sell/giveaway this site

[macintalk]

CS's security is not compromised; people are using other site's compromised security to prey on users who do not follow best practice of having unique passwords.

Just making this statement + "we have been actively working on improving the site's security and will continue to steadily do so in the days following" would have done so much to ease players minds. I can't understand why this statement wasn't and still hasnt been made where general players can see it?

what i don't get is how something as simple as that would have caused "panic and anarchy" like just something general saying they know what's going on and are working on it could've been made so much sooner, it's absolutely abysmal that it took so long for anyone to say something

[Sixx O'Clock]

CS's security is not compromised; people are using other site's compromised security to prey on users who do not follow best practice of having unique passwords.

Just making this statement + "we have been actively working on improving the site's security and will continue to steadily do so in the days following" would have done so much to ease players minds while the hacks were occuring. I can't understand why this statement wasn't and still hasnt been made where general players can see it?

I have to agree on this. I can understand wanting to keep some things under wraps for security reasons, but literally just a simple "we're aware and we're working on it" kind of announcement would've done so much to ease peoples' concerns.

[grieve]

im just gonna put this here bc i have some long term cs friends who have witnessed threads and also i’ve looked at locked threads myself;

from what i’ve read and been told, they are not willing to hire more coders bc of security and financial reasons. it would also take a lot of time and maintenance to dissect cs to switch everything to a format that is more suitable for a majority of suggestions made by users on site, and it just won’t be happening LOL

it is sad, and i hope that nick will consider putting in the effort, but we can only hope and not disrespect

just putting this here bc i had these questions myself, and this wasn’t a post made to sound snide, just doing some quick research for others

[asta,]

> popping in to share my opinion on this debate... i've been on cs since 2010, i
have seen a lot of issues crop up over the time, but i don't think any issue has,
in my memory, ever been so poorly handled by the staff. in my opinion, i don't
think half of the userbase is mad about what's happened- breaches happen, all
the time- but are instead mad about how it's been handled. sitewide outrage,,
sitewide fear-- and nick/tess (is she even still around?) have said nothing. not
even a post on the front page saying, "hey, we know this is an issue and we are
actively working on a fix!!" no. instead we get; "we upgraded to paypal so you
can continue to spend money on C$ while the site is on fire!" and regular posts
about the monthly updates.

> i'm not trying to tear down the staff, specifically nick/tess, but our anger is,
as i said, in my opinion from the clear lack of communication. i don't think it's
our place to say "get rid of the site" or "hire more coders", but it's well within
our right as a community to say, "hey. be transparent with us."

> but that's all just my opinion, anyways.

[Lex.]

> popping in to share my opinion on this debate... i've been on cs since 2010, i
have seen a lot of issues crop up over the time, but i don't think any issue has,
in my memory, ever been so poorly handled by the staff. in my opinion, i don't
think half of the userbase is mad about what's happened- breaches happen, all
the time- but are instead mad about how it's been handled. sitewide outrage,,
sitewide fear-- and nick/tess (is she even still around?) have said nothing. not
even a post on the front page saying, "hey, we know this is an issue and we are
actively working on a fix!!" no. instead we get; "we upgraded to paypal so you
can continue to spend money on C$ while the site is on fire!" and regular posts
about the monthly updates.

> i'm not trying to tear down the staff, specifically nick/tess, but our anger is,
as i said, in my opinion from the clear lack of communication. i don't think it's
our place to say "get rid of the site" or "hire more coders", but it's well within
our right as a community to say, "hey. be transparent with us."

> but that's all just my opinion, anyways.

Very real. And have to agree, the fact that we got a 'shiny new animated paypal button' was the least of literally everyone's concerns.

[pandaa]

i dont quite agree with selling the site but the fact that there hasn’t been like a formal announcement of “we’re trying to sort this out” makes me nervous. more staff seems like a good idea to me as opposed to selling the site. this just seem really rocky right now, we definitely need better communication between players and staff.

[Sixx O'Clock]

> popping in to share my opinion on this debate... i've been on cs since 2010, i
have seen a lot of issues crop up over the time, but i don't think any issue has,
in my memory, ever been so poorly handled by the staff. in my opinion, i don't
think half of the userbase is mad about what's happened- breaches happen, all
the time- but are instead mad about how it's been handled. sitewide outrage,,
sitewide fear-- and nick/tess (is she even still around?) have said nothing. not
even a post on the front page saying, "hey, we know this is an issue and we are
actively working on a fix!!" no. instead we get; "we upgraded to paypal so you
can continue to spend money on C$ while the site is on fire!" and regular posts
about the monthly updates.

> i'm not trying to tear down the staff, specifically nick/tess, but our anger is,
as i said, in my opinion from the clear lack of communication. i don't think it's
our place to say "get rid of the site" or "hire more coders", but it's well within
our right as a community to say, "hey. be transparent with us."

> but that's all just my opinion, anyways.

Very real. And have to agree, the fact that we got a 'shiny new animated paypal button' was the least of literally everyone's concerns.

I think the paypal button post wasn't made to intentionally upset anyone, it was just very poor timing with everything else going on. It was probably something that was being worked on before any of this blew up.
As far as the whole issue with hiring more coders, I wasn't aware that they'd said anything about it before. It's unfortunate they can't hire more, but I understand why. At the very least, like others have said, I think communication is what we all really need right now.

[Lacuna]

If you were active on these threads (which is where information was disseminated by post or when they were locked, so those who were concerned received it) it probably seems like this was a world-ending issue, but, in fact, the vast majority of users were not affected or aware. As I said, it was not CS's security that was compromised. Making a global announcement about a relatively small number of accounts being compromised with insecure passwords does not make sense if there is no real information to share about changes that will affect everyone yet.

[Lex.]

If you were active on these threads (which is where information was disseminated by post or when they were locked, so those who were concerned received it) it probably seems like this was a world-ending issue, but, in fact, the vast majority of users were not affected or aware. As I said, it was not CS's security that was compromised. Making a global announcement about a relatively small number of accounts being compromised with insecure passwords does not make sense if there is no real information to share about changes that will affect everyone yet.

So do the people that this affected not matter at all to CS as a whole?
It still happened and affected people. We are still CS users, and we still matter. Regardless it's great to let everyone know, so that people know to keep their guard up.

[☼ morgana]

support. if not, then at least, please, be more transparent.

my main issue with this breach, from a cybersecurity standpoint, is that this website's security, as far as certain things goes, is abysmal and shameful. what efforts is CS making to protect it's users at this point?

nearly any website you go on has options like two factor authentication, emails that verify if was you who just attempted to log in on a new device, emails that verify / confirm you changed your password and have options and a means of regaining your account should that not be you.

I am also highly disappointed in those that can actually help ease this situation, ie the coder and admins. I mean this to be on topic and constructive, and in no way do I mean this to be mean. I think I speak for a lot of us when I say that we want transparency and answers. Instead, all we get is "look fancy paypal buttons" and other things that right now? We're not concerned with.

even if it's a small percentage of the player base, this isn't something that should be swept under the rug. This is still a safety concern, which does infact, effect the whole site. Use it as an example to remind people how to be secure with their account. trust me, i was on a website where something much worse and equally, if not more concerning, was swept under the rug, and we payed the price for it.

What happened to trade reversal notifications? What about responding to suggestions like adding 2FA, email notifications, and higher security for password stuff? At least an answer on if stuff like that is feasible or not is better then no answer at all.