Notice on Security Improvements

[Guest]

For those that recall around a month ago, we were posting on the forums to keep everyone updated on an exploit that had been used against the creative server where people were able to login using admin accounts without their password. Since then, the exploit was fixed, and relevant updates were implemented.

 

While this did raise concerns about how we (as a community) raise tech issues and ensure they are being looked into, which will be an ongoing area for improvement, our tech admins took steps to ensure that should there ever be a similar exploit which is not noticed or fixed in time to prevent damage, that we have an additional layer of security for the admin accounts.

 

All admins are running additional authentication when connecting to the servers so that if an unrecognised connection is established upon an admin account, the admin permissions will be disabled until someone from the tech team is able to update these permissions once more.

 

I wanted to ensure that you're all aware of the long-term changes that have been implemented, without going into specific detail, to help reinforce the server security.