum/viewtopic.php?f=119&t=4876894&hilit=debt
This thread was made to suggest to pardon C$ debt. Why should people have to pay real life money to get out of debt from a pixel game? This was locked before any official announcement.

Forum/viewtopic.php?f=22&t=4875901&start=10
This thread was made to give users back pets that were taken from them in the reversed trades. It was locked due to
You may not create adoption centers or host giveaways that exclude users or only allow certain users to adopt.
And yet people can give pets to solely new players n not be hit with this excuse? (I'm not saying they should as it's insanely helpful, it's just annoying how it gets brought up in this situation..) This was locked before any official announcement.

Forum/viewtopic.php?f=119&t=4875832&start=260
This is the thread that Nick posted on initially. Keep in mind there was very little that he said and it wasn't anything remotely helpful, especially to a userbase that was in panic. This thread was locked before any official announcement.

Forum/viewtopic.php?f=119&t=4875933&p=142270264#p142270264
Here is yet another thread asking what was going on that was locked before an official announcement was made.

Forum/viewtopic.php?f=119&t=4875971&start=60
Yet another thread locked before an official announcement was made.


*Icarus* wrote:do you expect the cs staff to immediately know this stuff is happening when the breach happened on another site and only affected a small amount of people? after they were aware something was happening,they needed to find out what was happening, then they needed figure out how to address it and create and then code updates to the security. 5-7 days is impressive.


It clearly was not a small number of people with how the issue became pretty much site-wide. If people didn't find out from the forums, they found out through friends. It got around. It was enough people to become as big as it did. And even if it didn't affect a large amount of people - it is still an issue regarding account security!
Image
Image
Image
─────────────────
reggyy 1057873
─────────────────
Image Image
Image
Image
Image
───────────
Image
he/him | vastrals
wermz | sqim
───────────
Image
Image
Image
Image
User avatar
reggyy
 
Posts: 1807
Joined: Mon Dec 12, 2022 2:46 am
My pets
My items
My wishlist
My gallery
My scenes
My dressups
Trade with me

Re: CHANGE THE CS SECURITY SYSTEM

Postby lyney » Sun Jul 16, 2023 1:42 pm

as the creator of the little safety guide that floated around for at least a week around the forums, the largest reason i made it was because there was an unfortunate lack of transparency us as the cs community received in this situation. yes, the cs staff are human, and yes, they're trying their best! i commend them for everything they've done, but how this situation in itself was handled was just.. an attempt to keep things behind closed doors that slipped out, honestly? which i feel the secrecy is what caused much of the communal uproar in the first place.

the reason why the threads were made was because of the way that we kept being silenced with locked threads. the ones that regster posted were only a handful of quite a lot. i made my own post and started a little trend because i felt the urge that if nobody else was to make a safety guide, i at least wanted to help bring awareness of how users can keep themselves and their accounts safe through all of the ongoing chaos. it took only a day to reach about 50 likes, and it currently sits at 116. while the compromised passwords in a data breach aside from chicken smoothie were what caused this, and it is not the fault of nick and the staff team, it could have been much better afforded if these bare minimum security implementations were available in the first place. it wasn't until all of this occurred that change was finally brought about. yes, perhaps we have blown this out of proportion, but it still baffles me that we must try to yell for our voices to be heard in order for change to finally come? my animal jam spikes are protected by 2fa, yet the CS 2fa thread has gotten nowhere in the months it's been up.

and sure, a small percentage of accounts were affected- i think i counted up to 16 or 17 compromised accounts in total (i very well could've missed some ofc), and compared to the total number of accounts, that is a VERY small percentage. but the trade reversals affected the playerbase on a mass scale, and it took up until a controversial thread (made by the hacker themself no less to make things more ironic) to even get the new announcements in the first place. i do feel horrid for how the staff received the backlash and the brunt of our anger, but i really wish that we got a sliver of awareness through all of this. i didn't make this post to fight, i'm just trying to explain the reasoning why we tried to urge for adjustments in our security system. hopefully this helped bring our perspective as well!

i will stop as to tilt this conversation back to the original suggestion to avoid from being off-topic and risking this being locked, but that was just my own two cents. sorry for the long post haha, i just got fairly involved in the threads as they went.
Image
✧ felix - he/they - adult - th
User avatar
lyney
 
Posts: 4788
Joined: Sun May 22, 2016 6:59 am
My pets
My items
My wishlist
My gallery
My scenes
My dressups
Trade with me

Re: CHANGE THE CS SECURITY SYSTEM

Postby Audrey_Bee » Sun Jul 16, 2023 9:07 pm

regster wrote:-snip-


I think you misread the first of my comments that you had a problem with. I said there were locked threads because nick already said he was sorting the problem. Therefore there was no need for the threads. It makes the situation blow up. The threads were flooding the site. And while it was nice for a day or two to have something to rant on and share experiences, after that, there was no need for the forum topics that are basically just pooping on the staff at that point when they're trying to fix it. Again. It's not a simple 5 minute job. It's takes time and having everyone panicking or being nasty doesn't help.

