@Shaggy 10 tries and locked for 30 minutes? Isn't that a bit... lenient?
Most sites these days lock you out for a day, for 3 failed password attempts.

Might not matter how secure a password might be, if a person can try cracking 20 times an hour.
That part may need adjusting. For added security measures :)

Leopard Leido is just the cutest thing:love:

Honestly, it's kind of embarrassing that it took this long for a news announcement to be made, when it should've been made when the ordeal happened in the first place.

will be changing my password. Thank you staff for your hard work, hopefully a situation like this does not happen to this extreme again, also I am sure staff are volunteers so thank you for dedicating time to this.

I appreciate all the work that was done to put things back in order but I find this statement a little harsh

"Several players have had their accounts compromised and have lost items/MP/AU/pets because of their lack of responsibility towards their accounts"

No one meant for that to happen and I feel bad for the ones who were compromised.

A shame people would even hack into pet sites/users to begin with.

@Dahlia speaking the TRUTH! imagine a bank telling you its your fault their banking system got hacked because you had an easy pin to guess? no it is the hosts responsibility to maintain security of its (mostly paying) players/customers

Everything that @Verne said is exactly how I feel, including a staff member minimizing somebody's trauma. That was kind of terrible to read. @Sombra most certainly didn't seem to me to be insinuating that they were the only person to have experienced abuse. It was very rude to respond to them that way.

Myself and others have indeed spent a lot of money on marapets.com and we don't feel secure, despite using a secure password. I've just changed my password again. As a long time player, I feel that marapets could've handled this much better. I am poorly disappointed in a lot of responses on this thread from staff as well. I mean, who said anything about the "other site" in the first place...?

I definitely view the original post as victim blaming and overall, harsh for mara. Telling somebody they lacked responsibility and that that's why the thing happened is blaming them for the thing, whether it really be their fault or not. And whether or not it was the fault of the players, Marapets shouldn't be blaming them like this. Its one thing to promote account security and it is another thing to blame the victims.

YEAHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH!!

I have to agree with others, the tone of this news post screams victim blaming. Whether or not the users whose accounts were compromised had weak passwords or not, the fact is, someone decided to hack their accounts.

If someone's house has locks that can easily be broken into, do we blame the home owner for not having better locks, or do we blame the thief that broke into the house in the first place?

It's all well and good to suggest having stronger passwords, and to keep your accounts secure but to suggest that the reason these people's accounts were compromised is because THEY lacked RESPONSIBILITY is just utterly ridiculous.

As is, frankly, the fact that it took this long for there to be even the HINT of a news post about these compromised accounts in the actual news, rather than just in the chat that many users don't even see.

Marapets needs to do better at keeping users INFORMED - and not days and weeks AFTER the fact, and it needs to do so without snark, without insults and without placing the blame on the users!

victim blaming :grin: do yo thang staff :love:

Thank you Ian for everything you’ve done and I know you’ve been busy and stressed but I agree with everything@Dahlia said, your statement comes across as very harsh.

I really appreciate the time that has been taken to sort out these problems. I can only begin to imagine the stress and time it is taking. I know that I am not alone in this. I think all the staff here do a remarkable job.

However I did have an "ouch" moment when I read this news post ( and my account was not even compromised).

I was just thinking how panicked and dismayed people must have felt to discover their accounts had been compromised.

I understand that this is a REALLY important message to get across.

I was just wondering if a kinder approach would have been to say that some players had their accounts compromised because a malicious person decided to be rather nasty, instead of because they (the players) showed a lack of responsibility.

This is not to say that this could not be followed by a statement reminding people of how important password security is and how players could take steps to protect themselves in the future.

I am not nagging just suggesting and hoping that maybe we can find peace here because I am pretty sure this upset plays into the hands of the malicious people who compromised accounts. More upset for them to revel in.

What is the Cancer Treasure Chest?