Ask HN: Rec Room Brute Force?
Hi HN, I just received 293 password reset emails in a span of 6 minutes from Rec Room (which is a social VR application). I haven't used the app in a long time, but events like these are concerning.
1. For people with a Rec Room account, has something like this happened to you recently? 2. What should I infer from this kind of event? Was this a bot trying to get into my account? Is this a common black hat method? 3. Why did the number of attempts stop at 293, a seemingly random number? Could of course be coincidence, but could it mean whoever / whatever was doing this was able to crack the password?
I have of course changed the password since, and I do use a password manager and unique passwords on every login. I'm just trying to stay abreast of new black hat techniques and how to understand + deal with them. I'm also confused about why Rec Room. It's not a bank account. I'm nobody famous and my account has been in disuse for a long time (I've only really used it a handful of times)--so why try to get into my account?
Any thoughts and / or advice would be welcome! Thanks.
No comments yet.