🔒 Authentication Fixes
I've fixed the issue, so if you're still not able to log in, please make your way to kumos login page and start the lost password flow. You'll get an email, and be able to set a new password.
We've created a new free gift page that gives you a visit for the bath house days, updates your melody achievement and some CSC for the trouble. I know this doesn't give the prizes for those bath house / melody days, but we'll be making those items available (like always! we hate gateekeeping melody items!) soon.
Posted by Keith
jersey
Thank you!
@Saturnine Keith confirmed on Discord that it is for everyone. Freebies like this have historically always been open to everyone.
Thank you sooo much for doing this for us. I loose all my hundret's of Bathhouse Points, but --- geting this csc is so much better and the items from Melody i miss i bought after checking the Lodge, what she gave. Important is that we all can play now, tytyty for doing this
The page doesn't give a 404 anymore. Is the prize for everybody or just people who didn't / couldn't log in? I'm not sure if I was supposed to get it but I clicked and it all showed up for me ._.
I had a hard time logging in during thise 2 weeks. I was also unable to change my email, had a lot of blank pages and errors🤷♀️
Not to complain, but, the users who missed bathhouse and melody will get their prizes and 500 csc. What about the rest of us, who had a hard time logging in, or had other issues with bank pages, errors and unable to change their email and unable to purchase csc don't get anything?
Thank you; My CSC didn't increase and the page is a 404 so idk maybe it's hit or miss who gets it.
A friend of mine was having general trouble with a password reset. Will this fix also help that? Thank you so much for this!
so sweet of u! thank u for working so hard on fixing it for everyone. and thanks for the csc~
Keith
STAFF
TLDR: I've tried to migrate us from using md5, the incredibly, horribly, outdated hashing algorithm that is now easily breakable for years. Every time, we've kept a bridge to the old passwords for folks who don't update, and just use newer algorithms on new passwords. That finally came to bite us, and I had to move to remove all of the md5 hashed passwords from our database. We didn't have a security breach, but it just needed to be done.
Your password in the database is stored as a hash of what you type in when you log in (or created when you registered). We never see what the actual password is after you log in, we just compare it with the hash in our database. That makes upgrading it to newer schemes very difficult without forcing everyone to reset their password.
There were a group of users who'd been in one of those migrations, and this new method didn't work (just completely error'd in a way I couldn't see in my tests). That's resolved now, and all of those accounts can get new, very very secure hashed passwords in the database.
Your password in the database is stored as a hash of what you type in when you log in (or created when you registered). We never see what the actual password is after you log in, we just compare it with the hash in our database. That makes upgrading it to newer schemes very difficult without forcing everyone to reset their password.
There were a group of users who'd been in one of those migrations, and this new method didn't work (just completely error'd in a way I couldn't see in my tests). That's resolved now, and all of those accounts can get new, very very secure hashed passwords in the database.
This is so kind ;v; thank you so much, subeta staff ♥️ your kindness never fails to make me feel all warm inside c: you guys care for us users greatly and it has always shown!