FFR Data Breach / Account Security Announcement

Posted in Flash Flash Revolution on July 21st, 201911 Comments »

Hello everybody.

As some of you may have seen from the forums, there is reporting that there was a breach of FFR in July of 2019, resulting in the compromising of Usernames, Email Addresses, Dates of Birth and IP information, as well as Salted MD5 password hashes. We had a similar breach in 2016, and this latest breach appears to have compromised an additional ~85,000 accounts.

What this means for you is a couple of things. If you use your FFR password for any other websites or services, you need to change those passwords right away.

What it means for FFR passwords is a little more complicated. Some leveling with you is going to happen now.

Due to various issues (Mostly the non-profit nature of the site and the absence of Synthlight) it is unlikely that we’ll ever be able to upgrade the security architecture in any especially meaningful way. As well, while in 2008, salted MD5 hashes were fairly secure, that has become less so as time passes. Our version of vBulletin is as updated as we can make it, and our version of WordPress is one we’re stuck with because none of those things can be changed without Synthlight’s involvement, so in the near-term in today’s information security climate, we have to basically be frank that we lack any especially compelling ways to secure your password.

Out of the salted hashes compromised in the breach, nearly 150,000 of them remained uncracked. Those were likely users who had very strong passwords. Even with the comparative ease with which MD5 can be cracked today, sufficiently strong passwords are at least some deterrent to these attacks. So for FFR, like any and every other service you have with a password, your best bet is to use a password manager like KeePass or lastpass to generate you very strong passwords unique to each source. If you don’t want to use something like that, the usual suggestions for strong passwords apply: a mix of uppercase, lowercase, numbers and symbols, as long as possible, bearing no resemblance to any personally identifying words or phrases, and avoiding things like simple substitution (3 for e or 1 for i etc).

We are definitely sympathetic to anybody who had passwords and information compromised that are used in any other places, especially if they are newer users who joined the site after the last breach, at which time we also had to be frank about the reasons why we’re unable to properly secure user data. But as much as we would love to make the changes needed to secure FFR, our hands are sadly, tied.

Devonin and the FFR Team

Update: It is believed that the particular vulnerability that led to this breach has been found and closed. It appears that whoever carried out the breach took advantage of a disabled WordPress plugin which has since been deleted completely. As well, as a precaution, every such plugin has been completely removed. This seems the most likely source of the breach as a number of other sites have also been breached in recent months via WordPress Plugin issues. While this does appear to be a fix that will prevent further breaches exploiting this same vulnerability, the general weakness of site security remains, so all precautions above regarding passwords and data management still apply. Thank you everybody for your patience, and willingness to hear our explanations regarding our difficulties in safeguarding your data.

Independence Day Release 2019

Posted in Flash Flash Revolution on July 3rd, 20196 Comments »

Happy Independence Day! For this release we have two songs, one of them an orchestral song from Riot Games with tricky patterns and the other a catchy electronic song.

Feel free to leave comments in the thread.

Helix of Garatia
Musician: sasakure.UK
Step Artist: YoshL & PrawnSkunk
Song Genre: Dance 2
Style: Electronic
Difficulty: 72
Song Length: 2:02

Kindred, the Eternal Hunters
Musician: Riot Games
Step Artist: XelNya
Song Genre: Classical
Style: Orchestral
Difficulty: 45
Song Length: 2:26

- The Game Management Team

New Junior Werewolf Game Starting

Posted in Flash Flash Revolution on June 18th, 201912 Comments »

FFR has long been host to a thriving Werewolf forum game community. A game of deduction and intuition, full of great opportunities to manipulate, mislead and investigate.

The latest jTWG game is up and looking for players! You can check out the thread here. If you’ve never played TWG before, before you sign up, you MUST read through The Werewolf Game Rules.

The Junior Werewolf Game games are a great way to learn and start to get comfortable with the game before taking part in the full TWG games that are often much more complicated.


The FFR TCG is Back!

Posted in Flash Flash Revolution on June 16th, 20194 Comments »

If you’ve ever wanted a neat system for collecting and challenging yourself to help motivate you to keep smashing arrows, look no further than the recently revived FFR Trading Card Game.

Each week, a new challenge will be posted that unlocks packs of cards for different tiers of accomplishment. Those cards can be collected, traded, and upgraded, and eventually you can even trade in sets of cards for event tokens!

You can check out the thread for the FFR TCG here and join the FFR TCG Discord server here.