I don't suppose you also have seen the few posts that came up, swearing about staff ?


Okay, so as for posts being locked "before an official announcement", every single one has given a pretty in depth reason. I'm pretty sure it's a site rule to not create posts for things that has a resolution. These issues either have one or are being worked on. It stops the spreading of rumours, it clarifies where people stand, and it stops the clogging up of forums.

The C$ debt as you have put it, makes no sense because its a pixel game.
But did you read the last post??
I thought it was silly until I read what the staff are doing to help.

The people in debt have extra pets that they didn't have. The staff are willing to swap out those extra pets for the C$ so it's a fair swap and no debt. I think that's pretty fair. Seeing as all other pet related trades left people back where they started. It sucks giving up pets but it's what everyone else had to do. It seems like the ones in C$ debt kind of just want a free ride in keeping both pets and C$. If this is the case anyway. But that's my opinion.


But your problem here is communication. Just look at the last message on every page. There's your communication. If they posted on the front board for every locked forum topic, it's would be chaos. (A lot of forums are locked, it would flood the front page)

Yes the one offering pets to one's that lost pets is really sweet but it if the rules. I'm fairly certain there's no forum topics out there saying "only giving pets to new users". There's ones that say they're giving to both but especially to help out newbies. But that's just cleaver wording. They're still not leaving people out though. It's frustrating sometimes but CS does stick by the rules. Frustrating...but that's what keeps the game fair and safe.


As for all the other posts, you've just proved my point to be correct. I'm not sure I every said official announcement and if I did I apologise. But I said when things were being fixed. When Nick came out and said he's sorting it. Every one of those posts you linked were locked after nicks announcement. All with in depth explanation and telling people to "please come send us a message if you need help".
Again, it's CS policy to not create panic or spam.

I think what's icarus was thinking was the small amount of people that were hacked compared to how many it could have been. A lot of people were affected by it. But guess what? Staff were there to help. I messaged them in an absolute state. I felt sick and felt like crying because so much that I had done was reversed and I didn't know why or how, if I had done something wrong etcetera. But they replied immediately explaining what had happened, assuring me I hadn't lost anything extra. And yes it sucks SO bad to lose trades, it did have to happen and the staff dealt with it as best as they could at the time. Fix the issue, don't cause panic.

I appreciate that you agree they're only human and are trying their best but will make mistakes just like the rest of us. But you seem to agree with that then complain that they should have done better.

However I feel like this is turning more into an argument, and not a constructive one. I clearly have differing opinions than the majority. So I won't be commenting on here again. Or I'll plan on not commenting here again, who knows what will pop up.

I just think at least one person should be actually thinking about it and looking into the facts while remembering the staff.are.people. people who are trying their best and deserve to be treated as such♡

Thanks for reading if you did. I have a huge amount of issues with CS sometimes but this game is honestly my baby. I care about it immensely, it's all I had when I was younger, i legit had no friends. My pets were my friends lmaoo. and it helps me escape my blood clot issues as an adult. None of it would be here if it wasnt for the staff and their strict kindness! I moan about this game because I care. But I know when to start supporting and when to forgive.

(Thank you staff....if you read this, also♡)

[size=50]I would also like to add that there's still threads open for discussion!!!the staff havent locked them all[
/size]
Last edited by Audrey_Bee on Thu Jul 20, 2023 7:46 am, edited 3 times in total.
Image
Image
User avatar
Audrey_Bee
 
Posts: 10691
Joined: Thu Dec 19, 2013 4:10 am
My pets
My items
My wishlist
My gallery
My scenes
My dressups
Trade with me

Re: CHANGE THE CS SECURITY SYSTEM

Postby Adamented » Tue Jul 18, 2023 12:18 pm

Threads get locked when they go off topic and begin to spread misinformation, while the panic is warranted the actions are not. The response to ignorance is not to spread hearsay or make up things you think are happening that will just unnecessarily scare others.

The Mods are human and need to make careful decisions when addressing an entire userbase of this size, don't forget there's a living breathing person behind those colored usernames.

uwu a gentle reminder.

I support 2FA, I have absolutely no sympathy for spreading hysteria.


          [ ABOUT ]

          Ada
          AdamAddie
          he / she / they

          Image
          Image
          [ MY STUFF ]
          ImageImageImage
          discord: @adamented

          Image
          [ LINKS ]
          ImageImage
          Image
User avatar
Adamented
 
Posts: 3638
Joined: Sun Sep 28, 2014 2:40 am
My pets
My items
My wishlist
My gallery
My scenes
My dressups
Trade with me

Re: CHANGE THE CS SECURITY SYSTEM

Postby Lex. » Tue Jul 18, 2023 1:01 pm

@Audreypotter
But your problem here is communication. Just look at the last message on every page. There's your communication. If they posted on the front board for every locked forum topic, it's would be chaos.


