|Forum Main>>Announcements>> CityWatch update|
Thread created on Tue May 17, 2011 21:54:25
Last replied to on Tue May 17, 2011 22:54:25
This is a quick heads up to all CityWatch users to ask that you install the latest version, 1.0.6, as quickly as possible.
UPDATE - If you have been having problems logging in for the last few weeks or longer, manually download the latest update from the points market or from http://www.torn.com/downloads/CityWatch_1.0.6.exe - you should find that your issues are resolved
You should not notice any change (other than the bug fix for those that could not login), but for everyone there are important security benefits to moving all users to this version (details below for the techies).
Previous versions of CityWatch will stop working from the start of next week.
If anyone has any questions please message me.
Why are we doing this?
A long running project, sped up by our problems over the New Year, has been to move TORN away from storing passwords and simple hashes towards the use of salted hashes. Salted SHA512 hashes make it effectively impossible for a attacker, even with access to the database, to work out a users password. CityWatch is the last remaining part of TORN that relies on simple hashes (MD5), and we can't remove these hashes from the database until CityWatch is moved over. Also worth noting that CityWatch still uses SSL.
[ Updated to say message me rather than post here, since you cant post here! ]
Last Edited: Tue May 17, 2011 23:18:35
This thread has been locked.