Today there was a Zoom meeting held between the Second Life Blogger Network and Linden Lab, to discuss “account safety and security”.
As you’re probably aware by now, these meetings get arranged when the Lab has something in particular it wants to share with the Community and they know that lots of Residents don’t see or read the announcement blog posts(me included).
When I received the invitation email and read the subject matter my first thought was “they’re going to ask us to push MFA” (Multi Factor Authentication).
Which was correct, but not the main focus as I’d expected. I was hoping that at this meeting they were going to announce the introduction of recovery keys when setting up MFA, but no.
The main cause of account takeovers are people sharing their passwords. So the accounts aren’t so much being hacked, but as Brad Oberwager said in the meeting, they’re “Self-hacking”.
This is because fraudsters have gotten so good at social engineering. Basically becoming your friend and duping you into sharing your login details.
So there’s some simple DO’s & DON’Ts that the Lab would like to reiterate:
DO:
- STOP sharing your passwords
- Change your password (Can you remember when you changed it last? No? Change it NOW.)
- Enable Multi-Factor Authentication in your account Dashboard
DON’T:
- Buy Linden Dollars outside of the Second Life platform. (It’s always a scam and Linden Lab can’t help you.)
- Click on links in chats (yes they could disable them, but can you imagine the backlash?)
All seems quite obvious really doesn’t it? Well yes, but people still aren’t doing these things.
Remember that the Lab could force a grid-wide password reset at any time. The reason they don’t (it would make things easier for them) is that there are people that have been logging in for a decade or more with a saved password they may not even know anymore. So change your password and keep it safe.
You may be wondering why you’re hearing about more account takeovers than you used to, as always it comes down to money. Linden Lab wants to make financial transactions as smooth and timely as possible, everyone likes things to be easy, right? Well the downside of doing real-time transactions is that you become a very attractive target to bad people, that are very good at what they do.
There’s a lot of trust in Second Life, which is great for community spirit, but when it comes to your account password, treat it like your bank details; don’t share it.
Linden Lab Official Post
(Yes, I did practice what I preached and changed my password.)
Like this:
Like Loading...