How would this cause chaos?

Yes the one offering pets to one's that lost pets is really sweet but it if the rules. I'm fairly certain there's no forum topics out there saying "only giving pets to new users". There's ones that say they're giving to both but especially to help out newbies. But that's just cleaver wording. They're still not leaving people out though. It's frustrating sometimes but CS does stick by the rules. Frustrating...but that's what keeps the game fair and safe.


I'm currently discussing something with a staff member about inconsistent rules. They are trying to enforce something on me and other users on a "user run thread".. but I was also told they can't make the rules on user made threads. So why try and enforce a rule that's not on there? It's also not a rule/enforced on its sister thread.

As for all the other posts, you've just proved my point to be correct. I'm not sure I every said official announcement and if I did I apologise. But I said when things were being fixed. When Nick came out and said he's sorting it. Every one of those posts you linked were locked after nicks announcement. All with in depth explanation and telling people to "please come send us a message if you need help".
Again, it's CS policy to not create panic or spam.


I never saw any "in-depth" explanations, can you link those?

I think what's icarus was thinking was the small amount of people that were hacked compared to how many it could have been. A lot of people were affected by it. But guess what? Staff were there to help. I messaged them in an absolute state. I felt sick and felt like crying because so much that I had done was reversed and I didn't know why or how, if I had done something wrong etcetera. But they replied immediately explaining what had happened, assuring me I hadn't lost anything extra. And yes it sucks SO bad to lose trades, it did have to happen and the staff dealt with it as best as they could at the time. Fix the issue, don't cause panic.

Ofc, I'm very sorry to hear this. Unfortunately, not everyone was helped by staff, or even notified by staff when they were hacked. I don't care what site you're on, that's just.. not good. Not everyone got an explanation from staff. I had to send multiple tickets/pms to get a decently hobbled together narrative from staff.
It's not fair to compare your specific experience to people that had varyingly different experiences with staff during that time, and then invalidate their feelings about how their experience was.

I appreciate that you agree they're only human and are trying their best but will make mistakes just like the rest of us. But you seem to agree with that then complain that they should have done better.

Those with the power to do better SHOULD have done better. I still cannot understand why an email wasn't sent or at the very LEAST a PM to the user who was impersonated. It's irresponsible. Imagine if that was your bank account that was compromised, [just an example, don't freak out because it's 2 different instances] you'd be furious if you only found out the next time you happened to visit your bank or an ATM. I personally would file a lawsuit. Not telling someone, let alone a user on YOUR site that their information was compromised?

I just think at least one person should be actually thinking about it and looking into the facts while remembering the staff.are.people. people who are trying their best and deserve to be treated as such♡

I doubt anyone thinks staff aren't human. Obviously, not everyone has the time. As I've said before on another thread, no matter what, if you can't put in the time/care into a job or volunteer position, step down. Make room for people that can! [/nay /nbh]

I too love CS. It's one of few online spaces where I don't have to be afraid, at least not for the most part lol. And clearly, not all threads have been locked. We're all posting on this one!

No one is "pooping" on staff. Especially not newer staff, helpers, or mods. Most people simply have an issue with the way *admins*, those in most control of the site, handled the situation. It's a valid thing to have an issue with.

To be frank, you were extremely antagonistic towards the user you last commented on, and it's just not the time or the place.
"I don't suppose you also have a like to the few posts that came up saying "[removed]" and "[removed]"
"did you even read the last post at all??"
"It seems like the ones in C$ debt kind of just want a free ride in keeping both pets and C$. If this is the case anyway. But that's my opinion."

'nuff said.

Also, there are plenty of threads just for new users.
Forum/viewtopic.php?f=22&t=4852861&hilit=pets+for+newbies
Forum/viewtopic.php?f=22&t=4866901&p=142020827&hilit=pets+for+newbies#p142020827
Forum/viewtopic.php?f=22&t=4817907&hilit=pets+for+newbies#p140651788

Disclaimer: NONE of this is meant to be rude at all, I'm just trying to understand your POV. Not everyone gets the same treatment, so let's not assume that one good experience with a staff member negates all the negative ones. And let's also not be rude to other users? [That's a CS rule!]
Also, this is all on topic as it pertains to key points in many discussions! I'm also asking for some feedback + sources for some statements.

Hope this all makes sense. I don't like to make big posts but there's just a lot of ground to cover.
Last edited by hellevi on Wed Jul 19, 2023 12:44 pm, edited 1 time in total.
Reason: Do not quote posts with profanity, even if it is abbreviated or starred out.
Image
User avatar
Lex.
 
Posts: 32397
Joined: Tue Feb 19, 2019 12:37 pm
My pets
My items
My wishlist
My gallery
My scenes
My dressups
Trade with me

Who is online

Users browsing this forum: No registered users and 3 guests