This week’s challenge is to rack up as many total arrows as you can, and even allows for arrows from outside games like Etterna or Clone Hero, so come join in!


Memorial Day Release 2019

Posted in Flash Flash Revolution on May 26th, 20192 Comments »

For Memorial Day we’ve got two alternate difficulties for charts currently ingame! Both of the original songs are in the higher difficulty range (Almost There is a 99 and Heterochromia Iridis is a 101).

Feel free to leave comments in the thread.

Almost There [Standard]
Musician: RushJet1
Step Artist: XelNya
Song Genre: Skill Token
Style: Game Music
Difficulty: 20
Song Length: 2:44
* Pass Almost There.

Heterochromia Iridis v2
Step Artist: hi19hi19
Song Genre: Skill Token
Style: Coalescent Breakcore
Difficulty: 93
Song Length: 2:05
* Pass Heterochromia Iridis with at least 1845 perfects.

- The Game Management Team

Easter Release 2019

Posted in Flash Flash Revolution on April 21st, 20194 Comments »

Happy Easter! In addition to the festivities, please enjoy the two new songs released today as well.

One of the songs is a burst-heavy chart, Credits, which contains many interesting polyrhythms throughout the chart. The other is an upbeat song from paraoka that runs at 220 BPM.

Feel free to leave comments in the thread.

Musician: Frums
Step Artist: VisD
Song Genre: Misc
Style: Glitch Bass
Difficulty: 84
Song Length: 1:17

Musician: paraoka
Step Artist: bmah
Song Genre: Dance 2
Style: Electronic J-Pop
Difficulty: 72
Song Length: 2:16

- The Game Management Team

St Patrick’s Day and Birthday Release 2019

Posted in Flash Flash Revolution on March 17th, 20196 Comments »

Happy Saint Patrick’s Day! For this release we have two new token charts for you to enjoy in addition to the celebration.

Today is also the birthday of our FFR Average Rank 1 player, One Winged Angel! Happy Birthday is the second shortest song ingame, behind Excite Bike.

Alice in misanthrope
Musician: LeaF
Step Artist: gameboy42690
Song Genre: Skill Token
Style: Gothic Choir
Difficulty: 82
Song Length: 2:25
* Pass Alice’s Garden with at least 344 perfects and at least 172 max combo.

Happy Birthday
Musician: LEAF XCEED Music Division
Step Artist: hi19hi19
Song Genre: Skill Token
Style: Happy Rock
Difficulty: 49
Song Length: 0:17
* Pass Pita with 106 perfects and 20 boos.

Feel free to leave comments in the thread.

- The Game Management Team

R^3 Engine 0.0.8 Air+Flash Release

Posted in Flash Flash Revolution on February 7th, 201918 Comments »

What’s New?
      • Rebuild Login to use session tokens and not password when remember me is checked.
      • Flip Accuracy Graph.
      • Remember what result graph was selected.

Bug Fixes
      • Fixed Left & Right arrows keys being intercepted in rare conditions on results screen.
      • Fixed Multiplayer Mod Commands.
      • Fixed unlocking multiple tokens in the same play.
      • Fixed tokens not unlocking without refreshing the game.
      • Fixed Bin Replays having the wrong boo loop count.
      • Fixed blank filters being exported.
      • Fixed String Filter compares.

- FFR Game Management Team

New Year Release Event: Week 4 (Final Week)

Posted in Flash Flash Revolution on January 27th, 201917 Comments »

Time for the final release of the New Year Release Event! We finish with a behemoth of a chart for this week. Stepped by DarkZtar, Starbound has 9419 notes and is 13:15 in length. This makes Starbound the second longest song in the game behind The Games We Played (Full Edition), and the chart with the most notes in the game. For reference, it has more than double the notecount of Vertex BETA vrofl, and 3,568 more notes than The Games We Played (Full Edition)!

As for the content of the chart, it is a combination of many technical elements. You will find yourself handling skillsets such as tricky polyrhythms, jumpjacks, streaming, jumpstreams. The chart has plenty of tricky parts to keep you focused throughout, and the streams at the end can be particularly nerve-wracking.

It can be unlocked by AAAing Star.

Musician: Shnabubula
Step Artist: DarkZtar
Song Genre: Skill Token
Style: Chiptune Fusion
Difficulty: 94
Song Length: 13:15

Feel free to leave comments in the thread.

- The Game Management Team